TP-Link SafeStream TL-ER6020 User manual

Installation Guide
TL-ER6020
Enterprise Networking Solution
Gigabit Dual-WAN VPN Router

I

Specifications are subject to change without notice. is a registered trademark
of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks of their
respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make
any derivative such as translation, transformation, or adaptation without permission from
TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2012 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com

This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case
the user will be required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two
conditions:
This device may not cause harmful interference.1)
This device must accept any interference received, including interference that may cause2)
undesired operation.
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user’s authority to operate the equipment.

This is a class A product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
Copyright & Trademarks

II

The User Guide of this product is provided in the resource CD. To obtain the latest
product information, please visit the Official Website:
http://www.tp-link.com

This Installation Guide describes the hardware characteristics, installation methods
and the points that should be attended to during installation. This Installation
Guide is structured as follows:
Chapter 1 Introduction. This chapter describes the External Components of
the Router.
Chapter 2 Installation. This chapter illustrates how to install the Router.
Chapter 3 Lightning Protection. This chapter illustrates how to prevent
lightning damage.
Chapter 4 Connection. This chapter illustrates how to do the physical connec-
tion of the Router.
Chapter 5 Configuration. This chapter illustrates how to login and set up the
Router.
Appendix A Troubleshooting.
Appendix B Hardware Specifications.
Appendix C Technical Support.

This Installation Guide is for:
Network Engineer
Network Administrator

This Guide uses the specific formats to highlight special messages. The following
table lists the notice icons that are used throughout this guide.
Remind to be careful. A caution indicates a potential which may result in
device damage.
Remind to take notice. The note contains the helpful information for a
better use of the product.
Related Document

III

Contents
Chapter 1 Introduction ——————————— 01
1.1 Product Overview...................................................................01
1.2 Appearance...............................................................................01
Chapter 2 Installation ———————————— 03
2.1 Package Contents ...................................................................03
2.2 Safety Precautions ..................................................................03
2.3 Installation Tools......................................................................05
2.4 Product Installation................................................................06
Chapter 3 Lightning Protection ———————— 08
3.1 Cabling Reasonably................................................................08
3.2 Connect to Ground.................................................................10
3.3 Equipotential Bonding..........................................................11
3.4 Use Lightning Arrester..........................................................12
Chapter 4 Connection ——————————— 14
4.1 WAN Port....................................................................................14
4.2 LAN Port .....................................................................................14
4.3 Console Port..............................................................................14
4.4 Verify Installation ....................................................................15
4.5 Power On....................................................................................15
4.6 Initialization ..............................................................................15
Chapter 5 Conguration
——————————— 16
5.1 Preparations..............................................................................16
5.2 Login............................................................................................16
Appendix A Troubleshooting ————————— 18
Appendix B Hardware Specications —————— 19
Appendix C Technical Support ————————— 20

01
Gigabit Dual-WAN VPN Router


The TP-LINK SafeStreamTM Gigabit Dual-WAN VPN Router TL-ER6020 possesses
excellent data processing capability and multiple powerful functions including IPsec/
PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/
P2P Blocking, PPPoE Server and so on, which consumedly meet the needs of small
and medium enterprise, hotels and communities with volumes of users demanding an
efficient and easy-to-manage network with high security.

Front Panel

The front panel of TL-ER6020 is shown as the following figure.
Front PanelFigure 1-1
LEDs
LED Status Indication
PWR On The Router is powered on
Off The Router is powered off or power supply is abnormal
SYS Flashing The Router works properly
On/Off The Router works improperly
Link/Act
On There is a device linked to the corresponding port
Off There is no device linked to the corresponding port
Flashing The corresponding port is transmitting or receiving data
Speed
On (Green) The port is running at 1000Mbps
On (Yellow) The port is running at 100Mbps
Off There is no device linked to the corresponding port or
the port is running at 10Mbps
DMZ On The port is working in DMZ mode
Off The port is working in LAN mode
Introduction

02
Gigabit Dual-WAN VPN Router
Interface Description
Interface Description
WAN The WAN port is designed to connect the Router to the interface provided
by ISP via the RJ45 cable
LAN The LAN port is designed to connect the Router to the local PCs or
switches by the RJ45 cable
DMZ The DMZ port is designed to connect the Router to the servers
Console
The Console port is designed to connect with the serial port of a computer
or terminal to check and monitor some simple system information of the
Router
Reset
Use the button to restore the Router to the factory defaults. With the Router
powered on, use a pin to press and hold the Reset button (about 4~5 seconds).
After the SYS LED goes out, release the Reset button. If the SYS LED is ashing
with a high frequency about two or three seconds, it means the Router is restored
successfully.
Rear Panel

