TP-Link SafeStream TL-ER6120 User manual

Installation Guide
Gigabit Multi-WAN VPN Router
TL-ER6120
Enterprise Networking Solution

I

Specifications are subject to change without notice. is a registered trademark of TP-LINK
TECHNOLOGIES CO., LTD. Other brands and product names are trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any derivative such
as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright
© 2011 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved.
http://www.tp-link.com

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part
15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when
the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful
interference in which case the user will be required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions:
This device may not cause harmful interference.1)
This device must accept any interference received, including interference that may cause undesired operation.2)
Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s
authority to operate the equipment.

This is a class A product. In a domestic environment, this product may cause radio interference, in which case the
user may be required to take adequate measures.
Copyright & Trademarks

II
Related Document

The User Guide of this product is provided in the resource CD.
To obtain the latest product information, please visit the Official Website:
http://www.tp-link.com

This Installation Guide describes the hardware characteristics, installation methods and
the points that should be attended to during installation.
This Installation Guide is structured as follows:
Chapter 1 Introduction. This chapter describes the External Components of the
Router.
Chapter 2 Installation. This chapter illustrates how to install the Router.
Chapter 3 Lightning Protection. This chapter illustrates how to prevent lightning
damage.
Chapter 4 Connection. This chapter illustrates how to do the physical connection of
the Router.
Chapter 5 Configuration. This chapter illustrates how to log in and set up the
Router.
Appendix A Troubleshooting.
Appendix B Hardware Specifications.
Appendix C Technical Support.

III

This Installation Guide is for:
Network Engineer
Network Administrator

This guide uses the specific formats to highlight special messages. The following table
lists the notice icons that are used throughout this guide.
Remind to be careful. A caution indicates a potential which may
result in device damage.
Remind to take notice. The note contains the helpful information
for a better use of the product.
Audience

IV

Contents
Chapter 1 Introduction ———————————— 01
1.1 Product Overview.........................................01
1.2 Appearance .................................................01
Chapter 2 Installation ————————————— 03
2.1 Package Contents.........................................03
2.2 Safety Precautions........................................03
2.3 Installation Tools..........................................05
2.4 Product Installation ......................................05
Chapter 3 Lightning Protection ———————— 07
3.1 Cabling Reasonably ......................................07
3.2 Connect to Ground .......................................09
3.3 Equipotential Bonding...................................10
3.4 Use Lightning Arrester ..................................11
Chapter 4 Connection ————————————— 12
4.1 WAN Port.....................................................12
4.2 LAN Port......................................................12
4.3 Console Port ................................................12
4.4 Verify Installation .......................................13
4.5 Power On ....................................................13
4.6 Initialization.................................................14
Chapter 5 Conguration———————————— 15
5.1 Preparations ................................................15
5.2 Login...........................................................15
5.3 WAN/LAN Ports Conguration........................17
Appendix A Troubleshooting—————————— 18
Appendix B Hardware Specications —————— 19
Appendix C Technical Support ————————— 20

01
Gigabit Multi-WAN VPN Router


The SafeStreamTM Gigabit Multi-WAN VPN Router TL-ER6120 from TP-LINK possesses
excellent data processing capability and multiple powerful functions including IPsec/
PPTP/L2TP VPN, Load Balance, Access Control, Bandwidth Control, Session Limit, IM/
P2P Blocking, PPPoE Server and so on, which consumedly meet the needs of small
and medium enterprise, hotels and communities with volumes of users demanding an
efficient and easy-to-manage network with high security.

