TP-Link TL-R4000+ User manual

TL-R4000
Enterprise Broadband Router
Rev: 1.0.1
1910010031

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered
trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2008 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in
accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case
the user will be required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following two
conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that may cause
undesired operation.
Any changes or modifications not expressly approved by the party responsible for compliance could
void the user’s authority to operate the equipment.
EC DECLARATION OF CONFORMITY (EUROPE)
In compliance with the EMC Directive 89/336/EEC, Low Voltage Directive 73/23/EEC, this product
meets the requirements of the following standards:
¾EN55022
¾EN55024
¾EN60950
SAFETY NOTICES
Caution:
Do not use this product near water, for example, in a wet basement or near a swimming pool.
Avoid using this product during an electrical storm. There may be a remote risk of electric shock from
lightning.

Package Contents
The following contents should be found in your package:
¾One TL-R4000 Enterprise Broadband Router
¾One power cord for TL-R4000 Enterprise Broadband Router
¾Mounting kits for installing in a standard 19” rack
¾One Resource CD for TL-R4000 Enterprise Broadband Router, including:
•This Guide
•Other Helpful Information
)Note:
Make sure that the package contains the above items. If any of the listed items are damaged or
missing, please contact with your distributor.

CONTENTS
Chapter 1. Introduction....................................................................................................................1
1.1 Overview of the Router......................................................................................................1
1.2 Features ............................................................................................................................1
1.3 Panel Layout .....................................................................................................................2
1.3.1 The Front Panel......................................................................................................2
1.3.2 The Rear Panel ......................................................................................................3
Chapter 2. Connecting the Router...................................................................................................4
2.1 System Requirements.......................................................................................................4
2.2 Installation Environment Requirements .............................................................................4
2.3 Connecting the Router ......................................................................................................4
Chapter 3. Quick Installation Guide.................................................................................................5
3.1 TCP/IP configuration .........................................................................................................5
3.2 Quick Installation Guide ....................................................................................................6
Chapter 4. Configuring the Router.................................................................................................10
4.1 login.................................................................................................................................10
4.2 Status ..............................................................................................................................10
4.3 Quick Setup.....................................................................................................................11
4.4 Network...........................................................................................................................11
4.4.1 LAN.......................................................................................................................11
4.4.2 WAN .....................................................................................................................12
4.4.3 MAC Clone ...........................................................................................................17
4.4.4 Bandwidth Control ................................................................................................18
4.4.5 VLAN ....................................................................................................................18
4.4.6 Port Mirror.............................................................................................................19
4.5 DHCP ..............................................................................................................................19
4.5.1 DHCP Settings .....................................................................................................19
4.5.2 DHCP Clients List .................................................................................................20
4.5.3 Address Reservation ............................................................................................21
4.6 Forwarding ......................................................................................................................22
4.6.1 Virtual Servers ......................................................................................................23
4.6.2 Port Triggering ......................................................................................................25
4.6.3 DMZ......................................................................................................................27
4.6.4 UPnP ....................................................................................................................27
4.7 Security ...........................................................................................................................28
4.7.1 Firewall .................................................................................................................28
4.7.2 IP Address Filtering...............................................................................................29
4.7.3 Domain Filtering ...................................................................................................31
4.7.4 MAC Filtering........................................................................................................33
4.7.5 Remote Management ...........................................................................................34
4.7.6 Advanced Security................................................................................................35
4.8 Static Routing ..................................................................................................................37
4.9 IP & MAC Binding Setting................................................................................................38
4.9.1 Binding Setting .....................................................................................................38
4.9.2 ARP List................................................................................................................40

4.10 DDNS ..............................................................................................................................41
4.10.1 Dyndns.org DDNS ................................................................................................41
4.10.2 Oray.net DDNS .....................................................................................................42
4.10.3 Comexe.cn DDNS ................................................................................................42
4.11 System Tools ...................................................................................................................44
4.11.1 Time......................................................................................................................44
4.11.2 Firmware...............................................................................................................45
4.11.3 Factory Defaults ...................................................................................................45
4.11.4 Backup & Restore Configuration ..........................................................................46
4.11.5 Reboot ..................................................................................................................46
4.11.6 Password..............................................................................................................47
4.11.7 Log .......................................................................................................................48
4.11.8 Statistics ...............................................................................................................48
Appendix A: FAQ...............................................................................................................................50
Appendix B: Configuring the PCs......................................................................................................54
Appendix C: Specifications................................................................................................................58
Appendix D: Glossary .......................................................................................................................59

