About Eric Asberry
Computer geek, software developer, writer, bicycle rider and occasional runner, if something scary is chasing me.
Tag Cloud
TRENDnet User’s Guide
Cover Page
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
Table of Contents
i
Table of Contents
Product Overview ........................................................................... 1
Package Contents .......................................................................................................... 1
Features ......................................................................................................................... 1
Product Hardware Features........................................................................................... 3
Applications ................................................................................................................... 5
Router Installation .......................................................................... 2
Desktop Hardware Installation ...................................................................................... 2
Rack Mount Hardware Installation ................................................................................ 2
Basic Installation and Configuration .............................................................................. 3
Basic Router Settings ....................................................................... 8
Access your router management page .......................................................................... 8
Saving and applying router configuration changes ....................................................... 8
Change your administrator password ........................................................................... 8
Set your router date and time ....................................................................................... 9
Create time schedules ................................................................................................. 10
Change LAN IPv4 address settings ............................................................................... 11
Configure LAN IPv4 DHCP server settings .................................................................... 12
Add static DHCP reservations ...................................................................................... 15
Add static host name entries ....................................................................................... 15
Add static ARP entries ................................................................................................. 16
Configure WAN1 / WAN2 interfaces for Internet connectivity ................................... 17
IPv6 settings ................................................................................................................. 19
Virtual LANs (VLANs) .................................................................................................... 20
Create a port-based VLAN ................................................................................................ 20
Create a port-based VLAN with 802.1Q tagging .............................................................. 21
Assigning VLAN IDs to Wireless SSIDs .............................................................................. 24
Application layer gateway (ALG) ................................................................................. 26
UPnP and NAT-PMP ..................................................................................................... 27
Static routes ................................................................................................................. 27
Dynamic routing protocols .......................................................................................... 28
Routing Information Protocol (RIP).................................................................................. 28
OSPF (Open Shortest Path First) ...................................................................................... 29
Quality of Service (QoS) ............................................................................................... 30
Dynamic DNS ............................................................................................................... 32
File sharing server ........................................................................................................ 33
Wake on LAN (WoL) ..................................................................................................... 34
Wireless Networking and Security ................................................. 35
Wireless Settings ......................................................................................................... 35
Primary SSID ..................................................................................................................... 35
Multiple SSID .................................................................................................................... 37
How to choose the type of wireless security ............................................................... 38
Secure your wireless network ..................................................................................... 39
Guest Network............................................................................................................. 41
WiFi client bridge mode .............................................................................................. 42
Connect wireless devices using WPS ........................................................................... 43
Steps to improve wireless connectivity ....................................................................... 45
Firewall & security settings ........................................................... 46
General settings ........................................................................................................... 46
Port forwarding rules................................................................................................... 47
Port trigger rules .......................................................................................................... 48
IP filtering .................................................................................................................... 49
MAC filtering ................................................................................................................ 50
Denial of service (DoS) prevention .............................................................................. 51
DMZ Host ..................................................................................................................... 51
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
Table of Contents
ii
One-to-One NAT .......................................................................................................... 52
RADIUS Authentication ................................................................................................ 54
Multiple WAN Configuration ......................................................... 55
Multiple WAN Management Settings .......................................................................... 55
MWAN Status ................................................................................................................... 55
Link Tracking .................................................................................................................... 55
Default Traffic Rule .......................................................................................................... 56
Web Management System (Router Limits™) .................................. 57
Setup your router with Router Limits .......................................................................... 57
Router Limits Content Management ........................................................................... 59
Virtual Private Networking (VPN) .................................................. 62
Creating a Virtual Private Network (VPN) .................................................................... 62
PPTP VPN Server .......................................................................................................... 63
Setting up the PPTP VPN server ....................................................................................... 63
Setting up the PPTP VPN client (Windows) ...................................................................... 65
L2TP VPN Server .......................................................................................................... 66
Setting up the L2TP VPN server without IPsec encryption .............................................. 66
Setting up the L2TP VPN server with IPsec encryption (PSK) ........................................... 68
Setting up the L2TP VPN client (Windows) with IPsec encryption (PSK) ......................... 70
IPsec (Internet Protocol Security) ................................................................................ 72
Setting up IPsec site-to-site VPN (PSK) ............................................................................. 72
Setting up IPsec server VPN (PSK with xAUTH) ................................................................ 75
Setting up IPsec site-to-site VPN Failover (PSK) ............................................................... 78
Secure Socket Layer VPN (SSL) / OpenVPN.................................................................. 83
SSL VPN Server Setup ....................................................................................................... 83
SSL VPN Client Setup (Windows)...................................................................................... 84
Certificate Management .............................................................................................. 88
IPsec ................................................................................................................................. 88
OpenVPN .......................................................................................................................... 89
Router Maintenance and Monitoring ............................................ 90
Managing access to the router management interface .............................................. 90
Local Access Management ............................................................................................... 90
Remote Access Management .......................................................................................... 90
Diagnostic tools ........................................................................................................... 91
Backup and restore your router configuration settings .............................................. 92
Reboot your router ...................................................................................................... 92
Scheduled automatic reboot ....................................................................................... 93
Console access ............................................................................................................. 93
Command Line Interface ............................................................................................. 93
Router Default Settings ............................................................................................... 94
Reset your router to factory defaults .......................................................................... 94
Upgrade your router firmware .................................................................................... 95
Ping Watchdog ............................................................................................................ 97
Local Access Management ............................................................................................... 97
Check the router status information ........................................................................... 98
View routing table and ARP entries ........................................................................... 100
View your router logging ........................................................................................... 101
Configure router logging settings and setup external syslog server .............................. 101
Technical Specifications .............................................................. 102
Troubleshooting ......................................................................... 105
Appendix .................................................................................... 106
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
1
Product Overview
TEW-829DRU
Package Contents
In addition to your router, the package includes:
• Quick Installation Guide
• 6 x detachable high gain antennas
• Network cable (1.5 m/5 ft.)
• RJ-45 to RS-232 console cable (1.5m / 5 ft.)
• Power adapter (12V DC, 3 A)
• Rack mount kit
If any package contents are missing or damaged, please contact the retail store, online
retailer, or reseller/distributor from which the product was purchased.
Features
TRENDnet’s AC3000 Tri-Band Wireless Gigabit Dual-WAN VPN SMB Router, model TEW-
829DRU, features three concurrent WiFi bands to maximize device networking speeds:
two separate high performance 802.11ac networks (5GHz1: 1733Mbps / 5GHz2:
867Mbps), and a 400Mbps Wireless N network. It features dual-WAN ports for load
balancing or fail-over modes, and encrypted Virtual Private Network (VPN) access for
remote users. Dual-WAN ports smooth network loading, minimize network downtime,
and allow employees to access your network from the Internet—all with a single router.
This wireless router features advanced management, QoS, VLAN, VPN, and other
capabilities to ensure optimal performance, scalability, and protection of your network.
Intelligently manage your offices’ web access with our advanced contenting filtering
tool, increase employee productivity and finally take control of your internet.
Dual-WAN
Supports up to two separate WAN internet connections for load-balancing or fail-over
modes
Ports
2 x Gigabit WAN ports, 8 x Gigabit LAN ports, 1 x USB 3.0 port, 1 x Console port
Tri-Band WiFi
Three concurrent WiFi bands maximize device networking speeds: two separate high
performance 802.11ac networks 1733Mbps (5GHz1) + 867Mbps (5GHz2) + 400Mbps
(2.4GHz) bands
Pre-Encrypted Wireless
For your convenience the router’s WiFi bands are pre-encrypted with their own unique
passwords
VPN
Supports IPsec, PPTP, L2TP w/ IPsec, and SSL VPN protocols for encrypted remote access
to local area network (LAN) resources over the internet
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
2
Inter-VLAN Routing
Provides routing capabilities between VLANs
QoS
Intelligently prioritize voice, video, and other data traffic to improve network efficiency
and overall performance
Rack Mount Design
Sturdy metal housing with rack mount brackets included
Wall Mountable
Wall mount ready
Online Firmware Updates
Automatic notification of firmware updates
Management
Supports web browser (HTTP, HTTPS), CLI, SSH and Telnet management
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
3
Product Hardware Features
Front Panel View
Rear Panel View
Ground
Point
Security
Slot
RJ-45
Console
Port
USB 3.0
Port
Gigabit
LAN Ports
1-8
WAN1
Port
WAN2
Port
LED
Indicators
High Gain
Detachable
Antennas
Reset
Button
Power
Port
On(-)/Off(o)
Power Switch
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
4
LED Indicators
LED
Description
Solid Blue – Device is receiving power and turned on.
Off – Device is not receiving power or turned off.
Solid Blue – WPS connection process was successful. WPS
LED will remain on after successful connection for 2 minutes.
Blinking Blue – WPS is activated and setup process has
started. Within 2 minutes, start the WPS process on your
WPS client device to connect.
Off – WPS setup process has stopped or has not been
activated.
Solid Blue – 2.4GHz (2-stream) wireless radio is turned on.
Blinking Blue – Data transmission on 2.4GHz radio.
Off – 2.4GHz (2-stream) wireless radio turned off.
Solid Blue – 5GHz1 (4-stream) wireless radio is turned on.
Blinking Blue – Data transmission on 5GHz1 radio.
Off – 5GHz1 (4-stream) wireless radio turned off.
Solid Blue – 5GHz2 (2-stream) wireless radio is turned on.
Blinking Blue – Data transmission on 5GHz2 radio.
Off – 5GHz2 (2-stream) wireless radio turned off.
