Archer 3150
Archer 3150
Archer 3150
User Guide
AC3150 Wireless MU-MIMO Gigabit Router
REV1.0.2 1910011860
Contents
About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
FAQ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
About This Guide
This guide is a complementation of Quick Installation Guide. The Quick Installation
Guide instructs you on quick Internet setup, and this guide provides details of each
function and shows you the way to configure these functions appropriate to your
needs.
When using this guide, please notice that features of the router may vary slightly
depending on the model and software version you have, and on your location, language,
and Internet service provider. All screenshots, images, parameters and descriptions
documented in this guide are used for demonstration only.
Conventions
In this guide, the following conventions are used:
Convention Description
Hyperlinks are in blue italic. You can click to redirect to a website or a specific
Blue Italic
section.
Contents to be emphasized and texts on the web page are in blue, including the
Blue
menus, items, buttons, etc.
The menu structures to show the path to load the corresponding page. For
> example, Advanced > Wireless > MAC Filtering means the MAC Filtering function
page is under the Wireless menu that is located in the Advanced tab.
Note: Ignoring this type of note might result in a malfunction or damage to the device.
Tips: Indicates important information that helps you make better use of your device.
More Info
• The latest firmware and management app can be found at Download Center at http://
www.tp-link.com/support.
• The Quick Installation Guide (QIG) can be found where you find this guide or inside
the package of the router.
• Specifications can be found on the product page at http://www.tp-link.com.
• A Technical Support Forum is provided for you to discuss our products at
http://forum.tp-link.com.
• Our Technical Support contact information can be found at the Contact Technical
Support page at http://www.tp-link.com/support.
1
Chapter 1
1. 1. Product Overview
What This Product Does
TP-LINK’s AC3150 Wireless MU-MIMO Gigabit Router integrates 4-port Switch, Firewall,
NAT-router and Wireless AP. Powered by 4x4 MIMO technology, this router delivers
exceptional range and speed, which can fully meet the need of office/home networks
and the users demanding higher networking performance. Your wireless connections
are radio band selectable to avoid interference in your area, and the four built-in Gigabit
ports supply high-speed connection to your wired devices.
3
Chapter 1 Get to Know About Your Router
This unlocks the full potential of MU-MIMO and 4-Stream technologies, helping your
dual band router maximize its performance potential.
1. 2. Main Features
Wireless and Wired Performance
• Complies with IEEE 802.11ac.
• One 10/100/1000M Auto-Negotiation RJ45 Internet port, four 10/100/1000M Auto-
Negotiation RJ45 Ethernet ports, supporting Auto MDI/MDIX.
• Provides a USB 3.0 port and a USB 2.0 port supporting file sharing and print server.
• Provides WPA/WPA2, WPA-PSK/WPA2-PSK authentication, TKIP/AES encryption
security.
• Shares data and Internet access for users, supporting Dynamic IP/Static IP/PPPoE/
PPTP/ L2TP Internet access.
4
Chapter 1 Get to Know About Your Router
• Supports simultaneous 2.4GHz and 5GHz connections for 3165Mbps of total available
bandwidth.
• Supports Virtual Server, Special Application and DMZ host.
• Supports UPnP, Dynamic DNS, Static Routing.
• Provides Automatic-connection and Scheduled Connection on certain time to the
Internet.
• Built-in NAT and DHCP server supporting static IP address distributing.
• Supports Parental Controls and Access Control.
• Connects Internet on demand and disconnects from the Internet when idle for PPPoE.
• Provides WEP encryption security and wireless LAN ACL (Access Control List).
• Supports Flow Statistics.
• Supports IPv6.
• Supports firmware upgrade and Web management.
• Supports OpenVPN server, PPTP VPN server.
• Supports beamforming technology.
• Supports Airtime Fairness technology.
• Supports MU-MIMO technology.
Note:
Future firmware upgrade is required to enable MU-MIMO technology.
1. 3. Panel Layout
1. 3. 1. Front Panel
5
Chapter 1 Get to Know About Your Router
The router’s LEDs are located on the top panel (view from top to bottom). You can check
the router’s working status by following the LED Explanation table.
LED Explanation
(Internet) Orange The WAN port is connected, but there is no Internet connection.
Note:
After a device is successfully added to the network by WPS function, the WPS LED will keep on for about 5 minutes
and then turn off.
6
Chapter 1 Get to Know About Your Router
1. 3. 2. Back Panel
The router’s back panel shows the connection ports, buttons and antennas (view from
left to right). Refer to the following for detailed instructions.
Item Description
Internet This port is where you will connect the DSL/cable Modem, or Ethernet.
Power For connecting the router to power socket via the provided power adapter.
Power On/Off The switch for the power. Press it to power on or off the router.
Used for wireless operation and data transmit. Upright them for the best Wi-Fi
Antennas
performance.
1. 3. 3. Side Panel
The router’s side panel shows the USB ports and buttons (view from left to right). Refer
to the following for detailed instructions.
7
Chapter 1 Get to Know About Your Router
Item Description
WiFi On/Off For turning on/off the WiFi function.
The switch for the reset function. There are two ways to
reset the router’s factory defaults.
Method one: With the router powered on, press and
hold the Reset button for at least 5 seconds until all
LEDs light on (wireless LEDs may not light on if the WiFi
Reset
on/off button is off ). And then release the button and
wait the router to reboot to its factory default settings.
Method two: Restore the default setting from 13.
4. Backup and Restore Configuration Settings of the
router’s Web-based Management.
8
Chapter 2
Router
1. Install the antennas and position them vertically for best signal reception.
2. Turn off the modem, and remove the backup battery if it has one.
3. Connect the modem to the Internet port on your router with an Ethernet cable.
10
Chapter 2 Connect the Hardware
4. Turn on the modem, and then wait about 2 minutes for it to restart.
5. Turn on the router.
6. Verify that the following LEDs are on and solid before continuing with the
configuration.
