TP-Link TL-ER6120 User manual

TL-ER6120
Gigabit Dual-WAN VPN Router
REV1.2.0
1910010936

-I-
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks of their
respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2014 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com
FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case
the user will be required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two
conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that may cause
undesired operation.
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user’s authority to operate the equipment.
CE Mark Warning
This is a class A product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.

-II-
Продукт сертифіковано згідно справилами системи УкрСЕПРО на відповідність вимогам
нормативних документів та вимогам, що передбачені чинними законодавчими актами України.
Safety Information
When product has power button, the power button is one of the way to shut off the product; When
there is no power button, the only way to completely shut off power is to disconnect the product or
the power adapter from the power source.
Don’t disassemble the product, or make repairs yourself. You run the risk of electric shock and
voiding the limited warranty. If you need service, please contact us.
Avoid water and wet locations.
安全諮詢及注意事項
●請使用原裝電源供應器或只能按照本產品注明的電源類型使用本產品。
●清潔本產品之前請先拔掉電源線。請勿使用液體、噴霧清潔劑或濕布進行清潔。
●注意防潮，請勿將水或其他液體潑灑到本產品上。 
●插槽與開口供通風使用，以確保本產品的操作可靠並防止過熱，請勿堵塞或覆蓋開口。
●請勿將本產品置放於靠近熱源的地方。除非有正常的通風，否則不可放在密閉位置中。
●請不要私自打開機殼，不要嘗試自行維修本產品，請由授權的專業人士進行此項工作。
此為甲類資訊技術設備，于居住環境中使用時，可能會造成射頻擾動，在此種情況下，使用者會被要求
採取某些適當的對策。
This product can be used in the following countries:
AT BG BY CA CZ DE DK EE
ES FI FR GB GR HU IE IT
LT LV MT NL NO PL PT RO
RU SE SK TR UA

-III-
CONTENTS
Package Contents..................................................................................................................1
Chapter 1 About this Guide ...................................................................................................2
1.1 Intended Readers ..................................................................................................................2
1.2 Conventions ...........................................................................................................................2
1.3 Overview of this Guide...........................................................................................................2
Chapter 2 Introduction ..........................................................................................................4
2.1 Overview of the Router ..........................................................................................................4
2.2 Features.................................................................................................................................5
2.3 Appearance............................................................................................................................6
2.3.1 Front Panel ................................................................................................................6
2.3.2 Rear Panel.................................................................................................................7
Chapter 3 Configuration ........................................................................................................9
3.1 Network..................................................................................................................................9
3.1.1 Status.........................................................................................................................9
3.1.2 System Mode.............................................................................................................9
3.1.3 WAN ........................................................................................................................12
3.1.4 LAN..........................................................................................................................28
3.1.5 DMZ.........................................................................................................................31
3.1.6 MAC Address...........................................................................................................33
3.1.7 Switch ......................................................................................................................34
3.2 User Group ..........................................................................................................................41
3.2.1 Group.......................................................................................................................41
3.2.2 User .........................................................................................................................42
3.2.3 View.........................................................................................................................42
3.3 Advanced .............................................................................................................................44
3.3.1 NAT..........................................................................................................................44
3.3.2 Traffic Control ..........................................................................................................52

-IV-
3.3.3 Session Limit ...........................................................................................................55
3.3.4 Load Balance...........................................................................................................57
3.3.5 Routing ....................................................................................................................61
3.4 Firewall.................................................................................................................................66
3.4.1 Anti ARP Spoofing ...................................................................................................66
3.4.2 Attack Defense ........................................................................................................69
3.4.3 MAC Filtering ...........................................................................................................71
3.4.4 Access Control.........................................................................................................71
3.4.5 App Control..............................................................................................................77
3.5 VPN......................................................................................................................................79
3.5.1 IKE...........................................................................................................................79
3.5.2 IPsec........................................................................................................................83
3.5.3 L2TP/PPTP..............................................................................................................90
3.6 Services ...............................................................................................................................94
3.6.1 PPPoE Server..........................................................................................................94
3.6.2 E-Bulletin ...............................................................................................................100
3.6.3 Dynamic DNS ........................................................................................................102
3.6.4 UPnP .....................................................................................................................108
3.7 Maintenance ......................................................................................................................109
3.7.1 Admin Setup ..........................................................................................................109
3.7.2 Management.......................................................................................................... 112
3.7.3 License ..................................................................................................................114
3.7.4 Statistics.................................................................................................................115
3.7.5 Diagnostics ............................................................................................................117
3.7.6 Time.......................................................................................................................119
3.7.7 Logs.......................................................................................................................122
Chapter 4 Application........................................................................................................124
4.1 Network Requirements.......................................................................................................124

