TP-Link TL-R860 User manual

TL-R860
Cable/DSL Router
Rev: 1.1.0
19100100342

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered
trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are
trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to
make any derivative such as translation, transformation, or adaptation without permission
from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2010 TP-LINK TECHNOLOGIES
CO., LTD. All rights reserved.
http://www.tp-link.com

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference in a residential installation. This
equipment generates, uses and can radiate radio frequency energy and, if not installed
and used in accordance with the instructions, may cause harmful interference to radio
communications. However, there is no guarantee that interference will not occur in a
particular installation. If this equipment does cause harmful interference to radio or
television reception, which can be determined by turning the equipment off and on, the
user is encouraged to try to correct the interference by one or more of the following
measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and receiver.
•Connect the equipment into an outlet on a circuit different from that to which the
receiver is connected.
•Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the following
two conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that
may cause undesired operation.
Any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
CE Mark Warning
This is a class B product. In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.
SAFETY NOTICES
Caution: Do not use this product near water, for example, in a wet basement or near a
swimming pool.
Avoid using this product during an electrical storm. There may be a remote risk
of electric shock from lightning.
CAN ICES-3(B)/NMB-3(B)

CONTENTS
Package Contents..........................................................................................1
Chapter 1. Introduction ..............................................................................2
1.1 Overview of the Router ................................................................................... 2
1.2 Features .......................................................................................................... 2
1.3 Panel Layout ................................................................................................... 3
1.3.1 The Front Panel.................................................................................... 3
1.3.2 The Rear Panel .................................................................................... 3
Chapter 2. Connecting the Router ............................................................5
2.1 System Requirements..................................................................................... 5
2.2 Installation Environment Requirements........................................................... 5
2.3 Connecting the Router .................................................................................... 5
Chapter 3. Quick Installation Guide ..........................................................7
3.1 TCP/IP configuration ....................................................................................... 7
3.2 Quick Installation Guide .................................................................................. 8
Chapter 4. Configuring the Router.......................................................... 11
4.1 login ...............................................................................................................11
4.2 Status .............................................................................................................11
4.3 Quick Setup................................................................................................... 12
4.4 Network ......................................................................................................... 12
4.4.1 LAN .................................................................................................... 13
4.4.2 WAN ................................................................................................... 13
4.4.3 MAC Clone ......................................................................................... 18
4.5 DHCP............................................................................................................ 19
4.5.1 DHCP Settings ................................................................................... 20
4.5.2 DHCP Clients List ............................................................................... 21
4.5.3 Address Reservation .......................................................................... 21
4.6 Forwarding .................................................................................................... 22
4.6.1 Virtual Servers .................................................................................... 23
4.6.2 Port Triggering .................................................................................... 24
4.6.3 DMZ.................................................................................................... 26
4.6.4 UPnP .................................................................................................. 27
4.7 Security ......................................................................................................... 28
4.7.1 Firewall ............................................................................................... 28
4.7.2 IP Address Filtering ............................................................................ 29
4.7.3 Domain Filtering ................................................................................. 31
4.7.4 MAC Address Filtering........................................................................ 33
4.7.5 Remote Management ......................................................................... 34
4.7.6 Advanced Security.............................................................................. 35

4.8 Static Routing ................................................................................................ 37
4.9 IP QoS........................................................................................................... 38
4.10 IP & MAC Binding Setting ............................................................................. 39
4.10.1 Binding Setting ................................................................................... 39
4.10.2 ARP List.............................................................................................. 41
4.11 Dynamic DNS................................................................................................ 42
4.11.1 Dyndns.org DDNS .............................................................................. 42
4.11.2 Oray.net DDNS................................................................................... 42
4.11.3 Comexe.cn DDNS .............................................................................. 43
4.12 System Tools................................................................................................. 44
4.12.1 Time.................................................................................................... 45
4.12.2 Diagnostic........................................................................................... 46
4.12.3 Firmware ............................................................................................ 47
4.12.4 Factory Defaults ................................................................................. 48
4.12.5 Backup and Restore ........................................................................... 48
4.12.6 Reboot................................................................................................ 49
4.12.7 Password............................................................................................ 49
4.12.8 Syslog................................................................................................. 50
4.12.9 Statistics ............................................................................................. 51
Appendix A: FAQ..........................................................................................52
Appendix B: Configuring the PCs ..............................................................56
Appendix C: Specifications.........................................................................60
Appendix D: Glossary .................................................................................61

