User Guide Portable 3G/4G Wireless N Router TL-MR3020 REV3.0.
Contents About This Guide..........................................................................................................1 Chapter 1. Get to Know About Your Router . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 1. 1. 1. 2. Product Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Appearance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
7. 1. 7. 2. 7. 3. 7. 4. Protect the Network from Cyber Attacks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Service Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Access Control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 IP & MAC Binding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
About This Guide This guide is a complement of Quick Installation Guide. The Quick Installation Guide instructs you on quick internet setup, and this guide provides details of each function and shows you the way to configure these functions appropriate to your needs. When using this guide, please notice that features of the router may vary slightly depending on the model and software version you have, and on your location, language, and internet service provider.
Chapter 1 Get to Know About Your Router This chapter introduces what the router can do and shows its appearance.
Chapter 1 Get to Know About Your Router 1. 1. Product Overview 1. 2. Appearance To meet the wireless needs of almost any situation you might encounter, the TP-Link portable router, with multiple operation modes, is designed for home and travel use. The portable size of the router means that you can put it in your pocket and take it with you wherever you go. LED Explanation LED (Power) (Internet) (Wireless) (WAN/LAN) Status Indication On The router is on. Off The router is off.
Chapter 1 Get to Know About Your Router LED Status WPS/RESET Flashing On Off Indication WPS connection has been established. WPS connection is being established. No WPS connection is established. Port and Button Description Item Mode Switch WAN/LAN Port Power Port WPS/RESET Button 3G/4G USB Port Description This switch is used to determine the operation mode of the router.
Chapter 2 Connect the Hardware This chapter contains the following sections: • Position Your Router • Connect Your Router
Connect the Hardware Chapter 2 2. 1. Position Your Router • The product should not be located in a place where it will be exposed to moisture or excessive heat. • Place the router in a location where it can be connected to multiple devices as well as to a power source. • Make sure the cables and power cord are safely placed out of the way so they do not create a tripping hazard. • The router can be placed on a shelf or desktop.
Connect the Hardware Chapter 2 1. Switch the operation mode to 3G/4G and connect the hardware according to Step A to D. 2. Connect your device to the router wirelessly. The SSID (wireless network name) and password are on the router’s label. Internet B A D C 2. 2. 3. WISP Client Router Mode In WISP Client Router mode, the router enables multiple users to share internet connection from WISP. 1. Switch the operation mode to WISP and connect the hardware according to Step A and B. 2.
Connect the Hardware Chapter 2 2. 2. 4. Access Point Mode Create a wireless network from an Ethernet connection. This mode is suitable for dorm rooms or homes where there’s already a wired router but you need a wireless connection. 1. Switch the operation mode to AP and connect the hardware according to Step A to D. 2. Connect your device to the router wirelessly. The SSID (wireless network name) and password are on the router’s label. Internet Wired Router 2. 2. 5.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard This chapter introduces how to connect your router to the internet via the web-based Quick Setup Wizard.
Chapter 3 3. 1. Set Up Internet Connection Via Quick Setup Wizard Log In to the Router With the web-based utility, it is easy to configure and manage the router. The webbased utility can be used on any Windows, Macintosh or UNIX OS with a Web browser, such as Microsoft the Internet Explorer, Mozilla Firefox or Apple Safari. Follow the steps below to log into your router. 1. Set up the TCP/IP Protocol in Obtain an IP address automatically mode on your computer. 2. Visit http://tplinkwifi.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 3. Select your Mobile ISP or manually set them if your ISP is not listed. Then click Next. 4. Either customize your Network Name (SSID) and Password or keep the default ones, and then click Next. 5. Check the wireless settings and click Save.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 6. Click Finish to complete the configuration. Now connect your devices to the internet! 3. 2. 2. Wireless Router Mode 1. Select your Time Zone and click Next. 2. Select Wireless Router Mode and click Next. Note: The router can be configured with a primary WAN connection and a 3G/4G USB modem as a backup solution to ensure “always-on“ internet connectivity.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 3. Select Internet Connection Type and enter corresponding parameters. If you are not sure, click Auto Detect. Then click Next and enter corresponding parameters. 4. Either customize your Network Name (SSID) and Password or keep the default ones, and then click Next.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 5. Check the wireless settings and click Save. 3. 2. 3. WISP Client Router Mode 1. Select your Time Zone and click Next.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 2. Click Scan to find the corresponding network of your WISP. Enter the Password for the selected wireless network if it is encrypted. Then click Next. 3. Select Internet Connection Type. Then click Next and enter corresponding parameters. 4. Either customize your Network Name (SSID) and Password or keep the default ones, and then click Next.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 5. Click Save to complete the configuration. 3. 2. 4. Access Point Mode 1. Select your Time Zone and click Next.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 2. Select Access Point Mode and click Next. 3. Either customize your Network Name (SSID) and Password or keep the default ones, and then click Next. 4. Click Save to complete the configuration.