The rear panel of TL-ER6020 is shown as the following figure.
Rear PanelFigure 1-2
Power Socket
Connect the female connector of the power cord here, and the male connector to
the AC power outlet. Please make sure the voltage of the power supply meets the
requirement of the input voltage.
Grounding Terminal
The Router already comes with lightning protection mechanism. You can also ground
the Router through the PE (Protecting Earth) cable of AC cord or with Ground Cable.
For detailed information, please refer to Chapter 3 Lightning Protection.
Kensington Security Slot
The Router provides one security slot.
Caution: Please use the provided power cord.
Introduction

03
Gigabit Dual-WAN VPN Router


Make sure that the package contains the following items. If any of the listed items is
damaged or missing, please contact your distributor.
One Resource CD
One Router One Power Cord and One
Console Cable
This Installation Guide
Two mounting brackets and the
ttings

To avoid any device damage and bodily injury caused by improper use, please observe
the following rules.
Safety Precautions

Keep the power off during the installation.

Wear an ESD-preventive wrist strap, and make sure that the wrist strap has a good

skin contact and is well grounded.
Use only the power cord provided with the Router.

Make sure that the supply voltage matches the specifications indicated on the rear

panel of the Router.
Ensure the vent hole is well ventilated and unblocked.

Do not open or remove the cover of the Router.

Before cleaning the device, cut off the power supply. Do not clean it by the waterish

cloth, and never use any other liquid cleaning method.
Installation

04
Gigabit Dual-WAN VPN Router
Site Requirements

Temperature/Humidity
ȭ
ȭ
Please keep a proper temperature and humidity in the equipment room. Too high/low
humidity may lead to bad insulation, electricity leakage, mechanical property changes
and corrosions. Too high temperature may accelerate aging of the insulation materials
and can thus significantly shorten the service life of the device. For normal temperature
and humidity of the device, please check the following table.
Environment Temperature Humidity
Operating 0℃~ 40℃10% ~ 90%RH Non-condensing
Storage -40℃~ 70℃5% ~ 90%RH Non-condensing
Clearness
The dust accumulated on the Router can be absorbed by static electricity and result
in poor contact of metal contact points. Some measures have been taken for the
device to prevent static electricity, but too strong static electricity can cause deadly
damage to the electronic elements on the internal circuit board. To avoid the effect of
static electricity on the operation of the Router, please attach much importance to the
following items:
Dust the device regularly, and keep the indoor air clean.

Keep the device well grounded and ensure static electricity has been transferred.

Electromagnetic Interference
Electronic elements including capacitance and inductance on the device can be affected
by external interferences, such as conducted emission by capacitance coupling,
inductance coupling, and impedance coupling. To decrease the interferences, please
make sure to take the following measures:
Use the power supply that can effectively filter interference from the power grid.

Keep the device far from high-frequency, strong-current devices, such as radio

transmitting station.
Use electromagnetic shielding when necessary.

Installation

05
Gigabit Dual-WAN VPN Router
Lightening Protection
Extremely high voltage currents can be produced instantly when lightning occurs and the air
in the electric discharge path can be instantly heated up to 20,000℃. As this instant current
is strong enough to damage electronic devices, more effective lightning protection measures
should be taken.
Ensure the rack and device are well earthed.

Make sure the power socket has a good contact with the ground.

Keep a reasonable cabling system and avoid induced lightning.

Use the signal SPD (Surge Protective Device) when wiring outdoor.

Note: For detailed lightning protection measures, please refer to Chapter 3
Lightning Protection.
Installation Site
S
When installing the device on a rack or a flat workbench, please note the following
items:
The rack or workbench is flat and stable, and sturdy enough to support the weight

of 5.5kg at least.
The rack or workbench has a good ventilation system. The equipment room is well

ventilated.
The rack is well grounded. Keep the power socket less than 1.5 meters away from

the device.

Phillips screwdriver

ESD-preventive wrist wrap

Cables

Installation

06
Gigabit Dual-WAN VPN Router
Note: These tools are not provided with our product. If needed, please self purchase
them.

Desktop Installation

To install the device on the desktop, please follow the steps:
Set the device on a flat surface strong enough to support the entire weight of the1.
device with all fittings.
Remove the adhesive backing papers from the rubber feet.2.
Turnover the device and attach the supplied rubber feet to the recessed areas on3.
the bottom at each corner of the device.
Feet
Bottom of the Device
Notch
Desktop InstallationFigure 2-1
Rack Installation

To install the device in an EIA standard-sized, 19-inch rack, follow the instructions
described below:
Check the grounding and stability of the rack.1.
Secure the supplied rack-mounting brackets to each side of the device with supplied2.
screws, as illustrated in the following figure.
Rackmounting Bracket
Screw
Bracket InstallationFigure 2-2
Installation

07
Gigabit Dual-WAN VPN Router
After the brackets are attached to the device, use suitable screws (not provided) to3.
secure the brackets to the rack, as illustrated in the following figure.
Rack
Rack InstallationFigure 2-3
Caution:
Please set 5~10cm gaps around the device for air circulation.