TL-R860 Cable/DSL Router User Guide
Package Contents
The following contents should be found in your package:
¾One TL-R860 Cable/DSL Router
¾One Power Adapter for TL-R860 Cable/DSL Router
¾Quick Installation Guide
¾One Resource CD for TL-R860 Cable/DSL Router, including:
•This Guide
•Other Helpful Information
)Note:
Make sure that the package contains the above items. If any of the listed items are
damaged or missing, please contact with your distributor.
- 1 -

TL-R860 Cable/DSL Router User Guide
Chapter 1. Introduction
1.1 Overview of the Router
The TL-R860 Cable/DSL Router integrates an 8-port switch, firewall, and NAT-router. Its
design is dedicated to Small Office/Home Office (SOHO) network solutions. The TL-R860
Cable/DSL Router will allow you to connect your network better than ever, sharing Internet
Access, files and fun, easily and securely.
The TL-R860 Cable/DSL Router provides flexible access control so that parents or network
administrators can establish restricted access policies for children or staff. It has built-in NAT
and DHCP server supporting static IP address distributing. It supports Virtual Server and
DMZ host for Port Triggering needs, and remote management and log so that network
administrators can manage and monitor the network on real time. It also supports VPN
pass-through for sensitive data secure transmission.
The TL-R860 Cable/DSL Router is easy-to-manage. Quick Setup is supported and
friendly help messages are provided for every step. So you can configure it quickly and
share Internet access, files and fun comfortably.
1.2 Features
¾Complies with IEEE 802.1x, IEEE 802.3, IEEE 802.3u, IEEE 802.3x standards
¾Built in 8-port 10/100Mbps switch
¾Ethernet connection to a WAN device, such as a Cable modem or DSL modem
¾Shares data and Internet access for the network, connecting Internet through
PPPoE on demand and disconnecting when idle
¾Built-in NAT and DHCP server supporting static IP address distributing
¾Supports Virtual Server, Port Triggering, and DMZ host
¾Built-in firewall supporting IP address filtering, Domain Name filtering, and MAC
address filtering
¾Supports connecting/disconnecting Internet at a specified time of day
¾Supports access control, allowing parents and network administrators to establish
restricted access policies based on the time of day for children or staff
¾Supports TCP/IP, PPPoE, DHCP, ICMP, NAT, SNTP
¾Supports UPnP, Dynamic DNS, Static Routing, VPN pass-through
¾Supports Traffic Statistics
¾Supports ICMP-FLOOD, UDP-FLOOD, TCP-SYN-FLOOD filter
¾Ignores Ping packets from WAN or LAN ports
¾Supports firmware upgrade
¾Supports Remote and Web management
- 2 -

TL-R860 Cable/DSL Router User Guide
1.3 Panel Layout
1.3.1 The Front Panel
The front panel of the TL-R860 consists of several LED indicators, which is designed to
indicate connections. Viewed from left to right. Table 1-1 describes the LEDs on the front
panel of the router.
Figure 1-1 Front Panel sketch
Name Status Indication
Off No Power
On Power on
Power
Flashing System is beginning to be restarted
Off There is no device linked to the corresponding port
On There are devices linked to the corresponding ports but no data
transmitted or received.
WAN/1-8
(LAN)
Flashing Sending or receiving data over corresponding port
Table 1-1 The LEDs description
1.3.2 The Rear Panel
The rear panel contains the following features. (Viewed from left to right:)
¾RESET: Factory Default Reset button
There are two ways to reset the router's factory defaults:
1. Use the Factory Defaults function on System Tools -> Factory Defaults page
in the router's Web-based Utility.
2. Use the Factory Default Reset button: Press the Reset button for five seconds
and then wait for the router to reboot.
)Note:
Ensure the router is powered on before it restarts completely.
¾WAN: WAN RJ45 port for connecting the router to a cable, DSL modem or Ethernet
¾1-8: Eight LAN 10/100Mbps RJ45 ports for connecting the router to the local PCs
¾POWER: power socket: only use the power adapter supplied with the TL-R860
Cable/DSL Router, use of a different adapter may result in product damage.
- 3 -