Note:
If the 2.4G LED and 5G LED are off, please press the Wi-Fi On/Off button on the side panel for 2 seconds
and check the LEDs again in a few seconds later.
Tips:
For optimum performance, orient the four antennas as shown in the drawing below.
30° 30°
Ethernet Cable
• Method 2: Wirelessly
Connect wirelessly by using the SSID (Network Name) and Wireless Password/PIN
printed on the product label at the bottom of the router.
11
Chapter 2 Connect the Hardware
12
Chapter 3
With a Web-based utility, it is easy to configure and manage the router. The Web-
based utility can be used on any Windows, Macintosh or UNIX OS with a Web browser,
such as Microsoft Internet Explorer, Mozilla Firefox or Apple Safari.
Chapter 3 Log Into Your Router
Note:
If the login window does not appear, please refer to FAQ > Q3. I cannot log into the router’s web management page,
what can I do?
14
Chapter 4
This chapter introduces how to connect your router to the Internet. The router is
equipped with a web-based Quick Setup wizard. It has many ISP information built
in, automates many of the steps and verifies that those steps have been successfully
completed. Furthermore, you can also set up an IPv6 connection if your ISP provides
IPv6 service.
This chapter contains the following sections:
• Quick Setup
• Manually Configure Your Internet Connection Settings
• Setting Up an IPv6 Internet Connection
Chapter 4 Set Up Internet Connection
4. 1. Quick Setup
The Quick Setup Wizard will guide you through the process to set up your router to
access the Internet.
Tips:
If you need the IPv6 Internet connection, please refer to the section of Setting Up an IPv6 Internet Connection.
Follow the steps below to set up your router to access the Internet.
1. Visit http://tplinkwifi.net, and log in with the username and password you set for the
router.
2. Click Quick Setup on the top of the page.
3. Select your Time Zone from the drop-down list and click Next.
4. Click Auto Detect and the router will detect your connection type automatically.
Note:
You can also choose the connection type manually. Contact your ISP if you are not sure about the Internet connection
information.
• If you use DSL line and you are only provided with an account name and a password by your ISP, choose PPPoE.
• If you use cable TV or fiber cable, choose Dynamic IP.
• If you are provided with more information such as IP address, Subnet Mask and Default Gateway, choose Static IP.
5. In this case, the router automatically detects Dynamic IP as the connection type.
Click Next.
16
Chapter 4 Set Up Internet Connection
6. Follow the instructions on the page to decide whether to clone MAC Address. Click
Next.
Note:
1. You may customize your 2.4GHz/5GHz SSID and password. Once done, the wireless connection will disconnect
automatically, and you must then use the new SSID and password to regain access to the Internet.
2. Tick Hide SSID if you want to hide this wireless network name.
17
Chapter 4 Set Up Internet Connection
9. Click Test Internet Connection. If you successfully connect to the Internet, the screen
will display as follows.
10. Now your computer and Wi-Fi devices can connect to the Internet!
Tips:
You can connect your computer to the router’s Etherent port using an Ethernet cable to join the local area network.
You can also find and select the wireless network name on your Wi-Fi device to join the Wi-Fi network.
Note:
If you are unsure of what your connection type is, click Auto Detect. Since different connection types need different
cables and connection information, you can also refer to the demonstrations in Step 4 to judge your connection
type.
2 ) If you choose Static IP, enter the information provided by your ISP in the
corresponding fields.
19
Chapter 4 Set Up Internet Connection
3 ) If you choose PPPoE, enter the username and password provided by your ISP.
PPPoE users usually have DSL cable.
4 ) If you choose L2TP, enter the username and password and choose the Secondary
Connection provided by your ISP. Different parameters are needed according
to the Secondary Connection.
20
Chapter 4 Set Up Internet Connection
5 ) If you choose PPTP, enter the username and password, and choose the
Secondary Connection provided by your ISP. Different parameters are needed
according to the Secondary Connection.
5. Click Save to make the settings take effect. To check your Internet connection, click
Network Map on the left of the page.
Note:
It may take 1-2 minutes to make the settings valid.
6. After the connection succeeds, the screen will display as follows. Here we take
PPPoE as an example.
21
Chapter 4 Set Up Internet Connection
Tips:
1. If you use Dynamic IP and PPPoE and you are provided with any other parameters that are not required on the
page, please go to Advanced > Network > Internet to complete the configuration.
2. If you still cannot connect to the Internet, refer to FAQ for further instructions.
22
Chapter 4 Set Up Internet Connection
Tips:
If you do not know what your Internet connection type is, contact your ISP or judge according to the already known
information provided by your ISP.
23
Chapter 4 Set Up Internet Connection
2 ) Dynamic IP: Click Advanced to have more configuration if your ISP requires.
Click Save to save the settings.
3 ) PPPoE: Fill in the Username and Password. Click Advanced to have more
configuration if your ISP requires. Click Save to save the settings.
24
Chapter 4 Set Up Internet Connection
5. Configure the IPv6 LAN settings. Leave the settings as default, and click Save.
Tips:
Find Help on the management interface to know more about items.
25
Chapter 4 Set Up Internet Connection
6. Click Status to check whether you succeed or not. The following figure is an example
of a successful PPPoE configuration.
Tips:
Visit FAQ if there is no Internet connection.
26
Chapter 5
Guest Network
This function allows you to provide Wi-Fi access for guests without disclosing your
main network. When you have guests in your house, apartment, or workplace, you can
create a guest network for them. In addition, you can customize guest network options
to ensure network security and privacy.
This chapter contains the following sections:
• Create a Network for Guests
• Customize Guest Network Options
Chapter 5 Guest Network
4. Click Save. Now your guests can access your guest network using the SSID and
password you set!
Tips:
To view guest network information, go to Advanced > Status and locate the Guest Network section.