TL-R4000 Enterprise Broadband Router User Guide
1
Chapter 1. Introduction
1.1 Overview of the Router
The TL-R4000 Enterprise Broadband Router possesses excellent throughput and driving
load capability, which consumedly meets the requirements from Internet café and
small/medium/sizable enterprise with volumes of users, making a more expedite
communication. The superior performance will bring you full-new experience of a
non-bottle-neck network.
TL-R4000 Enterprise Broadband Router makes plenty of applications become a reality. It
can be used for constructing intranet FTP, WEB, and Mail server, etc. Inaccessibly, it
features network game ports opened, MSN audio conversation and special application
setting, providing much more additional value to your network.
Featuring firewall and VPN Passthrough, the TL-R4000 Enterprise Broadband Router
resists most common Internet attacks and ensures secure data connectivity and
transmission over the Internet. And the expansion slot for fiber module, sharing with
WAN Port, brings an additional solution for fiber access.
TL-R4000 Enterprise Broadband Router is easy-to-manage. Quick Setup is supported
and friendly help messages are provided for every step. So you can configure it quickly
and share Internet access, files and fun comfortably.
1.2 Features
¾Complies with IEEE802.3, IEEE802.3u standards
¾Built in 4-port 10/100Mbps switch
¾Ethernet connection to a WAN device, such as a Cable modem or DSL modem
¾One expansion slot for fiber module, sharing with WAN port, supports fiber access.
¾Shares data and Internet access for the network, connecting Internet through
PPPoE on demand and disconnecting when idle
¾Support Port Bandwidth Control, Port Mirror, Port-based VLAN for LAN ports
¾Built-in NAT and DHCP server supporting static IP address distributing
¾Provides 802.1x authentication for WAN port
¾Supports Virtual Server, Port Triggering, and DMZ host
¾Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC
address filtering
¾Supports connecting/disconnecting Internet at a specified time of day
¾Supports access control, allowing parents and network administrators to establish
restricted access policies based on the time of day for children or staff
¾Supports TCP/IP, PPPoE, DHCP, ICMP, NAT, SNTP
¾Supports UPnP, Dynamic DNS, Static Routing, VPN pass-through
¾Supports Traffic Statistics
¾Supports ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter
¾Ignores Ping packets from WAN or LAN ports

TL-R4000 Enterprise Broadband Router User Guide
2
¾Supports firmware upgrade
¾Supports Remote and Web management
¾Standard 19-inc rack-mountable steel case
1.3 Panel Layout
1.3.1 The Front Panel
The front panel of the TL-R4000 consists of several LED indicators, which is designed to
indicate connections. Viewed from left, Table 1-1 describes the LEDs on the front panel
of the router.
TL-R4000
Pow er
M1
M2
1234
Enterprise Broadband Router
Figure 1-1 Front Panel sketch
Name Action Description
Not lit The router is power on
Power Lit up The router is power off
Not lit The router works properly
M1 Lit up The router has a hardware error
Not lit The router has a hardware error
Lit up The router has a hardware error
M2
Flashing The router works properly
M1 and M2 are flashing
synchronously, the router is
restoring the factory default
settings.
Not lit There is no device linked to the corresponding port
Lit up
There is a device linked to the corresponding port but no
activity
Link/Act
Flashing There is an active device linked to the corresponding port
Not lit The linked device is running at 10Mbps
Speed Lit up The linked device is running at 100Mbps
Table 1-1 The LEDs description
The front panel contains the following features. (Viewed from left to right:)
¾Factory Default Reset button
There are two ways to reset the router's factory defaults:
1. Use the Factory Defaults function on System Tools -> Factory Defaults page
in the router's Web-based Utility.
2. Use the Factory Default Reset button: First, turn off the router's power. Second,
press the default reset button, then turn on the router's power, and hold the
reset button until the M1 and M2 LED flash simultaneously (about 3 seconds).
At last, release the reset button and wait for the router to reboot.
)Note:
Ensure the router is powered on before it restarts completely.
¾Four LAN 10/100Mbps RJ45 ports for connecting the router to the local PCs