Port LEDs
LAN 1-8, WAN1 & WAN2 Ports
LED (Right Side)
Solid Green – Port is connected at 1Gbps link speed.
Off – Port is connected at 10Mbps or 100Mbps link speed.
LED (Left Side)
Blinking Green - Data activity/transmission on port.
Port/Button Description
Ports/Buttons
Description
Grounding Point Allows the device chassis to be connected to a known ground
point for electrical safety and protection possible shock or
surge during device operation and handling. (Grounding wire
and screw not included.)
Security Slot
Allows for an optional cable lock attachment to secure the
device to a physical location.
RJ-45 Console
Port
Using the included RJ-45 to RS-232 console cable, this
interface provides console/terminal (command line interface)
access to the device for management and troubleshooting
purposes.
Terminal Settings:
Baud: 115200 / Data: 8 / Stop: 1 / Parity: None / Flow: None
USB 3.0 Port
Allows for an optional USB storage device (flash drive,
external HDD, etc.) to be connected and used as a network
share through the Samba protocol. (FAT32/NTFS format only)
LAN Interface
Ports 1-8
Connect network devices to the LAN interface ports 1-8 at
Gigabit, 10Mbps/100Mbps Full/Half Duplex. By default,
management access to the GUI and command line interface
via default LAN IP address: 192.168.10.1 / 255.255.255.0
WAN1 Interface
Port
Connects to your Internet Service Provider (ISP) equipment
for Internet connectivity such as modem. By default, WAN
mode is set for failover and WAN1 is configured as the
primary WAN link for Internet connectivity.
WAN2 Interface
Port
Connects to your Internet Service Provider (ISP) equipment
for Internet connectivity such as modem. By default, WAN
mode is set for failover and WAN2 is configured as the
secondary WAN link for Internet connectivity.
Reset Button
Resets device to factory defaults. Using a paperclip, push and
hold the reset button for 15 seconds and release to reset the
device to factory defaults.
Power Port
Connects the included power adapter to supply device
power.
On(-)/Off(o)
Power Switch
Turns the device power On(-) or Off(o).
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
5
Applications
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
2
Router Installation
Desktop Hardware Installation
The site where you install the hub stack may greatly affect its performance. When
installing, consider the following pointers:
Note: The router model may be different than the one shown in the example
illustrations.
• Install the Router in a fairly cool and dry place.
• Install the Router in a site free from strong electromagnetic field generators (such
as motors), vibration, dust, and direct exposure to sunlight.
• Leave at least 10cm of space at the front and rear of the hub for ventilation.
• Install the Router on a sturdy, level surface that can support its weight, or in an
EIA standard-size equipment rack. For information on rack installation, see the
next section, Rack Mounting.
• When installing the Router on a level surface, attach the rubber feet to the
bottom of each device. The rubber feet cushion the hub and protect the hub
case from scratching.
Rack Mount Hardware Installation
The router can be mounted in an EIA standard-size, 19-inch rack, which can be placed in
a wiring closet with other equipment. Attach the mounting brackets at the router’s
front panel (one on each side), and secure them with the provided screws.
Then, use screws provided with the equipment rack to mount each router in the rack.
Note: The look of the router may be different than what is actually displayed.
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
3
Basic Installation and Configuration
Note: It is recommended that you configured the wireless router from a wired computer.
1. Attach the antennas to the front and back of the router and position them for the
best WiFi coverage. It is recommended that you position all antennas vertically as
shown for initial installation and adjust as needed later on.
2. Connect a network cable from the WAN1 port of your router to your modem.
3. Connect a network cable from one of the LAN ports (1-8) of your router to your
computer.
4. Connect the includes power adapter from a power outlet to your router power port
and push the Power On(-)/Off(o) switch into the On(-) position.
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
4
5. The Power (
), 2.4G, 5G1, 5G2 LEDs will turn on solid indicating that the router is
ready.
6. Open your web browser on the connected computer and in the address bar, enter
http://tew-829dru or http://192.168.10.1 and press Enter to access the router web
configuration page.
7. Enter the default User Name and Password, then click LOGIN. By default, the pre-
configured user name and password are located on the included preset wireless settings
sticker or device label located on the bottom of the router.
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
5
8. To change the administrator password for the router configuration, click
Administrator and click Administration.
Note: By default, the administrator password has been pre-configured for your
convenience and can be located on the included wireless settings sticker or on the device
label located on the bottom of the router. If you are modifying the administrator
password, you will need to log into the router configuration using the new password.
9. Enter the new administrator password in the Password field and re-type the new
password in the Confirmation field. Click Apply to save and commit the changes.
10. To change your router’s LAN IPv4 address settings, click on Network and click LAN.
11. Under Common Configuration and General Setup, enter the new LAN IPv4 address
and subnet mas in the IPv4 address and IPv4 netmask fields. Click Apply to save and
commit the changes. Please wait for the new address settings to be applied and log back
into the router web configuration page using the new LAN IPv4 address.
Note: If your computer IP address settings are not automatically updated to the new
settings, you may need to manually renew your computer IP address settings in order
for your to log back into the router web configuration with the new LAN IPv4 address
settings.
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
6
12. To configure your WAN1 Internet connection settings, click Network and click
WAN1.
13. Under Common Configuration and General Setup, click the Protocol drop-down list
and select the appropriate protocol (Static address, DHCP client, PPTP, PPPoE, L2TP) for
yoru Internet connection. DHCP client is the typical protocol in which the connection
settings are automatically obtained by your ISP (Internet Service Provider). If you are
unsure about the Internet connection settings, please contact your ISP for details. After
you have completed the Internet connection settings, click Apply to save and commit
the changes.
14. To configure your wireless network name/SSID and wireless encryption settings,
click Network and click the wireless band you would like to configure. Wireless 2.4GHz,
Wireless 5GHz1, or Wireless 5GHz2.
Note: By default, the wireless network name/SSID has been pre-configured for your
convenience and can be located on the included wireless settings sticker or on the device
label located on the bottom of the router. If you are modifying the wireless settings, you
will need to connect to the router with your WiFi clients using the new settings.
© Copyright 2019 TRENDnet. All Rights Reserved.
TRENDnet User’s Guide
TEW-829DRU
7
15. To change the wireless network name/SSID for the selected wireless band, under
Interface Configuration and General Setup, enter the new name in the ESSID field and
click Apply to save and commit the changes.
Note: The wireless network name/SSID is the name your WiFi clients will need to search
and discover when connecting to your router wireless network.
16. To change the wireless encryption key for the selected wireless band, under
Interface Configuration Wireless Security, enter the new encryption in the Key field and
click Apply to save and commit the changes.
Note: WPA2-PSK AES wireless encryption is strongly recommended. The wireless
encryption key is the key your WiFi clients will need to enter when connecting to your
router wireless network.
TRENDnet User’s Guide
TEW-829DRU
Basic Router Settings
Access your router management page
Note: Your router management page URL/domain name http://tew-829dru or IP
address http://192.168.10.1 is accessed through the use of your Internet web browser
(e.g. Internet Explorer®, Firefox®, Chrome™, Safari®, Opera™) and will be referenced
frequently in this User’s Guide.
1. Open your web browser and go to URL/domain name http://tew-829dru or IP address
http://192.168.10.1. Your router will prompt you for a user name and password.
2. For added security, the router is pre-configured with a unique administrator
password. You can find the Password on the sticker included in the router package
contents or on the device label located on the bottom of the router. Enter your
Username and Password, then click LOGIN.
• User Name: admin
• Password: (xxxxxxxx)
Note: User Name and Password are case sensitive.
Saving and applying router configuration changes
In the router management page, pages may include all, some, or one of the options
below. Some configuration changes may require a device reboot.
• Reset – Clicking this option will reset all settings to their previous configuration
on a specific page.
• Apply – Clicking this option will save and apply the configuration changes on a
specific page which will take effect immediately.
• Save – Clicking this option will temporarily save the changes and allow you to
temporarily save multiple configuration changes and apply all configuration
changes at the same time. When a configuration setting has been temporarily
saved, a notification will appear in the top right corner of the router
management page indicated that there are unsaved changes and the number
of pending configuration changes. When you are ready to save and apply the
configuration changes permanently, click on the notification in the top right
corner.
A list of all pending configuration changes will be displayed. If you are ready to
permanently save all configuration changes, click Apply. Otherwise, to discard
changes, click Revert to discard all pending configuration changes.
Change your administrator password
Administrator > Administration
© Copyright 2019 TRENDnet. All Rights Reserved.
9
TRENDnet User’s Guide
Limited Warranty
By default, the administrator password has been pre-configured a unique password for
your convenience. You can find the pre-configured administrator password on the
wireless sticker included in your router package contents or also located on the router
device label located on the bottom of the device. This section will allow you to change
the default administrator password used to log into your router management page.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Administrator and click on Administration.
3. Enter the new administrator password in the Password and re-enter the new
password in the Confirmation field. Click Apply to save and commit the changes
Note: The idle timeout setting is used to define the period of inactivity in the router
management page before automatically logging out.
Note: If you change the administrator password, you will need to access the router
management page using the User Name “admin” and the new password instead of the
pre-configured default password. If you reset the device to factory defaults, you will
need to access the router management page using the pre-configured settings on the
included wireless sticker in the router package contents or on device label located on the
bottom of the router.
Set your router date and time
Administrator > System
It is recommended to set the router date and time for scheduling functions and logging
functions for monitoring and troubleshooting.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Administrator and click on System.
