V1200 User Guide
V1200 User Guide
User Guide
Copyright Statement
Disclaimer
Pictures, images and product specifications herein are for references only. To improve internal
design, operational function, and/or reliability, Tenda reserves the right to make changes to the
products without obligation to notify any person or organization of such revisions or changes.
Tenda does not assume any liability that may occur due to the use or application of the product
described herein. Every effort has been made in the preparation of this document to ensure
accuracy of the contents, but all statements, information and recommendations in this document
do not constitute a warranty of any kind, express or implied.
I
Preface
Thank you for choosing Tenda! Please read this user guide before you start with V1200.
Conventions
The typographical elements that may be found in this document are defined as follows.
The symbols that may be found in this document are defined as follows.
Symbol Meaning
This format is used to highlight a procedure that will save time or resources.
II
Acronym or Abbreviation Full Spelling
IP Internet Protocol
Additional Information
For more information, search this product model on our website at http://www.tendacn.com.
III
Technical Support
If you need more help, contact us by any of the following means. We will be glad to assist you as
soon as possible.
http://www.tendacn.com
Website
IV
Contents
1 PRODUCT OVERVIEW ........................................................................................................................................ 1
3.3 STATISTICS.................................................................................................................................................................... 22
V
3.5 ARP ........................................................................................................................................................................... 25
4.3.1 Overview........................................................................................................................................................... 92
4.4.1 Overview........................................................................................................................................................... 98
VI
4.8 ALG ......................................................................................................................................................................... 121
VII
4.18.2 Configuring the IPSec function ..................................................................................................................... 160
5 WIRELESS...................................................................................................................................................... 171
6 DIAGNOSTICS................................................................................................................................................ 201
VIII
7.1.3 Restore default ............................................................................................................................................... 206
7.6.2 Synchronizing the system time with the internet ........................................................................................... 216
IX
1 Product overview
1.1 Introduction
Compatible with VDSL2 Profile 17a, Tenda V1200 offers a VDSL broadband access speed as high as
of 100 Mbps, 5x faster than ADSL2+. With DSL modem and WiFi router in one, it features an
integrated DSL port that supports all standard DSL connections, including VDSL2, ADSL2+, ADSL2,
and ADSL.
1.2 Features
All-in-one device combines a VDSL2/ADSL2+ modem, wired router, wireless router and switch.
Ethernet and VDSL uplinks: Access the internet via DSL port or WAN port (RJ45 port).
Multiple internet connection types: Bridging, PPPoE, IPoE, PPPoA, and IPoA.
Up to 1200 Mbps wireless transmission speed for excellent HD video streaming and online
gaming.
Compatible with IEEE 802.11b/g/n/ac Wireless devices.
One-key WPS ensures quick and secure wireless network connection.
USB port makes you access and share files through an attached USB storage device.
Port 4 can function either as a LAN or a WAN port.
The IPTV feature is supported.
QoS feature helps prioritize media streaming and gaming applications for best entertainment
experience.
Parental Control controls internet access of children using flexible and customizable filter
settings.
1
1.3 Appearance
1.3.1 LED indicators
Solid on for
A WPS connection is established.
2 mins->Off
WPS Green
2
LED Indicator Color Status Description
Button/Port Description
The power jack is used to connect to the included power adapter for power supply.
PWR
To prevent device damage, use the included power adapter for power supply.
3
Button/Port Description
WLAN This button is used to enable or disable both 2.4 GHz and 5 GHz WiFi networks.
Enable the WPS function on the web UI of the modem router. Press this button for
about 3 seconds and then release it to perform the WPS negotiation process. Within 2
WPS
minutes after pressing the button, enable the wireless device’s WPS feature to
establish WPS connection.
RST Hold down this button for about 6 seconds to restore factory settings.
WAN/LAN port. When the modem router serves as a router only, port 4 can be used as
4
a WAN port connected to an Ethernet jack. Otherwise, it serves as a LAN port.
DSL RJ11 port. Used to connect to a phone jack for internet access.
1.3.3 Label
1
2
3
4
4
2 Quick setup
2.1 Connecting the device to the internet
The modem router supports phone cable connection, Ethernet cable connection, and 3G/4G data
card. Select a connection type to follow according to your internet service.
LINE
PHONE MODEM
Step 1 Connect the LINE port of the included splitter to the internet.
Step 2 (Optional) If you do not need to use the phone service, skip this step. Connect the PHONE
port of the splitter to your telephone.
Step 3 Connect the MODEM port of the splitter to the DSL port of the modem router.
Step 4 Use the included power adapter to connect the modem router to a power supply.
Step 5 Turn the modem router on.
----End
5
Ethernet cable connection
If you access the internet with an Ethernet cable, connect the modem router as follows:
Ethernet jack
----End
----End
6
2.2 Connecting a client to the modem router
for setup
Connecting a wireless client to the modem router
Use your smart device to search and connect to the default SSID (WiFi name) of the modem router.
The default SSID is specified on the product label. This label is on the bottom of the modem router.
And by default, there is no WLAN key (WiFi password).
If either the SSID or WLAN key is changed, the wireless device is required to connect to the modem
router again.
Connect your computer to an available LAN port (port 1, 2, 3, or 4) of the modem router.
7
2.3 Setting up an internet connection
2.3.1 Login
Step 1 Start a web browser on the client connected to the modem router, and visit 192.168.1.1.
Step 2 Enter the default login user name and password (both are admin), and click Login.
To prevent an unauthorized user from changing the settings of the mode router, you’d
better change the default login user name and password. Refer to Passwords for details.
----End
VDSL
If the link type your internet service provider (ISP) provided to you is VDSL, follow the procedure
below:
8
Step 1 Enter the Home page.
Step 2 Link Type: Select VDSL.
Step 3 Connection Type: Select a connection type according to the instructions in the table below,
and enter the related internet parameters.
Select this type if your ISP provides a user name and password to you
PPPoE
for internet access.
Select this type if your ISP does not provide any parameters to you for
Dynamic IP
internet access.
IPoE
Select this type if your ISP provides a static IP address and other
Static IP
related information to you for internet access.
Select this type when this device only serves as a modem, and you
Bridge want to set up a dial-up connection or enter other internet
parameters directly on your computer for internet access.
Step 4 Auto Vlan scan: If the VLAN ID is provided, set both the Country/Region and ISP to Other,
select Input Vlan, and enter the VLAN ID in the Vlan ID box. If the VLAN ID is not provided,
select your country or region, the VLAN ID will be automatically populated. Or select Auto
Vlan scan, the modem router will try accessing the upstream device using the parameters
in the VLAN List form in A.3.
If you are uncertain about the VLAN ID, keep the default.
Step 5 Click OK on the bottom of the page to apply the settings.
9
If you cannot access the internet after completing the primary settings, contact your ISP for
help.
----End
ADSL
If the link type your ISP provided to you is ADSL, follow the procedures below:
PPPoE If your ISP provides a user name and password to you for internet
access, your connection type may be PPPoE or PPPoA. Contact your
PPPoA ISP for details.
Select this type if your ISP does not provide any parameters to you for
Dynamic IP
internet access.
IPoE
Static IP If your ISP provides a static IP address and other related information
to you for internet access, your connection type may be IPoE or IPoA,
IPoA Static IP contact your ISP for details.
Select this type when this device only serves as a modem, and you
Bridge want to set up a dial-up connection or enter other internet
parameters directly on your computer for internet access.
10
Step 4 Country/Region: Select your country or region.
Step 5 ISP: Select your ISP.
Step 6 Auto PVC scan: Select your country or region from the drop-down list, and the VPI and VCI
values will be automatically populated.
If your country/region and ISP are not available in the drop-down list or the VPI and VCI
values are incorrect, select Other both from the Country/Region and ISP lists, and enter
the VPI and VCI values manually.
If you are uncertain about the VPI and VCI, select Auto PVC scan.
Step 7 Enter other internet parameters provided by your ISP (if any).
Step 8 Click OK on the bottom of the page to apply the settings.
If you cannot access the internet after completing the primary settings, contact your ISP for
help.
----End
PPPoE
Use this type if you can access the internet only after setting up a dial-up connection on the
computer using a user name and password provided by your ISP.
11
Step 4 Auto Vlan scan: If the VLAN ID is provided, deselect Auto Vlan scan, and select your
country or region. The VLAN ID will be automatically populated. If it is incorrect, change
the value in the Vlan ID box.
If you cannot find your country or region in the drop-down list, set both the
Country/Region and ISP to Other, select input Vlan, and enter the VLAN ID in the Vlan ID
box.
If you are uncertain about the VLAN ID, keep the default.
Step 5 Enter the user name and password provided by your ISP.
Step 6 Click OK on the bottom of the page to apply the settings.
----End
If you cannot access the internet after completing the primary settings, contact your ISP for
help.
12
IPoE
Dynamic IP
Use this type if you can access the internet without setting any information on your computer.
13
Static IP
Use this type if you can access the internet only after setting a static IP address and other related
information on your computer.
If you cannot access the internet after completing the primary settings, contact your ISP for
help.
14
Bridge
Select this type when this device only serves as a switch, and you want to set up a dial-up
connection or enter other internet parameters directly on your computer for internet access.
15
3G/4G dongle
If you connect the modem router to the internet via a 3G/4G dongle, refer to the configuration in
this part to complete your internet settings.
16
2.4 Wireless setup
The wireless feature is enabled by default. The default SSID for 2.4 GHz wireless network is
Tenda_XXXXXX, and for 5 GHz wireless network is Tenda_5G_XXXXXX, where XXXXXX is the last six
characters of the MAC address of the modem router. There is no Wireless Key (WiFi password) by
default. But there is a preset WiFi password 12345678 in the Wireless Key box for both 2.4 GHz and
5 GHz wireless networks. It takes effects when the OK button on the bottom of the page is clicked.
17
To disable wireless function:
Step 1 Enter the Home page.
Step 2 Deselect the Wireless Enable option for 2.4 GHz or 5 GHz wireless networks.
Step 3 Click OK.
----End
When the wireless feature is disabled, wireless devices cannot connect to the modem router
wirelessly.
18
3 Device info
3.1 Summary
Here you can view WAN status, xDSL information, and the device information.
19
3.1.3 Device info
You can check the basic information of the modem router here.
Parameter description
Parameter Description
Symmetric CPU Threads It specifies the number of symmetric CPU threads of the modem router.
Bootloader (CFE) Version It specifies the bootloader version of the modem router.
DSL PHY and Driver Version It specifies the DSL physic and driver version of the modem router.
Wireless Driver Version It specifies the wireless driver version of the modem router.
LAN MAC It specifies the LAN MAC address of the modem router.
It specifies the total time the modem router has been running since the latest
Uptime
reboot.
Date/Time It speifies the current systemdate and time of the modem router.
20
3.2 WAN
Here you can view the WAN Information including Interface, Description, Type, IGMP, NAT, Firewall,
Status, IPv4 Address and VLAN ID.
Parameter description
Parameter Description
Igmp Src Enbl It specifies whether the IGMP Multicast Source is enabled.
MLD Src Enbl It specifies whether the MLD Multicast Source is enabled.
21
3.3 Statistics
Here you can view the packets received and transmitted on LAN ports, WAN port, DSL port, and USB
port.
Statistics--LAN: Displays the received and transmitted packets on the LAN ports. Click Reset
Statistics to clear the current statistics.
Statistics--WAN: Displays the received and transmitted packets on the WAN port. Click Reset
Statistics to clear the current statistics.
Statistics—Interface Statistics: Displays the statistics of each interface. Click Reset to clear the
current statistics.
22
Statistics--xDSL: Displays the received and transmitted packets on the DSL port. Click Reset
Statistics to clear the current statistics.
Statistics—3G/4G: Displays the packets received and transmitted on the USB port. Click Clear to
clear the current statistics.
23
3.4 Route
Here you can view the route table of the modem router. If the modem router fails to access the
internet, you can check the route table to find the problem.
Parameter description
Parameter Description
Subnet Mask It specifies the subnet mask corresponding to the destination IP address.
24
3.5 ARP
Here you can view the ARP list of the device. According to the information in the list, you can
identify whether there is ARP attack in your network.
Parameter description
Parameter Description
Flags It specifies the status of the connection between the device and the modem router.
Device It specifies the interface the device uses to connect to the mode router.
25
3.6 DHCP
Here you can view the devices whose IP addresses are assigned by the DHCP server of the modem
router. You can check the IP address, MAC address and hostname of the corresponding device and
remaining lease time of the IP address.
Parameter description
Parameter Description
It specifies the remaining lease time of the IP address that assigned to the connected
Expires In
device.
It specifies the connection type the connected device uses to connect to the modem
Status
router.
26
4 Advanced setup
4.1 Internet settings
In this module, it allows you to set up multiple internet connections or set detailed parameters for
internet access.
To set up an internet connection:
Step 1 Create an interface.
Step 2 Set up an internet connection.
This modem router provides three types of Layer2 Interface:
− ATM interface for accessing ADSL broadband internet service
− PTM interface for accessing VDSL broadband internet service
− ETH interface for connecting to the internet via an Ethernet cable
Step 2 Enter the VPI and VCI values provided by your ISP.
Step 3 Select a DSL Link Type according to the instructions in the table below, and leave other
options unchanged. Select EoA when your link type is PPPoE, IPoE, or Bridge.
Step 4 Click Apply/Save on the bottom of the page.
27
----End
Parameter description
Parameter Description
PPPoE (PPP over Ethernet), PPPoA (PPP over ATM): If your ISP (ISP) provides a user
name and password to you for internet access, your connection type may be PPPoE
or PPPoA, contact your ISP for details.
IPoE (IP over Ethernet) - Dynamic IP: Select this type if your ISP does not provide
any parameters to you for internet access.