TL-R860 Cable/DSL Router User Guide
Figure 1-2 Rear Panel sketch
- 4 -

TL-R860 Cable/DSL Router User Guide
Chapter 2. Connecting the Router
2.1 System Requirements
¾Broadband Internet Access Service (DSL/Cable/Ethernet)
¾One DSL/Cable modem that has an RJ45 connector (It’s not necessary if you
connect the router to Ethernet)
¾Each PC on the LAN needs a working Ethernet Adapter and an Ethernet cable with
RJ45 connectors
¾TCP/IP protocol must be installed on each PC
¾Web browser, such as Microsoft Internet Explorer 5.0 or later, Netscape Navigator
6.0 or later
2.2 Installation Environment Requirements
¾Not in direct sunlight or near a heater or heating vent
¾Not cluttered or crowded. There should be at least 2 inches (5 cm) of clear space on
all sides of the router
¾Well ventilated (especially if it is in a closet)
¾Operating temperature: 0 ~40 (32 ~104 )℃℃℉ ℉
¾Operating Humidity: 10%~90%RH, Non-condensing
2.3 Connecting the Router
Before you install the router, you should connect your PC to the Internet through your
broadband service successfully. If there is any problem, please contact with your ISP for
help. After that, please install the router according to the following steps. Don't forget to
pull out the power plug and keep your hands dry.
1. Power off your PC(s), Cable/DSL modem, and the router.
2. Connect the PC(s) and all Switches/Hubs on your LAN to the LAN Ports on the
router, shown in Figure 2-1.
3. Connect the DSL/Cable modem to the WAN port on the router, shown in Figure 2-1.
4. Connect the power adapter to the power socket on the router, and the other end into
an electrical outlet. The router will start to work automatically.
5. Power on your PC(s) and Cable/DSL modem.
- 5 -

TL-R860 Cable/DSL Router User Guide
Figure 2-1 Hardware Installation of the TL-R860 Cable/DSL Router
- 6 -

TL-R860 Cable/DSL Router User Guide
Chapter 3. Quick Installation Guide
After connecting the TL-R860 router into your network, you should configure it. This
chapter describes how to configure the basic functions of your TL-R860 Cable/DSL
Router. These procedures may take you only a few minutes. You can access the Internet
via the router immediately after it has been successfully configured.
3.1 TCP/IP configuration
The default IP address of the TL-R860 Cable/DSL Router is 192.168.1.1, and the default
Subnet Mask is 255.255.255.0. These values can be seen from the LAN, and can be
changed as your desire. As an example, we use the default values for description in this
guide.
Connect the local PCs to the LAN ports on the router. There are then two means to
configure the IP address for your PCs.
¾Configure the IP address manually
1) Set up the TCP/IP Protocol for your PC. If you need instructions as to how to do
this, please refer to Appendix B: "Configuring the PC."
2) Configure the network parameters. The IP address is 192.168.1.x ("x" is any
number from 2 to 254), Subnet Mask is 255.255.255.0, and Gateway is
192.168.1.1 (The router's default IP address)
¾Obtain an IP address automatically
1) Set up the TCP/IP Protocol in "Obtain an IP address automatically" mode on
your PC. If you need instructions as to how to do this, please refer to Appendix
B: "Configuring the PC."
2) Then the built-in DHCP server will assign IP address for the PC.
)Note:
For Windows 98 OS or earlier, the PC and router may need to be restarted.
Now, you can run the Ping command in the command prompt to verify the network
connection between your PC(s) and the router. The following example is in Windows
2000.
Open a command prompt, and type ping 192.168.1.1, then press Enter.
- 7 -

TL-R860 Cable/DSL Router User Guide
Figure 3-1 Successful result of Ping command
If the result displayed is similar to what is shown in Figure 3-1, the connection between
your PC and the router has been established.
Figure 3-2 Failed result of Ping command
If the result displayed is similar to what is shown in Figure 3-2, it means that your PC has
not connected to the router. If so, refer to the following steps for a solution:
1. Is the connection between your PC and the router correct?
)Note:
The Link/Act LEDs of LAN port on the router and LEDs on your PC's adapter should be
lit.
2. Is the TCP/IP configuration for your PC correct?
)Note:
If the router's IP address is 192.168.1.1, your PC's IP address must be within the range
of 192.168.1.2 ~ 192.168.1.254.
3.2 Quick Installation Guide
With a Web-based (Internet Explorer or Netscape®Navigator) utility, the TL-R860
Cable/DSL Router is easy to configure and manage. The Web-based utility can be used
on any Windows, Macintosh or UNIX OS with a web browser.
Connect to the router by typing http://192.168.1.1 in the address field of web browser.
Figure 3-3 Login to the router
- 8 -

