TP-Link Router TL-WR740N User Manual

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 54 - 
3. Click the Save button. 
Click the  Enable All  button to make all entries enabled 
Click the  Disabled All  button to make all entries disabled. 
Click the  Delete All  button to delete all entries 
) Note:
 
1.  When the trigger connecti on is released, the correspondi ng opening ports will be closed. 
2.  Each rule is allowed to be used only  by one host on LAN synchronously. The trigger 
connection of other hosts  on LAN will be refused. 
3.  Incoming Port Range cannot overlap each other. 
4.8.3  DMZ 
Choose menu “ Forwarding → DMZ ”, you can view and configur e DMZ host in the screen as 
shown in  Figure 4-35 . The DMZ host feature allows one local  host to be exposed to the Internet 
for a special-purpose service such as Internet  gaming or videoconferencing. DMZ host forwards 
all the ports at the same time. Any PC whose port is being forwarded must have its DHCP client 
function disabled and should have a new static IP  Address assigned to it because its IP Address 
may be changed when usi ng the DHCP function. 
 
Figure 4-35  DMZ 
To assign a computer or server to be a DMZ server:   
1. Check the Enable radio button 
2.  Enter the IP Address of a local host in the  DMZ Host IP Address field 
3. Click the  Save button. 
) Note:  
After you set the DMZ host, the firewa ll related to the host will not work. 
4.8.4 UPnP 
Choose menu “ Forwarding → UPnP ”, you can view the information about  UPnP (Universal Plug 
and Play) in the screen as shown in  Figure 4-36. The UPnP feature allows the devices, such as 
Internet computers, to access  the local host resources or dev ices as needed. UPnP devices can 
be automatically discovered by the UP nP service application on the LAN.  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 55 - 
 
Figure 4-36 UPnP   
¾  Current UPnP Status -  UPnP can be enabled or  disabled by clicking the Enable or Disable  
button.  
¾  Current UPnP Settings List -  This table displays the current UPnP information. 
• App Description -  The description provided by the application in the UPnP request. 
• External Port  -  The external port the Router  opens for the application. 
• Protocol -  The type of protocol the Rout er opens for the application. 
• Internal Port  -  The Internal port the Router opens for local host. 
• IP Address  - The IP address of the UPnP device that is currently accessing the Router. 
•  Status -  The status of the port is displayed he re. “Enabled” means that the port is still 
active. Otherwise, the port is inactive. 
Click Refresh  to update the Current UPnP Settings List.   
4.9 Security 
 
Figure 4-37 The Security menu 
There are four submenus under t he Security menu as shown in Figure 4-37: Basic Security , 
Advanced Security , Local Management  and Remote Management.  Click any of them, and you 
will be able to configure t he corresponding function.  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 56 - 
4.9.1 Basic Security 
Choose menu “ Security → Basic Security ”, you can configur e the basic security in the screen 
as shown in  Figure 4-38. 
 
Figure 4-38 Basic Security 
¾ Firewall -  A firewall protects your network from  the outside world. Here you can enable or 
disable the Router’s firewall. 
z  SPI Firewall -  SPI (Stateful Packet Inspection, also  known as dynamic packet filtering) 
helps to prevent cyber attacks by tracking mo re state per session. It validates that the 
traffic passing through the session conforms to  the protocol. SPI Firewall is enabled by 
factory default. If you want all the comput ers on the LAN exposed to the outside world, 
you can disable it.   
¾  VPN -  VPN Passthrough must be enabled if you want  to allow VPN tunnels using IPSec, 
PPTP, or L2TP protocols to pass through the Router’s firewall.  
z PPTP Passthrough -  Point-to-Point Tunneling Protocol  (PPTP) allows the Point-to-Point 
Protocol (PPP) to be tunneled through an IP  network. To allow PPTP tunnels to pass 
through the Router, keep the default,  Enabled.  
z L2TP Passthrough  - Layer 2 Tunneling Protocol (L2T P) is the method used to enable 
Point-to-Point sessions via the Internet on the Layer 2 level. To allow L2TP tunnels to  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 57 - 
pass through the Router, keep the default, Enabled. 
z IPSec Passthrough  - Internet Protocol Security (IPSec) is a suite of protocols for 
ensuring private, secure communications over Internet Protocol (IP) networks, through 
the use of cryptographic security services.  To allow IPSec tunnels to pass through the 
Router, keep the default,  Enabled. 
¾ ALG - It is recommended to enable Application Lay er Gateway (ALG) because ALG allows 
customized Network Address Translation (NAT)  traversal filters to be plugged into the 
gateway to support address and port translation fo r certain application layer control/data 
protocols such as FTP, TFTP, H323 etc.   
z FTP ALG -  To allow FTP clients and servers  to transfer data across NAT, keep the 
default Enable .  
z TFTP ALG -  To allow TFTP clients and servers to  transfer data across NAT, keep the 
default Enable . 
z  H323 ALG - To allow Microsoft NetMeeting client s to communicate across NAT, keep 
the default  Enable. 
Click the  Save button to save your settings. 
4.9.2  Advanced Security 
Choose menu “ Security → Advanced Security ”, you can protect the Router from being 
attacked by TCP-SYN Flood, UDP Flood and  ICMP-Flood in the screen as shown in Figure 4-39.  
 