Connection Type IPoE (IP over Ethernet) - Static IP, IPoA (IP over ATM) - Static IP:If your ISP provides
a static IP address and other related information to you for internet access, your
connection type may be IPoE or IPoA, contact your ISP for details.
Bridge: Select this type when this device only serves as a modem, and you want to
set up a dial-up connection or enter other internet parameters directly on your
computer for internet access.
Encapsulation Mode It specifies the data encapsulation type in the ATM network. LLC and VC/MUX are
supported. The default is recommended.
Service Category It specifies the ATM QoS type assigned by the ISP. The default is recommended.
28
Select the default scheduler for the queues with equal precedence.
Round Robin It assigns different weights for different kinds of packets and
Select Scheduler for provides the packets with different bandwidths based on the weights.
Queues of Equal
Precedence Weighted Fair Queuing It divides groups into different queues based on the
service streaming, IP precedence, and Hash algorithm, and fairly assigns the
bandwidth to the services with low precedence according to the weights while
ensuring the performance of services with high precedence.
IPv4 PPPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
29
Step 3 Select PPP over Ethernet (PPPoE).
Step 4 Enter the 802.1P Priority and 802.1Q VLAN ID, and select the VLAN TPID according to the
VLAN parameters provided by your ISP.
Step 5 Select IPv4 Only and click Next.
Step 6 Enter the PPPoE user name and password provided by your ISP, and set other parameters
as required.
30
Parameter description
Parameter Description
PPPoE Service Name If your ISP provides this name, enter it here. Otherwise, leave it blank.
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
MTU It specifies the maximum size of packet that the router can transmit. MTU
varies across connection types.
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
Use Static IPv4 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not a professional.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Bridge PPPoE Frames Between If it is enabled, computers in LAN can share the WAN connection for internet
WAN and Local Ports access, use multiple active PPPoE accounts to access the internet (if any).
Enable IGMP Multicast Proxy If it is enabled, the modem router can forward the multicast data to the users
in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
Step 7 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
31
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 8 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address, and enter the DNS IP addresses information. If not, select the option Select DNS
Server Interface from available WAN interfaces, and click Next.
Step 9 Check the parameters you select or set, and click Apply/Save.
32
----End
The WAN service you set is shown on the WAN Service page.
33
IPv4&IPv6 PPPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
34
Step 6 Enter the PPPoE user name and password provided by your ISP, and set other parameters
as required.
Parameter description
Parameter Description
PPPoE Service Name If your ISP provides this name, enter it here. Otherwise, leave it blank.
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
MTU It specifies the maximum size of packet that the router can transmit. MTU
varies across connection types.
35
Parameter Description
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
Use Static IPv4 Address It is used to set up the IPv4 IP address assigned by the ISP after the PPPoE
dial-up succeeds. Do not set up it if you are not instructed by a professional.
Use Static IPv6 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not instructed by a professional.
Enable IPv6 Unnumbered It is used to enable the IPv6 unnumbered model. If your ISP is not required to
Model select it, keep the default.
Launch Dhcp6c for Address If it is enabled, the device obtains the IPv6 WAN address using the stateful
Assignment (IANA) DHCPv6 type.
Launch Dhcp6c for Prefix If it is enabled, the device gets the IPv6 prefix form the DHCPv6 server, and
Delegation (IAPD) delivers it to its LAN ports.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Bridge PPPoE Frames Between If it is enabled, computers in LAN can share the WAN connection for internet
WAN and Local Ports access, use multiple active PPPoE accounts to access the internet (if any).
Enable IGMP Multicast Proxy If it is enabled, the modem router can forward the multicast data to the users
in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
Enable MLD Multicast Proxy It is used to enable the MLD multicast proxy.
Step 7 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
36
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 8 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address/Use the following Static IPv6 DNS IP address, and enter the DNS IP addresses. If
not, select the option Select DNS Server Interface from available WAN interfaces/Obtain
IPv6 DNS info from a WAN interface, and click Next.
Step 9 Check the parameters you select or set, and click Apply/Save.
37
----End
The WAN service you set is shown on the WAN Service page.
IPv6 PPPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
38
Step 3 Select PPP over Ethernet (PPPoE).
Step 4 Enter the 802.1P Priority and 802.1Q VLAN ID, and select the VLAN TPID according to the
VLAN parameters provided by your ISP.
Step 5 Select IPv6 Only and click Next.
Step 6 Enter the PPPoE user name and password provided by your ISP, and set other parameters
as required.
39
Parameter description
Parameter Description
PPPoE Service Name If your ISP provides this name, enter it here. Otherwise, leave it blank.
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
MTU It specifies the maximum size of packet that the router can transmit. MTU
varies across connection types.
40
Parameter Description
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
Use Static IPv4 Address It is used to set up the IPv4 IP address assigned by the ISP after the PPPoE
dial-up succeeds. Do not set up it if you are not instructed by a professional.
Use Static Ipv6 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not instructed by a professional.
Enable IPv6 Unnumbered It is used to enable the IPv6 unnumbered model. If your ISP is not required to
Model select it, keep the default.
Launch Dhcp6c for Address If it is enabled, the device obtains the IPv6 WAN address using the stateful
Assignment (IANA) DHCPv6 type.
Launch Dhcp6c for Prefix If it is enabled, the device gets the IPv6 prefix form the DHCPv6 server, and
Delegation (IAPD) delivers it to its LAN ports.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Bridge PPPoE Frames Between If it is enabled, computers in LAN can share the WAN connection for internet
WAN and Local Ports access, use multiple active PPPoE accounts to access the internet (if any).
Enable MLD Multicast Proxy It is used to enable the MLD multicast proxy.
Step 7 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
41
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 8 If your ISP provides you with the DNS IP addresses, select Use the following Static IPv6
DNS IP address, and enter the DNS IP addresses. If not, select the option Obtain IPv6 DNS
info from a WAN interface, and click Next.
Step 9 Check the parameters you select or set, and click Apply/Save.
----End
42
The WAN service you set is shown on the WAN Service page.
IPoE
Choose the corresponding procedure to follow according to your IP address type: IPv4 IPoE,
IPv4&IPv6 IPoE, and IPv6 IPoE.
IPv4 IPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
43
Step 6 Set the WAN IP address.
− Obtain an IP address automatically: If your ISP does NOT provide you with the IP address
information, select this option.
− Use the following Static IP address: If your ISP provides you with the IP address
information, select this option and enter them.
Step 7 Set other parameters as required, and click Next.
44
Parameter description
Parameter Description
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
It specifies the maximum size of packet that the router can transmit. MTU
MTU
varies across connection types.
Option 61 IAID It is used to specify the IAID value of DHCP option 61 client-indentifier.
Option 61 DUID It is used to specify the DUID value of DHCP option 61.
Option 125 It specifies the vendor-Identifying Vendor option. If you are not instructed by
a professional, the default is recommended.
Option 50 Request IP Address It is used to specify the request IP address of DHCP option 50.
45
Parameter Description
Option 51 Request Leased It is used to specify the request leased of DHCP option 51.
Time
Option 54 Request Server It is used to specify the request server address of DHCP option 54.
Address
Step 8 Select the options as required based on the parameter description form below.
Parameter description
Parameter Description
Enable Firewall Check this option to enable the firewall of the modem router.
If it is enabled, the modem router can forward the multicast data to the users
Enable IGMP Multicast Proxy in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
46
Step 9 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 10 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address, and enter the DNS IP addresses information. If not, select the option Select DNS
Server Interface from available WAN interfaces, and click Next.
47
Step 11 Check the parameters you select or set, and click Apply/Save.
----End
The WAN service you set is shown on the WAN Service page.
IPv4&IPv6 IPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
48
Step 3 Select IP over Ethernet.
Step 4 Enter the 802.1P Priority and 802.1Q VLAN ID, and select the VLAN TPID according to the
VLAN parameters provided by your ISP.
Step 5 Select IPv4&IPv6(Dual Stack) and click Next.
49
Parameter description
Parameter Description
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
It specifies the maximum size of packet that the router can transmit. MTU
MTU
varies across connection types.
50
Parameter Description
Option 61 IAID It is used to specify the IAID value of DHCP option 61 client-indentifier.
Option 61 DUID It is used to specify the DUID value of DHCP option 61.
Option 125 It specifies the vendor-Identifying Vendor option. If you are not instructed by
a professional, the default is recommended.
Option 50 Request IP Address It is used to specify the request IP address of DHCP option 50.
Option 51 Request Leased It is used to specify the request leased of DHCP option 51.
Time
Option 54 Request Server It is used to specify the request server address of DHCP option 54.
Address
Obtain an IPv6 address If your ISP does not provide you with IP address information, select this option
automatically to obtain the IP address and other parameters from upstream device.
Dhcpv6 Address Assignment If it is enabled, the device obtains the IPv6 WAN address using the stateful
(IANA) DHCPv6 type.
Dhcpv6 Prefix Delegation If it is enabled, the device gets the IPv6 prefix form the DHCPv6 server, and
(IAPD) delivers it to its LAN ports.
Use the following Static IPv6 If your ISP provides you with IP address information, select this option to
address enter the IP address and other parameters.
Step 8 Select the options as required based on the parameter description form below.
51
Parameter description
Parameter Description
Enable Firewall Check this option to enable the firewall of the modem router.
If it is enabled, the modem router can forward the multicast data to the users
Enable IGMP Multicast Proxy in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
Enable MLD Multicast Proxy It is used to enable the MLD multicast proxy.
52
Step 9 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 10 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address/Use the following Static IPv6 DNS IP address, and enter the DNS IP addresses. If
not, select the option Select DNS Server Interface from available WAN interfaces/Obtain
IPv6 DNS info from a WAN interface, and click Next.
53
Step 11 Check the parameters you select or set, and click Apply/Save.
----End
The WAN service you set is shown on the WAN Service page.
IPv6 IPoE
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
54
Step 3 Select IP over Ethernet.
Step 4 Enter the 802.1P Priority and 802.1Q VLAN ID, and select the VLAN TPID according to the
VLAN parameters provided by your ISP.
Step 5 Select IPv6 Only and click Next.
55
Parameter description
Parameter Description
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
It specifies the maximum size of packet that the router can transmit. MTU
MTU
varies across connection types.
Option 61 IAID It is used to specify the IAID value of DHCP option 61 client-indentifier.
Option 61 DUID It is used to specify the DUID value of DHCP option 61.
56
Parameter Description
Option 125 It specifies the vendor-Identifying Vendor option. If you are not instructed by
a professional, the default is recommended.
Option 50 Request IP Address It is used to specify the request IP address of DHCP option 50.
Option 51 Request Leased It is used to specify the request leased of DHCP option 51.
Time
Option 54 Request Server It is used to specify the request server address of DHCP option 54.
Address
Obtain an IPv6 address If your ISP does not provide you with IP address information, select this option
automatically to obtain the IP address and other parameters from upstream device.
Dhcpv6 Address Assignment If it is enabled, the device obtains the IPv6 WAN address using the stateful
(IANA) DHCPv6 type.
Dhcpv6 Prefix Delegation If it is enabled, the device gets the IPv6 prefix form the DHCPv6 server, and
(IAPD) delivers it to its LAN ports.
Use the following Static IPv6 If your ISP provides you with IP address information, select this option to
address enter the IP address and other parameters.
Step 8 Select the options as required based on the parameter description form below.
Parameter description
Parameter Description
Enable MLD Multicast Proxy It is used to enable the MLD multicast proxy.
Step 9 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
57
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways.
Step 10 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address/Use the following Static IPv6 DNS IP address, and enter the DNS IP addresses. If
not, select the option Select DNS Server Interface from available WAN interfaces/Obtain
IPv6 DNS info from a WAN interface, and click Next.
Step 11 Check the parameters you select or set, and click Apply/Save.
58
----End
The WAN service you set is shown on the WAN Service page.
Bridge
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
59
Step 3 Select Bridging, set other parameters as required, and click Next.
Step 4 Check the parameters you select or set, and click Apply/Save.
60
----End
After the settings take effect, you need to set the internet settings on the devices connected to the
modem router for internet access.
61
PPPoA (Only for internet access through phone cable)
If the DSL Link Type is set to PPPoA when you create an ATM interface, refer to the following
procedure.
Step 1 Choose Advanced Setup > WAN Service to enter the following page, and click Add.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
Step 3 Select your internet protocol, and click Next. IPv4 is used to illustrate here.
Step 4 Enter the user name and password provided by your ISP, set other parameters as required,
62
and click Next.
Parameter description
Parameter Description
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
Use Static IPv4 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not a professional.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Enable IGMP Multicast Proxy If it is enabled, the modem router can forward the multicast data to the users
in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
Step 5 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
63
Step 6 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address, and enter the DNS IP addresses. If not, select the option Select DNS Server
Interface from available WAN interfaces, and click Next.
Step 7 Check the parameters you select or set, and click Apply/Save.
64
----End
The WAN service you set is shown on the WAN Service page.
Step 2 Select ATM interface you create on the Layer2 Interface page, which is atm0/(0_0_35) in
this example, and click Next.
65
Step 3 Change the service description if required, and click Next.
Step 4 Enter the WAN IP address and subnet mask provided by your ISP, and click Next.
66
Step 5 Set other parameters as required, and click Next.
Parameter description
Parameter Description
Enable Firewall Check this option to enable the firewall of the modem router.
If it is enabled, the modem router can forward the multicast data to the users
Enable IGMP Multicast Proxy in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
Step 6 Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
Step 7 If your ISP provides you with the DNS IP addresses, select Use the following Static DNS IP
address, and enter the DNS IP addresses. If not, select the option Select DNS Server
Interface from available WAN interfaces, and click Next.
67
Step 8 Check the parameters you select or set, and click Apply/Save.