Front Panel
■
The front panel of TL-ER6120 is shown as the following figure.
Front PanelFigure 1-1
LEDs
LED Status Indication
PWR On The Router is powered on
Off The Router is powered off or power supply is abnormal
SYS Flashing The Router works properly
On/Off The Router works improperly
Link/Act
On There is a device linked to the corresponding port
Off There is no device linked to the corresponding port
Flashing The corresponding port is transmitting or receiving data
Speed
On (Green) The port is running at 1000Mbps
On (Yellow) The port is running at 100Mbps
Off There is no device linked to the corresponding port or the
port is running at 10Mbps
WAN On The port is working in WAN mode
Off The port is working in LAN mode
DMZ On The port is working in DMZ mode
Off The port is working in LAN mode
Introduction

02
Gigabit Multi-WAN VPN Router
Interface Description
Interface Description
WAN The WAN port is designed to connect the Router to a DSL/Cable modem
or Ethernet by the RJ45 cable
LAN The LAN port is designed to connect the Router to the local PCs or
switches by the RJ45 cable
DMZ The DMZ port is designed to connect the Router to the servers
Console The Console port is designed to connect with the serial port of a
computer or terminal to monitor and configure the Router
Reset
Use the button to restore the Router to the factory defaults. With the Router
powered on, use a pin to press and hold the Reset button (about 4~5 seconds).
After the SYS LED goes out, release the Reset button. If the SYS LED is flashing
with a high frequency about two or three seconds, it means the Router is restored
successfully.
Rear Panel
■
The rear panel of TL-ER6120 is shown as the following figure.
Rear PanelFigure 1-2
Power Socket
Connect the female connector of the power cord here, and the male connector to
the AC power outlet. Please make sure the voltage of the power supply meets the
requirement of the input voltage (100-240V~ 50/60Hz).
Grounding Terminal
The Router already comes with lightning protection mechanism. You can also ground
the Router through the PE (Protecting Earth) cable of AC cord or with Ground Cable.
For detailed information, please refer to Chapter 3 Lightning Protection.
Caution: Please use the provided power cord.
Introduction

03
Gigabit Multi-WAN VPN Router


Make sure that the package contains the following items. If any of the listed items is
damaged or missing, please contact your distributor.
One Resource CD
One Router One Power Cord, One Console
Cable and One Ground Cable
This Installation Guide
Two mounting brackets and
the ttings

To avoid any device damage and bodily injury caused by improper use, please observe
the following rules.
Safety Precautions
■
Keep the power off during the installation.
■
Wear an ESD-preventive wrist strap, and make sure that the wrist strap has a good
■
skin contact and is well grounded.
Use only the power cord provided with the Router.
■
Make sure that the supply voltage matches the specifications indicated on the rear
■
panel of the Router.
Ensure the vent hole is well ventilated and unblocked.
■
Do not open or remove the cover of the Router.
■
Before cleaning the device, cut off the power supply. Do not clean it by the waterish
■
cloth, and never use any other liquid cleaning method.
Site Requirements
■
To ensure normal operation and long service life of the device, please install it in an
environment that meets the requirements described in the following subsection.
Temperature/Humidity
ȭ
ȭ
Installation

04
Gigabit Multi-WAN VPN Router
Please keep a proper temperature and humidity in the equipment room. Too high/low
humidity may lead to bad insulation, electricity leakage, mechanical property changes
and corrosions. Too high temperature may accelerate aging of the insulation materials
and can thus significantly shorten the service life of the device. For normal temperature
and humidity of the device, please check the following table.
Environment Temperature Humidity
Operating 0℃~ 40℃10% ~ 90%RH Non-condensing
Storage -40℃~ 70℃5% ~ 90%RH Non-condensing
Clearness
The dust accumulated on the Router can be absorbed by static electricity and result
in poor contact of metal contact points. Some measures have been taken for the
device to prevent static electricity, but too strong static electricity can cause deadly
damage to the electronic elements on the internal circuit board. To avoid the effect of
static electricity on the operation of the Router, please attach much importance to the
following items:
Dust the device regularly, and keep the indoor air clean.
■
Keep the device well grounded and ensure static electricity has been transferred.
■
Electromagnetic Interference
Electronic elements including capacitance and inductance on the device can be affected
by external interferences, such as conducted emission by capacitance coupling,
inductance coupling, and impedance coupling. To decrease the interferences, please
make sure to take the following measures:
Use the power supply that can effectively filter interference from the power grid.
■
Keep the device far from high-frequency, strong-current devices, such as radio
■
transmitting station.
Use electromagnetic shielding when necessary.
■
Lightening Protection
Extremely high voltage currents can be produced instantly when lightning occurs and
the air in the electric discharge path can be instantly heated up to 20,000℃.As this
instant current is strong enough to damage electronic devices, more effective lightning
Installation

