Router configuration guide
It is relatively easy to configure the router, so that the computer can access the Internet through the router. The following contents of this document mainly include the following parts:
1, collect judgment information and prepare to configure the router;
2. Enter the router management interface to configure the router;
3. Fault location and elimination, simple configuration process;
Let's get started and get down to business!
1, the preparatory work before setting up the router (if you know your connection method, you can skip to point 2 directly).
The first thing to confirm is what is your "broadband access method"?
Of course, the easiest way is to call your ISP for advice. You can also make a quick judgment through network connection before buying a router.
Common hardware connection methods are as follows:
1, telephone line->; ADSL modem->; computer
2, twisted pair (Ethernet cable)->; computer
3. cable TV (coaxial cable) > cable modem-> computer
4. optical fiber > photoelectric converter->; Proxy server->; personal computer
ADSL/VDSL PPPoE: Run the third-party dialing software such as Enternet300 or the dialing program of WinXP system on the computer, fill in the account number and password provided by ISP, and dial before surfing the Internet every time;
Or your ADSL modem has turned on the routing function, filled in the account and password provided by ISP, and handed over the dialing action to the modem; (This broadband access method is typical, such as the "network express" provided by China Southern Telecom)
Static IP :ISP provides you with a fixed IP address, subnet mask, default gateway and DNS.
Dynamic IP: the TCP/IP property of the computer is set to "automatically obtain IP address", and you can surf the Internet every time you turn it on; (This broadband access mode is typical, such as Shenzhen Tianwei Video).
802. 1X+ static IP :ISP provides fixed IP address, special dialing software, account number and password;
802. 1X+ dynamic IP :ISP provides special dialing software, account number and password;
Web authentication: Before surfing the Internet, open IE browser, enter the homepage designated by ISP, and fill in the user name and password provided by ISP. Only after the authentication is passed can other online operations be carried out.
(The bold words above are your broadband access mode, and the access mode and hardware connection mode are not fixed. )
These connection authentication methods mentioned above are only some broadband access methods with relatively high penetration rate, and of course there will be other topological connection and authentication methods; Therefore, when you are not sure about your broadband mode, you'd better consult your ISP: Is the IP address of your broadband access static or dynamic? Is the protocol used for authentication PPPoE, 802. 1X or WEB authentication? When the above two questions are answered, the router can be configured;
2. How to enter the router management interface?
First, refer to the icon in the user manual to connect ADSL modem, router and computer.
The factory default management address of TL-R4XX series routers is IP address:192.168.1.1. Subnet mask: 255.255.0 (the default management address of TL-R400 and TL-R400+ is192.168.123.254, and the subnet mask is 255. 255.255.0. Because the Ethernet port on the router has the function of automatic polarity reversal, it can be used regardless of whether your network cable is straight or crossed. What needs to be guaranteed is that the crystal head of the network cable is made firmly and the copper sheet of the crystal head does not rust.
Right-click "Network Neighborhood" on the computer desktop, select "Properties", double-click in the pop-up window to open "Local Area Connection", click "Properties" in the pop-up window, then look for "Internet Protocol (TCP/IP)", and double-click to pop up the "Internet Protocol (TCP/IP) Properties" window;
Select "Use the following IP address" in this window, and then fill in the corresponding location:
IP address:192.168.1.x (x range 2-254),
Subnet mask: 255. 255.255.0,
Default gateway:192.168.1.1,just fill in "OK" twice;
The Internet Protocol (TCP/IP) properties window is as follows:
3. Check whether the computer and the router can communicate.
You can use the following methods to view and open the computer's DOS interface:
"start"->; "program", click "ms-dos" (win 98 operating system)
"start"->; "Programs"-"Accessories", click "Command Prompt" (Win2000/XP operating system).
Check whether the above IP address configuration is valid first?
Type: ipconfig/all in the DOS window, and then press Enter. When you see a message similar to the following, it means that the configuration is valid.
IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . : 192. 168. 1. 10
Subnet host. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . : 255.255.255.0
Default gateway. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . : 192. 168. 1. 1
The second is to send a packet from the computer to the router LAN port to see if the packet can be returned. Run in a DOS window:
Ping192.168.1.1–t, and then press enter. If a message similar to the following appears,
192 reply. 168. 1. 1:bytes = 32 time & lt； 10ms TTL= 128 reply from 192. 168. 1. 1:bytes = 32 time & lt； 10ms TTL= 128 reply from 192. 168. 1. 1:bytes = 32 time & lt； 10ms TTL= 128 If the above information does not appear after entering the vehicle, and the command "not an internal command or an external command, nor a runnable program or a batch program" is prompted, it means that the command was entered incorrectly. Please check whether the input such as spaces is ignored; 4. Enter the router management interface; The above information appears, indicating that the computer can communicate with the router. Open IE browser, enter 192. 168. 1 in the address bar, and press enter. Under normal circumstances, a dialog box will appear, asking for a user name and password. Of course, there are exceptions: open the address bar of IE browser and enter the address, and the "Work Offline" dialog box will pop up, that is, a small dialing window will appear after clicking "Connect". Please click "Tools"-"Internet Options" in the menu bar of IE browser, and click "Connection" property page in the pop-up dialog box. The interface is as follows: after the above operations, it should be said that there should be no obstacles to enter the router management interface; 5. Start configuring the router; With the information preparation of broadband access mode at the beginning, it is much more convenient to configure; When you enter the router management interface for the first time, a "Setup Wizard" interface similar to the one below will pop up, and you can cancel ignoring it. Enter the router management interface and click "Network Parameters" in the-> bar-> menu bar; "WAN port setting" is the place to configure the router's Internet-oriented WAN port working mode, which is the most critical step.
Suppose your broadband access method is ADSL PPPoE, select "WAN connection type" as "PPPoE", and fill in "Internet account" and "Internet password". If you are a monthly user, please select the "Auto Connect" connection mode, and then click "Save" to complete the configuration. After saving, the password filled in the "Internet password" box will be a few more digits, which is specially done by the router for security reasons;
Then you click "Running Status" in the left column of the management interface. At first, I can't see the corresponding IP address subnet mask, default gateway DNS server and other addresses, just like the following figure, which shows that the router is dialing. After the corresponding information appears in these addresses, fill in the DNS server address in the "Internet Protocol (TCP/IP)" page of the computer and confirm the corresponding location, and the basic setting is completed.
Under normal circumstances, within a minute or two, a string of addresses will appear in the oval part of the above figure, indicating that the dialing is successful;
6. Fault enumeration;
If the oval area in the above picture has not changed, you can't see any address. There are several reasons, please rule them out one by one:
1) There is usually an ADSL light on the ADSL modem. Under normal circumstances, after the modem is powered on and the telephone line is connected, the lights will flash at a faster or slower speed roughly regularly, and the flashing will eventually stop and light up. If this lamp keeps flashing, it just doesn't work. Please contact and inform your ISP that your ADSL modem cannot be synchronized with the switch in your local office. It is necessary for this ADSL/DSL lamp to stay on for a long time.
2) When filling in the "Internet Password" in the configuration process, you accidentally entered an error, so you might as well re-enter;
3) The ADSL modem has enabled the "routing mode", and the ADSL MDOEM needs to be reset to "bridging mode"; How to reset to bridge mode can contact the MODEM manufacturer for operation methods; You can also judge that the computer is connected to the modem, dial on the computer, and you can surf the Internet after dialing successfully. If so, it means that the working mode of modem is bridge mode, and this possibility can be ruled out.
4) ISP assigns the MAC address of the computer network card to the ADSL line; The solution is to copy the MAC address of the network card to the WAN port of the router by using the "MAC address cloning" function of the router.
If all the above possibilities are ruled out, ADSL PPPoE dialing will generally have no problem. Here are two other reasons for concern.