----End
The WAN service you set is shown on the WAN Service page.
68
4.1.2 Setting the PTM connection
Step 1 Create a PTM interface.
1. Choose Advanced Setup > Layer2 Interface > PTM Interface to enter the following page,
and click Add.
2. Leave the parameters for queue parameters unchanged, and click Apply/Save.
Parameter description
Parameter Description
Select Scheduler for Queues of Select the default scheduler for the queues with equal precedence.
Equal Precedence
Default Queue Precedence It specifies to set up the precedenceof the default queue.
Default Queue Drop Algorithm It specifies the default queue drop algorithm. It cannot be changed.
Step 2 Set up a WAN service for the PTM interface.
69
1. Choose Advanced Setup > WAN Service to enter the following page, and click Add.
2. Select the interface you create in Layer2 Interface, which is ptm0/(0_1_1) in this example,
and click Next.
3. Select a WAN service type according to the instructions in the table below. Here takes
PPPoE as an example.
4. Enter the 802.1P priority and 802.1Q VLAN ID parameters provided by your ISP.
If you are unsure about the 802.1P priority and 802.1Q VLAN ID parameters, refer to
Appendix A.3 VLAN List. If the parameters are not available, ask your ISP to provide it.
5. Select your network protocol type as required, and click Next. IPv4 is used to illustrate
here. Refer to Setting up a WAN Service for the ATM Interface for the instruction of other
network protocols.
70
Connection Type Description
Select this type if your ISP (ISP) provides a user name and password to you
PPP over Ethernet (PPPoE)
for internet access.
Select this type if your ISP does not provide any parameters to you for
Dynamic IP
internet access.
IP over Ethernet
Select this type if your ISP provides a static IP address and other related
Static IP
information to you for internet access.
Select this type when this device only serves as a modem, and you want to
Bridging set up a dial-up connection or enter other internet parameters directly on
your computer for internet access.
6. Enter the user name and password provided by your ISP, set other parameters as required
according to the parameter description form, and click Next.
71
Parameter description
Parameter Description
PPPoE Service Name If your ISP provides this name, enter it here. Otherwise, leave it blank.
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
MTU It specifies the maximum size of packet that the router can transmit. MTU
varies across connection types.
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
72
Parameter Description
Use Static IPv4 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not a professional.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Bridge PPPoE Frames Between If it is enabled, computers in LAN can share the WAN connection for internet
WAN and Local Ports access, use multiple active PPPoE accounts to access the internet (if any).
Enable IGMP Multicast Proxy If it is enabled, the modem router can forward the multicast data to the users
in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
7. Enter the PPPoE user name and password, set other parameters as required based on the
parameter description above, and click Next.
8. Leave the configuration unchanged on Routing - Default Gateway page, and click Next.
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways. The first WAN interface has the highest priority.
9. If your ISP provides you DNS IP addresses, select Use the following Static DNS IP address,
and enter the DNS IP addresses information. If not, select Select DNS Server Interface
from available WAN interfaces, and click Next
73
10. Check the parameters you select or set, and click Apply/Save.
----End
The WAN service you set is shown on the WAN Service page.
74
4.1.3 Setting the Ethernet connection
Step 1 Create an Ethernet interface.
1. Choose Advanced Setup > Layer2 Interface > ETH Interface to enter the following page,
and click Add.
2. Click Apply/Save.
2. Select the interface you create in Layer2 Interface, which is eth3/LAN4 in this example,
and click Next.
75
3. Select a WAN service type according to the instructions in the table below. Here takes
PPPoE as an example.
4. Select your network protocol type as required, and click Next. IPv4 is used to illustrate
here. Refer to Setting up a WAN Service for the ATM Interface for the instruction of other
network protocols.
Select this type if your ISP provides a user name and password to you
PPP over Ethernet (PPPoE)
for internet access.
Select this type if your ISP does not provide any parameters to you for
Dynamic IP
internet access.
IP over Ethernet
Select this type if your ISP provides a static IP address and other
Static IP
related information to you for internet access.
76
Connection Type Description
Select this type when this device only serves as a modem, and you
Bridging want to set up a dial-up connection or enter other internet
parameters directly on your computer for internet access.
5. Enter the user name and password provided by your ISP, set other parameters as required
according to the parameter description form, and click Next.
Parameter description
Parameter Description
PPPoE Service Name If your ISP provides this name, enter it here. Otherwise, leave it blank.
Authentication Method It specifies the authentication method the ISP-side uses to authenticate the
client. If you do not certain about it, select AUTO.
If you can only access the internet via a specified computer, it may indicate
MAC Clone that your ISP binds the internet service to the MAC address of the computer
to restrict access. In this case, you need to clone the MAC address of this
computer to the modem router for internet access.
MTU It specifies the maximum size of packet that the router can transmit. MTU
varies across connection types.
77
Parameter Description
When there is no data exchange within the specified time, the device
Dial on demand (with idle disconnects the connection between its WAN port and the ISP. Flow-based
timeout timer) charging users can select this option to save cost. Month-based charging users
do not need to select the option.
Enable Firewall Check this option to enable the firewall of the modem router.
Use Static IPv4 Address It is used to set up the IP address assigned by the ISP after the PPPoE dial-up
succeeds. Do not set up it if you are not a professional.
Enable PPP Debug Mode If it is enabled, you can check the PPPoE dial-up information on the System
Log page. It is used to diagnose dial-up malfunctions.
Bridge PPPoE Frames Between If it is enabled, computers in LAN can share the WAN connection for internet
WAN and Local Ports access, use multiple active PPPoE accounts to access the internet (if any).
Enable IGMP Multicast Proxy If it is enabled, the modem router can forward the multicast data to the users
in LAN. If you requires multicast applications, such as VOD or AOD, you can
enable this option.
6. Enter the PPPoE user name and password, set other parameters as required based on the
parameter description above, and click Next.
7. Leave the configuration unchanged, and click Next.
78
Default gateway interface list can contain multiple WAN interfaces serving as system
default gateways. The first WAN interface has the highest priority.
8. Enter the DNS IP addresses information if they are provided by your ISP. If not, leave then
blank.
9. Click Next.
10. Check the parameters you select or set, and click Apply/Save.
----End
The WAN service you set is shown on the WAN Service page.
79
80
4.2 LAN
Here you can configure the LAN settings. Choose Advanced Setup > LAN to enter the configuration
page.
It allows you to modify the LAN IP of the modem router, configure the DHCP server settings, and
DNS server settings.
Parameter description
Parameter Description
It specifies the LAN IP address of the modem router, that is, the login address of the
IP Address
web UI of the modem router.
The LAN subnet mask of the LAN port. It specifies the network segment of the LAN IP
Subnet Mask
address.
After the LAN IP address is changed, the computers in LAN need release their IP addresses
and obtain them again to ensure gateway of the computers is the new LAN IP address.
81
Parameter description
Parameter Description
Parameter description
Parameter Description
If this option is selected, the DHCP server of this modem router is disabled. In this case,
Disable DHCP Server
this modem router does not assign IP addresses and related parameters to its clients.
It indicates that the modem router can assign IP addresses to connected devices.
Start IP Address: It specifies the start IP address of the IP address pool of the DHCP
Enable DHCP Server server.
End IP Address: It specifies the end IP address of the IP address pool of the DHCP
server.
Enable DHCP Server If this option is selected, the modem router works as a DHCP relay. The DHCP requests
Relay from local computers will forward to the DHCP server runs on WAN side.
Leased Time (hour) It specifies the validity period of one IP address assigned to a device by the modem
82
Parameter Description
router.
Primary DNS server It specifies the primary DNS IP addresses assigned to connected devices.
Secondary DNS
It specifies the secondary DNS IP addresses assigned to connected devices.
server
Parameter description
Parameter Description
Static IP Lease List It displays a list of devices with reserved static IP addresses.
Add Entries Click to add a static IP lease entry. A maximum 32 entries can be added.
83
----End
The added entry displays in the following table.
The IP address specified in the table will be always assigned to the device with the specified MAC
address in the table after the rule takes effect.
84
----End
The second LAN IP address can also be used to log in to the web UI of the modem router.
85
4.2.2 Connections limited
4.2.2.1 Overview
This function allows you to specify the maximum connections between the modem router and a
specified IP address or IP network segment.
Parameter description
Parameter Description
It specifies the maximum number of point-to-point connections that the modem router
Max Connections
can handle at the same time.
----End
86
4.2.3 IPv6 autoconfig
This section allows you to set up an IPv6 internet connection through auto configuration, including
the following 2 parts:
Static LAN IPv6 Address Configuration: Setting up an IPv6 global unicast address for the LAN port.
IPv6 LAN Applications: Setting up the DHCPv6 server to assign IPv6 addresses to the computers in
LAN.
Choose Advanced Setup > LAN > IPv6 Autoconfig to enter the configuration page.
Configuration procedure
Step 1 Choose Advanced Setup > LAN > IPv6 Autoconfig to enter the configuration page.
Step 2 Enter an IPv6 address and the prefix length.
Step 3 Click Save/Apply.
----End
87
The computers in LAN can visit this address to log in to the web UI of the modem router. For
example, if the address is set to 2000::1/64, enter http://[2000::1] in the address bar to access the
web UI.
Parameter description
Parameter Description
Enable DHCPv6
It specifies whether to enable the DHCPv6 Server.
Server
The computers in LAN only obtain prefix and DNS information from the modem router.
Stateless
The interface ID is generated based on its MAC address automatically.
88
Parameter Description
Enable ULA Prefix If enabled, the modem router will advertise ULA prefix periodically. The ULA prefix can be
Advertisement generated by the modem router, or be set up manually.
Randomly
If this option is selected, the ULA prefix can be automatically generated.
Generate
Statically Configure If this option is selected, you need to manually set up the ULA prefix and validity period.
It specifies the preferred life time in hour. When the time is out, the computer can
Preferred Life Time
continue to use the address in initiated communications, but cannot use it in new
(hour)
initiated communications.
Valid Life Time It specifies the valid life time of the IP address in hour. When the time is out, the address
(hour) is invalid.
Configuration procedure
Step 1 Choose Advanced Setup > LAN > IPv6 Autoconfig to enter the configuration page.
Step 2 Select Enable DHCPv6 Server.
Step 3 Select Stateless.
Step 4 Select Enable RADVD.
Step 5 Click Save/Apply.
----End
89
Parameter description
Parameter Description
Stateful DHCPv6 is supported based on the assumption of prefix length less than 64.
Stateful Select this option and configure the start/end interface ID and lease time. The modem
router will automatically assign IPv6 addresses to IPv6 clients.
It specifies the start/end interface ID. Interface ID does NOT support ZERO COMPRESSION
Start interface
"::". Please enter the complete information. For example: Please enter "0:0:0:2" instead
ID/End interface ID
of "::2".
It specifies the validity period of one IP address assigned to a device connected to the
Leased Time (hour)
modem router.
Randomly
If this option is selected, address prefix can be automatically generated.
Generate
90
Parameter Description
If this option is selected, you need to manually configure the address prefix and validity
Statically Configure
period.
It specifies the preferred life time in hour. When the time is out, the computer can
Preferred Life Time
continue to use the address in initiated communications, but cannot use it in new
(hour)
initiated communications.
Valid Life Time It specifies the valid life time of the IP address in hour. When the time is out, the address
(hour) is invalid.
Configuration procedure
Step 1 Choose Advanced Setup > LAN > IPv6 Autoconfig to enter the configuration page.
Step 2 Select Enable DHCPv6 Server.
Step 3 Select Stateful.
Step 4 Start/End interface ID: Enter a start/end interface ID.
Step 5 Lease Time: Enter the valid time of an IPv6 address .
Step 6 Select Enable RADVD.
Step 7 Click Save/Apply.
----End
91
4.3 VPN
4.3.1 Overview
A VPN is a virtual private network set up over a public network (usually the internet).
This modem router can function as two kinds of VPN clients: PPTP or L2TP client. The following
section describes how to configure the router as a PPTP/L2TP client. If you set up a PPTP/L2TP
server, you can enable PPTP/L2TP client function to help you visit the PPTP/L2TP server.
Step 2 Set Tunnel Name and L2TP Server(IP address/domain name) based on the information set
on the L2TP server, and select an Associated WAN Interface, and click Next.
Parameter Description
Tunnel Name It specifies the name of the L2TP connection to be set up.
L2TP Server(IP It specifies the IP address or domain name of the L2TP VPN server to be connected.
address or domain Generally, it refers to the IP address or domain name of the WAN port of the peer VPN
name) router that functions as the L2TP server.
Associated WAN
It specifies the WAN port of the router for setting up a VPN connection.
Interface
Step 3 Set PPP Username, PPP Password, and PPPoE Service Name based on the information set
on the L2TP server, and click Next.
92
Parameter Description
PPP Username
It specifies the user name and password assigned by peer L2TP server.
PPP Password
PPPoE Service Optional. If a special service name is specified on peer L2TP server, it can be entered
Name here. If not, leave it blank.
Authentication
It specifies the authentication method of the L2TP VPN connection.
Method
MTU It specifies the maximum transmission unit size. The default setting is recommended.
Step 4 Select default gateway interfaces from the Available Routed WAN Interfaces, and click
to move it to the Select Default Gateway Interfaces box, and then click Next.
Step 5 Select DNS server interfaces from the Available WAN Interfaces, and click to move
it to the Select DNS Server Interfaces box.
If your ISP provides DNS address(es), select Use the following Static DNS IP address, and
enter it/them.
93
Parameter Description
Primary DNS
server
The primary/secondary DNS server IP addresses.
Second DNS server
Step 6 Check the parameters you select or set, and click Apply/Save.
----End
94
4.3.3 Configuring modem router as a PPTP client
Step 1 Choose Advanced Setup > VPN > PPTP Client to enter the configuration page, and click
Add.