Figure 4-39  Advanced Security  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 58 - 
¾ Packets Statistics Interval (5~60) -  The default value is 10. Select a value between 5 and 
60 seconds from the drop-down list. The Packets  Statistics Interval value indicates the time 
section of the packets statistics. The result of  the statistics is used for analysis by SYN Flood, 
UDP Flood and ICMP-Flood. 
¾  DoS protection -  Denial of Service protection. Check the Enable or Disable button to 
enable or disable the DoS protecti on function. Only when it is enabled, will the flood filters be 
enabled. 
)  Note: 
Dos Protection will take effect only when the  Traffic Statistics in “System Tool  → Traffic 
Statistics” is enabled. 
¾  Enable ICMP-FLOOD Attack Filtering  - Enable or Disable the ICMP-FLOOD Attack 
Filtering. 
¾  ICMP-FLOOD Packets Threshold (5~3600)  - The default value is 50. Enter a value 
between 5  ~ 3600. When the current ICMP-FLOOD Packets number is beyond the set value, 
the Router will startup the bl ocking function immediately. 
¾  Enable UDP-FLOOD Filtering  -  Enable or Disable the UDP-FLOOD Filtering. 
¾  UDP-FLOOD Packets Threshold (5~3600)  - The default value is 500. Enter a value 
between 5  ~ 3600. When the current UPD-FLOOD Packets number is beyond the set value, 
the Router will startup the bl ocking function immediately. 
¾  Enable TCP-SYN-FLOOD Attack Filtering  - Enable or Disable the TCP-SYN-FLOOD 
Attack Filtering. 
¾  TCP-SYN-FLOOD Packets Threshold (5~3600)  - The default value is 50. Enter a value 
between 5  ~ 3600. When the current TCP-SYN-FLOOD Packets numbers is beyond the set 
value, the Router will startup t he blocking function immediately.   
¾  Ignore Ping Packet From WAN Port  - Enable or Disable Ignore Ping Packet From WAN 
Port. The default setting is disabled. If enabled, the ping packet from the Internet cannot 
access the Router.   
¾  Forbid Ping Packet From LAN Port  -  Enable or Disable Forbid  Ping Packet From LAN Port. 
The default setting is disabled. If enabled, t he ping packet from LAN cannot access the 
Router. This function can be used to defend against some viruses.   
Click the  Save button to save the settings. 
Click the  Blocked DoS Host List  button to display the DoS host table by blocking.   
4.9.3 Local Management 
Choose menu “ Security → Local Management ”, you can configure the management rule in the 
screen as shown in  Figure 4-40. The management feature allows you to deny computers in LAN  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 59 - 
from accessing the Router. 
 
Figure 4-40 Local Management 
By default, the radio button “All the PCs on the LAN are allowed to access the Routers 
Web-Based Utility” is checked. If you want to allow PC s with specific MAC Addresses to access 
the Setup page of the Routers W eb-Based Utility locally from inside the network, check the radio 
button “Only the PCs listed can browse the built-in web pages to perform Administrator 
tasks ”, and then enter each MAC Address in a separate  field. The format for the MAC Address is 
XX-XX-XX-XX-XX-XX (X is any hexadecimal digit) . Only the PCs with MAC address listed can 
use the password to browse the built-in web pages  to perform Administrator tasks while all the 
others will be blocked.   
After click the Add  button, your PCs MAC Addre ss will be placed in the list above. 
Click the  Save button to save your settings.   
) Note: 
If your PC is blocked but you want to access  the Router again, use a pin to press and hold the 
Reset Button (hole) on the back panel for about 5 seconds to reset the Router’s factory defaults 
on the Router’s Web-Based Utility. 
4.9.4  Remote Management 
Choose menu “ Security → Remote Management ”, you can configure the Remote Management 
function in the screen as shown in  Figure 4-41. This feature allows you to manage your Router 
from a remote location via the Internet.  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 60 - 
 