28
Chapter 5 Guest Network
29
Chapter 6
USB Settings
This chapter describes how to share and access USB devices connected to the router
among different clients.
The router only supports USB external flash drives, hard drives and USB printers.
This chapter contains the following sections:
• Local Storage Sharing
• Remote Access via FTP Server
• Media Sharing
• Printer Sharing
Chapter 6 USB Settings
Windows
computer
31
Chapter 6 USB Settings
¾¾ Method 2:
Open the Windows Explorer (or go to Computer) and type the
server address \\tplinkwifi.net or ftp://tplinkwifi.net in the address
bar, then press [Enter].
Windows
computer
Mac
4 ) When prompted, select the Guest radio box. (If you have set up
a username and a password to deny anonymous access to the
USB disks, you should select the Registered User radio box. To
learn how to set up an account for the access, refer to To Set up
Authentication for Data Security.)
Tips:
You can also access your USB disk by using your Network/Media Server Name as the server address. Refer to To
Customize the Address of the USB Disk to learn more.
32
Chapter 6 USB Settings
3. Select the Volume Name and Folder Path, then enter a Folder Name as you like.
4. Decide the way you share the folder:
• Enable Authentication: If you tick this check box, you will be required to use a
username and password to access the folder. Refer to To Set up Authentication
for Data Security to learn more.
• Enable Write Access: If you tick this check box, network clients can modify the
folder.
• Enable Media Sharing: If you tick this check box, you can view photos, play
music and watch movies in the folder directly from DLNA-supported devices.
Click Media Sharing to learn more.
5. Click OK.
33
Chapter 6 USB Settings
Tips:
The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do
not need to share.
3. Choose Use Default Account (admin) or Use New Account and click Save.
4. Enable Authentication to apply the account you just set.
• If you leave Share All enabled, click the button to enable Authentication for all
folders.
34
Chapter 6 USB Settings
Note:
Due to Windows credential mechanism, you might be unable to access the USB disk after changing Authentication
settings. Please log out from Windows and try to access again. For more details, refer to “Q6. What can I do if I cannot
access the USB disk after I modify the Authentication settings?”
35
Chapter 6 USB Settings
4. Now you can access the USB disk by visiting \\My-Share (for Windows) or smb://
My-Share (for Mac).
36
Chapter 6 USB Settings
37
Chapter 6 USB Settings
38
Chapter 6 USB Settings
Computer
Tips:
Click Set Up a Dynamic DNS Service Account to learn how to set up a domain name for you router.
39
Chapter 6 USB Settings
3. Select the Volume Name and Folder Path, then specify the Folder Name as you like.
4. Tick Enable Authentication. If you allow network clients to modify this folder, tick
Enable Write Access.
5. Click OK.
Tips:
The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do
not need to share.
6. 3. Media Sharing
The Media Sharing feature allows you to view photos, play music and watch movies
stored on the USB disk directly from DLNA-supported devices, such as your computer,
pad and PS2/3/4.
40
Chapter 6 USB Settings
• Go to Computer > Network, then click the Media Server Name (Archer_C3150 by
default) in the Media Devices section.
Note:
Here we take Windows 7 as an example.
Windows
computer
41
Chapter 6 USB Settings
4. Select the Volume Name and Folder Path, then enter a Folder Name as you like.
5. Tick Enable Media Sharing and click OK.
Tips:
The router can share 32 volumes at most. You can click on the page to detach the corresponding volume you do
not need to share.
42
Chapter 6 USB Settings
6. 4. Printer Sharing
The Printer Sharing feature helps you share a printer with different computers connected
to the router.
Note:
Printers unlisted on this page may be incompatible with the router:
http://www.tp-link.com/common/compatible/print-server/.
43
Chapter 6 USB Settings
3 ) Open the uncompressed folder, then click TP-LINK USB Printer Controller Setup
(for Windows users) or TP-Link UDS Printer Controller Installer (for Mac users) to
install the utility.
4. Access the Printer
You should set the shared printer as Auto-Connect Printer on every computer that
needs printer service.
1 ) Double-click the icon on your desktop to launch the USB Printer Controller.
2 ) Highlight the printer you share.
Windows
Mac
3 ) Click the Auto-Connect for printing tab to pull down a list, then select Set Auto-
Connect Printer.
Windows
44
Chapter 6 USB Settings
Mac
4 ) Select the printer you share, then click Apply.
Windows
45
Chapter 6 USB Settings
Mac
5 ) You will see the printer marked as Auto-Connect Printer. Now you can print
with this printer.
Windows
Mac
Tips:
The Print Server also allows different clients to share the scan feature of MFPs (Multi-Function Printers). To
scan with TP-LINK USB Printer Controller, right-click the printer and select Network Scanner. Then, a scanning
window will pop up. Finish the scanning process by following on-screen instructions.
46
Chapter 7
Parental Controls
This function allows you to block inappropriate, explicit and malicious websites, and
control access to specified websites at specified time.
Chapter 7 Parental Controls
I want to: Control the times of day my children or other home network
users are allowed to access the Internet and even types of
websites they can visit.
For example, I want to allow my children’s devices (such as
a computer or a tablet) to access only www.tp-link.com and
Wikipedia.org from 18:00 (6PM) to 22:00 (10PM) on weekdays
and not other time.
How can I 1. Visit http://tplinkwifi.net, and log in with the username and
do that? password you set for the router.
2. Go to Basic or Advanced > Parental Controls and enable
Parental Controls.
3. Click Add.
48
Chapter 7 Parental Controls
9. Click Add a New Keyword. You can add keywords for both
Blacklist and Whitelist. Below are some sample entries to
allow access.
1 ) Enter a web address (such as www.tp-link.com) or a web
address keyword (such as wikipedia) to only allow or
block access to the websites containing that keyword.
49
Chapter 7 Parental Controls
50
Chapter 8
Bandwidth Control
This feature is used to fully utilize your limit bandwidth and optimize the load
respectively.