Step 2 Set Tunnel Name and PPTP Server(IP address/domain name) based on the information
set on the PPTP server, select an Associated WAN Interface, and click Next.
Parameter Description
Tunnel Name It specifies the name of the PPTP connection to be set up.
PPTP Server(IP It specifies the IP address or domain name of the PPTP VPN server to be connected.
address or domain Generally, it refers to the IP address or domain name of the WAN port of the peer VPN
name) router that functions as the PPTP server.
Associated WAN
It specifies the WAN port of the router for setting up a PPTP VPN connection.
Interface
Step 3 Set PPP Username, PPP Password, and PPPoE Service Name based on the information set
on the PPTP server, and click Next.
95
Parameter Description
PPP Username
It specifies the user name and password assigned by peer PPTP server.
PPP Password
PPPoE Service Optional. If a special service name is specified on peer PPTP server, it can be entered
Name here. If not, leave it blank.
Authentication
It specifies the authentication method of the VPN connection.
Method
MTU It specifies the maximum transmission unit size. The default is not recommended.
Step 4 Select default gateway interfaces from the Available Routed WAN Interfaces, and click
to move it to the Select Default Gateway Interfaces box, and click Next.
Step 5 Select DNS server interfaces from the Available WAN Interfaces, and click to move
it to the Select DNS Server Interfaces box.
If your ISP provides DNS address(es), select Use the following Static DNS IP address, and
enter it/them.
96
Parameter Description
Primary DNS
server
The primary/secondary DNS server IP addresses provided by your ISP.
Second DNS server
Step 6 Check the parameters you select or set, and click Apply/Save.
----End
97
4.4 WAN 3G/4G
4.4.1 Overview
If you connect the modem router to the internet via a 3G/4G dongle, and do not complete the
internet settings in Quick Setup, you can refer to the configuration in this part.
Choose Advanced Setup > WAN 3G/4G to enter the configuration page.
Parameter Description
Access point Name. It will be auto populated after you select your country/region and
APN
ISP. If it is incorrect, you can change it manually.
The number to set up a connection. It will be auto populated after you select your
Dial number
country/region and ISP. If it is incorrect, you can change it manually.
Username Enter the user name and password for your 3G/4G internet service. It will be auto
populated after you select your country/region and ISP. If it is incorrect, you can change it
Password manually.
98
Step 3 APN/Dial number/Username/Password: Generally, if you select correct country/region
and ISP, the necessary parameters can be automatically filled in. If not, set them manually
based on the internet parameters provided by your ISP.
Step 4 PIN Code: If the PIN code is provided, check the option box on the right of the input box of
Pin Code, and enter the Pin code in the input box.
99
4.5 NAT
4.5.1 Virtual server
4.5.1.1 Overview
If computers are connected to the modem router to form a LAN and access the internet through the
modem router, internet users cannot access the hosts on the LAN. Therefore, the servers, such as
web servers, email servers, and FTP servers, on the LAN are inaccessible to internet users. To enable
internet users to access a LAN server, enable the virtual server function of the modem router, and
map one service port of the virtual server to the IP address of the LAN server. This enables the
modem router to forward the requests arriving at the port from the internet to the LAN server.
Choose Advanced Setup > NAT > Virtual Server to enter the configuration page.
Parameter description
Parameter Description
Select a WAN connection to which the rules apply. When there is only one WAN
Use Interface
connection available, the rules will be automatically applied to it.
100
Parameter Description
Select a Service: Allows you to select an existing service from the drop-down list.
Service Name
Custom Service: Allows you to customize a service.
Server IP Address Enter the IP address of your local computer that provides this service.
External Port Start and These are the start number and end number for the public ports at the internet
External Port End interface.
Select a protocol from the Protocol drop-down list. If you are unsure, select
Protocol
TCP/UDP.
Internal Port Start and These are the start number and end number for the service ports of a server on the
Internal Port End LAN of the modem router.
101
----End
Remote access:
Your friends from the internet can access your FTP server by entering ftp://183.37.227.201:21 in the
address bar of a web browser.
As the WAN ip address changes dynamically, to ensure the stability of this function, it is
recommended to use this function together with DDNS function to allow internet users to
access the service through domain names.
102
4.5.2 Port triggering
Some applications, such as games, video conferencing, and remote access, require that specific
ports in the router's firewall be opened for access by the applications. Port triggering opens an
incoming port when the user's computer is using a specified outgoing port for specific traffic. This
allows computers behind a NAT-enabled router on a local network to provide services. Port
triggering triggers can open an incoming port when a client on the local network makes an outgoing
connection on a predetermined port or range of ports.
Choose Advanced Setup > NAT > Port Triggering to enter the configuration page.
Parameter description
Parameter Description
Select a WAN connection to which the rules apply. When there is only one WAN
Use Interface
connection available, the rules will be automatically applied to it.
103
Parameter Description
Trigger Protocol Select the protocol from the drop-down list. If you are unsure, select TCP/UDP.
These are the starting number and ending number for the ports that are
Open Port Start/ Open
automatically opened by the built-in firewall when connections initiated by an
Port End
application are established.
Open Protocol The protocol to be used by the built-in firewall when connections are initiated.
104
4.5.3 DMZ host
4.5.3.1 Overview
The default DMZ (De-Militarized Zone) host feature is helpful when you are using some online
games and video conferencing applications that are not compatible with NAT (Network Address
Translation).
Choose Advanced Setup > NAT > DMZ Host to enter the configuration page.
DMZ Host IP Address: The IP Address of the device for which the firewall of the modem router is
disabled. Ensure that the IP address is a static IP address. The DMZ host should be connected to a
LAN port of the modem router.
A DMZ host is not protected by the firewall of the router. A hacker may leverage the
DMZ host to attack your LAN. Therefore, enable the DMZ function only when
necessary.
Manually set the IP address of the LAN computer that functions as a DMZ host, to
prevent IP address changes, which lead to DMZ function failures.
Security software, antivirus software, and the built-in OS firewall of the computer may
cause DMZ function failures. Disable them when using the DMZ function. If the DMZ
function is not required, it is recommended that you disable it and enable your
firewall, security, and antivirus software.
----End
105
4.5.4 Multi-NAT
4.5.4.1 Overview
Multi-NAT is a network function whereby one network address is rewritten (translated) to another
address: Network Address Translation is frequently used to allow multiple network nodes
(computers or inter-networked devices) to share a single public (or local network) IP address.
Multi-NAT can work in one-to-one or many-to-one mode.
Choose Advanced Setup > NAT > Multi-NAT to enter the configuration page.
Many-to-One
Parameter description
Parameter Description
106
Local IP It specifies a local IP address.
----End
107
4.6 Security
4.6.1 DoS defence
4.6.1.1 Overview
This function allows you to enable ICMP-FLOOD Attack Filtering, UDP-FLOOD Attack Filtering, and
TCP-SYN-FLOOD Attack Filtering to defend the modem router against ICMP-FLOOD attack,
UDP-FLOOD attack, and TCP-SYN-FLOOD attacks.
Choose Advanced Setup > Security > Dos Defense to enter the configuration page.
Parameter description
Parameter Description
Enable ICMP-FLOOD
It specifies whether to enable ICMP-FLOOD attack filtering.
Attack Filtering
It specifies the maximum number of incoming ICMP packets allowed in one second. If
ICMP-FLOOD Packets
the threshold is exceeded, it is inferred that the modem router is under ICMP Flood
Threshold (5 ~ 3600)
attack.
Enable UDP-FLOOD
It specifies whether to enable UDP-FLOOD attack filtering.
Attack Filtering
It specifies the maximum number of incoming UDP packets allowed in one second. If
UDP-FLOOD Packets
the threshold is exceeded, it is inferred that the modem router is under UDP Flood
Threshold (5 ~ 3600)
attack.
108
Parameter Description
Enable
TCP-SYN-FLOOD Attack It specifies whether to enable TCP-SYN-FLOOD attack filtering.
Filtering
TCP-SYN-FLOOD It specifies the maximum number of incoming TCP SYN packets allowed in one
Packets Threshold (5 ~ second. If the threshold is exceeded, it is inferred that the modem router is under
3600) SYN Flood attack.
4.6.2 IP filtering
This function can forbid the LAN devices to access the internet or allow WAN devices to visit the
LAN devices.
4.6.2.1 Outgoing
Overview
By default, all outgoing IP traffic from LAN is allowed, but some IP traffic can be BLOCKED by setting
up filtering rules. Outgoing IP Filtering function allows you to create a filter rule to identify outgoing
IP traffic by specifying a new filter name and at least one condition.
109
Step 4 Protocol: Select a protocol for the filter rule.
Step 5 Source IP address[/prefix length]: Enter the LAN IP address to be filtered.
Step 6 Source Port (port or port:port): Enter a port number or a port range used by LAN
computers to access the internet. If you are not sure, leave it blank.
Step 7 Destination IP address[/prefix length]: Enter the external network IP address to be
accessed by specified LAN computers.
Step 8 Destination Port (port or port: port): Enter a port number or a port range that the internet
service you restrict uses.
Step 9 Click Apply/Save.
----End
Parameter description
Parameter Description
Source IP
It specifies the LAN IP address to be filtered.
address[/prefix length]
It specifies the source port used by packets. Source port is for TCP/UDP protocol. If
Source Port (port or
protocol ICMP is selected, this field is not required. Since the source port of the data
port:port)
packet is changeable, you’d better set the port to 1:65535 or leave it blank.
Destination Port (port It specifies the port number used by the internet service to be restricted. Destination
or port:port) port is for TCP/UDP protocol. If protocol ICMP is selected, this field is not required.
110
4.6.2.2 Incoming
Overview
When the firewall is enabled on a WAN or LAN interface, all incoming IP traffic is BLOCKED. However,
some IP traffic can be ACCEPTED by setting up filtering rules. The Incoming IP Filtering function
allows you to create a filter rule to identify incoming IP traffic by specifying a new filter name and at
least one condition.
111
----End
Parameter description
Parameter Description
Source IP It specifies the IP address and its prefix length of the computer from the internet
address[/prefix length] which is allowed to access the LAN service.
It specifies the source port used by packets. Source port is for TCP/UDP protocol. If
Source Port (port or
protocol ICMP is selected, this field is not required. Since the source port of the data
port:port)
packet is changeable, you’d better set the port to 1:65535 or leave it blank.
Destination IP It specifies the IP address and its prefix length of the LAN server which allows the
address[/prefix length] internet users to access.
Destination Port (port It specifies the port number used by the LAN service which allows the internet users
or port:port) to access.
112
FORWARDED indicates that all MAC layer frames will be FORWARDED except those matching the
rules you specify.
BLOCKED indicates that all MAC layer frames will be BLOCKED except those matching the rules you
specify.
Step 2 Protocol Type: Select a protocol type from the drop-down list.
Step 3 Destination MAC Address: Enter the destination MAC address to which you want to apply
the MAC filtering rule.
Step 4 Source MAC Address: Enter the source MAC address to which you want to apply the MAC
filtering rule.
Step 5 Frame Direction: Select a frame direction from the drop-down list.
Step 6 WAN Interfaces: Select a WAN interface from the drop-down list.
Step 7 Click Save/Apply.
----End
113
Parameter description
Parameter Description
Protocol Type It allows you to select the protocol type from the drop-down list.
Destination MAC Address It specifies the destination MAC address to which the MAC filter rule applies.
Source MAC Address It specifies the source MAC address to which the MAC filter rule applies.
Frame Direction It specifies the direction the frame that you want to restrict.
----End
Verification
The policy is change to BLOCKED.
114
to which you want to apply the MAC filtering rule.
Step 6 Source MAC Address: Enter the source MAC address to which you want to apply the MAC
filtering rule.
Step 7 Frame Direction: Select a frame direction from the drop-down list.
Step 8 WAN Interfaces: Select a WAN interface from the drop-down list.
Step 9 Click Save/Apply.
----End
115
4.7 Parental control
This function enables you to control internet connectivity availability and content accessibility for
devices connected to the router.
Step 2 User Name: Enter a user name for this rule. It must be 1-32 characters, and space is not
allowed.
Step 3 Select Browser’s MAC Address if the rule is applied to the computer where the current
browser is running (the browser used to log in to the web UI of the modem router). If not,
select Other MAC Address, and enter the MAC address of a computer to which the rule is
applied.
Step 4 Days of the week: Select the days of week during which the rule takes effect.
Step 5 Start Blocking Time (hh:mm)/End Blocking Time (hh:mm): Enter the time period of day
restriction for the rule. Within this specified period of the day, this LAN device cannot
access the internet. For example, if you set start Blocking Time to 23:00, and End Blocking
Time to 06:00, the device to which this rule is applied cannot access the internet during
23:00~06:00.
Step 6 Click Apply/Save.
116
----End
Parameter description
Parameter Description
It specifies the MAC address of the computer where the current browser is
running (the browser used to log in to the web UI of the modem router). If the
Browser's MAC
rule needs to apply to this device, select this option. Otherwise, select Other
Address/Other MAC Address
MAC Address, and enter the MAC address of the device to which the rule is
applied.
Days of the week It specifies the dates on which the rule takes effect.
Start Blocking Time (hh:mm) It specifies the start time of period in which the rule takes effect.
End Blocking Time (hh:mm) It specifies the end time of period in which the rule takes effect.
117
Step 2 Select URL List Type.
Exclude indicates that the URLs added to the list cannot be accessed.
Include indicates that only the URLs added to the list can be accessed.
Step 3 Click Add.
Step 4 Enter a URL. For example, Set URL Address to www.google.com.
Step 5 Specify a port number based on the URL you entered.
Step 6 Click Apply/Save.