05
Gigabit Multi-WAN VPN Router
protection measures should be taken.
Ensure the rack and device are well earthed.
■
Make sure the power socket has a good contact with the ground.
■
Keep a reasonable cabling system and avoid induced lightning.
■
Use the signal SPD (Surge Protective Device) when wiring outdoor.
■
Note: For detailed lightning protection measures, please refer to Chapter 3
Lightning Protection.
Installation Site
S
When installing the device on a rack or a flat workbench, please note the following
items:
The rack or workbench is flat and stable, and sturdy enough to support the weight of
■
5.5kg at least.
The rack or workbench has a good ventilation system. The equipment room is well
■
ventilated.
The rack is well grounded. Keep the power socket less than 1.5 meters away from the
■
device.

Phillips screwdriver
■
ESD-preventive wrist wrap
■
C a b l e s
■
Note: These tools are not provided with our product. If needed, please self purchase
them.

Desktop Installation
■
To install the device on the desktop, please follow the steps below:
Set the device on a flat surface strong enough to support the entire weight of the1.
device with all fittings.
Remove the adhesive backing papers from the rubber feet.2.
Turnover the device and attach the supplied rubber feet to the recessed areas on3.
Installation

06
Gigabit Multi-WAN VPN Router
the bottom at each corner of the device.
Feet
Bottom of the
Device
Notch
Desktop InstallationFigure 2-1
Rack Installation
■
To install the device in an EIA standard-sized, 19-inch rack, follow the instructions
described below:
Check the grounding and stability of the rack.1.
Secure the supplied rack-mounting brackets to each side of the device with supplied2.
screws, as illustrated in the following figure.
Rack-
mounting
Bracket
Screw
Bracket InstallationFigure 2-2
After the brackets are attached to the device, use suitable screws (not provided) to3.
secure the brackets to the rack, as illustrated in the following figure.
Rack
Rack InstallationFigure 2-3
Caution:
Please set 5~10cm gaps around the device for air circulation.
■
Please avoid any heavy thing placed on the device.
■
Please mount devices in sequence from the bottom to top of the rack and ensure a
■
certain clearance between devices for the purpose of heat dissipation.
Installation

07
Gigabit Multi-WAN VPN Router


In the actual network environment, you may need cable outdoors and indoors, and
the requirements for cabling outdoors and indoors are different. A reasonable cabling
system can decrease the damage of induced lightning to devices.
Note: It’s not recommended using Ethernet cables outdoors. When cabling outdoors,
please use a signal lightning arrester.
Requirements for Cabling Outdoors
■
Aerial cabling without safeguard is not allowed.
■
It’s not allowed cabling down the building to connect network devices in different
■
floors.
Outdoor cables should be buried and paved to the indoor through basement. A piece
■
of steel wire should be paved underground along the pipe and connected to the
lightning protection terminal of the building for shielding. Before connecting the cable
to the device, install a signal lightning arrester on the corresponding port.
When an aerial cable is set up, the cable should be through a metal pipe (15m long
■
at least) before coming into the building. The two ends of this metal pipe should be
grounded. Before connecting the cable to the device, install a signal lightning arrester
on the corresponding port.
It’s not necessary to pave STP cables through pipes. The shielded layer of STP cable
■
should be well grounded. Before connecting the cable to the device, install a signal
lightning arrester on the corresponding port.
Requirements for Cabling Indoors
■
When cabling indoors, keep a certain distance away from the devices that may cause
high-frequency interferences, such as down-conductor cable, powerline, power
transformer and electromotor.
The main cable should be paved in the metal raceway of the access shaft. When
■
cabling, keep the loop area formed by the cable itself as small as possible.
Lightning Protection