5) Your broadband access mode is the direct introduction of Ethernet cable, not ADSL, but you also need to dial. There is not only one kind of dialing software, and the protocol used for authentication is PPPoE, but the dialing cannot be successful. If the ISP promises a bandwidth of 10Mbps, it is suggested to find an adaptive hub of1100m, connect the broadband incoming line to the hub, and then connect the hub to the router WAN port; After such a rate adaptation process, there should be no problem with dialing;
6) Before buying a router, you should also run the dialing software through the computer and fill in the user name and password to dial. However, the dialing software is special software provided by ISP, and other software can't dial successfully; If this is the case, please contact your ISP and ask: Do you use 802 protocol for broadband access authentication? 1X？ If so, it is possible that the authentication system added privacy information during the development process, which led to the failure of router dialing;
7. Other configurations
1) security settings
When you can surf the Internet normally, for different reasons, you may want to open different permissions to computers in the internal LAN. For example, you can only log in to certain websites and send and receive emails, some with restrictions and some without restrictions; Users' needs in this respect vary greatly. Some of them can be realized by routers, while others cannot be fully realized by routers. For example, the function of "binding IP address and network card address" cannot be fully realized by the router.
The essence of our online operation is that the computer keeps sending request packets, which must contain some parameters such as source IP, destination IP, source port and destination port. It is by limiting these parameters that the router achieves the purpose of controlling different access rights of computers in the internal LAN.
Let's give several representative configuration examples to illustrate how the functions of "firewall setting" and "IP address filtering" of routers are used. The examples listed above and the explanations in red are to help you understand the meaning of each function parameter as much as possible. Only by understanding the meaning of parameters can you configure filtering rules at will, so as to achieve your expected purpose quickly, and you will not be unable to use these functions because of configuration errors, nor will you delay your application because of lack of timely technical support;
The above picture shows the Firewall Settings page. You can see that this is the setup page of the main switch. Please do not check any unused functions before it.
In addition to the main switch, there are two "default filtering rules" for filtering functions. What is the default filtering rule? On the specific rule setting page, we define some specific rules to control the qualified packets. The "default rule" here, as its name implies, is to limit what should we do if the unqualified packets do not involve our customized rules? This should not be difficult to understand;
A data packet must conform to the rules we set, or it may not conform to the rules we set, but at the same time it must conform to the default rules;
The above picture shows the IP address filtering page. We can see the default filtering rules and add new entries.
The above picture is a detailed and specific rule setting page with the above parameters;
We configure a rule: restrict a computer with IP address192.168.1.10 in the internal LAN, and only let it log on to www.tp-link.com.cn's website, and nothing else will work;
The above rules can be interpreted as: the intranet computer sends a data packet to the public network, the source IP address of the data packet is the IP address of the computer to be restricted,192.168.10, and the destination IP address of the data packet is 202. 96. 137.26, which is the corresponding domain name of www.tp-link.com.cn. The interface for setting rules is as follows:
It can be clearly seen from the configured rules page that the effective time of the rules is 24 hours, and the controlled object is IP address.
For hosts with192.168.10, the port behind the LAN is not needed by default. The IP address bar of WAN is filled with the public IP address corresponding to www.tp-link.com.cn, and the port number is 80, because it is a website. UsuALLy, the protocol defaults to all. Is it allowed to pass? Because the default rule is to prohibit packets that do not meet the set rules from passing through the router, packets that meet the set rules are allowed to pass through, and the rule status is valid;
A second rule has been added to the figure above. What packet does the second rule set?
If your rule involves restricting websites, that is, the destination request port is 80, you should consider allowing the packets corresponding to port 53 to pass, because 53 corresponds to the packets going to the "Domain Name Resolution Server", which is used to associate domain names (such as www.tp-link.com.cn) with IP addresses (such as 202). 96. 137.26), so be sure to open it!
The function of configuring IP address filtering rules is used to achieve some of your goals. The most important thing is to analyze what control should be done, and then choose what default rule? What kind of filtering rules are configured? If you are determined to understand the real function of this function, you can certainly master it through careful reference and repeated experiments on the router.