TP-Link TL-R4000+ User manual

TL-R4000+
Load Balance Broadband Router
Rev: 1.0.1
1910010032

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered
trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are
trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to
make any derivative such as translation, transformation, or adaptation without permission
from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2008 TP-LINK TECHNOLOGIES
CO., LTD. All rights reserved.
http://www.tp-link.com

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses, and can radiate radio
frequency energy and, if not installed and used in accordance with the instruction manual,
may cause harmful interference to radio communications. Operation of this equipment in a
residential area is likely to cause harmful interference in which case the user will be
required to correct the interference at his own expense.
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that
may cause undesired operation.
Any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
EC DECLARATION OF CONFORMITY (EUROPE)
In compliance with the EMC Directive 89/336/EEC, Low Voltage Directive 73/23/EEC, this
product meets the requirements of the following standards:
¾EN55022
¾EN55024
¾EN60950
SAFETY NOTICES
Caution:
Do not use this product near water, for example, in a wet basement or near a swimming
pool.
Avoid using this product during an electrical storm. There may be a remote risk of electric
shock from lightning.

Package Contents
The following contents should be found in your package:
¾One TL-R4000+ Load Balance Broadband Router
¾One power cord for TL-R4000+ Load Balance Broadband Router
¾One Resource CD for TL-R4000+ Load Balance Broadband Router, including:
•This Guide
•Other Helpful Information
¾Mounting kits for installing in a standard 19” rack
)Note:
Make sure that the package contains the above items. If any of the listed items are
damaged or missing, please contact with your distributor.

CONTENTS
Chapter 1. Introduction.................................................................................................... 6
1.1 Overview of the Router.................................................................................... 6
1.2 Features .......................................................................................................... 6
1.3 Panel Layout ................................................................................................... 7
1.3.1 The Front Panel.................................................................................... 7
1.3.2 The Rear Panel .................................................................................... 8
Chapter 2. Connecting the Router................................................................................... 9
2.1 System Requirements ..................................................................................... 9
2.2 Installation Environment Requirements ........................................................... 9
2.3 Connecting the Router .................................................................................... 9
Chapter 3. Quick Installation Guide............................................................................... 10
3.1 TCP/IP configuration ..................................................................................... 10
3.2 Quick Installation Guide .................................................................................11
Chapter 4. Configuring the Router ................................................................................ 15
4.1 login............................................................................................................... 15
4.2 Status ............................................................................................................ 15
4.3 Quick Setup................................................................................................... 16
4.4 Network......................................................................................................... 17
4.4.1 LAN .................................................................................................... 17
4.4.2 WAN ................................................................................................... 18
4.4.3 Network service detection .................................................................. 22
4.4.4 MAC Clone ......................................................................................... 22
4.4.5 Flow Balance...................................................................................... 23
4.4.6 Balance Policy.................................................................................... 24
4.4.7 Bandwidth Control .............................................................................. 26
4.4.8 VLAN .................................................................................................. 26
4.4.9 Port Mirror........................................................................................... 27
4.5 DHCP ............................................................................................................ 27
4.5.1 DHCP Settings ................................................................................... 27
4.5.2 DHCP Clients List............................................................................... 28
4.5.3 Address Reservation .......................................................................... 29
4.6 Forwarding .................................................................................................... 30
4.6.1 Virtual Servers .................................................................................... 30
4.6.2 Port Triggering .................................................................................... 32
4.6.3 DMZ.................................................................................................... 34
4.6.4 UPnP .................................................................................................. 34
4.7 5.7 Security ................................................................................................... 35
4.7.1 Firewall ............................................................................................... 35
4.7.2 IP Address Filtering ............................................................................ 36
4.7.3 Domain Filtering ................................................................................. 38
4.7.4 MAC Filtering...................................................................................... 39
4.7.5 Remote Management ......................................................................... 41

4.7.6 Advanced Security.............................................................................. 42
4.8 Static Routing ................................................................................................ 43
4.9 DDNS ............................................................................................................ 44
4.10 System Tools................................................................................................. 45
4.10.1 Time.................................................................................................... 45
4.10.2 Firmware ............................................................................................ 46
4.10.3 Factory Defaults ................................................................................. 47
4.10.4 Reboot................................................................................................ 47
4.10.5 Password............................................................................................ 48
4.10.6 Log ..................................................................................................... 49
4.10.7 Statistics ............................................................................................. 49
Appendix A: FAQ............................................................................................................. 51
Appendix B: Configuring the PCs .................................................................................... 54
Appendix C: Specifications.............................................................................................. 58
Appendix D: Glossary ..................................................................................................... 59