08
Gigabit Multi-WAN VPN Router
Requirements for the distance between Ethernet cable and other pipelines are shown
■
in the table.
Other Pipelines
Ethernet Cable
Min Parallel Net Length L
(mm)
Min Parallel-overlapping Net
Height H (mm)
Down-conductor 1000 300
PE 50 20
Service pipe 150 20
Compressed air pipe 150 20
Thermal pipe (not wrapped) 500 500
Thermal pipe (wrapped) 300 300
Gas pipe 300 20
The two diagrams below demonstrate parallel net length and parallel-overlapping net
height.
Note: The above minimum net length/height is required when metal raceway is not
used. If any requirements cannot be met, you can add a steel tube or metal raceway
for shielding.
Requirements for the distance between Ethernet cable and high-power electric
■
devices are in following tables.
Cable Pave Way Min Parallel
Length (mm)
<2kVA
powerline
Parallel cabling 130
One is in the grounded metal raceway or metal pipe 70
The both are in the grounded metal raceway or metal pipe 10
2~5kVA
powerline
Parallel cabling 300
One is in the grounded metal raceway or metal pipe 150
The both are in the grounded metal raceway or metal pipe 80
>5kVA
powerline
Parallel cabling 600
One is in the grounded metal raceway or metal pipe 300
The both are in the grounded metal raceway or metal pipe 150
Device Min Distance (m)
Switch case 1.00
Transformer room 2.00
Elevator tower 2.00
Air-conditioner room 2.00
Lightning Protection

09
Gigabit Multi-WAN VPN Router

Connecting the device to ground is to quickly release the lightning over-voltage and
over-current of the device, which is also a necessary measure to protect the body from
electric shock.
In different environments, the device may be grounded differently. The following
will instruct you to connect the device to the ground in two ways, connecting to the
grounding bar or connecting to the ground via the power cord. Please connect the
device to ground in the optimum way according to your specific operation environment.
Connecting to the Grounding Bar
■
If the device is installed in the Equipment Room, where a grounding bar is available,
you are recommended to connect the device to the grounding bar as shown in the
following figure.
Device (Rear Panel)
Ground Cable
Grounding Te rminal
Grounding Bar
Connecting to the Grounding BarFigure 3-1
Note: The grounding bar is not provided with our product. If needed, please self
purchase it.
Connecting to the Ground via the Power Supply
■
If the device is installed in the normal environment, the device can be grounded via the
PE (Protecting Earth) cable of the AC power supply as shown in the following figure.
Connecting to the GroundFigure 3-2
Lightning Protection

10
Gigabit Multi-WAN VPN Router
Note:
The figure is to illustrate the application and principle. The power plug you get from
■
the package and the socket in your situation will comply with the regulation in your
country, so they may differ from the figure above.
If you intend to connect the device to the ground via the PE (Protecting Earth) cable
■
of AC power cord, please make sure the PE (Protecting Earth) cable in the electrical
outlet is well grounded in advance.

Equipotential Bonding is the practice of intentionally electrically connecting all earthed
systems to the same grounding grid or connecting the grounding grids of all the
earthed systems together through the ground or overground metal so as to create
an earthed equipotential zone. When lightning occurs, the high voltage produced by
lightning current in all systems will meanwhile exist in their ground cables, and thus
all ground cables have the same electrical potential and basically eliminate the electric
strikes between the systems.
The figure bellow illustrates how to practice equipotential bonding in a network.
Grounding T e rminal Equipotential Bonding Cable
Grounding BarGround Cable
Equipotential BondingFigure 3-3
When equipotential bonding, please note that the cable should be copper wrapped Kelly
with its area being 6mm2at least. The shorter cable the better, and use a grounding
bar to establish an equipotential bonding point.
Note: The equipotential bonding cable is not provided with our product. If needed,
please self purchase it.
Lightning Protection