3. Review the settings below. Click Apply to save and commit the changes.
System Properties
•
Local Time – Displays the current day, date, and time. Clicking the SYNC WITH
BROWSER button will automatically copy the current day, date, and time
settings from the web browser and allows the time to be set manually.
• Hostname – Modifies the router host name. The host name identifies is the
name used to identify the router to other computer or devices on the network.
Modifying this setting will modify the hostname used when accessing the
router management page using the hostname or when using the Samba USB
share feature.
• Timezone – Click the drop-down list to select the appropriate time zone.
Time Synchronization
• Enable NTP client – Enables the NTP client to configure router to obtain time
and date settings from an external network time server.
o NTP server candidates – Enter the domain name of the network time
server to obtain time and settings. (e.g. pool.ntp.org)
Note: You can add multiple time servers by clicking
. If one server
is not available, your router will try the next available server in the list.
© Copyright 2019 TRENDnet. All Rights Reserved.
10
TRENDnet User’s Guide
Limited Warranty
Create time schedules
Administrator > Schedule
Your router allows you to create schedules to specify a time period when a feature
should be activated and deactivated. Before you use the scheduling feature on your
router, ensure that your router system time and date settings are configured correctly.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Administrator and click Schedule.
3. Review the settings below. Click Add to add the new schedule to the list and Apply to
save and commit the changes.
• Name – Enter a name for the new schedule rule.
• Days – Choosing Daily will set the set the schedule rule to occur at the specified
time every day. Choosing Select Day(s) will allow to manually select which
specific days for the schedule.
• All Day – 24 Hrs – Checking this option will set the schedule to run all 24 hours
instead of manually configured a specified time period.
• Start Time / End Time – Manually define a time period for the schedule.
Note: The time period is specified in 24 hour format.
© Copyright 2019 TRENDnet. All Rights Reserved.
11
TRENDnet User’s Guide
Limited Warranty
Change LAN IPv4 address settings
Network > LAN
Note: The default LAN interface IPv4 address settings is 192.168.10.1 / 255.255.255.0
and also assigned to LAN ports 1-8 by default. If the LAN IPv4 address settings are
modified, you will need to log into the router management page with the new IPv4
address settings.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click LAN.
3. Under the Common Configuration section, you can enter the new LAN interface IP
address settings.
•
IPv4 address – Enter the new LAN IPv4 address. (e.g. 192.168.50.1)
•
IPv4 netmask – Select or Enter the new LAN IPv4 subnet mask. The drop-down
menu will list class A, B, C, or custom which will allow you to manually enter a
custom subnet mask. (e.g. 255.255.255.0)
4. Click Apply to
Below is a reference of the additional LAN settings if you choose to make other
configuration changes to these sections.
General Setup
• Status – LAN Interface (br-lan)
o Uptime – Displays the amount time the LAN interface has been up and
continuously running. This time will reset if the router is powered off
or router is rebooted.
o MAC-Address – Displays the current MAC address assigned to the LAN
interface.
o Rx – Displays the total amount of data received by the LAN interface in
MB (# of packets) since the start of the currently displayed uptime.
o Tx – Displays the total amount of data transmitted by the LAN
interface in MB (# of packets) since the start of the currently displayed
uptime.
o
IPv4: Displays the current IPv4 address settings assigned to the LAN
interface.
• Mode – Allows you to change the function between NAT mode or Route Only
(NAT-less).
o NAT – The default router mode which uses network address
translation between the local internal (LAN/VLAN) interfaces and
external (WAN1/WAN2) interfaces translating public and private IP
addressing.
o Route Only (NAT-less) – This mode disables the NAT function between
internal and external interfaces and may also be known as classical
routing mode. This mode should only be used when the router is using
for local internal IP routing only
Advanced Settings
• Override MAC Address – This parameter allows you to assign a new LAN
interface (br-lan) MAC address. Typically, this parameter does not need to be
modified. (e.g. AA:BB:CC:DD:EE:FF)
• Override MTU – The default MTU (maximum transfer unit) or frame size is set
to 1500 bytes. This parameter allows you to assign a new MTU size. Typically,
this parameter does not need to be modified.
• Use gateway metric – This is automated metric or priority value assigned to the
LAN network interface route in the routing table. Typically, this parameter does
© Copyright 2019 TRENDnet. All Rights Reserved.
12
TRENDnet User’s Guide
Limited Warranty
not need to be modified. (Lower value = Higher priority in route table, 0 being
the highest priority.)
Configure LAN IPv4 DHCP server settings
Network > LAN
Note: The internal DHCP server function is enabled by default on the LAN interface to
automatically distribute IP address settings to network devices connected to the LAN and
wireless LAN interfaces. The internal DHCP server only supports only class C IP address
range. The default IP range is 101 – 199 (192.168.10.101 – 192.168.10.199)
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click LAN.
3. Under the DHCP Server/Relay section, you can modify or enter the new DHCP settings
and click Apply to save and commit the changes.
• DHCP mode – Allows you to set the mode to Enable, Disable, or Relay.
o Enable – Using this setting enables the DHCP server function the LAN
interface.
o Disable - Using this setting disabled the DHCP server function on the
LAN interface.
o Relay – Using this setting allows you to use an external DHCP server
instead of your router’s internal DHCP server to distribute IP address
settings on the LAN interface. If choosing this setting, enter the IP
address of your external DHCP relay server.
• Start – Enter the starting value of DHCP IPv4 address range. (e.g. If your LAN
IPv4 address is 192.168.50.1, entering 120 will define the first IP address of the
DHCP pool is 192.168.50.120)
• End – Enter the ending value of DHCP IPv4 address range. (e.g. If your LAN IPv4
address is 192.168.50.1, entering 200 will define the last IP address of the DHCP
pool is 192.168.50.200)
© Copyright 2019 TRENDnet. All Rights Reserved.
13
TRENDnet User’s Guide
Limited Warranty
•
Lease Time – Enter the lease time in hours (h) or minutes (m) DHCP clients will
hold their IP address settings before automatically requesting a new lease (IP
address settings) from the internal DHCP server. (e.g. To specify 24 hours, enter
24h. To specify 480 minutes, enter 480m.)
• WINS server – Enter the IPv4 address of your WINS (Windows Internet Name
Server) for internal host name resolution on your local network to be
distributed to DHCP clients. The WINS server provides host name to IP address
resolution for the NetBIOS naming service. This parameter is optional. (e.g.
192.168.50.250)
• Primary DNS – Enter the IPv4 address of your primary DNS (Domain Name
System) server for Internet domain name resolution to be distributed to DHCP
clients. By default, the internal DHCP server uses DNS relay and provides the
router LAN IPv4 address as the primary DNS server to DHCP clients. The DNS
server provides Internet domain name to IP address resolution when
computers are accessing or browsing Internet websites. This parameter is
optional. (e.g. If entering 8.8.8.8, this DNS server will be provided DHCP clients
instead of the router’s LAN IPv4 address to resolve Internet domain names such
as trendnet.com )
• Secondary DNS – Enter the IPv4 address of your secondary DNS (Domain Name
System) server for Internet domain name resolution to be distributed to DHCP
clients. If the primary DNS server cannot be reached, the secondary DNS server
will be used. This parameter is optional. (e.g. 8.8.4.4)
•
Local domain name – Enter a domain name to distribute to DHCP clients. This
parameter is optional. (e.g. trendnet.com)
Below is a reference of the additional DHCP Server/Relay settings if you choose to make
other configuration changes to these sections.
© Copyright 2019 TRENDnet. All Rights Reserved.
14
TRENDnet User’s Guide
Limited Warranty
Advanced Settings
• Dynamic DHCP – Checking this option the enables the DHCP server to
distribute IPv4 address settings dynamically to clients. If this option is
unchecked, IPv4 address settings will only be assigned to DHCP clients with a
static DHCP reservation. Typically, this parameter does not need to be
modified.
•
Log Queries – Checking this option will enable generate logging to internal or
syslog of any DNS queries. Typically, this parameter does not need to be
modified.
© Copyright 2019 TRENDnet. All Rights Reserved.
15
TRENDnet User’s Guide
Limited Warranty
Add static DHCP reservations
Network > LAN
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click LAN.
3. Under the Static Leases section, click Add.
4. Enter the parameters for the static DHCP reservation and click Apply to save and
commit the changes.
Note: The network device or computer the reservation is created will need to release and
renew the IPv4 address settings in order to obtain the new IP address settings.
• Hostname – Enter a name for the DHCP reservation. (e.g. trendnetpc)
• MAC-Address – Enter the MAC (Media Access Control) address of the
computer or network device to assign to the reservation. You can also click the
drop-down list to select from a list of network devices detected by the router
that have been assigned IPv4 address settings through DHCP. (e.g.
AA:BB:CC:DD:EE:FF)
•
IPv4-Address – Enter the IPv4 address to assign to the computer or network
device for the reservation. You can also click the drop-down list to select from
list o of network devices detected by the router through DHCP. (e.g.
192.168.50.150)
Add static host name entries
Network > LAN
The router can be used for host name to IP address resolution of computers or network
devices on your local network similar to a WINS server however, entries will not
dynamically populate and each entry must be manually entered. For clients to resolve
the manually entered static entries, DHCP clients must use the router LAN IPv4 address
as the WINS server.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click LAN.
3. Under the Host Entries section, click Add.
4. Enter the parameters for the static host name entry and click Apply to save and
commit the changes.
• Hostname – Enter the host name. (e.g. trendnetpc)
•
IPv4-Address – Enter the IPv4 address to resolve to host name. (e.g.
192.168.50.150)
© Copyright 2019 TRENDnet. All Rights Reserved.