TL-R4000 Enterprise Broadband Router User Guide
3
¾WAN RJ45 port for connecting the router to a cable, DSL modem or Ethernet
¾One expansion slot for fiber module, sharing with WAN port, the recommended
module is TL-SM21 series.
1.3.2 The Rear Panel
The rear panel of the TL-R4000 only features a power receptacle, which is an AC power
receptacle. Connect the female of the power cord head here, and the male head to the
AC power outlet.
100-240V 50-60Hz ~
Figure 1-2 Rear Panel sketch

TL-R4000 Enterprise Broadband Router User Guide
4
Chapter 2. Connecting the Router
2.1 System Requirements
¾Broadband Internet Access Service (DSL/Cable/Ethernet)
¾One DSL/Cable modem that has an RJ45 connector (It’s not necessary if you
connect the router to Ethernet)
¾Each PC on the LAN needs a working Ethernet Adapter and an Ethernet cable with
RJ45 connectors
¾TCP/IP protocol must be installed on each PC
¾Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator
6.0 or later
2.2 Installation Environment Requirements
¾Not in direct sunlight or near a heater or heating vent
¾Not cluttered or crowded. There should be at least 2 inches (5 cm) of clear space on
all sides of the router
¾Well ventilated (especially if it is in a closet)
¾Operating temperature: 0℃~40℃(32℉~104℉)
¾Operating Humidity: 10%~90%RH, Non-condensing
2.3 Connecting the Router
Before you install the router, you should connect your PC to the Internet through your
broadband service successfully. If there is any problem, please contact with your ISP for
help. After that, please install the router according to the following steps. Don't forget to
pull out the power plug and keep your hands dry.
1. Power off your PC(s), Cable/DSL modem, and the router.
2. Connect the PC(s) and all Switches/Hubs on your LAN to the LAN Ports on the
router, shown in figure 3-1.
3. Connect the DSL/Cable modem to the WAN port on the router, shown in Figure 2-1.
4. Connect the AC power adapter to the AC power socket on the router, and the other
end into an electrical outlet. The router will start to work automatically.
5. Power on your PC(s) and Cable/DSL modem.
TL-R4000
Power
M1
M2
123 4
Enterprise Broadband Router
Switch/Hub
To LAN
To WAN
（） XDSL Cable Ethernet 、、
Figure 2-1 Hardware Installation of the TL-R4000 Enterprise Broadband Router

TL-R4000 Enterprise Broadband Router User Guide
5
Chapter 3. Quick Installation Guide
After connecting the TL-R4000 router into your network, you should configure it. This
chapter describes how to configure the basic functions of your TL-R4000 Enterprise
Broadband Router. These procedures only take you a few minutes. You can access the
Internet via the router immediately after it has been successfully configured.
3.1 TCP/IP configuration
The default IP address of the TL-R4000 Enterprise Broadband Router is 192.168.1.1,
and the default Subnet Mask is 255.255.255.0. These values can be seen from the LAN,
and can be changed as your desire. As an example, we use the default values for
description in this guide.
Connect the local PCs to the LAN ports on the router. There are then two means to
configure the IP address for your PCs.
¾Configure the IP address manually
1) Set up the TCP/IP Protocol for your PC. If you need instructions as to how to do
this, please refer to Appendix B: "Configuring the PC."
2) Configure the network parameters. The IP address is 192.168.1.xxx ("xxx" is
any number from 2 to 254), Subnet Mask is 255.255.255.0, and Gateway is
192.168.1.1 (The router's default IP address)
¾Obtain an IP address automatically
1) Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on
your PC. If you need instructions as to how to do this, please refer to Appendix
B: "Configuring the PC."
2) Then the built-in DHCP server will assign IP address for the PC.
)Note:
For Windows 98 OS or earlier, the PC and router may need to be restarted.
Now, you can run the Ping command in the command prompt to verify the network
connection between your PC(s) and the router. The following example is in Windows
2000.
Open a command prompt, and type ping 192.168.1.1, then press Enter.