With this feature enabled, you can assign a specific minimum or maximum bandwidth
for each computer, thus minimizing the impact caused when the connection is under
heavy load.
Chapter 8 Bandwidth Control
Tips: To use the bandwidth control feature, you’d better set static IP
Address on each computer to be controlled or configure Address
reservation on the router in order to manage easily. About how
to configure address reservation, please refer to To reserve an IP
address for a specified client device.
How can I 1. Visit http://tplinkwifi.net, and log in with the username and
do that? password you set for the router.
2. Go to Advanced > Bandwidth Control page.
52
Chapter 8 Bandwidth Control
53
Chapter 8 Bandwidth Control
54
Chapter 9
Network Security
This chapter guides you on how to protect your home network from cyber attacks
and unauthorized users by implementing these three network security functions. You
can protect your home network against DoS (Denial of Service) attacks from flooding
your network with server requests using DoS Protection, block or allow specific client
devices to access your network using Access Control, or you can prevent ARP spoofing
and ARP attacks using IP & MAC Binding.
This chapter contains the following sections:
• Protect the Network from Cyber Attacks
• Access Control
• IP & MAC Binding
Chapter 9 Network Security
56
Chapter 9 Network Security
5. If you want to ignore the ping packets from the WAN port, select Forbid Wan Ping;
if you want to ignore the ping packets form the LAN port, select Forbid Lan Ping.
6. Click Save to make the settings effective.
9. 2. Access Control
Access Control is used to block or allow specific client devices to access your network
(via wired or wireless) based on a list of blocked devices (Blacklist) or a list of allowed
devices (Whitelist).
I want to: Block or allow specific client devices to access my network (via
wired or wireless).
How can I 1. Visit http://tplinkwifi.net, and log in with the username and
do that? password you set for the router.
2. Go to Advanced > Security > Access Control.
3. Enable Access Control.
57
Chapter 9 Network Security
Done! Now you can block or allow specific client devices to access your
network (via wired or wireless) using the Blacklist or Whitelist.
How can I 1. Visit http://tplinkwifi.net, and log in with the username and
do that? password you set for the router.
2. Go to Advanced > Security > IP & MAC Binding.
3. Enable IP & MAC Binding.
59
Chapter 9 Network Security
60
Chapter 10
NAT Forwarding
Router’s NAT (Network Address Translation) feature makes the devices in the LAN
use the same public IP address to communicate on the Internet, which protects the
local network by hiding IP addresses of the devices. However, it also brings about the
problem that external host cannot initiatively communicate with the specified device
in the local network.
With forwarding feature the router can penetrate the isolation of NAT and allows the
external hosts on the Internet to initiatively communicate with the devices in the local
network, thus to realize some special functions.
TP-LINK router includes four forwarding rules. If two or more rules are set, the priority
of implementation from high to low is Virtual Servers, Port Triggering, UPNP and DMZ.
This chapter contains the following sections:
• Share Local Resources on the Internet by Virtual Servers
• Open Ports Dynamically by Port Triggering
• Make Applications Free from Port Restriction by DMZ
• Make Xbox Online Games Run Smoothly by UPnP
Chapter 10 NAT Forwarding
I want to: Share my personal website I’ve built in local network with my
friends through the Internet.
For example, the personal website has been built on my home
PC (192.168.0.100). I hope that my friends on the Internet can
visit my website in some way. The PC is connected to the router
with the WAN IP address 218.18.232.154.
INTERNET
62
Chapter 10 NAT Forwarding
Tips:
1. It is recommended to keep the default settings of Internal Port and Protocol if you
are not clear about which port and protocol to use.
2. If the service you want to use is not in the Service Type, you can enter the
corresponding parameters manually. You should verify the port number that the
service needs.
3. You can add multiple virtual server rules if you want to provide several services in
a router. Please note that the External Port should not be overlapped.
Done! Users on the Internet can enter http:// WAN IP (in this example:
http:// 218.18.232.154) to visit your personal website.
Tips:
1. WAN IP should be a public IP address. For the WAN IP is assigned dynamically by
ISP, it is recommended to apply and register a domain name for the WAN refer to
12. 4. Set Up a Dynamic DNS Service Account. Then users on the Internet can use
http:// domain name to visit the website.
2. If you have changed the default External Port, you should use http:// WAN IP:
External Port or http:// domain name: External Port to visit the website.
2. Go to Advanced > NAT Forwarding > Port Triggering and click Add.
3. Click View Existing Applications, and select the desired application. The External Port,
Internal Port and Protocol will be automatically filled with contents. The following
picture takes application MSN Gaming Zone as an example.
4. Click OK.
Tips:
1. You can add multiple port triggering rules according to your network need.
2. The triggering ports can not be overlapped.
3. If the application you need is not listed in the Existing Applications list, please enter the parameters manually.
You should verify the external ports the application uses first and enter them into External Port field according
to the format the page displays.
64
Chapter 10 NAT Forwarding
Note:
When DMZ is enabled, the DMZ host is totally exposed to the Internet, which may bring some potential safety
hazard. If DMZ is not in use, please disable it in time.
I want to: Make the home PC join the Internet online game without port
restriction.
For example, due to some port restriction, when playing the
online games, you can login normally but cannot join a team
with other players. To solve this problem, set your PC as a DMZ
with all ports opened.
5. Click Save.
Done! The configuration is completed. You’ve set your PC to a DMZ
host and now you can make a team to game with other players.
65
Chapter 10 NAT Forwarding
Tips:
1. UPnP is enabled by default in this router.
2. Only the application supporting UPnP protocol can use this feature.
3. UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of
operating system need to install the UPnP components).
For example, when you connect your Xbox to the router which has connected to
the Internet to play online games, UPnP will send request to the router to open the
corresponding ports allowing the following data penetrating the NAT to transmit.