16
TRENDnet User’s Guide
Limited Warranty
Add static ARP entries
Network > LAN
ARP (Address Resolution Protocol) is the protocol responsible for resolve IP addresses to
hardware MAC addresses. Typically, ARP entries are dynamically learned and refreshed
in the ARP table however, in the case where your application requires static ARP entries
to always be present in the router ARP table, you can manually enter and add them to
the router. (ex. applications: WoL (Wake on LAN) or Wake on WAN)
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click LAN.
3. Under the Static ARP section, click the MAC-Address drop-down list to select a MAC
address from the list or select customer to manually enter a MAC address (format
example: aa:bb:cc:dd:ee:ff).
4. Click the IPv4-Address drop-down list and select the IPv4 address to assign to the
MAC address ARP table entry or select custom to manually enter an IPv4 address
(format example: 192.168.10.129)
5. Click Apply to save and commit the changes.
Note: You can specify additional static ARP entries by clicking Add. Delete existing
entries by clicking the Delete button next to the entry to be removed.
© Copyright 2019 TRENDnet. All Rights Reserved.
17
TRENDnet User’s Guide
Limited Warranty
Configure WAN1 / WAN2 interfaces for Internet connectivity
Network > WAN1/WAN2
By default, the WAN configuration is set to use WAN1 as the primary connection for
Internet connectivity and failover to WAN2 secondary if there is fault in connectivity to
WAN1. This section will explain how to set up the WAN1 or WAN2 interfaces for
Internet connectivity to your ISP (Internet Service Provider).
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click WAN1 or WAN2.
3. Under the Common Configuration section, click the Protocol drop-down list and
select the Internet connection provided by your ISP.
4. Complete all of the fields required by your ISP and click Apply to save and commit the
changes.
Below is a reference of the additional WAN settings if you choose to make other
configuration changes to these sections.
General Setup
• Status – LAN Interface (br-lan)
o Uptime – Displays the amount time the WAN1/WAN2 interface has
been up and continuously running. This time will reset if the router is
powered off or router is rebooted.
o MAC-Address – Displays the current MAC address assigned to the
WAN1/WAN2 interface.
o Rx – Displays the total amount of data received by the WAN1/WAN2
interface in MB (# of packets) since the start of the currently displayed
uptime.
o Tx – Displays the total amount of data transmitted by the
WAN1/WAN2 interface in MB (# of packets) since the start of the
currently displayed uptime.
o
IPv4: Displays the current IPv4 address settings assigned to the
WAN1/WAN2 interface.
• Dual WAN priority – Displays the current priority assignment for the selected
WAN interface. The WAN priority settings can be configured under Network >
Multiple WAN. By default, the WAN configuration is set to use WAN1 as the
primary connection for Internet connectivity and failover to WAN2 secondary if
there is fault in connectivity to WAN1.
• Hostname to send when requesting DHCP – If your ISP requires to send
specific hostname with the DHCP request for Internet connectivity, enter the
required host name in the field. Applies to DHCP client/PPTP/L2TP WAN
protocols.
• WAN mode – Applies to PPTP/L2TP WAN protocols.
o DHCP client – Using this option will set the WAN to obtain IP address
settings automatically from your ISP for Internet connectivity.
o Static IP – Using this option will require you to manually enter the
WAN IP settings required by your ISP for Internet connectivity.
• Connect mode – Applies to PPPoE/PPTP/L2TP WAN protocols.
o Keep alive – This option will keep the connection on at all times.
o On demand – This option will automatically disconnect after the max.
idle time is reached and will automatically re-establish connection
when Internet access is used.
© Copyright 2019 TRENDnet. All Rights Reserved.
18
TRENDnet User’s Guide
Limited Warranty
• Access concentrator / Service name – Optional parameters required only if ISP
requires for Internet connectivity. Applies to PPPoE WAN protocol.
• MPPE support– Optional parameter (applies Microsoft Point-to-Point
Encryption) required only if ISP requires for Internet connectivity. Applies to
PPTP WAN protocol.
• Use DNS servers advertised by peer- If checked, automatically obtains DNS
service IP address settings from your ISP. If unchecked, allows you to specify
custom DNS server IP addresses. Applies to PPPoE/PPTP/L2TP WAN protocols.
Advanced Settings
• Bring up on boot – The parameter is enabled to bring the WAN1/WAN2
interface up during device boot. Typically, this parameter does not need to be
modified.
• Use builtin IPv6-management – Enables/disables IPv6 protocol on the
WAN1/WAN2 interface. Typically, this parameter does not need to be
modified.
• Enable IPv6 negotiation on PPP link – Enables/disables IPv6 when using the
PPPoE/L2TP WAN protocols. Typically, this parameter does not need to be
modified.
• Use broadcast flag – Optional parameter if your ISP may requires that DHCP
requests from your device be sent as broadcasts or unicasts for IP address
settings for Internet access.
• Use default gateway – This parameter automatically created a default gateway
route in the device routing table to access the Internet through the selected
WAN interface. If unchecked, the default gateway route for Internet access
must be entered in manually in the device routing table settings. Typically, this
parameter does not need to be modified.
• Use gateway metric – This parameter is the route priority value assigned to the
default gateway route. Range: 0-9999, 0 being the highest priority. Typically,
this parameter does not need to be modified.
• Use DNS servers advertised by peer- If checked, automatically obtains DNS
service IP address settings from your ISP. If unchecked, allows you to specify
custom DNS server IP addresses. Applies to the DHCP client WAN protocol.
• Client ID to send when requesting DHCP – Optional parameter only required if
your ISP requires a specific client ID to be sent when requesting IP address
settings for Internet access. Applies to DHCP client WAN protocol.
• Vendor Class to send when requesting DHCP – Optional parameter only
required if your ISP requires a specific vendor class to be sent when requesting
IP address settings for Internet access. Applies to DHCP client WAN protocol.
• Override MAC address – Optional parameter used to change the WAN
interface MAC address if you are experiencing issues obtaining IP address
settings from your ISP. This parameter is more commonly known as MAC
address cloning where you can assign a LAN computer MAC address to the
WAN interface. Applied to DHCP client WAN protocol.
• Override MTU – The default MTU (maximum transfer unit) or frame size is set
to 1500 bytes. This parameter allows you to assign a new MTU size. For
PPPoE/PPTP/L2TP WAN protocols, if you experience issues accessing SSL/HTTPS
secure websites, you can try lower the MTU value to 1492 to decrease the
amount of packet errors. Typically, this parameter does not need to be
modified.
WAN VLAN Tagging
Some ISPs require VLAN tag assignment of a specific VLAN ID when for Internet access
or other services. You can follow the steps below to assign a specific VLAN ID to the
WAN interface.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click VLAN.
3. Under the VID, you can enter the VID required by your ISP and set the WAN interface
to tagged or untagged. Click Apply to save and commit the changes.
© Copyright 2019 TRENDnet. All Rights Reserved.
19
TRENDnet User’s Guide
Limited Warranty
IPv6 settings
Network > IPv6
IPv6 (Internet Protocol Version 6) is a new protocol that significantly increases the
number of available Internet public IP addresses due to the 128-bit IP address structure
versus IPv4 32-bit address structure. In addition, there are several integrated
enhancements compared to the most commonly used and well known IPv4 (Internet
Protocol Version 4) such as:
•
Integrated IPsec – Better Security
•
Integrated Quality of Service (QoS) – Lower latency for real-time applications
• Higher Efficiency of Routing – Less transmission overhead and smaller routing
tables
• Easier configuration of addressing
Note: In order to use IPv6 Internet connection settings, it is required that your ISP
provide you with the IPv6 service. Please contact your ISP for availability and more
information about the IPv6 service.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on IPv6.
.
3. Review the IPv6 Internet Connection settings and enter information settings specified
by your ISP. Complete all of the fields required by your ISP and click Apply to save and
commit the changes.
Note: Please contact your ISP for IPv6 service availability.
Select the IPv6 WAN connection type provided by your ISP.
•
Static IPv6
• Auto-configuration (SLAAC/DHCPv6)
• PPPoE
•
Link-Local Only
© Copyright 2019 TRENDnet. All Rights Reserved.
20
TRENDnet User’s Guide
Limited Warranty
Virtual LANs (VLANs)
Network > VLAN
Your router supports port-based 802.1Q VLANs as well inter-VLAN routing. VLANs can
be assigned different IP address interfaces in which the router can route be between
VLAN IP subnets.
Create a port-based VLAN
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click VLAN.
3. Before assigning which untagged and tagged VLAN member ports are assigned to a
new VLAN, the ports must be set to Off in the default VLAN VID: 1 (LAN). Also, click
the Inter VLAN Routing drop-down list and select Enabled to enable communication
between the LAN and other VLAN interfaces. Click Apply to save and commit the
changes. Example: We will remove ports 5-8 from the default VLAN VID: 1 (LAN)
interface so these ports can be re-assigned as untagged member ports of new VLANs
in example below.
4. To create a new 802.1Q VLAN, under the VLANs section, click Add.
5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are
reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the untagged
VLAN member ports. Example: In the example below, we will create a new VLAN with
VLAN ID: 50 and assign ports 5 & 6 as untagged member ports.
6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask.
Example: In the example below, we will enter the VLAN 50 interface IP address as
192.168.50.1 and subnet mask 255.255.255.0.
© Copyright 2019 TRENDnet. All Rights Reserved.
21
TRENDnet User’s Guide
Limited Warranty
7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the
DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP
address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure
any devices connected to this VLAN obtain IP address information via DHCP.