TL-R4000+ Enterprise Broadband Router User Guide
- 6 -
Chapter 1. Introduction
1.1 Overview of the Router
The TL-R4000+ Load Balance Broadband Router possesses excellent throughput and
driving load capability, which consumedly meets the requirements from Internet café and
small/medium/sizable enterprise with volumes of users, making a more expedite
communication. The superior performance will bring you full-new experience of a
non-bottle-neck network.
TL-R4000+ Load Balance Broadband Router makes plenty of applications become a
reality. It can be used for constructing intranet FTP, WEB, and Mail server, etc.
Inaccessibly, it features network game ports opened, MSN audio conversation and
special application setting, providing much more additional value to your network.
TL-R4000+ Load Balance Broadband Router provides two WAN ports, with plugging two
wan lines, the export bandwidth of it could be doubled, enjoying multiple service from
different ISPs. The router features fully automatically load balance policy, no need for
any manually work, it works with backup and load balancing functions. The connection
will furbish when one line is broken down, while the streaming will part automatically.
Featuring firewall and VPN Pass through, the TL-R4000+ Load Balance Broadband
Router resists most common Internet attacks and ensures secure data connectivity and
transmission over the Internet. And the expansion slot for fiber module, sharing with
WAN Port, brings an additional solution for fiber access.
TL-R4000+ Load Balance Broadband Router is easy-to-manage. Quick Setup is
supported and friendly help messages are provided for every step. So you can configure
it quickly and share Internet access, files and fun comfortably.
1.2 Features
¾Intel IXP core, main frequency up to 533Hz
¾Complies with IEEE802.3, IEEE802.3u standards
¾3 LAN ports, 2 WAN ports, backup connections automatically for each other
¾One expansion slot for fiber module, sharing with WAN port, supports fiber access.
¾Support Port Bandwidth Control, Port Mirror, Port-based VLAN for LAN ports
¾Built-in NAT and DHCP server supporting static IP address distributing
¾Supports Virtual Server, Port Triggering, and DMZ host
¾Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC
address filtering
¾Supports connecting/disconnecting Internet at a specified time of day
¾Supports access control, allowing parents and network administrators to establish
restricted access policies based on the time of day for children or staff
¾Supports TCP/IP, PPPoE, DHCP, ICMP, NAT, SNTP

TL-R4000+ Enterprise Broadband Router User Guide
- 7 -
¾Supports UPnP, Dynamic DNS, Static Routing, VPN pass-through
¾Supports Traffic Statistics
¾Supports ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter
¾Ignores Ping packets from WAN or LAN ports
¾Supports firmware upgrade
¾Supports Remote and Web management
¾Standard 19-inch rack-mountable steel case
1.3 Panel Layout
1.3.1 The Front Panel
The front panel of the TL-R4000+ consists of several LED indicators, which is designed
to indicate connections. Viewed from left, Table 1-1 describes the LEDs on the front
panel of the router.
Figure 1-1 Front Panel sketch
Name Action Description
Not lit The router is power on
Power Lit up The router is power off
Not lit The router works properly
M1 Lit up The router has a hardware error
Not lit The router has a hardware error
Lit up The router has a hardware error
M2
Flashing The router works properly
M1 and M2 are flashing
synchronously, the router is
restoring the factory default
settings.
Not lit There is no device linked to the corresponding port
Lit up
There is a device linked to the corresponding port but no
activity
Link/Act
Flashing There is an active device linked to the corresponding port
Not lit The linked device is running at 10Mbps
Speed Lit up The linked device is running at 100Mbps
Table 1-1 The LEDs description
The front panel contains the following features. (Viewed from left to right:)
¾Factory Default Reset button
There are two ways to reset the router's factory defaults:
1. Use the Factory Defaults function on System Tools -> Factory Defaults page
in the router's Web-based Utility.
2. Use the Factory Default Reset button: First, turn off the router's power. Second,
press the default reset button, then turn on the router's power, and hold the
reset button until the M1 and M2 LED flash simultaneously (about 3 seconds).
At last, release the reset button and wait for the router to reboot.