Therefore, you can play Xbox online games without a hitch.
XBOX Router
If necessary, you can follow the steps to change the status of UPnP.
1. Visit http://tplinkwifi.net, and log in with the username and password you set for the
router.
2. Go to Advanced > NAT Forwarding > UPnP and toggle on or off according to your
needs.
66
Chapter 11
VPN Server
The VPN (Virtual Private Networking) Server allows you to access your home network in
a secured way through Internet when you are out of home. The router offers two ways
to setup VPN connection: OpenVPN and PPTP (Point to Point Tunneling Protocol) VPN.
OpenVPN is somewhat complex but with greater security and more stable. It is suitable
for restricted environment, such as campus network and company intranet.
PPTP VPN is more easily used and its speed is faster, it’s compatible with most operating
systems and also supports mobile devices. Its security is poor and your packets may be
cracked easily, and PPTP VPN connection may be prevented by some ISP.
This chapter contains the following sections, please choose the appropriate VPN server
connection type according to your needs.
• Use OpenVPN to Access Your Home Network
• Use PPTP VPN to Access Your Home Network
Chapter 11 VPN Server
Note:
1. Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a
static IP address for router’s WAN port and synchronize your System Time with Internet.
2. The first time you configure the OpenVPN Server, you may need to Generate a certificate before you enable the
VPN Server.
3. Select the Servive Type (communication protocol) for OpenVPN Server: UDP, TCP.
4. Enter a VPN Service Port to which a VPN client connects, and the port number should
be between 1024 and 65535.
5. In VPN Subnet/Netmask field, enter the range of IP addresses that can be leased to
the client by the OpenVPN server.
6. Select your Client Access type., select Home Network Only if you only want the
remote client to access your home network, select Internet and Home Network if
the remote client also want to access Internet through VPN Server.
68
Chapter 11 VPN Server
7. Click Save.
8. Click Generate to generate a new certificate.
Note:
If you have already generated one, please skip this step, or click Generate to update the certificate.
9. Click Export to save the OpenVPN configuration file. Remote client will use this
configuration file to access your router.
2. After the installation, copy the file exporting from your router to OpenVPN client
utility’s “config” folder (for Windows): C:\Program Files\OpenVPN\config. The path is
depending on where the OpenVPN client utility is installed on.
3. Run the OpenVPN client utility and connect it to OpenVPN Server.
69
Chapter 11 VPN Server
Note:
Before you enable VPN Server, we recommend you configure Dynamic DNS Service (recommended) or assign a
static IP address for router’s WAN port and synchronize your System Time with Internet.
3. In the Client IP Address filed, enter the range of IP addresses (up to 10 clients) that
can be leased to the client by the PPTP VPN server.
4. Enter the Username and Password to authenticate clients to the PPTP VPN server.
5. Click Save.
70
Chapter 11 VPN Server
71
Chapter 11 VPN Server
5. Enter the WAN IP address of the router (for example: 218.18.1.73) in the Internet
address field. Click Next.
6. Enter the User name and Password, it’s the username and password you have set on
your router, and click Connect.
72
Chapter 11 VPN Server
73
Chapter 12
4. Keep IGMP Snooping as enabled by default. IGMP Snooping is the process of listening
to IGMP (Internet Group Management Protocol) network traffic. The function
prevents hosts on a local network from receiving traffic for a multicast group they
have not explicitly joined.
5. Click Save.
Note:
If you have set the Virtual Server, DMZ or DHCP address reservation, and the new LAN IP address is not in the same
subnet with the old one, then you should reconfigure them.
75
Chapter 12 Customize Your Network Settings
How can 1. Visit http://tplinkwifi.net, and log in with the username and
I do that? password you set for the router.
2. Go to Advanced > Network > IPTV.
3. Configure IPTV settings:
76
Chapter 12 Customize Your Network Settings
77
Chapter 12 Customize Your Network Settings
2. Enter the MAC address of the device for which you want to reserve IP address.
3. Specify the IP address which will be reserved by the router.
4. Enter the Description for the rule.
5. Tick the Enable This Entry checkbox and click OK.
Note:
You can also appoint IP addresses within a specified range to devices of the same type by using Condition Pool
feature. For example, you can assign IP addresses within the range (192.168.0.50 to192.168.0.80) to Camera devices,
thus facilitating the network management.
78
Chapter 12 Customize Your Network Settings
4. Enter the username, password and domain name of the account (such as example.
ddns.net).
5. Click Login, then click Save.
Tips:
If you want to use a new DDNS account, please Logout first, then login with the new account.
I want to: Visit multiple networks and multiple servers at the same time.
For example, in a small office, my PC can surf the Internet, but I
also want to visit my company’s network. Now I have a switch and
another router. I connect the devices as shown in the following
figure so that the physical connection between my PC and my
company’s server is achieved. To surf the Internet and visit my
company’s network at the same time, I need to configure the
static routing.
Router 1 Router 2 PC 1
WAN: 172.30.30.100
PC 2
192.168.0.100
79
Chapter 12 Customize Your Network Settings
Done! Open a web browser on your PC. Enter the company server’s IP
address to visit the company network.
81
Chapter 12 Customize Your Network Settings
Note:
If you use a wireless device to change the wireless settings, you will be disconnected when the settings are effective.
Please write down the new SSID and password for future use.
82
Chapter 12 Customize Your Network Settings
Note:
1. If you want to enable/disable the WPS feature, go to Advanced > System Tools > System Parameters > WPS, select
or clear the Enable WPS check box.
2. PIN (Personal Identification Number) is an eight-character identification number preset to each router. WPS
supported devices can connect to your router with the PIN. The default PIN is labeled on the bottom of the router.
84
Chapter 12 Customize Your Network Settings
2. Success will appear on the above screen and the WPS LED on the router will keep on
for five minutes if the client has been successfully added to the network.