TL-R4000 Enterprise Broadband Router User Guide
6
Figure 3-1 Successful result of Ping command
If the result displayed is similar to what is shown in Figure 3-1, the connection between
your PC and the router has been established.
Figure 3-2 Failed result of Ping command
If the result displayed is similar to what shown in Figure 3-2, it means that your PC has
not connected to the router. If so, refer to the following steps for a solution.
1. Is the connection between your PC and the router correct?
)Note:
The Link/Act LEDs of LAN port on the router and LEDs on your PC's adapter should be
lit.
2. Is the TCP/IP configuration for your PC correct?
)Note:
If the router's IP address is 192.168.1.1, your PC's IP address must be within the range
of 192.168.1.2 ~ 192.168.1.254.
3.2 Quick Installation Guide
With a Web-based (Internet Explorer or Netscape®Navigator) utility, the TL-R4000
Enterprise Broadband Router is easy to configure and manage. The Web-based utility
can be used on any Windows, Macintosh or UNIX OS with a web browser.
Connect to the router by typing http://192.168.1.1 in the address field of web browser.
Figure 3-3 Login to the router
After a moment, a login window will appear similar to that shown in Figure 3-4. Enter

TL-R4000 Enterprise Broadband Router User Guide
7
admin for the User Name and Password, both in lower case letters. Then click the OK
button or press the Enter key.
Figure 3-4 Login Windows
)Note:
If the above screen does not prompt, it means that your web-browser has been set to a
proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that
appears, cancel the Using Proxy checkbox, and click OK to finish it.
If the User Name and Password are correct, you can configure the router using the web
browser. Please click the Quick Setup link on the left of the main menu and the Quick
Setup screen will appear.
Figure 3-5 Quick Setup
Click Next, the Choose WAN Connection Type page will appear, shown in Figure 3-6.
Figure 3-6 Choose WAN Connection Type
The router supports three popular ways to connect to Internet. Please select one

TL-R4000 Enterprise Broadband Router User Guide
8
compatible with your ISP, if you are given another way not listed here, refer to
Network->WAN for detailed list. Click Next to enter the necessary network parameters.
If you choose "PPPoE", you will see this page shown in Figure 3-7:
Figure 3-7 Quick Setup - PPPoE
¾Account Name and Password - Enter the Account Name and Password
provided by your ISP. These fields are case sensitive. If you have difficulty with this
process, please contact your ISP.
If you choose " Dynamic IP", the router will automatically receive the IP parameters from
your ISP without needing to enter any parameters.
If you Choose "Static IP", the Static IP settings page will appear, shown in Figure 3-8:
Figure 3-8 Quick Setup - Static IP
)Note:
The IP parameters should have been provided by your ISP.
¾IP Address - This is the WAN IP address as seen by external users on the Internet
(including your ISP). Enter the IP address into the field.
¾Subnet Mask - The Subnet Mask is used for the WAN IP address, it is usually
255.255.255.0.
¾Default Gateway - Enter the gateway into the box if required.
¾Primary DNS - Enter the DNS Server IP address into the boxes if required.
¾Secondary DNS - If your ISP provides another DNS server, enter it into this field.
Click the Next button, then you will see the Finish page:

TL-R4000 Enterprise Broadband Router User Guide
9
Figure 3-9 Quick Setup - Finish
After finishing all configurations of basic network parameters, please click Finish button
to exit this Quick Setup.

TL-R4000 Enterprise Broadband Router User Guide
10
Chapter 4. Configuring the Router
This chapter describes each web page's key functions.
4.1 login
After your successful login, you can configure and manage the router. There are nine main
menus on the left of the web-based utility. Submenus will be available after you click one
of the main menus. The ten main menus are: Status, Quick Setup, Network, DHCP,
Forwarding, Security, Static Routing, IP & MAC Binding, Dynamic DNS, and System
Tools. On the right of the web-based utility, there are the detailed explanations and
instructions for the corresponding page. To apply any settings you have altered on the
page, please click the Save button.
There are the detailed explanations for each web page's key functions below.
4.2 Status
The Status page displays the router's current status and configuration. All information is
read-only.
1. LAN
This field displays the current settings or information for the LAN, including the MAC
address, IP address and Subnet Mask.
2. WAN
These parameters apply to the WAN port of the router, including MAC address, IP
address, Subnet Mask, Default Gateway, DNS server and WAN connection type.
If PPPoE is chosen as the WAN connection type, the Disconnect button will be
shown here while you are accessing the Internet. You can also cut the connection by
clicking the button. If you have not connected to the Internet, a Connect button will be
shown, you can then establish the connection by clicking the button.
3. Traffic Statistics
This field displays the router's traffic statistics.
4. System Up Time
The time of the router running from the time it is powered on or is reset.