TL-R4000+ Enterprise Broadband Router User Guide
- 8 -
)Note:
Ensure the router is powered on before it restarts completely.
¾LAN 10/100Mbps RJ45 port for connecting the router to the local PCs
¾WAN RJ45 port for connecting the router to a cable, DSL modem or Ethernet
¾One expansion slot for fiber module, sharing with WAN port, the recommended
module is TL-SM21 series.
1.3.2 The Rear Panel
The rear panel of the TL-R4000+ only features a power receptacle, which is an AC
power receptacle. Connect the female of the power cord head here, and the male head
to the AC power outlet.
100-240V 50-60Hz 0.6A~
Figure 1-2: Rear Panel sketch

TL-R4000+ Enterprise Broadband Router User Guide
- 9 -
Chapter 2. Connecting the Router
2.1 System Requirements
¾Broadband Internet Access Service (DSL/Cable/Ethernet)
¾One DSL/Cable modem that has an RJ45 connector (It’s not necessary if you
connect the router to Ethernet)
¾Each PC on the LAN needs a working Ethernet Adapter and an Ethernet cable with
RJ45 connectors
¾TCP/IP protocol must be installed on each PC
¾Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator
6.0 or later
2.2 Installation Environment Requirements
¾Not in direct sunlight or near a heater or heating vent
¾Not cluttered or crowded. There should be at least 2 inches (5 cm) of clear space on
all sides of the router
¾Well ventilated (especially if it is in a closet)
¾Operating temperature: 0℃~40℃(32℉~104℉)
¾Operating Humidity: 10%~90%RH, Non-condensing
2.3 Connecting the Router
Before you install the router, you should connect your PC to the Internet through your
broadband service successfully. If there is any problem, please contact with your ISP for
help. After that, please install the router according to the following steps. Don't forget to
pull out the power plug and keep your hands dry.
1. Power off your PC(s), Cable/DSL modem, and the router.
2. Connect the PC(s) and all Switches/Hubs on your LAN to the LAN Ports on the
router, shown in figure 3-1.
3. Connect the DSL/Cable modem to the WAN port on the router, shown in Figure 2-1.
4. Connect the AC power adapter to the AC power socket on the router, and the other
end into an electrical outlet. The router will start to work automatically.
5. Power on your PC(s) and Cable/DSL modem.
TL-R4 000+
Dua l- WAN Enter pris e Bro adband R outer
LAN
To LA N
Switch/Hub
To WAN
（）XDSL Cable Ethernet、、
INTE RNE T
ISP
Figure 2-1 Hardware Installation of the TL-R4000+ Load Balance Broadband Router

TL-R4000+ Enterprise Broadband Router User Guide
- 10 -
Chapter 3. Quick Installation Guide
After connecting the TL-R4000+ router into your network, you should configure it. This
chapter describes how to configure the basic functions of your TL-R4000+ Load Balance
Broadband Router. These procedures only take you a few minutes. You can access the
Internet via the router immediately after it has been successfully configured.
3.1 TCP/IP configuration
The default IP address of the TL-R4000+ Load Balance Broadband Router is
192.168.1.1, and the default Subnet Mask is 255.255.255.0. These values can be seen
from the LAN, and can be changed as your desire. As an example, we use the default
values for description in this guide.
Connect the local PCs to the LAN ports on the router. There are then two means to
configure the IP address for your PCs.
¾Configure the IP address manually
1) Set up the TCP/IP Protocol for your PC. If you need instructions as to how to do
this, please refer to Appendix B: "Configuring the PC."
2) Configure the network parameters. The IP address is 192.168.1.xxx ("xxx" is
any number from 2 to 254), Subnet Mask is 255.255.255.0, and Gateway is
192.168.1.1 (The router's default IP address)
¾Obtain an IP address automatically
1) Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on
your PC. If you need instructions as to how to do this, please refer to Appendix
B: "Configuring the PC."
2) Then the built-in DHCP server will assign IP address for the PC.
)Note:
For Windows 98 OS or earlier, the PC and router may need to be restarted.
Now, you can run the Ping command in the command prompt to verify the network
connection between your PC(s) and the router. The following example is in Windows
2000.
Open a command prompt, type ping 192.168.1.1, and then press Enter.