TL-R860 Cable/DSL Router User Guide
After a moment, a login window will appear similar to that shown in Figure 3-4. Enter
admin for the User Name and Password, both in lower case letters. Then click the OK
button or press the Enter key.
Figure 3-4 Login Windows
)Note:
If the above screen does not prompt, it means that your web-browser has been set to a
proxy. Go to Tools menu>Internet Options>Connections>LAN Settings, in the screen that
appears, cancel the Using Proxy checkbox, and click OK to finish it.
If the User Name and Password are correct, you can configure the router using the web
browser. Please click the Quick Setup link on the left of the main menu and the Quick
Setup screen will appear.
Figure 3-5 Quick Setup
Click Next, the Choose WAN Connection Type page will appear, shown in Figure 3-6.
Figure 3-6 Choose WAN Connection Type
The router supports three popular ways to connect to Internet. Please select one
compatible with your ISP, if you are given another way not listed here, refer to
Network→WAN for detailed list. Click Next to enter the necessary network parameters.
If you choose "PPPoE", you will see this page shown in Figure 3-7:
- 9 -

TL-R860 Cable/DSL Router User Guide
Figure 3-7 Quick Setup - PPPoE
¾User Name and Password - Enter the User Name and Password provided by your
ISP. These fields are case sensitive. If you have difficulty with this process, please
contact your ISP.
If you choose " Dynamic IP", the router will automatically receive the IP parameters from
your ISP without needing to enter any parameters.
If you Choose "Static IP", the Static IP settings page will appear, shown in Figure 3-8:
Figure 3-8 Quick Setup - Static IP
)Note:
The IP parameters should have been provided by your ISP.
¾IP Address - This is the WAN IP address as seen by external users on the Internet
(including your ISP). Enter the IP address into the field.
¾Subnet Mask - The Subnet Mask is used for the WAN IP address, it is usually
255.255.255.0
¾Default Gateway - Enter the gateway into the box if required.
¾Primary DNS - Enter the DNS Server IP address into the boxes if required.
¾Secondary DNS - If your ISP provides another DNS server, enter it into this field.
Click the Next button, then you will see the Finish page:
Figure 3-9 Quick Setup - Finish
After finishing all configurations of basic network parameters, please click Finish button
to exit this Quick Setup.
- 10 -

TL-R860 Cable/DSL Router User Guide
Chapter 4. Configuring the Router
This chapter describes each web page's key functions.
4.1 login
After your successful login, you can configure and manage the router. There are eleven
main menus on the left of the web-based utility. Submenus will be available after you click
one of the main menus. The eleven main menus are: Status, Quick Setup, Network,
DHCP, Forwarding, Security, Static Routing, IP QoS, IP & MAC Binding, Dynamic
DNS and System Tools. On the right of the web-based utility, there are the detailed
explanations and instructions for the corresponding page. To apply any settings you have
altered on the page, please click the Save button.
There are the detailed explanations for each web page's key functions below.
4.2 Status
The Status page displays the router's current status and configuration. All information is
read-only.
1. LAN
This field displays the current settings or information for the LAN, including the MAC
address, IP address and Subnet Mask.
2. WAN
These parameters apply to the WAN port of the router, including MAC address, IP
address, Subnet Mask, Default Gateway, DNS Server. If PPPoE is chosen as the
WAN connection type, the Disconnect button will be shown here while you are
accessing the Internet. You can also cut the connection by clicking the button. If you
have not connected to the Internet, a Connect button will be shown, you can then
establish the connection by clicking the button.
3. Traffic Statistics
This field displays the router's traffic statistics.
4. System Up Time
This field displays the time since router is powered on or is rebooted.
- 11 -

TL-R860 Cable/DSL Router User Guide
Figure 4-1 Router Status
4.3 Quick Setup
Please refer to Section 4.2: "Quick Installation Guide."
4.4 Network
Figure 4-2 the Network menu
- 12 -