If following the port-based VLAN configuration example, any computers or devices
connecting to ports 5 & 6 will obtain 192.168.50.x/255.255.255.0 address settings and
use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to other
local IP subnets.
Create a port-based VLAN with 802.1Q tagging
Your router supports 802.1Q VLAN tagging/trunking to other 802.1Q VLAN devices such
as managed switches.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click VLAN.
3. Under VLAN VID:1 (LAN), click the Inter VLAN Routing drop-down list and select
Enabled and click Apply to commit and save the changes.
4. To create a new 802.1Q VLAN, under the VLANs section, click Add.
© Copyright 2019 TRENDnet. All Rights Reserved.
22
TRENDnet User’s Guide
Limited Warranty
5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are
reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged
VLAN member port. Example: In the example below, we will create a new VLAN with
VLAN ID: 50 and assign port 8 as a tagged VLAN member port.
6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask.
Example: In the example below, we will enter the VLAN 50 interface IP address as
192.168.50.1 and subnet mask 255.255.255.0.
7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the
DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP
address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure
any devices connected to this VLAN obtain IP address information via DHCP.
© Copyright 2019 TRENDnet. All Rights Reserved.
23
TRENDnet User’s Guide
Limited Warranty
If following the 802.1Q VLAN configuration example, a managed/web smart switch with
802.1Q VLAN support can be connected and pass VLAN 50 traffic between the router
and switch. Any computers or devices connecting to the untagged VLAN ports (PVID: 50)
on the managed/web smart will obtain 192.168.50.x/255.255.255.0 address settings
and use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to
other local IP subnets. Additional VLANs can be created on the router and switch in
which 802.1Q VLAN traffic can pass through the same single 802.1Q VLAN tag/trunk
link.
Example below of multiple VLANs configured and passing traffic through the same
802.1Q VLAN tag/trunk link.
© Copyright 2019 TRENDnet. All Rights Reserved.
24
TRENDnet User’s Guide
Limited Warranty
Assigning VLAN IDs to Wireless SSIDs
Your router supports assigning specific VLAN IDs to wireless SSIDs to extend VLAN traffic
manageability and control to your router wireless network. By default, primary and
multiple SSIDs are assigned to the LAN (VLAN 1) IP network.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click VLAN.
3. Under VLAN VID:1 (LAN), click the Inter VLAN Routing drop-down list and select
Enabled and click Apply to commit and save the changes.
4. To create a new 802.1Q VLAN, under the VLANs section, click Add.
5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are
reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged
VLAN member port. Example: In the example below, we will create a new VLAN with
VLAN ID: 50 and assign port 8 as a tagged VLAN member port.
6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask.
Example: In the example below, we will enter the VLAN 50 interface IP address as
192.168.50.1 and subnet mask 255.255.255.0.
© Copyright 2019 TRENDnet. All Rights Reserved.
25
TRENDnet User’s Guide
Limited Warranty
7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the
DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP
address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure
any devices connected to this VLAN obtain IP address information via DHCP.
8. Under Reassign SSID to VLAN, next to the SSID you would like to assign the new VLAN
ID, click the Network/VID drop-down list and select the VLAN ID. Click Apply to save
and commit the changes.
If following the 802.1Q VLAN configuration example, a managed/web smart switch with
802.1Q VLAN support can be connected and pass VLAN 50 traffic between the router
and switch and 2.4GHz wireless SSID. Any computers or devices connecting to the
untagged VLAN ports (PVID: 50) on the managed/web smart will obtain
192.168.50.x/255.255.255.0 address settings and use the VLAN 50 IP interface
192.168.50.1 as the Internet gateway and gateway to other local IP subnets. Any
wireless computers or devices connecting to the 2.4GHz wireless SSID will also obtain
192.168.50.x/255.255.255.0 address settings while connecting to 5GHz1 or 5GHz2 SSIDs
will remain on the LAN network. Additional VLANs can be created on the router and
switch in which 802.1Q VLAN traffic can pass through the same single 802.1Q VLAN
tag/trunk link. Multiple SSIDs will appear in this section when enabled and configured.
Guest network SSID does not apply.
© Copyright 2019 TRENDnet. All Rights Reserved.
26
TRENDnet User’s Guide
Limited Warranty
Below is a reference of the additional VLAN settings if you choose to make other
configuration changes to these sections.
• VID – The VLAN ID assigned to a specific VLAN.
• Ports 1-8 – Configure port VLAN membership settings.
o Untagged – Default setting. Sets port membership as untagged and
allows connectivity to network devices such as computers. The router
will use the internal port VLAN ID (PVID) to forward VLAN traffic
accordingly to these ports based on their untagged VLAN membership.
o Tagged – Sets port membership as tagged and used for VLAN tag or
trunk links to other VLAN aware devices such as managed switches or
access points.
o Off – Removes port membership from a specific VLAN.
•
Inter VLAN Routing – Allows communication between local network
interfaces/IP subnets such as the LAN and VLAN interfaces.
•
IP Address/Subnet Mask – The IP address and subnet mask assigned to a
specific VLAN interface.
• Mode – Configures the DHCP server settings for a specific VLAN interface.
o Disabled – Disables DHCP on a specific VLAN interface.
o Enabled – Enables the internal DHCP server on a specific VLAN
interface. Allows you to set the IP address range/pool, lease time,
WINS/DNS servers, and local domain name for the DHCP server.
o Relay – Enables DHCP relay on a specific VLAN interface and forwards
DHCP requests on the VLAN interface to an external DHCP server IP
address (e.g. 192.168.50.20).
Application layer gateway (ALG)
Network > ALG
You may want to configure your router to allow computers the use of specific high layer
applications or service sessions to pass through. Application Layer Gateways (ALG)
allows you to easily enable or disable these applications to pass through your router.
Note: It is recommended to leave these settings enabled.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on ALG.
3. Review the applications. Click Apply to save and commit the changes.
© Copyright 2019 TRENDnet. All Rights Reserved.
27
TRENDnet User’s Guide
Limited Warranty
UPnP and NAT-PMP
Services > UPnP
UPnP (Universal Plug and Play) and NAT-PMP (NAT Port Mapping Protocol) allows
devices connected to a network to discover each other and automatically open the
connections or services for specific applications (e.g. instant messenger, online gaming
applications, etc.) UPnP and NAT-PMP is disabled on your router by default and should
only be enabled to allow specific applications required by your computers or devices to
allow connections through your router as they are needed.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Services and click on UPnP / NAT-PMP.
3. Under the UPnP / NAT-PMP section, check the Enable UPnP / NAT-PMP functionality
option. Click Apply to save and commit the changes.
Note: When UPnP/NAT-PMP is enabled, you can check the currently open connections in
the UPnP/NAT-PMP entries table..
Static routes
Network > Routing
You may want set up your router to route computers or devices on your network to
other local networks through other routers. Generally, different networks can be
determined by the IP addressing assigned to those networks. Generally speaking and for
the case of this example, your network may have 192.168.10.x IP addressing and
another network may have 192.168.20.x IP addressing and because the IP addressing of
these two networks are different, they are separate IP networks. In order to
communicate between the two separate networks, static routing needs to be
configured.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on Routing.
3. Review the Routing section. Click Add to add the new static route. Click Apply to save
and commit the changes.
• Interface – Select the interface to assign the route.
• Target Host-IP or Network: Enter the IP network address of the destination
network for the route. (e.g. 192.168.20.0)
• IP4-Netmask: Enter the subnet mask of the destination network for the
route.(e.g. 255.255.255.0)
• IPv4-Gateway: Enter the gateway to the destination network for the route.
(e.g. 192.168.10.2)
• Metric: Enter the metric or priority of the route. The metric range is 0-9999, the
lowest number 0 being the highest priority.
You can check the current routing table under Status > Routes under Active IPv6-
Routes.
© Copyright 2019 TRENDnet. All Rights Reserved.
28
TRENDnet User’s Guide
Limited Warranty
Dynamic routing protocols
Network > Routing
You may want set up your router to route computers or devices on your network to
other local networks through other routers. Generally, different networks can be
determined by the IP addressing assigned to those networks. Generally speaking and for
the case of an example, your network may have 192.168.10.x IP addressing and another
network may have 192.168.20.x IP addressing and because the IP addressing of these
two networks are different, they are separate networks. In order to communicate
between the two separate networks, static routing needs to be configured. Below is an
example diagram where routing is needed for devices and computers on your network
to access the other network. If you have other routing devices that support dynamic
routing protocol, you can enable these routing protocols on your router to learn and
automatically generate the routes needed between these networks.
Routing Information Protocol (RIP)
Network > Routing > RIP
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network, click on Routing, and click on the RIP tab.
3. Review the RIP Routing section. To save changes to this section, click Apply to
command save your changes.
• RIP enable: Check the option to enable the RIP dynamic routing protocol globally
on the router.
In the Overview table, you can enable and configure RIP for each interface by clicking
Edit next to the interface.
• RIP enable: Check the option to enable RIP on the specified interface.
• RIP version: Click the drop-down list and select the appropriate RIP version v1 or
v2.
Note: If selecting RIP v2, this requires basic password authentication between
routing devices using this protocol. The password must match on all routing
devices connected in order successfully exchange routing information.
• Redistribute: Select the method used to redistribute dynamic routing
information. The Kernel option should be left on as this option
advertises/announces that the router can provide network routing information
using RIP. The OSPF option allows the router to learn new routing information
using the RIPv1/2 protocols and redistribute the routing information using OSPF
protocol.
• Send version – Select the RIP protocol version to send.