Please avoid any heavy thing placed on the device.

Please mount devices in sequence from the bottom to top of the rack and ensure a

certain clearance between devices for the purpose of heat dissipation.
Installation

08
Gigabit Dual-WAN VPN Router


In the actual network environment, you may need cable outdoors and indoors, and
the requirements for cabling outdoors and indoors are different. A reasonable cabling
system can decrease the damage of induced lightning to devices.
Note: It's not recommended using Ethernet cables outdoors. When cabling outdoors,
please use a signal lightning arrester.
Requirements for Cabling Outdoors

Aerial cabling without safeguard is not allowed.

It’s not allowed cabling down the building to connect network devices in different

floors.
Outdoor cables should be buried and paved to the indoor through basement. A

piece of steel wire should be paved underground along the pipe and connected to
the lightning protection terminal of the building for shielding. Before connecting the
cable to the device, install a signal lightning arrester on the corresponding port.
When an aerial cable is set up, the cable should be through a metal pipe (15m long

at least) before coming into the building. The two ends of this metal pipe should
be grounded. Before connecting the cable to the device, install a signal lightning
arrester on the corresponding port.
It’s not necessary to pave STP cables through pipes. The shielded layer of STP cable

should be well grounded. Before connecting the cable to the device, install a signal
lightning arrester on the corresponding port.
Lightning Protection

09
Gigabit Dual-WAN VPN Router
Lightning Protection
Requirements for Cabling Indoors

When cabling indoors, keep a certain distance away from the devices that may cause
high-frequency interferences, such as down-conductor cable, powerline, power
transformer and electromotor.
The main cable should be paved in the metal raceway of the access shaft. When

cabling, keep the loop area formed by the cable itself as small as possible.
Requirements for the distance between Ethernet cable and other pipelines are

shown in the table.
Other Pipelines
Ethernet Cable
Min Parallel Net Length L
(mm)
Min Parallel-overlapping
Net Height H (mm)
Down-conductor 1000 300
PE 50 20
Service pipe 150 20
Compressed air pipe 150 20
Thermal pipe (not wrapped) 500 500
Thermal pipe (wrapped) 300 300
Gas pipe 300 20
The two diagrams below demonstrate parallel net length and parallel-overlapping net
height.
Note: The above minimum net length/height is required when metal raceway is not
used. If any requirements cannot be met, you can add a steel tube or metal raceway
for shielding.
Requirements for the distance between Ethernet cable and high-power electric

devices are in following tables.
Cable Pave Way Min Parallel
Length (mm)
<2kVA
powerline
Parallel cabling 130
One is in the grounded metal raceway or metal pipe 70
The both are in the grounded metal raceway or metal
pipe 10

10
Gigabit Dual-WAN VPN Router
2~5kVA
powerline
Parallel cabling 300
One is in the grounded metal raceway or metal pipe 150
The both are in the grounded metal raceway or metal
pipe 80
>5kVA
powerline
Parallel cabling 600
One is in the grounded metal raceway or metal pipe 300
The both are in the grounded metal raceway or metal
pipe 150
Device Min Distance (m)
Switch case 1.00
Transformer room 2.00
Elevator tower 2.00
Air-conditioner room 2.00

Connecting the device to ground is to quickly release the lightning over-voltage and
over-current of the device, which is also a necessary measure to protect the body from
electric shock.
In different environments, the device may be grounded differently. The following
will instruct you to connect the device to the ground in two ways, connecting to the
grounding bar or connecting to the ground via the power cord. Please connect the
device to ground in the optimum way according to your specific operation environment.
Connecting to the Grounding Bar

If the device is installed in the Equipment Room, where a grounding bar is available,
you are recommended to connect the device to the grounding bar as shown in the
following figure.
Device (Rear Panel)
Ground Cable
Grounding T e rminal
Grounding Bar
Connecting to the Grounding BarFigure 3-1
Lightning Protection

11
Gigabit Dual-WAN VPN Router
Lightning Protection
Note: The grounding bar and the ground cable are not provided with our product. If
needed, please self purchase them.
Connecting to the Ground via the Power Supply

If the device is installed in the normal environment, the device can be grounded via the
PE (Protecting Earth) cable of the AC power supply as shown in the following figure.
Connecting to the GroundFigure 3-2
Note:
The figure is to illustrate the application and principle. The power plug you get from

the package and the socket in your situation will comply with the regulation in your
country, so they may differ from the figure above.
If you intend to connect the device to the ground via the PE (Protecting Earth) cable

of AC power cord, please make sure the PE (Protecting Earth) cable in the electrical
outlet is well grounded in advance.