4. Set the Effective Time. Drag the cursor over the cells to choose the period during
which you need the wireless off automatically, and click OK.
85
Chapter 12 Customize Your Network Settings
5. Click Save.
6. If you also want to set wireless off time for the other band, please repeat the steps
above.
Note:
1. The Effective Time Schedule is based on the time of the router. You can go to Advanced > System Tools > Time
Settings to modify the time.
2. The wireless LED will be off if the corresponding wireless network is disabled.
3. The wireless network will be automatically turned on after the time period you set.
86
Chapter 12 Customize Your Network Settings
I want to: Establish an IPSec VPN tunnel to connect two LANs via Internet so
that the hosts in different remote LANs are able to communicate
with each as if they are in the same LAN.
For example, I am the network administrator of a regional office,
I need to let my office staff can visit the headquarter’s servers
and resources, and vice versa. I know that the router in my office
and the device in headquarter both support IPSec VPN feature,
so I decide to set up a VPN connection with the headquarter
office.
The following diagram is a typical VPN topology. Here Site A
refers to regional office’s network (local network). And Site B
refers to the headquarter’s network (remote network) which I
want to connect.
Site A Site B
PC 1 PC 2
How can I 1. Make sure of the topology you want to build and record site
do that? A (local network) and site B (remote network)’s LAN IP and
WAN IP.
2. Configuration on site A (local network).
1 ) Visit http://tplinkwifi.net, and log in with the username
and password you set for the router.
2 ) Go to Advanced > Network > IPSec VPN to open the
configuration page. Click Add to set up a VPN tunnel.
87
Chapter 12 Customize Your Network Settings
88
Chapter 12 Customize Your Network Settings
89
Chapter 12 Customize Your Network Settings
Note:
1. The product supports a maximum of ten simultaneous connections.
2. If one of the site has been off line for a while, for example, if Site A has been disconnected, on Site B you need to
click Disable and then click Enable after Site A back on line in order to re-establish the IPSec tunnel.
90
Chapter 13
This chapter will show you the configuration for managing and maintaining your router.
This chapter includes the following sections:
• Set Up System Time
• Test the Network Connectivity
• Upgrade the Firmware
• Backup and Restore Configuration Settings
• Change the Administrator Account
• Local Management
• Remote Management
• System Log
• SNMP Settings
• Monitor the Internet Traffic Statistics
• Control LEDs
Chapter 13 Manage the Router
92
Chapter 13 Manage the Router
The figure below indicates the proper connection between the router and the Yahoo
server (www.Yahoo.com) tested through ping.
The figure below indicates the proper connection between the router and the Yahoo
server (www.Yahoo.com) tested through traceroute.
93
Chapter 13 Manage the Router
94
Chapter 13 Manage the Router
95
Chapter 13 Manage the Router
Note:
1. During the resetting process, do not turn off or reset the router.
2. We strongly recommend you backup the current configuration settings before resetting the router.
3. Enter the old username and old password. Enter the new username and enter the
new password twice (both case-sensitive). Click Save.
4. Use the new username and password for the following logins.
Note:
1. The IP address of the local device must be in the same subnet as the router’s LAN IP address.
2. If you want that all local devices can manage the router, just leave the IP/MAC Address field blank.
4. Click Save to make the settings effective. Now only the device using the IP address or
MAC address you set can manage the router.
97
Chapter 13 Manage the Router
• Save Locally: Select this option to cache the system log to the router’s local memory,
select the minimum level of system log to be saved from the drop-down list. The logs
will be shown in the table in descending order on the System Log page.
• Save Remotely: Select this option to send the system log to a remote server, select
the minimum level of system log to be saved from the drop-down list and enter the
information of the remote server. If the remote server has a log viewer client or a
sniffer tool implemented, you can view and analyze the system log remotely in real-
time.
99
Chapter 13 Manage the Router
• Enable SNMP Agent: Toggle On to enable the built-in SNMP agent that allows
the router to operate as the operational role in receiving and processing of SNMP
messages, sending responses to the SNMP manager, and triggering SNMP traps
when an event occurs.
• Read-only Community: Displays the default public community string that protects
the router from unauthorized access.
• Write Community: Displays the default read and write community string that protects
the router from unauthorized changes.
• System Name: Displays the administratively-assigned name for this managed device.
• System Description: Displays the textual description of the managed device. This
value should include the full name and version identification of the system’s hardware
type, software operating-system, and networking software.
• System Location: Displays the physical location of this device (e.g., telephone closet,
3rd floor).
• System Contact: Displays the textual identification of the contact person for this
managed device, together with information on how to contact this person.
• Trap Manager IP: Displays the IP address of the host to receive the traps.
You are suggested to keep the default settings. Click Save to make the settings effective.
101
Chapter 13 Manage the Router
4. Specify the Period of Night Mode according to your need, and the LEDs will be off
during this period.
5. Click Save to make the settings effective.
102
FAQ
Q1. What can I do if I forgot my wireless password?
If it is your first time to connect the wireless network, use the password labeled at the
bottom of the router. If the password has been altered, please connect the router to the
computer using a cable and follow the steps below:
1. Visit http://tplinkwifi.net.
2. Go to Advanced > Wireless > Wireless Settings, locate the password , and mark down
your new password for future use.
Q2. How to retrieve the default username and password of the web
management page (without resetting the router) ?
The default username and password of the web management page are admin (in lower
case).
If you have altered the username and password:
1. Reset the router to factory default settings.
2. Visit http://tplinkwifi.net, enter admin (in lower case) as both username and password
to login.
Note: You’ll need to reconfigure the router to surf the Internet once the router is reset, and please mark down your
new password for future use.
Q3. I cannot log into the router’s web management page, what can I do?
This can happen for a variety of reasons, please try the methods below to login again.
• Make sure the router connect to the computer correctly and the corresponding LED
indicator(s) light up.