• Receive version – Select the RIP protocol version to receive.
• Authentication – Enables MD5 authentication on all RIP messages sent and
received.
• Key string – If authentication is enabled, enter the authentication key
string/password to use for RIP messages sent and received.
• Plain text password – This option will set the password to be send in clear text
instead of using the MD5 hash. This setting is not recommended.
You can check the current routing table under Status > Routes under Active IPv6-
Routes.
© Copyright 2019 TRENDnet. All Rights Reserved.
29
TRENDnet User’s Guide
Limited Warranty
OSPF (Open Shortest Path First)
Network > Routing > OSPF
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network, click on Routing, and click on the OSPF tab.
3. Review the OSPF Routing section. To save changes to this section, click Apply to
commit and save your changes.
In the Overview table, you can enable and configure RIP for each interface by clicking
Edit next to the interface.
• OSPF enable: Check the option to enable OSPF dynamic routing globally on the
router.
• Router ID: Enter the OSPF router ID.
• OSPF enable: Check the option to enable OSPF dynamic routing on the specified
interface.
• Network type: Select the OSPF network type. Select only Point to Point or Point
to Multi-point if connecting to your networking using PPP protocol, otherwise
select Broadcast. If only exchanging OSPF routing information to one other
device, select Non-Broadcast and enter in the Neighbor IP address at the bottom.
• Key authentication – Enables MD5 authentication on all OSPF messages sent and
received.
• Key string – If authentication is enabled, enter the authentication key
string/password to use for OSPF messages sent and received.
• Plain text password – This option will set the password to be send in clear text
instead of using the MD5 hash. This setting is not recommended.
• Cost – Enter the OSPF cost value.
• Priority – Enter the OSPF priority value.
• Area - Enter the area id for OSPF.
You can check the current routing table under Status > Routes under Active IPv6-
Routes.
© Copyright 2019 TRENDnet. All Rights Reserved.
30
TRENDnet User’s Guide
Limited Warranty
Quality of Service (QoS)
Network > QoS
The router supports up to four QoS priority queues for traffic classification and priority.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on QoS.
3. Under QoS settings, review the settings below. When complete, click Apply to save
and commit your changes.
QoS Settings
• Enable: Check the enable option to Enable QoS.
• Download speed (kbit/s): Enter the maximum download speed provided by your
ISP in kilobits per sec. It is important to set this value accurately.
Note: If your multiple mode is set to load balancing, you can combine the total
download bandwidth of both WAN connections.
• Upload speed (kbit/s): Enter the maximum upload speed provided by your ISP in
kilobits per sec. It is important to set this value accurately.
• Note: If your multiple mode is set to load balancing, you can combine the total
upload bandwidth of both WAN connections.
• Calculate overhead – Typically, when this option is unchecked/disabled, the
overhead value will not be added to the upload and download speeds entered in
the fields. When this option is checked/enabled, the total overhead calculation is
included in the total upload/download speed specified to ensure the values
entered are the absolute maximum value limits entered.
• Default class – When QoS is enabled, select the default priority class used for all
other traffic when QoS after all specific QoS classification rules have been
applied. You can typically set this to Low or Medium.
Classes – The QoS priority classes define the bandwidth maximum limits of total
bandwidth that can be used and total bandwidth that can be shared for a particular
class. Note: Typically, you do not need to modify the QoS priority class percentage
settings.
• Download link share bandwidth (%) – This defines the guaranteed bandwidth
% from the total download speed defined in the QoS settings. The class setting
will attempt to guarantee this bandwidth % minimum limit is allocated.
• Download max bandwidth (%) – This defines the maximum bandwidth %
allowable from the total download speed defined in the QoS settings. This class
setting is the maximum bandwidth % limit that can be allocated above the link
share bandwidth %.
• Upload link share bandwidth (%) – This defines the guaranteed bandwidth %
from the total upload speed defined in the QoS settings. The class setting will
attempt to guarantee this bandwidth % minimum limit is allocated.
• Upload max bandwidth (%) – This defines the maximum bandwidth %
allowable from the total upload speed defined in the QoS settings. This class
setting is the maximum bandwidth % limit that can be allocated above the link
share bandwidth %.
© Copyright 2019 TRENDnet. All Rights Reserved.
31
TRENDnet User’s Guide
Limited Warranty
Classification Rules
Click Add to create a new QoS classification rule. When complete, click Apply to save
and commit your changes.
• Target – Select the QoS priority class to apply to the rule.
• Direction – Select the direction of traffic in which to apply the QoS
classification, Download (Inbound Traffic) or Upload (Outbound Traffic).
• Source Host – Click the drop-down list to select All (any IP address), a specific
source host IP address from the list or select Custom to define a particular
source IP address not listed.
• Destination Host– Click the drop-down list to select All (any IP address), a
specific destination host IP address from the list or select Custom to define a
particular destination IP address not listed.
• Protocol – Click the drop-down to select the type of traffic to apply the QoS
classification rule. All/TCP/UDP/ICMP or custom to specify a particular protocol
not listed.
• Source Port (range) – Enter the source port or source port range to apply the
QoS classification rule.
• Destination Port (range) – Enter the source port or source port range to apply
the QoS classification rule.
•
© Copyright 2019 TRENDnet. All Rights Reserved.
32
TRENDnet User’s Guide
Limited Warranty
Dynamic DNS
Services > Dynamic DNS
When using a dynamic IP/DHCP WAN type from your ISP where your public IP or
Internet IP address always changes, dynamic DNS provides a method of accessing your
router or network remotely over the Internet for devices such as IP cameras, storage, or
computers hosted on the local LAN side of your router. Dynamic DNS services do thi by
assigning a custom hostname or DNS name for you to reference. Your router will send
updates to the dynamic DNS service provider if the WAN or Internet IP address(es)
change providing the emulation of a virtual fixed IP address that you can always
reference to access your router over the Internet.
Note: First, you will need to sign up for one of the DDNS service providers listed in the
Server Address drop-down list.
1. Sign up for one of the DDNS available service providers list under Server Address.
(e.g. no-ip.com, dyndns.org etc.)
2. Log into your router management page (see “Access your router management page”
on page 8).
3. Click on Services and click on Dynamic DNS.
4. Review the DDNS settings below. When complete, click Apply to save and commit
your changes.
• Enabled – Check the enabled option to enable dynamic DNS on the selected WAN
interface.
• DDNS Provider [IPv4]: Click the drop-down list Select your DDNS service.
• Host Name: Enter the custom hostname or DNS name you created with DDNS
account. (e.g. trendnet.ddns.net)
• Account: The user name needed to login to your Dynamic DNS service account.
• Password: This is the password to login to your Dynamic DNS service account.
Below is a reference of the additional Dynamic DNS settings if you choose to make other
configuration changes to these sections.
Timer Settings
Allows you to configure a specified interval to force your router to send a DDNS update
to your DDNS service provider.
Note: Please note that it is recommended not to set the interval too low and send
updates too often as this may not meet the minimum requirements of your DDNS service
provider client update policy.
•
Force Interval – Enter a value in days, hours, or minutes.
Note: The smallest interval allowed is 10 minutes. Setting the value to 0 will
force your router to send a DDNS update only once and will not resend any
more DDNS updates for the specified WAN.
© Copyright 2019 TRENDnet. All Rights Reserved.
33
TRENDnet User’s Guide
Limited Warranty
File sharing server
Services > Network Shares
Your router’s USB port can be used to share files through the network when a USB
storage device is connected on the back USB port. The router supports Samba (SMB) file
sharing protocol and is compatible with SMB/CIFS.
Note: Only FAT32 or NTFS file formats are supported, up to 4TB max. storage size.
After you have connected your USB storage device:
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Services and click on Network Shares.
3. Review the settings below. When complete, click Apply to save and commit your
changes.
Note: By default, the Samba server name is set to TEW-829DRU or the LAN IP address
may also be used default LAN IP: 192.168.10.1. To change the Samba server name, you
can modify this setting under Administrator > System and edit the Host Name setting.
Samba General Settings
• Enable – Check the enable option to enable Samba file sharing.
• Description: Enter a description for the server.
• Workgroup: Enter the workgroup name. It is recommended to keep the standard
default “WORKGROUP”. If you change this setting, you will need to change the
workgroup name on all computers in your network that are allowed access to the
USB storage in order to discover it automatically. Otherwise, you will need to
access the server by IP address.
• Login Required – Selecting No will not require computers to login when accessing
the USB share. Select Yes will require computers to enter a user name and
password when accessing the USB share and user account can be modified under
the Samba Users list. This user account will have full read/write permissions on
the USB share.
Samba Users
• User Name: Enter the user name to be used to access the USB share.
• Password: Enter the password to be used to access the USB share.
Shared Devices
• Device Name: Displays the USB storage device name.
• Shared Name: Displays the Samba share name used to access the USB share over
the network.
Example: You can access the USB share by typing in the path \\TEW-
829DRU\usb_A1 or \\
• Size – Displays the total size of the USB storage device.
• Used – Displayed the storage space currently used on the USB storage device.
• Available – Displays the storage space currently available on the USB storage
device.
• Eject Device – Clicking the Eject button will allow you to safely remove/dismount
and disconnect the USB storage device.
© Copyright 2019 TRENDnet. All Rights Reserved.
34
TRENDnet User’s Guide
Limited Warranty
Wake on LAN (WoL)
Services > Wake on LAN
Wake on LAN (WoL) is used to remotely wake up or turn on device that support the WoL
feature from your router.