11
Gigabit Multi-WAN VPN Router

Power lightning arrester and signal lightning arrester are used for lighting protection.
Power lightning arrester is used for limiting the voltage surge due to a lightning. If an
outdoor AC power cord should be directly connected to the device, please use a power
lightning arrester.
Note: Power lightning arrester is not provided with our product. If needed, please self
purchase it.
Signal lightning arrester is used to protect RJ45 ports of the device from lightning.
When cabling outdoors, please install a signal lightning arrester before connecting the
cable to the device.
When purchasing or using a signal lightning arrester, please observe the following
rules:
The port rate of the signal lightning arrester should match the rate of the desired port
■
on the device. If it is not matched, this signal lighting arrester will not work. Purchase
a standard lightning arrester.
Install signal lightning arrester near the protected device and connect it to the ground
■
via a shorter ground cable.
Equipotential Bonding CableGrounding T e rminal Ethernet Cable
Signal Lightning Arrester Device
Lightning Arrester ConnectionFigure 3-4
Note: Signal lightning arrester is not provided with our product. If needed, please self
purchase it.
Lightning Protection

12
Gigabit Multi-WAN VPN Router


Please connect the WAN port of the Router to the interface provided by ISP via
Ethernet cable.

Connect a LAN port of the Router to the computer by RJ45 cable as the following figure
shown.
LAN Port
RJ45 Cable
RJ45 Port
Connecting the LAN PortFigure 4-1
Note: If the Router is connecting with Server/Switch or other Ethernet devices, please
make sure the RJ45 cable is less than 100m.

CLI (Command Line Interface) enables you to do some simple operations to the Router,
thus you can load the CLI after connecting the PCs or Terminals to the console port on
the Router via the provided cable.
Connect the console port of the device with your computer by the console cable as the
following figure shown.
Connection

13
Gigabit Multi-WAN VPN Router
Connection
Connecting the Console PortFigure 4-2
You can also manage the device through the console port, for details please refer to the
User Guide on the resource CD.
Note:
The console port is the first port on the right of the front panel.
■
Please keep the device power off when plugging the console cable.
■
Do not connect the console Port with other ports by RJ45 cable.
■

After completing the installation, please verify the following items:
There are 5~10cm of clearance around the sides of the device for ventilation and the
■
air flow is adequate.
The voltage of the power supply meets the requirement of the input voltage of the
■
device.
The power socket, device and rack are well grounded.
■
The device is correctly connected to other network devices.
■

Plug the negative connector of the provided power cord into the power socket of the
device, and the positive connector into a power outlet as the following figure shown.
Connecting to Power SupplyFigure 4-3

14
Gigabit Multi-WAN VPN Router
Connection
Note: The gure is to illustrate the application and principle. The power plug you get
from the package and the socket in your situation will comply with the regulation in
your country, so they may differ from the gure above.

After the device is powered on, it begins the Power-On Self-Test. A series of tests
run automatically to ensure the device functions properly. During this time, its LED
indicators will respond as follows:
The PWR LED will light on all the time.
■
All LEDs except PWR LED will flash momentarily and then turn off.
■
The SYS LED flashes every second continuously, which means the initialization is
■
finished.

15
Gigabit Multi-WAN VPN Router


Connect a PC to a LAN port of the Router with a RJ45 cable properly.1.
Set the Internet Protocol (TCP/IP) properties of the PC as the following figure shown.2.
Internet Protocol (TCP/IP) PropertiesFigure 5-1

To access the GUI (Graphical User Interface) of the Router, open a web browser and1.
type the default management address http://192.168.0.1 in the address field of the
browser, then press the Enter key.
Web BrowserFigure 5-2
Enter admin for the default User Name and Password, both in lower case letters.2.
Then click the Login button or press the Enter key.
Conguration