-V-
4.2 Network Topology...............................................................................................................125
4.3 Configurations....................................................................................................................125
4.3.1 Internet Setting ......................................................................................................125
4.3.2 VPN Setting ...........................................................................................................127
4.3.3 Network Management............................................................................................133
4.3.4 Network Security....................................................................................................137
Chapter 5 CLI ................................................................................................................143
5.1 Configuration......................................................................................................................143
5.2 Interface Mode ...................................................................................................................146
5.3 Online Help ........................................................................................................................147
5.4 Command Introduction.......................................................................................................149
5.4.1 ip............................................................................................................................149
5.4.2 ip-mac....................................................................................................................149
5.4.3 sys .........................................................................................................................150
5.4.4 user........................................................................................................................151
5.4.5 history ....................................................................................................................152
5.4.6 exit .........................................................................................................................153
Appendix A Hardware Specifications ...........................................................................154
Appendix B FAQ .........................................................................................................155
Appendix C Glossary ..................................................................................................157

-1-
Package Contents
The following items should be found in your package:
One TL-ER6120 Router
One Power Cord
One Console Cable
One Ground Cable
Two mounting brackets and other fittings
Installation Guide
Resource CD
Note:
Make sure that the package contains the above items. If any of the listed items is damaged or missing,
please contact with your distributor.

-2-
Chapter 1 About this Guide
This User Guide contains information for setup and management of TL-ER6120 router. Please read
this guide carefully before operation.
1.1 Intended Readers
This Guide is intended for Network Engineer and Network Administrator.
1.2 Conventions
In this Guide the following conventions are used:
The router or TL-ER6120 mentioned in this Guide stands for TL-ER6120 SafeStream Gigabit
Dual-WAN VPN Router without any explanation.
Menu Name→Submenu Name→Tab page indicates the menu structure. Advanced→NAT
→Basic NAT means the Basic NAT page under the NAT menu option that is located under the
Advanced menu.
Bold font indicates a toolbar icon, menu or menu item.
<Font> indicate a button.
Symbols in this Guide:
Symbol Description
Note:
Ignoring this type of note might result in a malfunction or damage to the
device.
Tips:
This format indicates important information that helps you make better use of
your device.
1.3 Overview of this Guide
Chapter 1 About This Guide Introduces the guide structure and conventions.
Chapter 2 Introduction Introduces the features and appearance of TL-ER6120 router.
Chapter 3 Configurations Introduces how to configure the router via Web management page.
Chapter 4 Application Introduces the practical application of the router on the enterprise network.
Chapter5 CLI Introduces how to log in and set up the router using CLI commands by
console port.

-3-
Appendix A Hardware
Specifications
Lists the hardware specifications of this router.
Appendix B FAQ Provides the possible solutions to the problems that may occur during the
installation and operation of the router.
Appendix C Glossary Lists the glossary used in this guide.

-4-
Chapter 2 Introduction
Thanks for choosing the SafeStream Gigabit Dual-WAN VPN Router TL-ER6120.
2.1 Overview of the Router
The SafeStream Gigabit Dual-WAN VPN Router TL-ER6120 from TP-LINK possesses excellent data
processing capability and multiple powerful functions including IPsec/PPTP/L2TP VPN, Load Balance,
Access Control, Bandwidth Control, Session Limit, IM/P2P Blocking, PPPoE Server and so on, which
consumedly meet the needs of small and medium enterprise, hotels and communities with volumes of
users demanding a efficient and easy-to-manage network with high security.
Powerful Data Processing Capability
+ Built-in MIPS64 network processor and 128MB DDRII high-speed RAM allows the stability and
reliability for operation.
Virtual Private Network (VPN)
+ Providing comprehensive IPsec VPN with DES/3DES/AES encryptions, MD5/SHA1
identifications and automatically/manually IKE Pre-Share Key exchanges.
+ Supporting PPTP/L2TP VPN Server mode to allow the staff on business or remote branch office
to access the headquarter network.
Online Behavior Management
+ Complete Functions of Access Rules can allow managers to select the network service levels to
block or allow applications of FTP downloading, Email, Web browsing and so on.
+ Deploying One-Click restricting of IM/P2P applications to save time & energy while reserving
exceptional groups for certain users.
+ Supporting URL Filtering to prevent potential hazards from visiting the malicious Web sites.
Powerful Firewall
+ Supporting One-Click IP-MAC Binding to avoid ARP spoofing and guarantee a network without
stagnation.
+ Featured Attack Defense to protect the network from a variety of flood attack and packet
anomaly attack.
+ Possessing MAC Filtering function to block the access of illegal hosts.
Flexible Traffic Control
+ Featured Bandwidth Control with flexible bandwidth management to automatically control the
bandwidth of the host in bi-direction to avoid bandwidth over occupation, as well as optimize
bandwidth usage.
+ Supporting Session Limit to avoid the complaint of a few people to force whole sessions.