Note: In order for the WoL feature to work, the device must support the WoL and it must
be enabled configured properly on the device.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Services and click on Wake on LAN.
3. Review the settings below. When complete, click Apply to save and commit your
changes.
• Host to wake up: Click the drop-down list to select a computer/device from the
list or manually enter the MAC address of the device. Clicking the WAKE UP HOST
INSTANTLY button will immediately send a wake up message to the WoL device.
• Add new WoL schedule: Allows you to select a schedule when to send a wake up
message to the WoL device.
© Copyright 2019 TRENDnet. All Rights Reserved.
35
TRENDnet User’s Guide
Limited Warranty
Wireless Networking and Security
Wireless Settings
Network > Wireless (2.4GHz or 5GHz1 or 5GHz2)
This section covers the wireless settings of your router such as wireless network names
(SSIDs), channels, 802.11 mode, and other wireless settings.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on the wireless band you would like to configure Wireless
(2.4GHz or 5GHz1 or 5GHz2)
3. Review the settings below. When complete, click Apply to save and commit your
changes.
Primary SSID – This tab involves the configuration parameters for the primary SSID for a
specific wireless band.
• Device Configuration
o General Setup
Status – Displays current information about the wireless
radio/band such as SSID, BSSID/wireless MAC address,
encryption, operating channel, transmit power, bitrate, and
country/region.
Enable wireless radio – This option is checked by default to
enable the wireless radio/band. Unchecking this option will
disable the wireless radio/band including all additional SSIDs
configured on the specific band.
Turn off wireless radio by schedule – Allows you to assign a
time schedule when the band should be turned on and off.
Operating frequency – By default, the operating channel is
set to Auto to automatically scan and use the best channel
available when the device is powered on. If you are
encountering interference or connectivity issues on the
current channel, you can select a different wireless channel
for the band to operate.
Note: Modifying the channel settings will force currently
connected wireless client devices to disconnect and reconnect
to your router’s wireless networks.
o Advanced Settings
Mode – By default, 802.11b/g/n and 802.11a/n/ac modes are
configured to ensure the best compatibility with wireless
client devices. These settings will allow all wireless client
devices to connect to you router’s wireless networks
including devices that support older standards such as
802.11a/b/g.
Note: If older slower wireless client devices connect to your
wireless network, this may reduce the speed and performance
of all other wireless client devices connecting to the same
wireless network.
HT mode: Select the appropriate channel width for your
wireless network. For greater 2.4GHz performance/data rate
capability, you can select Auto 20/40MHz (Options: 20MHz or
Auto 20/40MHz). It is recommended to use the default
channel bandwidth settings.
For greater 5GHz performance/data rate capability, you can
select Auto 20/40/80MHz (Options: 20MHz, Auto 20/40MHz,
Auto 20/40/80MHz). It is recommended to use the default
channel width settings.
Note: Please note that the default settings may provide more
stability than the higher channel bandwidth settings such as
Auto 20/40MHz or Auto 20/40/80MHz for connectivity in busy
© Copyright 2019 TRENDnet. All Rights Reserved.
36
TRENDnet User’s Guide
Limited Warranty
wireless environments where there are several wireless
networks in the area.
• 20 MHz – This mode operates using a single 20MHz
channel for wireless devices connecting at 802.11n
on both 2.4GHz and 5GHz. This setting may provide
more stability than 20/40MHz (Auto) for connectivity
in busy wireless environments where there are
several neighboring wireless networks in the area.
• Auto 20/40MHz (11n) or Auto 20/40/80MHz (11ac)
–When this setting is active, this mode is capable of
providing higher performance only if the wireless
devices support the channel width settings. Enabling
Auto 20/40MHz or Auto 20/40/80 MHz typically
results in substantial performance increases when
connecting an 802.11ac/n wireless client.
•
Interface Configuration
o General Setup
ESSID – This is wireless network name setting for the primary
SSID band. This name will differentiate your wireless network
from other neighboring wireless networks so you can identify
and connect your wireless client devices. Enter the wireless
network name to assign to the wireless band.
Hide ESSID – Checking this option will hide your wireless
network name from being discovered by wireless client
devices scanning for available wireless networks. This will not
disable the wireless band or network and wireless client
devices can still connect. It only hides the network name from
being discovered.
o Wireless Security – Allows you to configure the wireless
encryption/security for the wireless band. See the “How to choose the
type of wireless security” and “Secure your wireless network” sections
for details configuring wireless security.
o MAC-Filter – This feature adds additional security to your wireless
band by allowing you to enter a list of specific MAC addresses that can
either be allowed to connect (Allow listed only) or blocked (Deny
listed) from connecting to your wireless network. This feature must be
specified on each wireless band.
MAC-Address Filter
• Disable - Disables MAC address filtering on the
wireless band.
• Allow listed only (Whitelist) – Sets the MAC filter
action to allow only the MAC addresses listed and
deny all others on the wireless band.
• Deny listed (Blacklist) – Sets the MAC filter action to
deny only the MAC addresses listed and allow all
others on the wireless band.
MAC- List – Enter the MAC addresses to allow or deny. For
each additional MAC address entries, click
.
(e.g. a1:b2:c3:d4:e5:f6)
© Copyright 2019 TRENDnet. All Rights Reserved.
37
TRENDnet User’s Guide
Limited Warranty
o Advanced Settings
Separate Clients – By default, this option is left unchecked
and allows all wireless client devices that are connected to
the same wireless SSID to communicate with other wireless
client devices. Checking this option will block communication
between wireless client devices connecting with other
wireless client devices. This feature is also known as L2
isolation or L2 client isolation.
WMM Mode – This feature enables Wi-Fi Multimedia QoS
prioritization for wireless client devices that support WMM
using the default priority level settings. Unchecking this
option will disable WMM QoS on the wireless band.
Enable HT20/40 coexistence – Applies to 2.4GHz band only.
This option is enabled by default to ensure connection
stability on the 2.4GHz band. When this option is enabled, the
radio will attempt to operate at the higher 40MHz channel
width mode if there are not too many neighboring wireless
networks. If the current wireless environment is too busy the
radio will automatically operate at the lower 20MHz channel
width mode. Unchecking this option forces the radio to
operate at the higher 40MHz channel which cause instability
if there are too many neighboring 2.4GHz wireless networks.
Multiple SSID - This tab involves the configuration parameters for the additional SSIDs
for a specific wireless band. Up to 7 additional SSIDs can be created per wireless band.
You can view a summarized list of the current operating SSID and channels under Status
> Overview in the Wireless section.
• General Setup
o Enabled – Checking this option will enable the additional SSID on the
specific wireless band. Before checking Enabled, click the Multiple SSID
drop-down and select which index number SSID to configure.
o Multiple SSID – Click the drop-down to select the index number SSID
to configure, then check Enabled.
o ESSID – This is wireless network name setting for the additional SSID
band. This name will differentiate your wireless network from other
neighboring wireless networks so you can identify and connect your
wireless client devices. Enter the wireless network name to assign to
the additional SSID.
o Hide ESSID – Checking this option will hide your wireless network
name from being discovered by wireless client devices scanning for
available wireless networks. This will not disable the additional SSID
and wireless client devices can still connect. It only hides the network
name from being discovered.
o Turn off wireless radio by schedule – Allows you to assign a time
schedule when the band should be turned on and off.
© Copyright 2019 TRENDnet. All Rights Reserved.
38
TRENDnet User’s Guide
Limited Warranty
• Wireless Security – Allows you to configure the wireless encryption/security for
the additional SSID. See the “How to choose the type of wireless security” and
“Secure your wireless network” sections for details configuring wireless
security.
• Advanced Settings
o Separate Clients – By default, this option is left unchecked and allows
all wireless client devices that are connected to the same wireless SSID
to communicate with other wireless client devices. Checking this
option will block communication between wireless client devices
connecting with other wireless client devices. This feature is also
known as L2 isolation or L2 client isolation.
o WMM Mode – This feature enables Wi-Fi Multimedia QoS
prioritization for wireless client devices that support WMM using the
default priority level settings. Unchecking this option will disable
WMM QoS on the additional SSID.
How to choose the type of wireless security
Setting up wireless security is very important. Leaving your wireless network open and
unsecure could expose your entire network and personal files to outsiders. TRENDnet
recommends reading through this entire section and setting up wireless security on your
new router.
There are a few different wireless security types supported in wireless networking each
having its own characteristics which may be more suitable for your wireless network
taking into consideration compatibility, performance, as well as the security strength
along with using older wireless networking hardware (also called legacy hardware).
It is strongly recommended to enable wireless security to prevent unwanted users from
accessing your network and network resources (personal documents, media, etc.).
In general, it is recommended that you choose the security type with the highest
strength and performance supported by the wireless computers and devices in your
network. Please review the security types to determine which one you should use for
your network.
Wireless Encryption Types
• WPA: This encryption is significantly more robust than the older WEP legacy
technology. Much of the older 802.11g hardware was been upgraded (with
firmware/driver upgrades) to support this encryption standard. Total wireless
speeds under this encryption type however are limited to 54Mbps.
• WPA/WPA2 Mixed Mode: This setting provides the router with the ability to detect
wireless devices using either WPA or WPA2 encryption. Your wireless network will
automatically change the encryption setting based on the first wireless device
connected. For example, if the first wireless client that connects to your wireless
network uses WPA encryption your wireless network will use WPA encryption. Only
when all wireless clients disconnect to the network and a wireless client with WPA2
encryption connects your wireless network will then change to WPA2 encryption.