----End
4.7.3.2 Solution
Set up time restriction and URL filter rules.
118
2. Set the User Name to Lily.
3. Select Other MAC Address, and enter C8:3A:35:00:00:11.
4. Select Mon to Fri.
5. Set the Start Blocking Time and End Blocking Time to 18:00 and 20:00 respectively.
6. Click Apply/Save.
119
3. Enter www.youtube.com in the URL Address box.
4. Enter 80 in the Port Number box.
5. Click Apply/Save.
----End
4.7.3.4 Verification
During 18:00 to 20:00 on weekdays, the computers with MAC address C8:3A:35:00:00:11 and
C8:3A:35:00:00:12 are not allowed to visit YouTube.
120
4.8 ALG
ALG allows you to enable SIP, FTP, TFTP, H323, RTSP functions, and VPN pass through as required.
Parameter description
Parameter Description
The IP phone function can be used on the computers connected to the modem router
SIP Enabled
only when it is selected.
The users on LAN can share resources on the FTP server on WAN only when it is
FTP Enabled
selected.
The users on LAN can share resources on the TFTP server on WAN only when it is
TFTP Enabled
selected.
The IP phone and network conference function can be used on the computers
H323 Enabled
connected to the modem router only when it is selected.
RTSP Enabled The users on LAN can view video on demand when it is selected.
121
VPN pass-through
− PPTP Enabled: If you select PPTP protocol when you create a VPN connection on your
computer, it takes effect only when this checkbox is selected.
− L2TP/IPSEC Enabled: If you select L2TP or IPSEC protocol when you create a VPN
connection on your computer, it takes effect only when this checkbox is selected.
122
4.9 Bandwidth control
4.9.1 Overview
If multiple devices access the internet through the modem router, bandwidth control is
recommended, so that high-speed file download by a device does not reduce the internet access
speed of the other devices.
----End
123
4.10 Quality of service
QoS helps to prioritize data. By attaching special identification marks or headers to incoming
packets, QoS determines queue of packets based on priority. It is useful when there are certain
types of data you want to give higher priority, such as voice data packets give higher priority than
Web data packets. This function provides better service of selected network traffic over various
technologies.
Choose Advanced Setup > Quality of Service to enter the configuration page.
If Enable QoS checkbox is selected, choose a default DSCP mark to automatically mark incoming
traffic without reference to a particular classifier.
− Enable QoS: Select it to enable the QoS feature of the modem feature.
− Select Default DSCP Mark: Select a DSCP mark for the packets not matching the created
QoS classification rules.
− No Change (-1): Do not add DSCP mark, and keep the original packets.
− Auto Marking (-2): Randomly select a mark from the following mark list to tag the packets.
− Default (000000): Default PHB (Per-Hop Behaviors). It specifies the best-effort internet
service.
− EF (101110): EF (Expedited Forwarding PHB). It specifies the highest priority of the internet
service.
124
− Class-Selector PHB: It specifies that the DSCP mark is XXX000 where X can be 0 or 1. The
class of service of Class-Selector PHB is the same as that of IP Precedence used in the
current internet. When the XXX are all 0, it is the default PHB.
− Assured Forwarding PHB: RFC2597. It is applicable to video service, VPN service, and so on.
AF PHB has four service classes which require the corresponding bandwidths and caches.
Each service class has three packet-loss priorities.
If Enable QoS checkbox is not selected, the QoS Queue and QoS Classification are not available.
The default DSCP mark is used to mark all egress packets that do not match any classification rules.
125
Parameter description
Parameter Description
Interface It specifies the interface to which the QoS queue rule applies.
It specifies the weight of the queue. You can specify the queue weight for the queues
Queue Weight
with the same precedence.
Drop Algorithm It specifies the default queue drop algorithm. It cannot be changed.
DSL Latency It specifies the DSL latency mode of the ATM interface.
Ethernet interface
Parameter description
Parameter Description
126
Parameter Description
Interface It specifies the interface to which the QoS queue rule applies.
Drop Algorithm It specifies the default queue drop algorithm. It cannot be changed.
PTM interface
Parameter description
Parameter Description
127
Parameter Description
Interface It specifies the interface to which the QoS queue rule applies.
Scheduler Algorithm
Weighted Fair Queuing: It specifies a QoS packet scheduling algorithm. It divides
groups into different queues based on the service streaming, IP precedence, and Hash
algorithm, and fairly assigns the bandwidth to the services with low precedence
according to the weights while ensuring the performance of services with high
precedence.
It specifies the weight of the queue. You can specify the queue weight for the queues
Queue Weight
with the same precedence.
Drop Algorithm It specifies the default queue drop algorithm. It cannot be changed.
DSL Latency It specifies the DSL latency mode of the ATM interface.
128
----End
Parameter description
Parameter Description
129
Key It specifies the key number of the QoS queue rule.
Interface It specifies the wireless interface the QoS queue rule applies.
It specifies the priority level of the QoS queue rule. A lower value indicates a higher
Prec/Alg/Wght
priority.
130
1. Specify Egress Interface (Required): Select an interface.
2. Specify Egress Queue (Required): Select a queue to which packets are distributed (The
queue should be set in Advanced Setup >Quality of Service > QoS Queue > QoS
Configuration in advance.)
3. Mark Differentiated Service Code Point (DSCP): Select a mark for the queue when the
queue exits.
4. Mark 802.1p priority: Select an 802.1p priority mark for the data stream.
5. Set Rate Limit: Set the maximum transmission speed of the queue.
Step 7 Click Apply/Save.
----End
131
− UDP port for IP phone: 65060.
− Online video uses PPlive. UDP port for PPlive: 7100 and 7101.
Solution
− Video Conference: High priority is required. We set the priority to 1.
− IP Phone and Online Video: Average priority is required. We set the priority to 2. The
queue weight of IP phone (weight 20) should be higher than that of online video (weight
10).
− FTP/Web/Email Service: The priority is not required. We set the priority to 3. The queue
weight of web service (weight 20) should be higher than that of FTP and Email service
(weight 10).
− These services all use DT algorithm.
− Use WFQ algorithm for equitable scheduling.
Configuration procedure
Step 1 Enable QoS function.
1. Choose Advanced Setup > Quality of Service to enter the configuration page.
2. Select Enable QoS.
3. Click Apply/Save.
132
(2) Name: Enter a name for the queue.
(3) Enable: Select Enable.
(4) Interface: Select atm0.
(5) Queue Precedence: Select 1 (WRR).
(6) Click Apply/Save.
3. Perform the procedure in Step 2 to add IP phone, online video, web, FTP and Email
queues.
133
Step 3 Configure QoS classification.
1. Choose Advanced Setup > Quality of Service > QoS Classification to enter the
configuration page, and click Add.
2. Traffic Class Name: Enter a name for the classification, which is VideoConference in this
example.
3. Rule Order/Rule Status: Keep the default values.
4. Ingress Interface: Select Local.
5. Ether Type: Select IP (0x800).
6. Protocol/UDP/TCP Destination Port: Select UDP, and set the UDP/TCP Destination Port to
1718:1720.
7. Specify Egress Interface (Required): Select the egress interface for the queue form the
drop-down list.
8. Specify Egress Queue (Required): Select the egress queue from the drop-down list.
9. Click Apply/Save.
134
Step 4 Perform the procedure in Step 3 to add classifications for IP phone, online video, web, FTP
and Email services.
----End
Verification
The network services of the company can be identified by the modem router. Video conference is
higher than IP phone and online video. FTP/Web/Email service has the lowest priority. It ensures
the efficient operation of the network when the network overload or congestion.
135
4.11 Routing
The Routing part includes default gateway and static route.
Selected Default Gateway Interfaces: It specifies the current effective default IPv4 gateway
interface. If there are many interfaces in the list, the first one always takes effect.
Select a WAN interface and click the button to move it to the Available Routed WAN Interfaces
box.
Available Routed WAN Interfaces: It Specifies the current alternative default IPv4 gateway interface. Select a
WAN interface and click the button to add it to the Selected Default Gateway Interfaces box.
Selected WAN Interface: Select the current IPv6 gateway interface in effect from the drop-down list.
136
reliable. Appropriate static routes help reduce the number of route selection problems and reduce
route selection load, increasing the packet forwarding speed.
Step 2 IP Version: Select an IP protocol version for the static route, IPv4 or IPv6.
----End
137
Destination IP address cannot be in the same IP network segment as that of WAN or
LAN IP address of the modem router.
When the interface is set to a WAN interface, the gateway IP address should be in the
same network segment as that of that of WAN port. When the interface is set to a LAN
interface, the gateway IP address should be in the same network segment as that of
the LAN port.
If you are not familiar with static IP, you’d better not configure this function.
Inappropriate static routes may cause fault to the network.
4.11.3 RIP
RIP (Routing Information Protocol) is one of the oldest distance-vector routing protocols which
employ the hop count as a routing metric. RIP prevents routing loops by implementing a limit on
the number of hops allowed in a path from source to destination. The maximum number of hops
allowed for RIP is 15, which limits the size of networks that RIP can support. A hop count of 16 is
considered an infinite distance and the route is considered unreachable.
Choose Advanced Setup > Routing > RIP to enter the configuration page.
Parameter description
Parameter Description
Interface It specifies the WAN interfaces you add in a WAN service with NAT disabled.
It specifies two RIP versions the modem router supports: RIPv1 and RIPv2.
Version RIP 1: The periodic routing updates do not carry subnet information.
RIP 2: The periodic routing updates carry subnet information.
138
Apply/Save Click this button to apply the settings.
Only the WAN service with NAT disabled is displayed in the list.
After configuration, reboot the modem router for the settings to take effect.
139
4.12 DNS
The DNS part includes DNS server and Dynamic DNS.
----End
140
----End
In ATM mode, static DNS server IP addresses must be entered if only single PVC with
IPoA or static IPoE protocol is configured.
If a wrong DNS server address is configured, webpages may not be accessible.
141
4.12.2 Dynamic DNS
4.12.2.1 Overview
DDNS maps the WAN IP address (changeable public IP address) of the router to a domain name for
dynamic domain name resolution. This ensures proper operation of functions that involve the WAN
IP address of the modem router, such as the remote management and virtual server functions.
Step 2 D-DNS provider: Select a DDNS service provider. The supported service providers include
dyn.com, TZO, and NO-IP.
Step 3 Hostname: Set the DDNS domain name registered on a DDNS service provider's website.
Step 4 Interface: Select a WAN service.
Step 5 Username/Password: Set the user name and password registered on a DDNS service
provider's website for logging in to the DDNS service.
Step 6 Click Apply/Save.
----End
142
Parameter description
Parameter Description
It specifies a DDNS provider that can map changeable IP addresses to one static domain
D-DNS provider name.
The modem router supports the DynDNS.org, TZO and no-ip.com DDNS providers.
It specifies the domain name of the DNS server registered on a DDNS service provider's
Hostname
website.
It specifies the login user name of a DDNS provider. You can sign up on a DDNS provider’s
Username
website to obtain a login user name.
It specifies the login password for a user name assigned by a DDNS provider. You are
Password
asked to set a login password when you sign up with the provider.
Solution
You can use virtual servers function to meet this requirement. In addition, to enable internet
users to access the web server using a static domain name instead of a changeable IP address,
enable the DDNS function.
Assume that:
− External port is 80.
− IP address of the web server is 192.168.1.100.
− Your DDNS provider: no-ip
− Registered domain name: tenda.ddns.net
− Registered user name/Password: tenda/tenda
Configuration procedure
Step 1 Configure the virtual servers function.
1. Choose Advanced Setup > NAT > Virtual Servers to access the configuration page, and click
Add.
2. Select an interface, which is ipoe_eth3/eth3.1 in this example.
3. Select a Service: Select Web Server (HTTP) from the drop-down list.
4. Set Server IP Address to 192.168.1.100.
143
5. Set Internal Port Start to 80.
6. Set External Port Start to 80.
7. Set Protocol to TCP/UDP.
8. Click Apply/Save.
Step 2 Configure the DDNS function.
1. Choose Advanced Setup > DNS > Dynamic DNS to enter the configuration page, and click
Add.
2. D-DNS provider: Select a DDNS service provider, which is no-ip in this example.
3. Hostname: Set the DDNS domain name registered on a DDNS service provider's website,
which is tenda.ddns.net.
4. Interface: Select a WAN service, which is ipoe_eth3/eth3.1 in this example. It should be
the same as the interface set in the virtual servers function.
5. Username/Password: Set the user name and password registered on a DDNS service
provider's website for logging in to the DDNS service.
6. Click Apply/Save.
----End
Verification
Verify that internet users can access the local web server at http://tenda.ddns.net:80.
144
4.13 DSL
This page allows you to configure DSL parameters. DSL parameters configuration should be based
on the parameters of the upstream device. Final parameters can be checked on Statistics-xDSL page.
Wrong configurations may fail your Internet access.
Change them only when you are instructed by your ISP or our technical staff when your modem
router fails to negotiate with ISP in DSL (ATM) mode. If the DSL LED indicator of the device keeps
blinking, DSL negotiation may fail.
Choose Advanced Setup > DSL to enter the configuration page.
Parameter description
Parameter Description
145
Parameter Description
It specifies reach Extended ADSL2. When the clients are far away from the modem
AnnexL router, this mode can improve the coverage. The maximum
uploading/downloading rate is 1.5 Mbps/15 Mbps.
This mode is compatible with the upstreaming bandwidth extension mode and
implemented based on G992.3 ADSL2 and G992.5 ADSL2+. In this mode, the
AnnexM
upload rate of ADSL2+ is increased from 1 Mbps to 2.5 Mbps. AnnexM takes effect
only when ADSL2, AnnexL or ADSL2+ is selected.
Phone Line Pair The phone line pair is used to work with the DSLAM. The default is recommended.