• Make sure the IP address of your computer is configured as Obtain an IP address
automatically and Obtain DNS server address automatically.
• Make sure you enter the correct IP address to login: http://tplinkwifi.net.
• Check your computer’s settings:
1 ) Go to Start > Control Panel > Network and Internet, and click View network
status and tasks.
2 ) Click Internet Options on the bottom left.
3 ) Click Connections and select Never dial a connection.
103
4 ) Click LAN settings and deselect the following three options and click OK.
104
• Use another web browser or computer to login again.
• Reset the router to factory default settings and try again. If login still fails, please
contact the technical support.
Note: You’ll need to reconfigure the router to surf the Internet once the router is reset.
105
• Your computer might not recognize any DNS server addresses, please manually
configure DNS server.
1 ) Go to Advanced > Network > DHCP Server.
2 ) Enter 8.8.8.8 as Primary DNS, click Save.
Tips: 8.8.8.8 is a safe and public DNS server operated by Google.
• Make sure the physical connection between the router and the modem is proper
• Clone the MAC address of your computer.
1 ) Visit http://tplinkwifi.net, and log in with the username and password you set
for the router.
2 ) Go to Advanced > Network > Internet and focus on the MAC Clone section.
3 ) Choose an option to your need (Enter the MAC address if Use Custom MAC
Address is selected), and click Save.
Tips:
• Some ISP will register the MAC address of your computer when you access the Internet for the first time
through their Cable modem, if you add a router into your network to share your Internet connection, the
ISP will not accept it as the MAC address is changed, so we need to clone your computer’s MAC address to
the router.
• The MAC addresses of a computer in wired connection and wireless connection are different.
107
• Modify the LAN IP address of the router.
Note:
Most TP-LINK routers use 192.168.0.1/192.168.1.1 as their default LAN IP address, it may conflict with the IP
range of your existent ADSL modem/router. If so, the router is not able to communicate with your modem
and cause you can’t access the Internet. To resolve this problem, we need to change the LAN IP address of the
router to avoid such conflict, for example, 192.168.2.1.
1 ) Visit http://tplinkwifi.net, and log in with the username and password you’ve set
for the router.
2 ) Go to Advanced > Network > LAN.
3 ) Modify the LAN IP address as the follow picture shows. Here we take 192.168.2.1
as an example.
4 ) Click Save.
108
6 ) Power cycle the modem and the TP-LINK router again.
• Please refer to Upgrade the Firmware to upgrade the firmware of the router.
If you’ve tried every method above but cannot access the Internet, please contact the
technical support.
If you can find your wireless network but fail to connect, please follow the steps
below:
• Authenticating problem/password mismatch:
1 ) Sometimes you will be asked to type in a PIN number when you connect to
the wireless network for the first time. This PIN number is different from the
110
Wireless Password/Network Security Key, usually you can only find it on the
back of your wireless router.
2 ) If you cannot find the PIN or PIN failed, you may choose Connecting using a
security key instead, and then type in the Wireless Password/Network Security
Key.
3 ) If it continues to show note of Network Security Key Mismatch, it is suggested
to confirm the wireless password of your wireless router.
Note: Wireless Password/Network Security Key is case sensitive.
• Windows unable to connect to XXXX / Can not join this network / Taking longer
than usual to connect to this network:
• Check the wireless signal strength of your network, if it is weak (1~3 bars),
please move the router closer and try again.
• Change the wireless Channel of the router to 1,6,or 11 to reduce interference
from other networks.
• Re-install or update the driver for your wireless adapter of the computer.
Q6. What can I do if I cannot access the USB disk after I modify the
Authentication settings?
This situation probably happens on your Windows computer due to its special
credential mechanism. Once you successfully access the USB disk, the connection will
be temporarily recorded and you will be refused to access the USB disk with another
account.
You can follow either method below to solve this problem:
• Method 1: Log off (sign out) from the Windows to delete the temporary connection
record.
• Method 2: (Only for Local Storage Sharing) Change the Address of the USB Disk by
referring to To Customize the Address of the USB Disk.
111
Q7. What can I do if I am still required to enter the password for USB
access even though I have selected Remember my credentials in my
Windows computer?
Because of Windows special credential mechanism, if the USB access username you set
is the same as the Windows account name, Windows will be unable to remember the
password you set for the USB.
To solve this problem, you can set a different USB access username or make the USB
access password the same as your Windows account. After you modify the access
account, remember to log off (sigh out) from the Windows.
Q8. Why am I never required to enter the account information for USB
access even though I have enabled the Authentication feature?
This situation probably happens to your Windows computer due to its special credential
mechanism. If your USB access username and password are both the same as your
Windows account, the Windows will automatically use its account information to access
the USB disk. Therefore, you will have no need to enter the username and password.