Note: WPA2 encryption supports 802.11n speeds and WPA encryption will limit
your connection speeds to 54Mbps
• WPA2: This is the most secure wireless encryption available today, similar to WPA
encryption but more robust. This encryption standard also supports the highest
connection speeds. If you find that one of your wireless network devices does not
support WPA2 encryption, then set your router to either WPA or WPA-Auto
encryption. There are two cipher types available which are Temporal Key Integrity
Protocol (TKIP) and Advanced Encryption Standard (AES). AES should be used
whenever possible to ensure the highest level of security.
© Copyright 2019 TRENDnet. All Rights Reserved.
39
TRENDnet User’s Guide
Limited Warranty
• WPA-PSK/WPA2-PSK vs. WPA-EAP/WPA2-EAP: WPA & WPA2 support two security
mechanisms, one using a pre-shared key (PSK) and the other using extensible
authentication protocol (EAP). PSK is much easier to setup and configure and
requires manually specifying the encryption key/pre-shared key (PSK) required for
all wireless client devices to connect to your wireless network. EAP requires the use
of an external authentication server and complex configuration to setup
authentication and authorization your wireless client devices outside the scope of
the router. Several types of EAP that can be configured from secured password +
certificate that require more in-depth knowledge of security configuration.
Note: Check the specifications of your wireless network adapters and wireless
appliances to verify the highest level of encryption supported. Below is brief
comparison chart of the wireless security types and the recommended configuration
depending on which type you choose for your wireless network.
Security Standard
WPA
WPA2
Compatible Wireless
Standards
802.11a/b/g
(802.11ac/802.11n devices
will operate at
802.11g/802.11a to connect
using this standard)
802.11a/b/g/n/ac
Highest Performance
Under This Setting
Up to 54Mbps
Highest data rate supported
by wireless device
Encryption Strength Medium
High
Additional Options
TKIP or AES,
Preshared Key or RADIUS
TKIP or AES,
Preshared Key or RADIUS
Recommended
Configuration
TKIP
Preshared Key
8-63 characters
AES
Preshared Key
8-63 characters
Note: It is recommended to use WPA2 CCMP (AES) encryption whenever possible as it
the most secure option and supports the highest data rates supported by the wireless
network device.
Secure your wireless network
Network > Wireless 2.4GHz / 5GHz1 / 5GHz2
By default, your router is pre-configured with wireless network names (SSIDs) and a
wireless encryption key using WPA2-PSK (AES). The predefined wireless network name
and security can be found on the sticker on the side of the router or on the device label
at the bottom of the router. The following sections involve changing the default wireless
security settings and encryption key.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on the wireless band you would like to configure, Wireless
2.4GHz / 5GHz1 / 5GHz2.
3. Under Interface Configuration and in the Wireless Security tab, click on the
Encryption drop-down list to select your wireless security type.
© Copyright 2019 TRENDnet. All Rights Reserved.
40
TRENDnet User’s Guide
Limited Warranty
Selecting WPA2-PSK, WPA-PSK / WPA2-PSK Mixed Mode
(WPA2-PSK recommended):
In the Security Mode drop-down list, select WPA2-PSK or WPA-PSK / WPA2-PSK Mixed
Mode. Review the settings below. When complete, click Apply to save and commit your
changes.
The following section outlines options when selecting WPA2-PSK, or WPA-PSK / WPA2-
PSK Mixed Mode.
• Cipher: Select a Cipher Type to use.
o When selecting WPA-PSK / WPA2-PSK Mixed Mode security, it is recommended
to use Force TKIP and CCMP (AES).
o When selecting WPA2-PSKsecurity, it is recommended to use Force CCMP (AES).
Key: Enter the pre-shared key or passphrase. (8-63 alphanumeric characters
(a,b,C,?,*, /,1,2, etc.)
Note: This is the wireless password, pre-shared key, or passphrase wireless client
devices will use to connect to your wireless network.
Selecting WPA2-EAP, WPA-EAP / WPA2-EAP Mixed Mode
The following section outlines options when selecting WPA2-EAP or WPA-EAP / WPA2-
EAP Mixed Mode (EAP or RADIUS). This security type is also known as EAP (Extensible
Authentication Protocol) or RADIUS (Remote Authentication Dial-In User Service).
Review the settings below. When complete, click Apply to save and commit your
changes.
Note: This security type requires an external RADIUS server, Pre-Shared Key only requires
you to create a wireless password, pre-shared key, or passphrase.
• Cipher: Select a Cipher Type to use.
o When selecting WPA-EAP / WPA2-EAP Mixed Mode security, it is recommended
to use Force TKIP and CCMP (AES).
o When selecting WPA2-EAP security, it is recommended to use Force CCMP (AES).
• Radius-Authentication-Server: Enter the IP address of the RADIUS server. (e.g.
192.168.10.250)
• Radius-Authentication-Port: Enter the port your RADIUS server is configured to use
for RADIUS authentication.
Note: It is recommended to use port 1812 which is typical default port used for the
RADIUS service.
• Radius-Authentication-Secret: Enter the shared secret used to authorize your
router with your RADIUS server.
© Copyright 2019 TRENDnet. All Rights Reserved.
41
TRENDnet User’s Guide
Limited Warranty
Guest Network
Network > Guest Network
Creating an isolated and separate wireless guest network on each wireless band allows
wireless clients to connect to your network for Internet access only and keep your local
LAN network safe by restricting guest access to your LAN network resources such as
shared documents and media files on your computers, network storage, and printers.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Network and click on Guest Network.
3. Review the settings below. When complete, click Apply to save and commit your
changes.
First, choose the wireless band guest network you would like to configure, Wireless
2.4GHz Guest Network / 5GHz1 Guest Network / 5GHz2 Guest Network.
• Enable/Disable Guest Network – Selecting Enable turns on the wireless guest
network and selecting Disable turns off the wireless guest network for the specific
wireless band.
• Network Name(SSID) - This is wireless network name setting for the guest network.
This name will differentiate your wireless network from other neighboring wireless
networks so you can identify and connect your wireless client devices. Enter the
wireless network name to assign to the wireless guest network.
• Wireless Security – Allows you to configure the wireless encryption/security for the
wireless band. See the “How to choose the type of wireless security” and “Secure
your wireless network” sections for details configuring wireless security.
Note: You can only select WPA2-PSK or WPA-PSK / WPA2-PSK Mixed Mode. EAP
security cannot be applied to the wireless guest networks.
Guest DHCP – The wireless guest networks are assigned to a different IP address subnet
from the router LAN network for isolation.
• IPv4 Address – Enter the IP address interface for the wireless guest network. The IP
address subnet should be different from any other LAN or VLAN IP networks
configured on your router.
Note: The guest network IP address subnet only supports a class C subnet, subnet
mask 255.255.255.0.
• Start – Enter the starting value of DHCP IPv4 address range for the wireless guest
newtork. (e.g. If your guest network IPv4 address is 192.168.20.1, entering 120 will
define the first IP address of the DHCP pool is 192.168.20.120)
• End – Enter the ending value of DHCP IPv4 address range. (e.g. If your LAN IPv4
address is 192.168.20.1, entering 200 will define the last IP address of the DHCP
pool is 192.168.20.200)
• Lease Time – Enter the lease time in hours (h) or minutes (m) DHCP clients will hold
their IP address settings before automatically requesting a new lease (IP address
settings) from the internal DHCP server. (e.g. To specify 24 hours, enter 24h. To
specify 480 minutes, enter 480m.)
• Separate Clients – This option allows all wireless client devices that are connected
to the guest network wireless SSIDs to communicate with other wireless client
devices. Checking this option will block communication between wireless client
devices connecting with other wireless client devices. This feature is also known as
L2 isolation or L2 client isolation.
© Copyright 2019 TRENDnet. All Rights Reserved.
42
TRENDnet User’s Guide
Limited Warranty
WiFi client bridge mode
Administrator > Device Mode
The function of client bridge mode is to extend wireless connectivity to multiple wired
Ethernet client devices. A typical application where this mode may be used is in your
home entertainment/media center where multiple network enabled media devices
require Internet or network connectivity such as an HD smart TV, game console, set top
box, or DVR. The device will first establish connectivity (similar to a wireless enabled
client device such as a laptop or mobile phone) to your wireless network (typically
provided by a wireless router or access point) and bridge the connectivity to your
network over to the wired client devices using the LAN switch ports (1-8). After selecting
and applying this mode, click on Wireless > Wireless Network and click Site Survey to
scan for the wireless network to connect and enter the wireless security key (if required)
to establish connectivity to your network. After you have successfully set up the device
to connect to your wireless network, you can plug in the device in the area where you
would like to bridge network connectivity to wired client devices using the LAN switch
ports (1-8). In this mode, the device can only connect to one band at a time (2.4GHz or
5GHz) and will not provide any of the access control features typically provided in router
mode.
1. Log into your router management page (see “Access your router management page”
on page 8).
2. Click on Administrator and click on Device Mode.
Note: After changing the device mode to client bridge, the router will keep the existing
static LAN IP address. By default, the static LAN IP address: 192.168.10.1 /
255.255.255.0.
3. After the device completely apply the configuration changes and reboots, click
Network and click Site Survey to scan for available wireless networks.
4. Select the WiFi network to connect to in the list by clicking on the Select button next
to the WiFi network name or SSID and click Connect.
Note: If you do not find your WiFi network in the list, you can click Rescan to scan again
for networks.
5. If the network selected network requires a WiFi password/key, enter the key under
WiFi Key/Password and click Apply to save and commit your changes.
Note: The router keep the existing static LAN IP address settings after you have
connected to a WiFi network.