Bitswap can improve the ADSL adaptation capacity and the stability of ADSL line in
Bitswap
the dynamic environment.
These profiles are defined by the VDSL2 standard which enables the modem
8a/8b/8c/8d/12a/12b/17a router to support CO, FTTC applications and so on, reducing the complexity and
cost of the product development.
US0 It specifies a DSL frequency spectrum used to improve the negotiation rate.
146
4.14 UPnP
4.14.1 Overview
After the UPnP function is enabled, it can automatically enable ports for UPnP-supported programs,
such as P2P and gaming software, in the internal network to improve your network experience.
----End
147
4.15 Storage service
4.15.1 Overview
The modem router can automatically recognize a USB storage device connected to the USB port of
the modem router. The device can be accessed over the LAN through FTP or Samba.
----End
Before you physically disconnect a USB device from the USB port on the modem router, please click
Umount to safely remove USB device.
148
4.15.3.2 Solution
Connect a USB storage device with the pictures and videos to the USB port of the modem router.
The modem router can function as a file server.
Assume that:
The server address is 192.168.1.1 (the LAN IP address of the modem router).
----End
4.15.3.4 Verification
To access the USB storage device over the LAN through Samba, perform the following procedure:
(OS example: Windows 7)
149
----End
To access the USB storage device over the LAN through FTP, perform the following procedure:
(Browser example: Google Chrome)
Step 1 Start the Google Chrome, enter ftp://192.168.1.1 in the address bar.
Step 2 Press Enter on the keyboard.
----End
150
4.16 Interface grouping
4.16.1 Overview
If you create multiple WAN services (PPPoE and other WAN service types), and want a LAN or WLAN
to use a WAN service exclusively, you can use this function to map the LAN or WLAN onto the WAN
service. Each group forms an independent network.
Choose Advanced Setup > Interface Grouping to enter the configuration page.
Step 4 Select an interface in Available LAN Interfaces list and click button to move it to
Grouped LAN Interfaces list. In this example, all wireless interfaces are moved to Grouped
LAN Interfaces list.
151
Step 5 Click Apply/Save.
----End
After the configuration takes effect, all wireless interfaces belong to WLAN_group, and use the
WAN service IP over Ethernet (eth3.1). All wired interfaces (port 1, 2, and 3) belong to the default
group, and use the WAN service Bridging (eth3.2).
If you create many groups, the LAN IP address used by the Default group members is
192.168.1.1, the LAN IP address of the second group member is 192.168.2.1, and so
on.
If the IPTV function is enabled, the modem router automatically creates an interface
group named IPTV. If it is deleted, the IPTV function is not available.
152
4.17 IP tunnel
An IP tunnel is an Internet Protocol (IP) network communications channel between two networks. It
is used to transport another network protocol by encapsulating one IP packet in another IP packet.
To encapsulate an IP packet in another IP packet, an outer header is added with source IP, the entry
point of the tunnel and the destination point, the exit point of the tunnel. While doing this, the
inner packet is unmodified.
The modem router provides two IP tunnels: IPv6inIPv4 and IPv4inIPv6.
4.17.1 IPv6inIPv4
4.17.1.1 Overview
IPv6inIPv4 is an internet transition mechanism for migrating from Internet Protocol version 4 (IPv4)
to IPv6. IPv6inIPv4 uses tunneling to encapsulate IPv6 traffic over explicitly-configured IPv4 links.
Step 2 Tunnel Name: Specify a name for the tunnel you set up.
Step 3 Mechanism: Set the 6in4 tunnel implement mechanism. The modem router only supports
6RD.
Step 4 Associated WAN Interface: Select an associated WAN interface for the 6in4 tunnel. The
WAN interface is required to use IPv4 protocol only.
Step 5 Associated LAN Interface: Select the LAN interface uses IPv6.
Step 6 Select a type of obtaining border relay address.
− Manual: Manually set a 6RD-BR address.
− Automatic: Automatically obtain a 6RD-BR address from BR. If you select Automatic, skip
step 7 to 9.
Step 7 IPv4 Mask Length: Enter the IPv4 mask length.
Step 8 6rd Prefix with Prefix Length: Enter the 6RD prefix with prefix length.
Step 9 Border Relay IPv4 Address: Enter the border relay IPv4 address of WAN interface.
Step 10 Click Apply/Save.
153
----End
4.17.2 IPv4inIPv6
4.17.2.1 Overview
IPv4inIPv6 is an Internet interoperation mechanism allowing Internet Protocol version 4 (IPv4) to be
used in an IPv6 only network. 4in6 uses tunneling to encapsulate IPv4 traffic over configured IPv6
tunnels.
154
− Automatic: The modem router obtains the AFTR name through DHCPv6 option, and
translates the AFTR name to specific IPv6 IP address through DNS. If you select Automatic,
skip step 7.
Step 7 AFTR: Set the IPv6 AFTR address.
Step 8 Click Apply/Save.
----End
155
4.18 IPSec
4.18.1 Overview
Internet Protocol Security (IPSec) is a network protocol suite that authenticates and encrypts the
packets of data sent over a network. IPsec can protect data flows between a pair of hosts
(host-to-host), between a pair of security gateways (network-to-network), or between a security
gateway and a host (network-to-host). IPsec uses cryptographic security services to protect
communications over Internet Protocol (IP) networks.
Choose Advanced Setup > IPSec to enter the configuration page.
156
Parameter description
Parameter Description
IPSec Connection
It specifies a name for the IPSec connection.
Name
Local Gateway
Select a WAN service for the rule.
Interface
Remote IPSec It specifies the WAN IP address or domain name of the peer device enabled IPSec
Gateway Address function.
Subnet: When Subnet is selected, you can specify any network address on LAN and
the corresponding subnet mask.
Tunnel access from
local IP addresses Single Address: When Single Address is selected, you can only specify an IP address of
a local host.
Mask or Prefix
It specifies the subnet mask of the LAN you specified in IP Address for VPN.
Length
Subnet: When Subnet is selected, you can specify all hosts on the peer network.
Tunnel access from
remote IP addresses
Single Address: When Single Address is selected, you can only specify one host on the
peer network.
Mask or Prefix
It specifies LAN IP network segment of the peer router.
Length
157
Parameter Description
Stage 2: Both communication sides take ISAKMP SA as IPSec security protocol
parameters, and create IPSec SA which is used to secure data transmission.
Manual: Refer to Key Exchange Method-Manual.
Parameter description
Parameter Description
It specifies the property that ensures that a session key derived from a set of
long-term public and private keys will not be compromised if one of the
Perfect Forward Secrecy (long-term) private keys is compromised in the future.
Select Enable or Disable according to your needs. It is disabled by default.
When the Tunnel Mode is set to ESP, you can configure ESP encryption algorithm.
The modem router supports the following encryption algorithm:
Encryption Algorithm DES: It specifies Data Encryption Standard.
3DES: It specifies Triple DES.
AES(aes-cbc): It specifies Advanced Encryption Standard.
It specifies an encryption key. Both communication sides should set it to the same
Encryption Key
one.
When the Tunnel Mode is set to AH, you can configure AH authentication
algorithm.
Authentication Algorithm
The modem router supports the following authentication algorithm:
MD5: It specifies Message Digest Algorithm. The system generates a 128 bit
158
Parameter Description
Parameter description
Parameter Description
The mode should be set to the same one as that of the peer device.
Main: This mode provides identity protection, and is applicable to high requirement
Mode situation for identity protection.
Aggressive: This mode does not provide identity protection, and is applicable to not
high requirement situation for identity protection.
159
Parameter Description
MD5: It specifies Message Digest Algorithm. The system generates a 128 bit
message digest for a message.
Integrity Algorithm
SHA1: It specifies Secure Hash Algorithm. The system generates a 128 bit message
digest for a message.
Select Diffie-Hellman
It specifies the group information of Diffie-Hellman algorithm. It is used to generate
Group for Key
session key encrypted IKE tunnel.
Exchange
160
----End
The rule is displayed in the list shown as below.
161
4.19 Certificate
4.19.1 Local
4.19.1.1 Overview
Local certificate is used by peers to verify your identity.
----End
162
4.19.1.3 Creating a new certificate
Step 1 Choose Advanced Setup > Certificate > Local to enter the configuration page, and click
Create Certificate Request.
Step 2 Certificate Name: Enter a name for the certificate, such as mycertificate.
Step 3 Common Name: Enter the website domain name, company name or name of the applicant,
such as Tendacn.com, Tenda or Lucy.
Step 4 Organization Name: Enter the name of an organization/company, such as Tenda.
Step 5 State/Province Name: Enter the state or province where the certificate is to be used.
Step 6 Country/Region Name: Select the country/region where the certificate is to be used.
Step 7 Click Apply.
----End
Then wait for the CA to deal with the application, sign and load the signature certificate to the
modem router.
163
4.19.2 Trusted CA
4.19.2.1 Overview
CA certificates are used by user to verify peers' certificates.
----End
164
4.20 Multicast
Multicast (one-to-many or many-to-many distribution) is the group communication where
information is addressed to a group of destination computers simultaneously. Multicast can be used
for one-to-many networking applications such as online streaming video and gaming, and allows
more efficient use of resources when supporting these types of applications.
To configure multicast function, choose Advanced Setup > Multicast.
Multicast Precedence: Set the priority for the multicast data. A smaller value indicates a higher
priority.
Parameter description
Parameter Description
Default Version It specifies the IGMP version for WAN. The default is IGMPv3.
It specifies the interval for sending IGMP query message. The default is 125. The
Query Interval
value range is 1 to 999. The unit is second.
Query Response It specifies the response interval for the query message. The default is 10. The value
Interval range is 1 to 999. The unit is “second”.
Last Member Query It specifies the interval for sending query message of specified group. The default is
Interval 10. The value range is 1 to 999. The unit is second.
It specifies the robustness value of IGMP querier. The default is 2. The value range is
Robustness Value
1 to 999.
Maximum Multicast It specifies the maximum number of multicast groups for each interface. The default
Groups is 25. The value range is 1 to 32.
Maximum Multicast
It specifies the maximum number of multicast data sources. The default is 10. The
Data Sources (for
value range is 1 to 24.
IGMPv3)
165
Parameter Description
Maximum Multicast It specifies the maximum number of multicast group members. The default is 25. The
Group Members value range is 1 to 32.
If the function is enabled, the modem router does not send group specific-queries
Fast Leave Enable
when it receives a leave message.
Parameter description
Parameter Description
Default Version It specifies the MLD version for WAN. The default is MLDv2.
It specifies the interval for sending MLD query message. The default is 125. The value
Query Interval
range is 1 to 999. The unit is second.
Query Response It specifies the response interval for the query message. The default is 10. The value
Interval range is 1 to 999. The unit is “second”.
Last Member Query It specifies the interval for sending query message of specified group. The default is
Interval 10. The value range is 1 to 999. The unit is second.
It specifies the robustness value of MLD querier. The default is 2. The value range is 1
Robustness Value
to 999.
Maximum Multicast It specifies the maximum number of multicast groups for each interface. The default
Groups is 10. The value range is 1 to 16.
Maximum Multicast
It specifies the maximum number of multicast data sources. The default is 10. The
Data Sources (for
value range is 1 to 16.
mldv2)
Maximum Multicast It specifies the maximum number of multicast group members. The default is 10. The
Group Members value range is 1 to 16.
166
Parameter Description
If the function is enabled, the modem router does not send group specific-queries
Fast Leave Enable
when it receives a leave message.
167
4.21 IPTV
If your ISP provides IPTV service, this function enables you to watch IPTV programs through TV and
the network set-top box while surfing the internet
----End
168
4.21.2 ETH interface
If your layer 2 interface is Ethernet Interface, perform the following procedure:
Step 1 Choose Advanced Setup > IPTV to enter the configuration page.
Step 2 Select Enable IPTV option.
Step 3 Select Ethernet Interface.
Step 4 Select a LAN port to serves as an IPTV port for connecting to the set-top box. The default
IPTV port is lan1 (port 1).
Step 5 Enter the 802.1P priority and 802.1Q VLAN ID values provided by your ISP.
Step 6 Click Apply/Save.
----End
169
----End
170
5 Wireless
5.1 2.4G
5.1.1 Basic
5.1.1.1 Overview
This section allows you to configure basic features of the 2.4 GHz wireless network.
Choose Wireless > 2.4G > Basic to enter the configuration page.
Parameter description
Parameter Description
Select the option to hide the SSID of the modem router. In this case, wireless clients
cannot find the SSID (wireless network name) of the modem route. The SSID must be
Hide Access Point
manually entered on the wireless clients for connecting the clients to the modem
router.
Disable WMM Select the option to disable WMM advertise of the modem router. WMM optimizes the
Advertise communication experience of end-users, providing high-quality network connectivity
performance for data, voice, music, and video applications in a complex network
171
Parameter Description
environment and communications environment.
Enable Wireless Select the option to enable WMF of the modem router. Wireless multicast forwarding is
Multicast a network data transmission method, which improves the efficiency of data
Forwarding (WMF) transmission to effectively save network bandwidth and reduce network load.
If 802.11b is selected, only 11b wireless devices can connect to the wireless network.
The maximum wireless rate supported in this mode is 11 Mbps.
If 802.11g is selected, only 11g wireless devices can connect to the wireless network.
The maximum of 54 Mbps wireless rate is supported in this mode.
If 802.11n is selected, only 11n wireless devices can connect to the wireless network.
Wireless Mode The maximum of 300 Mbps wireless rate is supported in this mode.
If 802.11b/g Mixed is selected, only 11b or 11g wireless devices can connect to the
wireless network. The maximum of 54 Mbps wireless rate is supported in this mode.