TL-R860 Cable/DSL Router User Guide
There are three submenus under the Network menu (shown in Figure 4-2): LAN, WAN
and MAC Clone. Click any of them, and you will be able to configure the corresponding
function. The detailed explanations for each submenu are provided below.
You can configure the IP parameters of the LAN on this page.
4.4.1 LAN
Figure 4-3 LAN
ysical address of the router, as seen from the LAN. The
ermines the size of the network. Normally
255.0 as the subnet mask.
he IP address of the LAN, you must use the new IP address to login
dress pool in
Host may change accordingly at the same time, you’d better re-configure it as
well.
ction type
get IP parameters from
your ISP. You can see the page as follows (Figure 4-4):
¾MAC Address - The ph
value can't be changed.
¾IP Address - Enter the IP address of your router (factory default: 192.168.1.1).
¾Subnet Mask - An address code that det
use 255.255.
)Note:
a. If you change t
to the router.
b. If the new LAN IP Address you set is not in the same subnet, the IP ad
the DHCP sever will not take effect, until they are configured properly.
c. If the new LAN IP Address you set is not in the same subnet, the Virtual Server and
DMZ
4.4.2 WAN
You can configure the WAN port parameters on this page.
First, please choose the WAN Connection Type (Dynamic IP/Static IP/PPPoE/802.1x +
Dynamic IP/802.1x + Static IP) to the Internet. The default type is PPPoE. If you aren’t
given any login parameters (fixed IP address, logging ID, etc), please select Dynamic
IP. If you are given a fixed IP (static IP), please select Static IP. If you are given a user
name and a password, please select PPPoE.If you are not sure which conne
you use currently, please contact your ISP to obtain the correct information.
1. If you choose Dynamic IP, the router will automatically
- 13 -

TL-R860 Cable/DSL Router User Guide
Figure 4-4 WAN - Dynamic IP
This page displays the WAN IP parameters assigned dynamically by your ISP,
including IP address, Subnet Mask, Default Gateway, etc. Click the Renew button to
renew the IP parameters from your ISP. Click the Release button to release the IP
parameters.
¾MTU Size: The normal MTU (Maximum Transmission Unit) value for most Ethernet
networks is 1500 Bytes. For some ISPs you need to reduce the MTU. But this is
rarely required, and should not be done unless you are sure it is necessary for your
ISP connection.
If your ISP gives you one or two DNS addresses, select Use These DNS Servers
and enter the primary and secondary addresses into the correct fields. Otherwise,
the DNS servers will be assigned dynamically from ISP.
)Note:
If you get ‘Address not found' errors when you go to a Web site, it is likely that your DNS
servers are set up improperly. You should contact your ISP to get DNS server addresses.
¾Get IP with Unicast DHCP: A few ISPs' DHCP servers do not support the
broadcast applications. If you cannot get the IP address normally, you can choose
this option. (You generally need not check this option).
- 14 -

TL-R860 Cable/DSL Router User Guide
If you are also given a user name and a password for 802.1x authentication, you
should select 802.1x + Dynamic IP for WAN Connection Type, a user name and a
password will then appear, shown in Figure 4-5:
Figure 4-5 WAN - 802.1X + Dynamic IP
¾User Name - Enter the user name for 802.1x authentication provided by your ISP
¾Password - Enter the password for 802.1x authentication provided by your ISP.
Click the Login button to start 802.1x authentication.
Click the Logout button to end 802.1x authentication.
2. If you choose Static IP, you should have fixed IP parameters specified by your ISP.
The Static IP settings page will appear, shown in Figure 4-6:
Figure 4-6 WAN - Static IP
You should type the following parameters into the spaces provided:
¾IP Address -Enter the IP address provided by your ISP.
¾Subnet Mask - Enter the subnet Mask provided by your ISP, usually is
255.255.255.0.
¾Default Gateway: (Optional) Enter the gateway IP address provided by your ISP.
¾MTU Size - The normal MTU (Maximum Transmission Unit) value for most
Ethernet networks is 1500 Bytes. For some ISPs you may need to modify the MTU.
But this is rarely required, and should not be done unless you are sure it is
necessary for your ISP connection.
- 15 -