Chapter 3 3. 2. 5. Set Up Internet Connection Via Quick Setup Wizard Repeater/Bridge Mode 1. Select your Time Zone and click Next. 2. Select Repeater/Bridge Mode and click Next. 3. Click Scan to find the network you want to extend. Enter the Password for the selected wireless network if it is encrypted. Then click Next.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 4. Either customize your Network Name (SSID) and Password or keep the default ones, and then click Next. 5. Click Save to complete the configuration.
Chapter 3 Set Up Internet Connection Via Quick Setup Wizard 6. Relocate the router about halfway between your host router and the Wi-Fi dead zone.
Chapter 4 Guest Network This function allows you to provide Wi-Fi access for guests without disclosing your main network. When you have guests in your house, apartment, or workplace, you can create a guest network for them. In addition, you can customize guest network options to ensure network security and privacy. Guest Network is only supported by the Router mode.
Chapter 4 4. 1. Guest Network Create a Network for Guests 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > Guest Network. Locate the Wireless section. 3. Create a guest network as needed. 1 ) Tick the Enable Guest Network checkbox. 2 ) Customize the SSID. Don‘t select Hide SSID unless you want your guests to manually input the SSID for guest network access.
Chapter 4 • Allow Guests to Access Each Other • Allow Guests to Access My Local Network (in Router mode) • Enable guest network bandwidth control Guest Network Tick this checkbox if you want to allow the wireless clients on your guest network to communicate with each other via methods such as network neighbors and Ping.
Chapter 5 Parental Controls This function allows you to block inappropriate, explicit and malicious websites, and control access to specified websites at specified time. Parental Controls are only supported by the Router mode.
Chapter 5 I want to: Parental Controls Control the times of day my children or other home network users are allowed to access the Internet and even types of websites they can visit. For example, I want to allow my children’s devices (e.g. a computer or a tablet) to access only www.tp-link.com and Wikipedia.org from 18:00 (6PM) to 22:00 (10PM) at the weekend and not other times. How can I do that? 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2.
Chapter 5 Parental Controls 5. Enter a Description for the entry, tick the Enable This Entry checkbox, and then click OK. 6. Select Whitelist as the restriction policy. Tips: With Blacklist selected, the controlled devices cannot access any websites containing the specified keywords during the Internet Access Time period. • With Whitelist selected, the controlled devices can only access websites containing the specified keywords during the Internet Access Time period. • 7. Click .
Chapter 5 Done! Parental Controls Now you can control your children’s internet access as needed.
Chapter 6 Bandwidth Control This chapter introduces how to set bandwidth limits minimize the impact caused when the connection is under heavy load. Bandwidth Control is only supported by the Router mode.
Chapter 6 6. 1. Bandwidth Control Set Upstream and Downstream Bandwidth 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > Bandwidth Control. 3. Enable Bandwidth Control and enter the Total Upstream Bandwidth and Total Downstream Bandwidth. 4. Click Save. 6. 2. Controlling Rules 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > Bandwidth Control. 3. Click Add and fill in the blanks.
Chapter 6 • • • • • Bandwidth Control IP Range: Enter the IP range of your devices that you want to apply Bandwidth Control to. Port Range: Enter the Port range of the protocols. Protocal: Select the protocols of services that you want to control. Priority: Select priority from 1 to 5. 1 means the highest priority. Upstream/Downstream: Enter the minimun and maxmium upstream/ downstream bandwidth you want to allocate. 4. Click Save.