If 802.11b/g/n Mixed is selected, 11b, 11g or 11n wireless devices can connect to the
wireless network. The maximum of 300 Mbps wireless rate is supported in this mode.
Select a channel in which the modem router works. Auto indicates that the modem
Channel router automatically changes to a channel rarely used in the ambient environment to
prevent interference.
It specifies the channel extension direction. When the bandwidth is set to 40MHz, you
Control Sideband
can choose upper or lower to define the direction of channel extension.
172
certification based on the IEEE 802.11e standard. Select it if you need to disable WMM
advertise.
Step 6 Enable WMF: It specifies whether to forward multicast packets through unicast tunnels.
Generally, multicast packets are transmitted at the lowest rate, such as 1 Mbps, leading to
poor transmission efficiency. WMF leverages the auto-negotiated high rate, reliable
feedback mechanism, and other advantages of unicast packets to address multicast
problems such as video playback stalls caused by packet loss and long delays over a
wireless network.
Step 7 Click Apply/Save.
----End
5.1.2 Security
This section allows you to configure security features of the wireless network.
Choose Wireless > 2.4G > Security to enter the configuration page.
173
5.1.2.1 WPS setup
Wi-Fi Protected Setup makes it easy for home users who know little of wireless security to establish
a home network, as well as to add new devices to an existing network without entering long
passphrases or configuring complicated settings. They can set up network connections simply by
entering a PIN code on the device web interface or pressing hardware WPS button (on the back
panel of the device).
Select Enabled to enable the WPS function.
If the wireless network of the modem router is not encrypted, or the wireless network is encrypted
but you forget or do not want to enter the complicated password, you can use WPS function to
encrypt or connect clients to it quickly. There are three options for you:
Step 4 Press the WPS hardware button on the rear panel of the modem router for 3 seconds, and
then release it. (The WPS LED indicator starts blinking)
Step 5 Within 2 minutes, enable the WPS negotiation function on your wireless device.
----End
When the WPS LED turns to solid green, it indicates that the PBC negotiation is successful. The
wireless device is connected to the modem router, and the wireless network is encrypted.
174
configuration page.
Step 2 Select Enabled to enable the function.
Step 3 Click Apply/Save on the bottom of this page.
Step 4 Select Enter STA PIN.
Step 5 Check the WPS PIN code on your wireless device and enter it to the blank box on the WPS
Setup page of the web UI.
Step 6 Click Apply/Save.
----End
The WPS LED indicator blinks for about 2 minutes, and then turns to solid green. It indicates that
the wireless device is connected to the modem router, and the wireless network is encrypted.
175
5.1.2.2 Manual setup AP
Overview
This part allows you to manually configure the encryption settings for the wireless network.
A wireless network uses radio, which is open to the public, as its data transmission medium. If the
wireless network is not protected by necessary measures, any client can connect to the network to
use the resources of the network or access unprotected data over the network. To ensure
communication security, transmission links of wireless networks must be encrypted for protection.
The modem router supports various security modes for network encryption, including Open,
Shared, WPA-PSK, WPA2-PSK, Mixed WPA/WPA2-PSK, and WPA2 Enterprise.
Open/Shared
Open/Shared supports WEP encryption.
WEP is a security mode for data exchange between two devices. Wireless speed can reach 54Mbps
if WEP is used.
Parameter description
Parameter Description
Current Network
Select a network key to be used.
Key
Network Key Enter 13 ASCII characters or 26 hexadecimal digits as a 128-bit encryption key; enter 5
1/2/3/4 ASCII characters or 10 hexadecimal digits as a 64-bit encryption keys.
176
WPA2 Enterprise
Parameter description
Parameter Description
Security modes implemented based on the IEEE 802.1x, which requires the
WPA2 Enterprise
third-party RADIUS server for authentication.
Network Re-auth It specifies an interval at which a WPA key is updated. A shorter interval leads to
Interval higher security. The value 0 indicates that no key update is performed.
RADIUS Server Address It specifies the IP address of the RADIUS server for authentication.
It specifies the authentication port of the RADIUS server. The default port number is
RADIUS Port
1812.
RADIUS Server2
It specifies the IP address of the secondary RADIUS server for authentication.
Address
177
WPA-PSK/WPA2-PSK/Mixed WPA2/WPA-PSK
Parameter description
Parameter Description
WPA-PSK/WPA2-PSK/Mixed
They specify the security modes implemented based on a shared key.
WPA2/WPA-PSK
178
5.1.3 MAC filter
5.1.3.1 Overview
The MAC-based wireless access control feature can be used to allow or disallow clients to connect to your 2.4 GHz
wireless networks.
Choose Wireless > 2.4G > MAC Filter to enter the configuration page.
Parameter description
Parameter Description
Allow: To allow only devices with specified MAC addresses (in the list) to connect to
MAC Restrict Mode your wireless network.
Deny: To disallow only devices with specified MAC addresses (in the list) to connect to
your wireless network.
MAC Address The MAC address of a device to which a MAC filter rule is applied.
179
Step 5 Click Apply/Save.
----End
180
5.1.4.2 Configuration procedure
Step 1 Login to the web UI of V1200, choose Wireless > 2.4G > Basic to enter the configuration
page to set the channel and bandwidth to the same with the upstream router.
Step 2 Choose Wireless > 2.4G > Security to set up the network authentication type and security
key (if required) to the same with the upstream router.
Step 3 Choose Wireless > 2.4G > Wireless Bridge to access the configuration page set up wireless
bridge.
1. Bridge Restrict: Select Enabled(Scan). It displays the available WiFi network list
automatically.
181
2. Select the SSID you want to bridge, and click Apply/Save.
----End
Ensure both the channel and bandwidth are the same with the router you want to bridge.
Otherwise, the SSID will not be shown in the list.
When you set up wireless bridge successfully, it can extend the wireless network of the upstream
wireless router to provide both wired and wireless internet connection.
Network topology:
V1200
Modem router
The WDS function (access point and wireless bridge) requires that the wireless channel,
encryption type, and wireless network password of the modem router must be the same as
those of the upstream router.
182
5.1.4.3 Example of configuring the wireless bridge function
Network requirement
User A purchases a wireless router for wireless coverage in his apartment. The router (Router A) is
placed in the living room. The WiFi signals are strong in the living room, but too weak in the
bedroom and study room. Now user A want to improve internet connectivity in the bedroom and
study room.
Solution
To improve internet connectivity in the bedroom and study room, the user can add a V1200 modem
router and configure the wireless bridge function of the router to extend the 2.4 GHz WiFi network
coverage. That will eliminate blind areas in the apartment, enabling the user to access the internet
anywhere in the apartment.
Assume that:
The upstream wireless router uses the following wireless settings for 2.4 GHz.
Parameter Description
Wireless Channel 6
Bandwidth 40MHz
LAN IP 192.168.1.10
Configuration procedure
183
(5) Choose Wireless > 2.4G > Security to enter the configuration page.
(6) Set the Network Authentication, WPA/WAPI Passphrase, and WPA/WAPI
Encryption to Mixed WPA2/WPA-PSK, 12345678, and AES respectively.
(7) Click Apply/Save on the bottom of this page.
184
(6) Click Apply/Save.
Step 2 Configure the upstream router. Perform the steps in procedure 2.
----End
Verification
Connect your wireless devices to the WiFi network of the modem router, or connect your wired
devices to ports 1, 2 or 3 of the modem router, and try accessing the internet in the bedroom and
study room.
Click Refresh to view the latest wireless stations and their status.
185
5.2 5G
5.2.1 Basic
5.2.1.1 Overview
This section allows you to configure basic features of the wireless network of 5 GHz.
Choose Wireless > 5G > Basic to enter the configuration page.
Parameter description
Parameter Description
Select the option to hide the SSID of the modem router. In this case, wireless clients
cannot find the SSID (wireless network name) of the modem route. The SSID must be
Hide Access Point
manually entered on the wireless clients for connecting the clients to the modem
router.
Select the option to disable WMM advertise of the modem router. WMM optimizes
Disable WMM the communication experience of end-users, providing high-quality network
Advertise connectivity performance for data, voice, music, and video applications in a complex
network environment and communications environment.
Enable Wireless Select the option to enable WMF of the modem router. Wireless multicast forwarding
Multicast Forwarding is a network data transmission method, which improves the efficiency of data
(WMF) transmission to effectively save network bandwidth and reduce network load.
186
Parameter Description
802.11ac: If 802.11ac is selected, only 11ac wireless devices can connect to the
wireless network. The maximum of 866 Mbps wireless rate is supported in this
mode.
Wireless Mode
802.11a/n/ac Mixed: If 802.11a/n/ac Mixed is selected, 11a, 11n or 11ac wireless
devices can connect to the wireless network. The maximum of 866 Mbps wireless
rate is supported in this mode.
Select a channel in which the modem router works. Auto indicates that the modem
Channel router automatically changes to a channel rarely used in the ambient environment to
prevent interference.
187
----End
5.2.2 Security
This section allows you to configure security features of the wireless network.
Choose Wireless > 5G > Security to enter the configuration page.
188
If the wireless network of the modem router is not encrypted, or the wireless network is encrypted
but you forget or do not want to enter the complicated password, you can use WPS function to
encrypt or connect clients to it quickly. There are three options for you:
Step 4 Press the WPS hardware button on the rear panel of the modem router for 3 seconds, and
then release it. (The WPS LED indicator starts blinking)
Step 5 Within 2 minutes, enable the WPS negotiation function on your wireless device.
----End
When the WPS LED turns to solid green, it indicates that the PBC negotiation is successful. The
wireless device is connected to the modem router, and the wireless network is encrypted.
189
Step 6 Click Apply/Save.
----End
The WPS LED indicator blinks for about 2 minutes, and then turns to solid green. It indicates that
the wireless device is connected to the modem router, and the wireless network is encrypted.
190
Open/Shared
Open/Shared supports WEP encryption.
WEP is a security mode for data exchange between two devices. Wireless speed can reach 54Mbps
if WEP is used.
Parameter description
Parameter Description
191
WPA2 Enterprise
Parameter description
Parameter Description
Security modes implemented based on the IEEE 802.1x, which requires the
WPA2 Enterprise
third-party RADIUS server for authentication.
Network Re-auth It specifies an interval at which a WPA key is updated. A shorter interval leads to
Interval higher security. The value 0 indicates that no key update is performed.
RADIUS Server Address It specifies the IP address of the RADIUS server for authentication.
It specifies the authentication port of the RADIUS server. The default port number is
RADIUS Port
1812.
RADIUS Server2
It specifies the IP address of the secondary RADIUS server for authentication.
Address
192
WPA-PSK/WPA2-PSK/Mixed WPA-PSK/WPA2-PSK
Parameter description
Parameter Description
WPA-PSK/WPA2-PSK/
Mixed They specify the security modes implemented based on a shared key.
WPA-PSK/WPA2-PSK
WPA/WAPI
It specifies the password of the wireless network.
Passphrase
Choose Wireless > 5G > MAC Filter to enter the configuration page.
193
Parameter description
Parameter Description
Allow: To allow only devices with specified MAC addresses (in the list) to connect to
MAC Restrict Mode your wireless network.
Deny: To disallow only devices with specified MAC addresses (in the list) to connect to
your wireless network.
MAC Address The MAC address of a device to which a MAC filter rule is applied.
194
----End
195
Step 2 Choose Wireless > 5G > Security to set up the security information, and set the network
authentication type to the same with the upstream router.
Step 3 Choose Wireless > 5G > Wireless Bridge to access the configuration page set up wireless
bridge.
1. Bridge Restrict: Select Enabled(Scan). It displays the available WiFi network list
automatically.
196
3. Bridge Restrict turns to Enabled automatically, click Apply/Save.
----End
Ensure the channel and bandwidth are the same with the router you want to bridge.
Otherwise, the SSID (wireless network name) will not show in the list.
Solution
To improve internet connectivity in the bedroom and study room, the user can add a V1200 modem
router and configure the wireless bridge function of the router to extend the 5 GHz WiFi network
coverage. That will eliminate blind areas in the apartment, enabling the user to access the internet
anywhere in the apartment.
Assume that:
The upstream wireless router uses the following wireless settings for 5 GHz.
Parameter Description
Wireless Network
12345678
Password
197
Parameter Description
Bandwidth 80MHz
LAN IP 192.168.1.10
Configuration procedure
(5) Choose Wireless > 5G > Security to enter the configuration page.
(6) Set the Network Authentication, WPA/WAPI Passphrase, and WPA/WAPI
Encryption to Mixed WPA2/WPA-PSK, 12345678, and AES respectively.
(7) Click Apply/Save on the bottom of this page.
198
(4) Click Apply/Save, Bridge Restrict turns to Enabled automatically.
Verification
Connect your wireless devices to the WiFi network of the modem router, or connect your wired
devices to ports 1, 2 or 3 of the modem router, and try accessing the internet in the bedroom and
study room.
199
5.2.5 Station info
This section allows you to check the information of wireless clients connected to the 5 GHz wireless
networks of the modem router.
Choose Wireless > 5G > Station Info to enter this page.
Click Refresh to view the latest wireless stations and their status.
200
6 Diagnostics
6.1 Ping
Ping test can help test whether a host or the internet is reachable.
To perform the ping test:
Step 1 Choose Diagnostics > Ping to enter the configuration page.
Step 2 Enter the IP address or domain name of the host in the Ping IP Address or Domain Name
field.
Step 3 Click Ping.
----End
If you get a similar screenshot shown as below, it indicates that the host is reachable from the
modem router.
201
6.2 Traceroute
Traceroute helps you check the specific routes to a host.
To perform the traceroute:
Step 1 Choose Diagnostics > Traceroute to enter the configuration page.
Step 2 Enter the IP address or domain name of the host in the Host Name field.
Step 3 Click Traceroute.