112
Specifications
HARDWARE FEATURES
4 10/100/1000Mbps LAN Ports,
Interfaces 1 10/100/1000Mbps WAN Port
1 USB 3.0 Port + 1 USB 2.0 Port
WPS Button, Reset Button, Wireless On/Off Button,
Button
LED On/Off Button, Power On/Off Button
Antenna 4 Detachable Antennas
External Power Supply 12V/5A
Dimensions ( W x D x H ) 10.4×7.8×1.5 in. (263.8×197.8×37.3mm)
WIRELESS FEATURES
IEEE 802.11ac/n/a 5GHz
Wireless Standards
IEEE 802.11b/g/n 2.4GHz
Frequency 2.4GHz and 5GHz
Signal Rate 2167Mbps at 5GHz, 1000Mbps at 2.4GHz
5GHz: 11a 6Mbps: -91dBm
11a 54Mbps: -72dBm
11n HT20: -70dBm
11n HT40: -69dBm
11ac HT20: -60dBm
Reception Sensitivity
11ac HT40: -61dBm
11ac HT80: -56dBm
2.4GHz: 11g 54Mbps: -73dBm
11n HT20: -72dBm
11n HT40: -69dBm
Enable/Disable Wireless Radio, WMM,
Wireless Functions
Wireless Statistics
64/128-bit WEP, WPA/WPA2, WPA-PSK/WPA-PSK2
Wireless Security
encryptions
CE: <20dBm(2.4GHz), <23dBm(5GHz)
Transmission Power
FCC: <30dBm
Guest Network 2.4GHz guest network x 1, 5GHz guest network x 1
SOFTWARE FEATURES
Quality of Service WMM, Bandwidth Control
Dynamic IP/Static IP/PPPoE/
WAN Type
PPTP(Dual Access)/L2TP(Dual Access) /Bigpond
Management Access Control, Local Management, Remote Management
DHCP Server, Client, DHCP Client List, Address Reservation
113
Port Forwarding Virtual Server, Port Triggering, UPnP, DMZ
Dynamic DNS DynDns, Comexe, NO-IP
VPN Pass-Through PPTP, Open VPN
Parental Controls, Local Management Control,
Access Control
Host list, Access Schedule, Rule Management
Protocols Supports IPv4 and IPv6
Support Samba(Storage)/FTP Server/Media Server/
USB Sharing
Printer Server
OTHERS
Certification CE, FCC, RoHS
Operating Temperature: 0°C~40°C (32°F ~104°F)
Storage Temperature: -40°C~70°C (-40°F ~158°F)
Environment
Operating Humidity: 10%~90% non-condensing
Storage Humidity: 5%~90% non-condensing
114
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered
trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are
trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or
used to make any derivative such as translation, transformation, or adaptation
without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2016 TP-LINK
TECHNOLOGIES CO., LTD. All rights reserved.
115
FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class B
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on,
the user is encouraged to try to correct the interference by one or more of the following
measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
• Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions:
1 ) This device may not cause harmful interference.
2 ) This device must accept any interference received, including interference that
may cause undesired operation.
Any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
Note: The manufacturer is not responsible for any radio or TV interference caused by
unauthorized modifications to this equipment. Such modifications could void the
user’s authority to operate the equipment.
116
CE Mark Warning
This is a class B product. In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
RF Exposure Information
This device meets the EU requirements (1999/5/EC Article 3.1a) on the limitation of
exposure of the general public to electromagnetic fields by way of health protection.
The device complies with RF specifications when the device used at 20 cm from your
body.
National Restrictions
Restricted for indoor use.
117
Caution:
1 ) The device for operation in the band 5150–5250 MHz is only for indoor use
to reduce the potential for harmful interference to co-channel mobile satellite
systems;
2 ) For devices with detachable antenna(s), the maximum antenna gain permitted
for devices in the band 5725-5850 MHz shall be such that the equipment still
complies with the e.i.r.p. limits specified for point-to-point and non-point-to-
point operation as appropriate; and
The high-power radars are allocated as primary users (i.e. priority users) of the bands
5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference
and/or damage to LE-LAN devices.
Avertissement:
1 ) Le dispositif fonctionnant dans la bande 5150-5250 MHz est réservé
uniquement pour une utilisation à l’intérieur afin de réduire les risques de
brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes
canaux;
2 ) Le gain maximal d’antenne permis pour les dispositifs avec antenne(s)
amovible(s) utilisant la bande 5725-5850 MHz doit se conformer à la limitation
P.I.R.E spécifiée pour l’exploitation point à point et non point à point, selon le
cas.
En outre, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de
haute puissance sont désignés utilisateurs principaux (c.-à-d., qu’ils ont la priorité) pour
les bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer du
brouillage et/ou des dommages aux dispositifs LAN-EL.
Les produits utilisant la technique d’atténuation DFS (sélection dynamique des
fréquences) sur les bandes 5250- 5350 MHz, 5470-5600MHz et 5650-5725MHz.
118
Korea Warning Statements
당해 무선설비는 운용중 전파혼신 가능성이 있음.
NCC Notice:
注意!
依據 低功率電波輻射性電機管理辦法
第十二條 經型式認證合格之低功率射頻電機,非經許可,公司、商號或使用者均
不得擅自變更頻率、加大功率或變更原設計之特性或功能。
第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通行;經發現有干
擾現象時,應立即停用,並改善至無干擾時方得繼續使用。前項合法通信,指依
電信規定作業之無線電信。低功率射頻電機需忍受合法通信或工業、科學以及醫
療用電波輻射性電機設備之干擾。
BSMI Notice:
• 安全諮詢及注意事項
• 請使用原裝電源供應器或只能按照本產品注明的電源類型使用本產品。
• 清潔本產品之前請先拔掉電源線。請勿使用液體、噴霧清潔劑或濕布進行
清潔。
• 注意防潮,請勿將水或其他液體潑灑到本產品上。
• 插槽與開口供通風使用,以確保本產品的操作可靠並防止過熱,請勿堵塞
或覆蓋開口。
• 請勿將本產品置放於靠近熱源的地方。除非有正常的通風,否則不可放在
密閉位置中。
• 請不要私自打開機殼,不要嘗試自行維修本產品,請由授權的專業人士進
行此項工作。
119
Safety Information
• When product has power button, the power button is one of the way to shut off the
product; when there is no power button, the only way to completely shut off power
is to disconnect the product or the power adapter from the power source.
• Don’t disassemble the product, or make repairs yourself. You run the risk of electric
shock and voiding the limited warranty. If you need service, please contact us.
• Avoid water and wet locations.
• Adapter shall be installed near the equipment and shall be easily accessible.
• The plug considered as disconnect device of adapter.
• Use only power supplies which are provided by manufacturer and in the
original packing of this product. If you have any questions, please don’t hesitate to
contact us.
AT BE BG CH CY CZ DE DK
EE ES FI FR GB GR HR HU
IE IS IT LI LT LU LV MT
NL NO PL PT RO SE SI SK
120