Chapter 7 Network Security This chapter guides you on how to protect your home network from cyber attacks and unauthorized users by implementing these three network security functions. You can protect your home network against DoS (Denial of Service) attacks from flooding your network with server requests using DoS Protection, block or allow specific client devices to access your network using Access Control, or you can prevent ARP spoofing and ARP attacks using IP & MAC Binding.
Chapter 7 7. 1. Network Security Protect the Network from Cyber Attacks The SPI (Stateful Packet Inspection) Firewall and DoS (Denial of Service) Protection protect the router from cyber attacks. The SPI Firewall can prevent cyber attacks and validate the traffic that is passing through the router based on the protocol. This function is enabled by default, and it’s recommended to keep the default settings.
Chapter 7 7. 2. Network Security Service Filtering Service Filtering is used to prevent certain users from accessing a specific service. It can even block a user from accessing the internet. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > Security > Service Filtering. 3. Enable Service Filtering. 4. Click Add. 5. Select a service type from the drop-down list and the corresponding parameters will be automatically filled in.
Chapter 7 Network Security I want to: Block or allow specific client devices to access my network (via wired or wireless). How can I do that? 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > Security > Access Control or Settings > Security > Access Control. 3. Enable Access Control. 4. Select the access mode to either block (recommended) or allow the device(s) in the list. To block specific device(s): 1 ) Select Blacklist and click Save.
Chapter 7 Network Security the information from the Online Devices list if the device is connected to your network). 3 ) Click OK. Done! 7. 4. Now you can block or allow specific client devices to access your network (via wired or wireless) using the Blacklist or Whitelist. IP & MAC Binding IP & MAC Binding, namely, ARP (Address Resolution Protocol) Binding, is used to bind network device’s IP address to its MAC address.
Chapter 7 Network Security 2 ) Enter the MAC address and IP address that you want to bind. Done! 3 ) Tick the Enable This Entry checkbox and click Save.
Chapter 8 NAT Forwarding The router’s NAT (Network Address Translation) feature makes devices on the LAN use the same public IP address to communicate with devices on the internet, which protects the local network by hiding IP addresses of the devices. However, it also brings about the problem that an external host cannot initiatively communicate with a specified device on the local network.
Chapter 8 8. 1. NAT Forwarding Share Local Resources on the Internet by Virtual Servers When you build up a server on the local network and want to share it on the internet, Virtual Servers can realize the service and provide it to internet users. At the same time Virtual Servers can keep the local network safe as other services are still invisible from the internet. Virtual Servers can be used for setting up public services on your local network, such as HTTP, FTP, DNS, POP3/SMTP and Telnet.
Chapter 8 NAT Forwarding Tips: It is recommended to keep the default settings of Internal Port and Protocol if you are not clear about which port and protocol to use. • If the service you want to use is not in the Service Type, you can enter the corresponding parameters manually. You should verify the port number that the service needs. • You can add multiple virtual server rules if you want to provide several services in a router. Please note that the External Port should not be overlapped.
Chapter 8 NAT Forwarding 3. Click View Existing Applications, and select the desired application. The Triggering Port, External Port and Protocol will be automatically filled in. The following picture takes application MSN Gaming Zone as an example. 4. Click OK. Tips: • You can add multiple port triggering rules according to your network need. • The triggering ports can not be overlapped. • If the application you need is not listed in the Existing Applications list, please enter the parameters manually.
Chapter 8 NAT Forwarding Note: When DMZ is enabled, the DMZ host is totally exposed to the internet, which may bring some potential safety hazards. If DMZ is not in use, please disable it in time. I want to: Make the home PC join the internet online game without port restriction. For example, due to some port restriction, when playing the online games, you can login normally but cannot join a team with other players. To solve this problem, set your PC as a DMZ host with all ports open.
Chapter 8 NAT Forwarding Tips: • UPnP is enabled by default in this router. • Only the application supporting UPnP protocol can use this feature. • UPnP feature needs the support of operating system (e.g. Windows Vista/ Windows 7/ Windows 8, etc. Some of operating system need to install the UPnP components).
Chapter 9 VPN The VPN (Virtual Private Networking) feature allows you to access your home network in a secured way through internet when you are out of home. VPN is only supported by the Router mode.