TL-R4000+ Enterprise Broadband Router User Guide
- 11 -
Figure 3-1 Successful result of Ping command
If the result displayed is similar to what is shown in Figure 3-1, the connection between
your PC and the router has been established.
Figure 3-2 Failed result of Ping command
If the result displayed is similar to what shown in Figure 3-2, it means that your PC has
not connected to the router. If so, refer to the following steps for a solution.
1. Is the connection between your PC and the router correct?
)Note:
The Link/Act LEDs of LAN port on the router and LEDs on your PC's adapter should be
lit.
2. Is the TCP/IP configuration for your PC correct?
)Note:
If the router's IP address is 192.168.1.1, your PC's IP address must be within the range
of 192.168.1.2 ~ 192.168.1.254.
3.2 Quick Installation Guide
With a Web-based (Internet Explorer or Netscape®Navigator) utility, the TL-R4000+
Load Balance Broadband Router is easy to configure and manage. The Web-based
utility can be used on any Windows, Macintosh or UNIX OS with a web browser.
Connect to the router by typing http://192.168.1.1 in the address field of web browser.
Figure 3-3 Login to the router
After a moment, a login window will appear similar to that shown in Figure 3-4. Enter

TL-R4000+ Enterprise Broadband Router User Guide
- 12 -
admin for the User Name and Password, both in lower case letters. Then click the OK
button or press the Enter key.
Figure 3-4 Login Windows
)Note:
If the above screen does not prompt, it means that your web-browser has been set to a
proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that
appears, cancel the Using Proxy checkbox, and click OK to finish it.
If the User Name and Password are correct, you can configure the router using the web
browser. Please click the Quick Setup link on the left of the main menu and the Quick
Setup screen will appear.
Figure 3-5 Quick Setup
)Note:
As it’s shown in the picture above, the quick setup is only used for WAN Port 1, for WAN
Port 2 setting, refer to Network->WAN.
Click Next, the Choose WAN Connection Type page will appear, shown in Figure 3-6.

TL-R4000+ Enterprise Broadband Router User Guide
- 13 -
Figure 3-6 Choose WAN Connection Type
The router supports three popular ways to connect to Internet. Please select one
compatible with your ISP, if you are given another way not listed here, refer to
Network->WAN for detailed list. Click Next to enter the necessary network parameters.
If you choose "PPPoE", you will see this page shown in Figure 3-7:
Figure 3-7 Quick Setup - PPPoE
¾Account Name and Password - Enter the Account Name and Password
provided by your ISP. These fields are case sensitive. If you have difficulty with this
process, please contact your ISP.
If you choose "Dynamic IP", the router will automatically receive the IP parameters from
your ISP without needing to enter any parameters.
If you Choose "Static IP", the Static IP settings page will appear, shown in Figure 3-8:
Figure 3-8 Quick Setup - Static IP
)Note:
The IP parameters should have been provided by your ISP.
¾IP Address - This is the WAN IP address as seen by external users on the Internet
(including your ISP). Enter the IP address into the field.

TL-R4000+ Enterprise Broadband Router User Guide
- 14 -
¾Subnet Mask - The Subnet Mask is used for the WAN IP address, it is usually
255.255.255.0.
¾Default Gateway - Enter the gateway into the box if required.
¾Primary DNS - Enter the DNS Server IP address into the boxes if required.
¾Secondary DNS - If your ISP provides another DNS server, enter it into this field.
Click the Next button, then you will see the Finish page:
Figure 3-9 Quick Setup - Finish
After finishing all configurations of basic network parameters, please click Finish button
to exit this Quick Setup.
)Note:
Refer to the Status page to check if there is WAN IP address before you use internet, in
case.

TL-R4000+ Enterprise Broadband Router User Guide
- 15 -
Chapter 4. Configuring the Router
This chapter describes each web page's key functions.
4.1 login
After your successful login, you can configure and manage the router. There are nine main
menus on the left of the web-based utility. Submenus will be available after you click one
of the main menus. The nine main menus are: Status, Quick Setup, Network, DHCP,
Forwarding, Security, Static Routing, DDNS and System Tools. On the right of the
web-based utility, there are the detailed explanations and instructions for the
corresponding page. To apply any settings you have altered on the page, please click the
Save button.
There are the detailed explanations for each web page's key functions below.
4.2 Status
The Status page displays the router's current status and configuration. All information is
read-only.
1. Firmware version & Hardware version
2. LAN
This field displays the current settings or information for the LAN, including the MAC
address, IP address and Subnet Mask.
3. WAN 1 & WAN 2
These parameters apply to the WAN port of the router, including MAC address, IP
address, Subnet Mask, Default Gateway, DNS server and WAN connection type.
If PPPoE is chosen as the WAN connection type, the Disconnect button will be
shown here while you are accessing the Internet. You can also cut the connection by
clicking the button. If you have not connected to the Internet, a Connect button will be
shown, you can then establish the connection by clicking the button.
4. Traffic Statistics
This field displays the router's traffic statistics.
5. System Up Time
The time of the router running from the time it is powered on or is reset.