TL-R4000 Enterprise Broadband Router User Guide
11
Figure 4-1 Router Status
4.3 Quick Setup
Please refer to Section 3.2: "Quick Installation Guide."
4.4 Network
Figure 4-2 the Network menu
There are six submenus under the Network menu: LAN, WAN, MAC Clone,Bandwidth
Control, VLAN and Port Mirror. Click any of them, and you will be able to configure the
corresponding function. The detailed explanations for each submenu are provided
below.
4.4.1 LAN
You can configure the IP parameters of the LAN on this page.

TL-R4000 Enterprise Broadband Router User Guide
12
Figure 4-3 LAN
¾MAC Address - The physical address of the router, as seen from the LAN. The
value can't be changed.
¾IP Address - Enter the IP address of your router in dotted-decimal notation (factory
default: 192.168.1.1).
¾Subnet Mask - An address code that determines the size of the network. Normally
use 255.255.255.0 as the subnet mask.
)Note:
a. If you change the IP address of the LAN, you must use the new IP address to login
to the router.
b. If the new LAN IP Address you set is not in the same subnet, the IP Address pool of
the DHCP sever will not take effect, until it is re-configured.
c. If the new LAN IP Address you set is not in the same subnet, the Virtual Server and
DMZ Host may change accordingly at the same time, you’d better re-configure it as
well.
4.4.2 WAN
You can configure the WAN port parameters on this page.
First, please choose the WAN Connection Type (Dynamic IP/Static IP/PPPoE/802.1x +
Dynamic IP/802.1x + Static IP) to the Internet. The default type is PPPoE. If you aren’t
given any login parameters (fixed IP address, logging ID, etc), please select Dynamic
IP. If you are given a fixed IP (static IP), please select Static IP. If you are given a user
name and a password, please select PPPoE.If you are not sure which connection type
you use currently, please contact your ISP to obtain the correct information.
1. If you choose Dynamic IP, the router will automatically get IP parameters from
your ISP. You can see the page as follows :

TL-R4000 Enterprise Broadband Router User Guide
13
Figure 4-4 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP,
including IP address, Subnet Mask, Default Gateway, etc. Click the Renew button to
renew the IP parameters from your ISP. Click the Release button to release the IP
parameters.
MTU Size: The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. For some ISPs you need to reduce the MTU. But this is
rarely required, and should not be done unless you are sure it is necessary for your
ISP connection.
If your ISP gives you one or two DNS addresses, select Use These DNS Servers
and enter the primary and secondary addresses into the correct fields. Otherwise,
the DNS servers will be assigned dynamically from ISP.
)Note:
If you get ‘Address not found' errors when you go to a Web site, it is likely that your
DNS servers are set up improperly. You should contact your ISP to get DNS server
addresses.
Get IP with Unicast DHCP: A few ISPs' DHCP servers do not support the
broadcast applications. If you cannot get the IP address normally, you can choose
this option. (You generally need not check this option).
If you are also given a user name and a password for 802.1x authentication, you
should select 802.1x + Dynamic IP for WAN Connection Type, a user name and a
password will then appear, shown in Figure 4-5a:

TL-R4000 Enterprise Broadband Router User Guide
14
Figure 4-5a WAN - 802.1X + Dynamic IP
¾User Name - Enter the user name for 802.1x authentication provided by your ISP
¾Password - Enter the password for 802.1x authentication provided by your ISP.
Click the Login button to start 802.1x authentication.
Click the Logout button to end 802.1x authentication.
2. If you choose Static IP, you should have fixed IP parameters specified by your ISP.
The Static IP settings page will appear, shown in Figure 4-6:
Figure 4-6 WAN - Static IP
You should type the following parameters into the spaces provided:
¾IP Address -Enter the IP address in dotted-decimal notation provided by your ISP.
¾Subnet Mask - Enter the subnet Mask in dotted-decimal notation provided by your
ISP, usually is 255.255.255.0.
¾Default Gateway: (Optional) Enter the gateway IP address in dotted-decimal
notation provided by your ISP.
¾MTU Size - The normal MTU (Maximum Transmission Unit) value for most
Ethernet networks is 1500 Bytes. For some ISPs you may need to modify the MTU.
But this is rarely required, and should not be done unless you are sure it is
necessary for your ISP connection.
¾Primary DNS - (Optional) Type the DNS address in dotted-decimal notation
provided by your ISP.
¾Secondary DNS - (Optional) Type another DNS address in dotted-decimal notation
provided by your ISP if provided.