Figure 4-41  Remote Management 
¾  
Web Management Port -  Web browser access normally uses the standard HTTP service 
port 80. This Routers default remote m anagement web port number is 80. For greater 
security, you can change the remote management w eb port to a custom port by entering that 
number in the box provided. Choose a num ber between 1 and 65534 but do not use the 
number of any common service port.   
¾  Remote Management IP Address  -  This is the current addre ss you will use when accessing 
your Router from the Internet. This function is disabled when the IP address is set to the 
default value of 0.0.0.0.  To enable this function ch ange 0.0.0.0 to a valid IP address. If set to 
255.255.255.255, then all the  hosts can access the Router from internet.   
) Note: 
1.  To access the Router, you should type your Routers WAN IP address into your browsers  address (in IE) or Location (in Navigator) box,  followed by a colon and the custom port number. 
For example, if your Routers WAN address  is 202.96.12.8, and the port number used is 8080, 
please enter  http://202.96.12.8:8080
 in your browser. Later, you may be asked for the Routers 
password. After successfully entering the username and password, you will be able to access 
the Routers w eb-based utility. 
2.  Be sure to change the Routers default password to a very secure password . 
4.10  Parental Control 
Choose menu “ Parental Control ”, you can configure the parental  control in the screen as shown 
in  Figure 4-42 . The Parental Control function can be used to  control the internet activities of the 
child, limit the child to access certain webs ites and restrict the time of surfing.  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 61 - 
 
Figure 4-42    Parental Control Settings 
¾  
Parental Control -  Check Enable if you want this function to  take effect, otherwise check 
Disable .  
¾ MAC Address of Parental PC -  In this field, enter the MAC address of the controlling PC, or 
you can make use of the  Copy To Above button below.   
¾ MAC Address of Your PC -  This field displays the MAC addr ess of the PC that is managing 
this Router. If the MAC Address of your adapter is registered, you c an click the Copy To 
Above button to fill this addr ess to the MAC Address of Parental PC field above.   
¾ Website Description -  Description of the allowed webs ite for the PC controlled.   
¾ Schedule  -  The time period allowed for the PC contro lled to access the Internet. For detailed 
information, please go to “ Access Control → Schedule ”.  
¾ Modify  -  Here you can edit or delete an existing entry.   
To add a new entry, please follow the steps below. 
1. Click the  Add New… button and the next screen will pop-up as shown in  Figure 4-43. 
2.  Enter the MAC address of the PC (e.g. 00-11-22 -33-44-AA) you’d like to control in the MAC 
Address of Child PC field. Or you can choos e the MAC address from the All Address in 
Current LAN  drop-down list. 
3.  Give a description (e.g. Allow Google) for t he website allowed to be accessed in the Website 
Description field. 
4.  Enter the domain name of the website (e.g. www.google.com) in the Allowed Domain Name  
field. 
5.  Select from the Effective Time drop-down  list the schedule (e.g. Schedule_1) you want the 
entry to take effect. If there are not  suitable schedules for you, click the  Schedule in red 
below to go to the Advance Schedule Se ttings page and create the schedule you need. 
6.  In the Status field, you can select  Enabled or Disabled  to enable or disable your entry.  
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 62 - 
7. Click the Save button. 
Click the  Enable All  button to enable all the rules in the list. 
Click the  Disable All button to disable all the rules in the list. 
Click the  Delete All button to delete all the entries in the table. 
Click the  Next button to go to the next page, or click the  Previous button return to the previous 
page. 
 
Figure 4-43    Add or Modify Parental Control Entry 
For example : If you desire that the child PC with MAC address 00-11-22-33-44-AA can access 
www.google.com on Saturday only while the parent PC with MAC address 00-11-22-33-44-BB is 
without any restriction, you  should follow the settings below. 
1. Click “ Parental Control ” menu on the left to enter the  Parental Control Settings page. 
Check Enable and enter the MAC address 00-11-22-33-44-BB in the MAC Address of 
Parental PC field.   
2. Click “ Access Control  → Schedule” on the left to enter the Schedule Settings page. 
Click  Add New...  button to create a new schedule with Schedule Description is 
Schedule_ 1, Day is Sat and Time is all day-24 hours.    
						

							TL-WR740N/TL-WR741ND150Mbps Wireless N Router 
- 63 - 
3. Click “Parental Control ” menu on the left to go back to the Add or Modify Parental 
Control Entry page:   
z  Click Add New...  button.   
z Enter 00-11-22-33-44-AA in the  MAC Address of Child PC field.   
z Enter “Allow Google” in the  Website Description field.   
z Enter “www.google.com” in the  Allowed Domain Name field.   
z Select “Schedule_1” you create just now from the  Effective Time drop-down list.   
z In  Status  field, select Enable.   
4. Click  Save to complete the settings. 
Then you will go back to the Parental Control Settings page and see t he following list, as 
shown in  Figure 4-44 . 
 
Figure 4-44    Parental Control Settings 
4.11 Access Control 
 
Figure 4-45 Access Control 
There are four submenus under the A ccess Control menu as shown in Figure 4-45: Rule , Host , 
Ta r g e t  and Schedule . Click any of them, and you will be  able to configure the corresponding 
function. 
4.11.1  Rule 
Choose menu “ Access Control  → Rule ”, you can view and set Access Control rules in the 
screen as shown in  Figure 4-46.