Chapter 9 VPN With IPSec VPN, you can access the network securely when out of home. To use the VPN Service, you need to configure Dynamic DNS Service or assign a static IP address for the router’s WAN port. And the System Time should be synchronized with the internet. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to Advanced > VPN > IPSec VPN. 3. Enable Dead Peer Detection. 4. Click Add and enter correspond parameters.
Chapter 9 VPN • Tunnel access from local IP addresses: Select Subnet Address if you want the whole LAN to join the VPN network, or select Single Address if you want a single IP to join the VPN network. • IP Address for VPN: Enter the IP address of your LAN. • Subnet Mask: Enter the subnet mask of your LAN. • Tunnel access from remote IP addresses: Select Subnet Address if you want the whole remote LAN to join the VPN network, or select Single Address if you want a single IP to join the VPN network.
Chapter 10 Customize Your Network Settings This chapter guides you on how to configure advanced network features. Some features are only supported by a certain mode.
Chapter 10 Customize Your Network Settings 10. 1. Change the LAN Settings The router is preset with a default LAN IP 192.168.1.1, which you can use to log in to its web management page. The LAN IP address together with the Subnet Mask also defines the subnet that the connected devices are on. If the IP address conflicts with another device on your local network or your network requires a specific IP subnet, you can change it. 1. Visit http://tplinkwifi.
Chapter 10 Customize Your Network Settings ¾¾ To specify the IP address that the router assigns: 1. Enable DHCP Server. 2. Enter the starting and ending IP addresses in the IP Address Pool. 3. Enter other parameters if the ISP offers. The Default Gateway is automatically filled in and is the same as the LAN IP address of the router. 4. Click Save. ¾¾ To reserve an IP address for a specified client device: 1. Click Add in the Address Reservation section. 2.
Chapter 10 Customize Your Network Settings 10. 3. Set Up a Dynamic DNS Service Account Most ISPs assign a dynamic IP address to the router and you can use this IP address to access your router remotely. However, the IP address can change from time to time and you don’t know when it changes. In this case, you might apply the DDNS (Dynamic Domain Name Server) feature on the router to allow you and your friends to access your router and local servers (FTP, HTTP, etc.
Chapter 10 Customize Your Network Settings configure the static routing. Router A Company’s server Router B WAN: 172.30.30.100 LAN: 192.168.0.1 LAN: 192.168.0.2 172.30.30.1 Switch PC 192.168.0.100 How can I do that? 1. Change the routers’ LAN IP addresses to two different IP addresses on the same subnet. Disable Router B’s DHCP function. 2. Visit http://tplinkwifi.net, and log in with the password you set for Router A. 3. Go to Advanced > Network > Advanced Routing. 4.
Chapter 10 Customize Your Network Settings enter 255.255.255.255; otherwise, enter the subnet mask of the corresponding network IP. In the example, the destination network is a single IP, so here enter 255.255.255.255. Default Gateway: The IP address of the gateway device to which the data packets will be sent. This IP address must be on the same subnet with the router’s IP which sends out data.
Chapter 10 Customize Your Network Settings ¾¾ To change the wireless network name (SSID) and wireless password: 1. Go to Basic > Wireless, Settings > Wireless > Wireless Settings or Settings > Wireless > Extended Network. 2. Create a new SSID in Network Name (SSID) and customize the password for the network in Password. The value is case-sensitive. Note: If you change the wireless settings with a wireless device, you will be disconnected when the settings are effective.
Chapter 10 Customize Your Network Settings 4. Select the host network you want to extend. Note: If the network you want to extend is on but not listed, please try the following steps. • Move the router closer to your host router, and click Refresh in the top-right corner of the list. • You can manually enter the SSID (network name) and password of the network you want to extend, and click Save. 5. Once a host network is selected, its SSID, MAC address and security type will be automatically filled in.
Chapter 10 Customize Your Network Settings 2. Success will appear on the above screen and the WPS LED on the router will keep on for five minutes if the client has been successfully added to the network. 10. 7. 2. Use the PIN for Wi-Fi connections Router’s PIN is enabled by default to allow wireless devices to connect to the router using the PIN. You can use the default one or generate a new one. You can also enter the PIN of the device you want to connect to the Wi-Fi.
Chapter 10 Customize Your Network Settings 5. Click Save.