----End
Then you can check the result. The following route table displays the traceroute to the host whose
IP address is 192.168.1.118.
202
6.3 Nslookup
Nslookup helps you translate the domain name to a specific IP address.
To translate a domain name:
Step 1 Choose Diagnostics > Nslookup to enter the configuration page.
Step 2 Enter a domain name in the Host Name field.
Step 3 Click Nslookup.
----End
Then you can check the result. The following screenshot displays the IP address of the domain name
www.google.com.
203
6.4 Diagnostics
The device is capable of testing the connection to your DSL service provider, the connection to your
ISP and the connection to your local network. If a test fails, click Help and check the troubleshooting
procedures to solve the problem.
204
7 Management
7.1 Settings
Here you can back up the current settings, restore earlier settings, and restore the factory settings
of the device.
7.1.1 Backup
7.1.1.1 Overview
This function allows you to save a copy of your device’s configurations to your computer. Once you
have configured the device, you can save these settings to a configuration file on your local
computer. The configuration file can later be imported to your device in case the device is reset.
----End
205
----End
Wait until the progress bar elapses.
206
----End
207
7.2 System log
7.2.1 Overview
This function allows you to configure, view, and export system logs, which helps you understand the
operating conditions of the device.
You can view system logs only after enabling the logging function. For details, see section
7.3.2 Configuring System Logs.
Step 1 Choose Management > System Log to enter the configuration page.
Step 2 Click View System Log.
----End
208
On the page that appears:
− To update the system logs, click Refresh.
− To export the system logs, click Save Log and follow the onscreen instructions to save the
system logs to a file on your computer.
209
Step 4 Select a logging level from the Log Level drop-down list box. All the system events at or
above the selected level are logged.
Step 5 Select a log display level from the Display Level drop-down list box. Only the logs at or
above the selected level can be viewed.
Step 6 Click Apply/Save.
----End
Choose Management > System Log > View System Log to check the logs.
210
7.3 Passwords
7.3.1 Overview
This function allows you to change the login password of the device.
----End
211
7.4 SNMP agent
7.4.1 Overview
The Simple Network Management Protocol (SNMP) is the most widely used network management
protocol in TCP/IP networks. SNMP enables you to remotely manage all your network devices
compliant with this protocol, such as monitoring the network status, changing network device
settings, and receive network event alarms.
SNMP allows automatic management of devices from various vendors regardless of physical
differences among the devices.
SNMP Management Framework
The SNMP management framework consists of SNMP manager, SNMP agent, and Management
Information Base (MIB).
− SNMP manager: It is a system that controls and monitors network nodes using the SNMP
protocol. The SNMP manager most widely used in network environments is Network
Management System (NMS).An NMS can be a dedicated network management server, or
an application that implements management functions in a network device.
− SNMP agent: It is a software module in a managed device. The module is used to manage
data about the device and report the management data to an SNMP manager.
− MIB: It is a collection of managed objects. It defines a series of attributes of managed
objects, including names, access permissions, and data types of objects. Each SNMP agent
has its MIB. An SNMP manager can read and/or write objects in the MIB based on the
permissions assigned to the SNMP manager.
An SNMP manager manages SNMP agents in an SNMP network. The SNMP manager exchanges
management information with the SNMP agents using the SNMP protocol.
Parameter description
Choose Management > SNMP Agent to enter the configuration page.
212
Parameter Description
It specifies whether to enable the SNMP agent function of the modem router. By
SNMP Agent
default, it is disabled.
It specifies the read password shared between SNMP managers and this SNMP agent.
Read Community
The default password is public.
It specifies the set password shared between SNMP managers and this SNMP agent.
Set Community
The default password is private.
It specifies the device name of the modem router. The default system name is the
System Name
brand of the modem router.
It specifies the location where the modem router is used. The default location is
System Location
unknown.
It specifies the contact information of the modem router. The default location is
System Contact
unknown.
It specifies the IP address of the server or terminal where alarm information is sent
Trap Manager IP
to.
213
7.5 TR-069 client
7.5.1 Overview
The WAN Management Protocol (TR-069) allows an Auto-Configuration Server (ACS) to perform
auto-configuration, provision, collection, and diagnostics to the modem router from the internet.
Choose Management > TR-069 Client to enter the configuration page.
Parameter description
Parameter Description
It specifies the interval at which the CPE uses the inform method to send messages to
Inform Interval
the ACS.
It specifies the user name used to authenticate the CPE when the CPE connects to the
ACS User Name
ACS using the TR-069 protocol.
It specifies the password used to authenticate the CPE when the CPE connects to the
ACS Password
ACS using the TR-069 protocol.
It specifies whether to display the TR-069 SOAP messages on the serial port. This
Display SOAP messages function is generally used to debug by professionals. After it is enabled, some
on serial console memory will be consumed which causes performance degradation. So generally it is
disabled.
214
Parameter Description
Connection Request
It specifies whether to authenticate the connection request sent by the ACS.
Authentication
Connection Request It specifies the user name used to authenticate the ACS when it sends the connection
User Name request to the CPE.
Connection Request It specifies the password used to authenticate the ACS when it sends the connection
Password request to the CPE.
It specifies the domain name used by the ACS when it sends the connection request
Connection Request
to the CPE. After the WAN port used by the TR-069 client is selected, this domain
URL
name will be generated automatically.
215
7.6 Internet time
7.6.1 Overview
This function allows you to synchronize the time of the device with the internet time.
----End
216
7.7 Access control
This function allows you to use the HTTP, ICMP, SSH, TELNET, SNMP, FTP, TFTP and HTTPS to manage
the modem router from LAN or WAN side.
Choose Management > Access Control to enter the configuration page.
Parameter description
Parameter Description
After it is enabled, users can manage the modem router using HTTP protocol through
HTTP the browser from the corresponding sides (LAN or WAN). This method is acceptable
for most users.
After it is enabled, it allows users to ping the modem router from the corresponding
ICMP
sides (LAN or WAN) for connectivity diagnosis.
After it is enabled, users can manage the modem router through the Secure Shell
SSH
connection (SSH).
After it is enabled, users can use TELNET to establish a connection with the device,
TELNET and visit the command-line interface of the device from the corresponding sides (LAN
or WAN).
After it is enabled, the SNMP management software can establish a connection with
SNMP the device, and check some parameters of the device through MIB nodes from the
corresponding sides (LAN or WAN).
After it is enabled, the modem router servers as a server and users can use FTP
FTP protocol to check, upload, or download files of the device from the corresponding
sides (LAN or WAN).
217
Parameter Description
After it is enabled, the devise servers as a server and users can use TFTP protocol to
TFTP check, upload, or download files of the device from the corresponding sides (LAN or
WAN).
After it is enabled, users can manage the device using HTTPS protocol through the
HTTPS
browser from the corresponding sides (LAN or WAN).
218
Step 5 Click OK.
----End
----End
Ensure that the route between the modem router and the FTP server is reachable.
219
7.8.4 Upgrading the firmware using TFTP server
Step 1 Choose Management > Update Software to access the configuration page.
Step 2 Set TFTP Server IP to the IP address of the TFTP server where the target firmware resides.
Step 3 Set Firmware File Name to the file name of the target firmware.
Step 4 Click TFTP Update Firmware.
----End
Ensure that the route between the modem router and the TFTP server is reachable.
220
7.9 Reboot
This function allows you to manually reboot the device on the web UI.
Choose Management > Reboot to enter the configuration page.
To manually reboot the device, click Reboot, and then wait for the modem router to restart.
221
Appendix
A.1 FAQ
Q1: I cannot log in to the web UI of the modem router. What should I do?
A1: Use the following method to troubleshoot the fault, and then try again.
Ensure that the Ethernet cable between your computer and the modem router is connected
properly.
Ensure that your computer is set to Obtain an IP address automatically.
Ensure that the login IP address (192.168.1.1) you entered is correct.
Clear cache of your browser, or change another browser.
Use another computer, smart phone or tablet to log in to the web UI.
Hold down the RST button for about 6 seconds to restore to factory settings.
Q2: I cannot access the internet after completing the configuration, what should I do?
A2: Use the following method to troubleshoot the fault.
Observe the DSL LED indicator. If it doesn’t light up, check whether the connection between
the DSL port and Phone jack is proper.
If you access the internet via the WAN port (port 4) of the modem router, check whether the
connection between port 4 and the upstream device or Ethernet jack is proper.
Observe the INET LED indicator. If it lights red, check whether the parameters you entered for
internet access are correct, and the connection status on the web UI of the modem router is
connected.
Check whether your computers are set to Obtain an IP address automatically.
Contact your internet service provider for help.
Q3: I forget my WiFi password, what should I do?
A3: Use the following method to troubleshoot the fault.
Log in to the web UI of the modem router, and check it on the Wireless Settings part.
If you forget the login password of the web UI as well, reset the modem router. By default,
there is no WiFi password.
Q4: How to reset the modem router?
A4: When the PWR LED indicator is solid green, hold down the RST button for 6 seconds.
222
A.2 VPI/VCI List
The following table lists common ISPs and their VPI and VCI numbers. If you cannot locate your ISP
and their VPI and VCI information here, ask your ISP to provide it.
223
Country/Region ISP VPI VCI Encapsulation
224
Country/Region ISP VPI VCI Encapsulation
RELIANCE
India 0 35 PPPOE LLC
COMMUNICATION
Indonesia Speedy
8 81 PPPoE LLC
Telkomnet
225
Country/Region ISP VPI VCI Encapsulation
[Shatel]
Iran 0 35 PPPOE LLC
Aria-Rasaneh-Tadbir
[Saba-Net]
Iran 0 35 PPPOE LLC
Neda-Gostar-Saba
226
Country/Region ISP VPI VCI Encapsulation
Kazakhtelecom
Kazakhstan 0 40 LLC/SNAP Bridging
«Megaline»
kuwait
0 33 1483 Bridged IP LLC
unitednetwork
Orange Nyumbani
0 35 PPPoE LLC
(Kenya)
227
Country/Region ISP VPI VCI Encapsulation
RomTelecom
0 35 1483 Bridged IP LLC
Romania:
Jazztel ADSL2+/
Spain 8 35 1483 Bridged IP LLC-BRIDGING
Desagregado
228
Country/Region ISP VPI VCI Encapsulation
Sri Lanka
8 35 PPPOE LLC
Telecom-(SLT)
229
Country/Region ISP VPI VCI Encapsulation
Telefónica
8 35 1483 Bridged IP LLC-based
(Argentina)
230
Country/Region ISP VPI VCI Encapsulation
Grande
United States 1 34 PPPoE LLC
communications
231
Country/Region ISP VPI VCI Encapsulation
SureWest
United States 0 34 1483 Bridged LLC Snap
Communications(1)
SureWest
United States 0 32 PPPoE LLC
Communications(2)
SureWest
United States 0 32 PPPoA LLC
Communications(3)
232
Country/Region ISP VPI VCI Encapsulation
Other
TransAct 10 PPPoE
NetSpeed 10 PPPoE
EveryNet 10 PPPoE
Australia
IINET 10 PPPoE
Infinite 10 PPPoE
Officelink 10 PPPoE
Velocitynet 10 PPPoE
233
Country/Region ISP VLANID Protocol
Other
Telekom 7 PPPoE
Austria
Other
234
Country/Region ISP VLANID Protocol
Other
235
Country/Region ISP VLANID Protocol
Other
1&1 7 PPPoE
Alice(1) 11 PPPoE
Alice(2) 7 PPPoE
Congstar 7 PPPoE
Easybell 7 PPPoE
GMX 7 PPPoE
KielNET 7 PPPoE
M-Net 40 PPPoE
Germany
Osnatel 2019 PPPoE
O2(1) 11 PPPoE
O2(2) 7 PPPoE
NetCologne/NetAachen(1) 10 PPPoE
NetCologne/NetAachen(2) 7 PPPoE
QSC/Q-DSL 7 PPPoE
Telekom 7 PPPoE
Swb(2) 7 PPPoE
Versatel 7 PPPoE
236
Country/Region ISP VLANID Protocol
Vodafone/Arcor(2) 7 PPPoE
Wilhelm.tel 7 PPPoE
Other
Other
Other
237
Country/Region ISP VLANID Protocol
Eircom 10 PPPoE
Other
238
Country/Region ISP VLANID Protocol
Other
239
Country/Region ISP VLANID Protocol
Other
Spark/Telecom 10 PPPoE
KiwiLink 10 PPPoE
Slingshot 10 PPPoE
Vodafone NZ 10 PPPoE
New Zealand
Snap 10 PPPoE
Myrepublic 10 PPPoE
Other
240
Country/Region ISP VLANID Protocol
Other
Other
Q-Tel/Ooreedo 8 PPPoE
Qatar
Other
Other
241
Country/Region ISP VLANID Protocol
Telefonica 6 PPPoE
Other
Swisscom 10 PPPoE
Switzerland
Other
SAMA-Net 10 PPPoE
Syria
Other
Turktelekom 35 PPPoE
Superonline 35 PPPoE
Turkey
Vodafone 35 PPPoE
Turknet 35 PPPoE
242
Country/Region ISP VLANID Protocol
D-Smart 35 PPPoE
Other
BT 101 PPPoE
EE 101 PPPoE
Other
243
Country/Region ISP VLANID Protocol
244
A.4 Factory settings
Parameter Default Setting
Login IP 192.168.1.1
Login Information
Login User name/Password admin/admin
Firewall Enabled
Network Settings
NAT Enabled
245
Parameter Default Setting
WMF Enabled
Channel Auto
IP Address 192.168.1.1
Status Enabled
Start IP 192.168.1.2
DHCP Setting
End IP 192.168.1.254
246
Parameter Default Setting
UPnP Enabled
IPTV Disabled
247