TL-R4000+ Enterprise Broadband Router User Guide
- 16 -
Figure 4-1 Router Status
4.3 Quick Setup
Please refer to Section 3.2: "Quick Installation Guide."

TL-R4000+ Enterprise Broadband Router User Guide
- 17 -
4.4 Network
Figure 4-2 Network menu
There are nine submenus under the Network menu: LAN, WAN, Network Service
Detection, MAC Clone, Flow Balance, Balance Policy, Bandwidth, VLAN and Port
Mirror. Click any of them, and you will be able to configure the corresponding function.
The detailed explanations for each submenu are provided below.
4.4.1 LAN
You can configure the IP parameters of the LAN on this page.
Figure 4-3 LAN
¾MAC Address - The physical address of the router, as seen from the LAN. The
value can't be changed.
¾IP Address - Enter the IP address of your router in dotted-decimal notation (factory
default: 192.168.1.1).
¾Subnet Mask - An address code that determines the size of the network. Normally
use 255.255.255.0 as the subnet mask.
)Note:
a. If you change the IP address of the LAN, you must use the new IP address to login
to the router.
b. If the new LAN IP Address you set is not in the same subnet, the IP Address pool of
the DHCP sever will not take effect, until it is re-configured.

TL-R4000+ Enterprise Broadband Router User Guide
- 18 -
c. If the new LAN IP Address you set is not in the same subnet, the Virtual Server and
DMZ Host may change accordingly at the same time, you’d better re-configure it as
well.
4.4.2 WAN
You can configure the WAN port parameters on this page.
First thing first, choose the right WAN port you are using (WAN 1/WAN 2). Glance the
web, choose the corresponding connection option as your situation. If you are not sure
what do you use currently, please contact your ISP to obtain the correct information.
1. If you choose Dynamic IP, the router will automatically get IP parameters from
your ISP. You can see the page as follows (Figure 4-4):
Figure 4-4 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP,
including IP address, Subnet Mask, Default Gateway, etc. Click the Renew button to
renew the IP parameters from your ISP. Click the Release button to release the IP
parameters.
MTU Size: The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. For some ISPs you need to reduce the MTU. But this is
rarely required, and should not be done unless you are sure it is necessary for your
ISP connection.

TL-R4000+ Enterprise Broadband Router User Guide
- 19 -
If your ISP gives you one or two DNS addresses, select Use These DNS Servers
and enter the primary and secondary addresses into the correct fields. Otherwise,
the DNS servers will be assigned dynamically from ISP.
)Note:
If you get ‘Address not found' errors when you go to a Web site, it is likely that your
DNS servers are set up improperly. You should contact your ISP to get DNS server
addresses.
Get IP with Unicast DHCP: A few ISPs' DHCP servers do not support the
broadcast applications. If you cannot get the IP address normally, you can choose
this option. (You generally need not check this option).
2. If you choose Static IP, you should have fixed IP parameters specified by your ISP.
The Static IP settings page will appear, shown in Figure 4-5:
Figure 4-5 WAN - Static IP
You should type the following parameters into the spaces provided:
¾IP Address -Enter the IP address in dotted-decimal notation provided by your ISP.
¾Subnet Mask - Enter the subnet Mask in dotted-decimal notation provided by your
ISP, usually is 255.255.255.0.
¾Default Gateway: (Optional) Enter the gateway IP address in dotted-decimal
notation provided by your ISP.
¾MTU Size - The normal MTU (Maximum Transmission Unit) value for most
Ethernet networks is 1500 Bytes. For some ISPs you may need to modify the MTU.
But this is rarely required, and should not be done unless you are sure it is
necessary for your ISP connection.