Chapter 11 Manage the Router This chapter will show you the configuration for managing and maintaining your router. Some features are only supported by a certain mode.
Chapter 11 Manage the Router 11. 1. Set Up System Time System time is the time displayed while the router is running. The system time you configure here will be used for other time-based functions like Parental Controls. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to System Tools > Time Settings. ¾¾ To get time from the PC : 1. Click Get from PC. 2. Click Save. ¾¾ To get time from the internet : 1. Select your local Time Zone from the drop-down list. 2.
Chapter 11 Manage the Router 2. Select the correct Start date and time when daylight saving time starts at your local time zone. 3. Select the correct End date and time when daylight saving time ends at your local time zone. 4. Click Save. 11. 2. Test the Network Connectivity Diagnostics is used to test the connectivity between the router and the host or other network devices. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2.
Chapter 11 Manage the Router 5. Wait a few minutes for the upgrade and reboot to complete. 11. 4. Backup and Restore Configuration Settings The configuration settings are stored as a configuration file in the router. You can backup the configuration file to your computer for future use and restore the router to a previous settings from the backup file when needed. Moreover, if necessary you can erase the current settings and reset the router to the default factory settings. 1. Visit http://tplinkwifi.
Chapter 11 Manage the Router ¾¾ To reset the router to factory default settings: 1. Click Factory Restore to reset the router. 2. Wait a few minutes for the resetting and rebooting. Note: • During the resetting process, do not turn off or reset the router. • We strongly recommend you backup the current configuration settings before resetting the router. 11. 5. Auto Reboot Auto Reboot allows you to specify a time when the router will reboot automatically. 1. Visit http://tplinkwifi.
Chapter 11 Manage the Router 3. Enter the old password, then a new password twice (both case-sensitive). Click Save. 4. Use the new password for future logins. 11. 7. Local Management Local Management allows local devices to access and manage the router. By default, all local devices can access and manage the router via HTTP. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2.
Chapter 11 Manage the Router 11. 8. Remote Management Remote Management allows remote devices to access and manage the router. By default, all remote devices cannot access and manage the router. 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to System Tools > Administration and complete the settings in Remote Management section as needed. 3.
Chapter 11 Manage the Router 3. Choose the type and level of the system logs as needed. 4. Click Save Log to save the system logs to a local disk. ¾¾ To send the system log to a remote server: 1. Visit http://tplinkwifi.net, and log in with the password you set for the router. 2. Go to System Tools > System Log. 3. Click Log Settings.
Chapter 11 Manage the Router 4. Select Save Remotely. If the remote server has a log viewer client or a sniffer tool implemented, you can view and analyze the system log remotely in real-time. 5. Select the minimum level of system logs to be saved from the drop-down list. The list is in descending order, with the lowest level listed last. 6. Specify the IP address of the remote system log server in the Server IP field. 7. Specify the port number of the remote system log server in the Server Port field.
Chapter 11 Manage the Router 65
FAQ Q1. What should I do if I can’t access the Internet? • If using a cable modem, unplug the Ethernet cable and reboot the modem. Wait until its Online LED is on and stable, and then reconnect the Ethernet cable to the modem. • If you’re in a hotel room or on a trade show, the internet may be limited and requires that you authenticate for the service or purchase the Internet access. • If your Internet access is still not available, contact TP-Link Technical Support. Q2.
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-Link Technologies Co., Ltd. Copyright © 2017 TPLink Technologies Co., Ltd.
FCC STATEMENT This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.
CE Mark Warning This is a class B product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures. OPERATING FREQUENCY(the maximum transmitted power) 2412MHz—2472MHz(20dBm) RF Exposure Information This device meets the EU requirements (2014/53/EU Article 3.1a) on the limitation of exposure of the general public to electromagnetic fields by way of health protection.
Radiation Exposure Statement: This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Déclaration d’exposition aux radiations: Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies pour un environnement non contrôlé.
Продукт сертифіковано згідно с правилами системи УкрСЕПРО на відповідність вимогам нормативних документів та вимогам, що передбачені чинними законодавчими актами України. Safety Information • When product has power button, the power button is one of the way to shut off the product; when there is no power button, the only way to completely shut off power is to disconnect the product or the power adapter from the power source. • Don’t disassemble the product, or make repairs yourself.