Equipotential Bonding is the practice of intentionally electrically connecting all earthed
systems to the same grounding grid or connecting the grounding grids of all the
earthed systems together through the ground or overground metal so as to create
an earthed equipotential zone. When lightning occurs, the high voltage produced by
lightning current in all systems will meanwhile exist in their ground cables, and thus
all ground cables have the same electrical potential and basically eliminate the electric
strikes between the systems.
The figure below illustrates how to practice equipotential bonding in a network.

12
Gigabit Dual-WAN VPN Router
Grounding T e rminal Equipotential Bonding Cable
Grounding BarGround Cable
Equipotential BondingFigure 3-3
When equipotential bonding, please note that the cable should be copper wrapped
Kelly with its area being 6mm2at least. The shorter cable the better, and use a
grounding bar to establish an equipotential bonding point.
Note: The equipotential bonding cable is not provided with our product. If needed,
please self purchase it.

Power lightning arrester and signal lightning arrester are used for lighting protection.
Power lightning arrester is used for limiting the voltage surge due to a lightning. If an
outdoor AC power cord should be directly connected to the device, please use a power
lightning arrester.
Note: Power lightning arrester is not provided with our product. If needed, please self
purchase it.
Lightning Protection

13
Gigabit Dual-WAN VPN Router
Lightning Protection
Signal lightning arrester is used to protect RJ45 ports of the device from lightning.
When cabling outdoors, please install a signal lightning arrester before connecting the
cable to the device.
When purchasing or using a signal lightning arrester, please observe the following
rules:
The port rate of the signal lightning arrester should match the rate of the desired

port on the device. If it is not matched, this signal lighting arrester will not work.
Purchase a standard lightning arrester.
Install signal lightning arrester near the protected device and connect it to the

ground via a shorter ground cable.
Equipotential Bonding CableGrounding T e rminal Ethernet Cable
Signal Lightning Arrester Device
Equipotential BondingFigure 3-4
Note: Signal lightning arrester is not provided with our product. If needed, please self
purchase it.

14
Gigabit Dual-WAN VPN Router


Please connect the WAN port of the Router to the interface provided by ISP via
Ethernet cable.

Connect a LAN port of the Router to the computer by RJ45 cable as the following figure
shown.
RJ45 Port
LAN Port
RJ45 Cable
Connecting the LAN PortFigure 4-1

CLI (Command Line Interface) enables you to do some simple operations to the Router,
thus you can load the CLI after connecting the PCs or Terminals to the console port
on the Router via the provided cable. For TL-ER6020, you can check and monitor some
simple system information of the Router.
Connect the console port of the device with your computer by the console cable as the
following figure shown.
Connecting the Console PortFigure 4-2
Connection

15
Gigabit Dual-WAN VPN Router
Connection
Note:
The console port is the first port on the right of the front panel.

Please keep the device power off when you plugging the console cable.

Do not connect the console port with other ports by RJ45 cable.


After completing the installation, please verify the following items:
There are 5~10cm of clearance around the sides of the device for ventilation and

the air flow is adequate.
The voltage of the power supply meets the requirement of the input voltage of the device.

The power socket, device and rack are well grounded.

The device is correctly connected to other network devices.


Plug in the negative connector of the provided power cord into the power socket of the
device, and the positive connector into a power outlet as the following figure shown.
Connecting to Power SupplyFigure 4-3
Note: The gure is to illustrate the application and principle. The power plug you get
from the package and the socket in your situation will comply with the regulation in
your country, so they may differ from the gure above.

After the device is powered on, it begins the Power-On Self-Test. A series of tests run
automatically to ensure the device functions properly. During this time, its LED indica-
tors will respond as follows:
The Power LED lights on all the time.

All LEDs except PWR LED flashes momentarily and then turns off.

The SYS LED flashes every second continuously, which means the initialization is finished.


16
Gigabit Dual-WAN VPN Router


Connect a PC to a LAN port of the Router with a RJ45 cable properly.1.
Set the Internet Protocol (TCP/IP) properties of the PC with the "IP address" as2.
192.168.0.x ("x" is any number from 2 to 254), "Subnetmask" as 255.255.255.0 and
"Default gateway" as 192.168.0.1. Shown in the following figure.
Internet Protocol (TCP/IP) PropertiesFigure 5-1

To access the GUI (Graphical User Interface) of the Router, open a web browser and1.
type the default management address http://192.168.0.1 in the address field of the
browser, then press the Enter key.
Web BrowserFigure 5-2
Enter "admin" for the default User name and Password, both in lower case letters.2.
Then click the OK button or press the Enter key.
LoginFigure 5-3
Configuration