Head blueLogoText.gif NCF HelpWiki
Help | StartPage

Difference between revisions of "TP-Link TD-8816 Configuration"

From Support
Jump to navigation Jump to search
(Security note)
m
 
(24 intermediate revisions by 3 users not shown)
Line 1: Line 1:
[[File:TD-8816-02.jpg|thumb|right|300px|The TP-Link 8816 DSL modem]]
<div class="ncfrightbox"> {{Template:Modem Links}} </div>
This is the procedure NCF uses to configure a TP-Link 8816 modem out of the box or after a factory reset. To learn more about configuring your particular modem, consult the [[Modem manuals (DSL)|manual]].
[[File:TD-8816-02.jpg|thumb|left|x250px|The TP-Link 8816 DSL modem]]


=== Configure as router ===
{{Template:Misfortune_Cookie_Upgrade_Firmware}}
 
= Configure as router =
This is the procedure NCF uses to configure a TP-Link 8816 modem out of the box or after a factory reset. To learn more about configuring your particular modem, consult the [[Modem Manuals|manual]].


# Connect power and turn on the modem with the black button on the back.
# Connect power and turn on the modem with the black button on the back.
Line 10: Line 13:
##'''user:''' admin  
##'''user:''' admin  
##'''password:''' admin
##'''password:''' admin
{{:Quick Facts (TP-Link DSL modem)}}
 
If the modem was previously configured for someone, the password would be the previous user's DSL-Password. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.
If the modem was previously configured for someone, the password would be the previous user's [[DSL password]]. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.
 
== Using Quick Start Wizard ==
{{:Template:Quick Facts (TP-Link DSL modem)}}


# When presented with the TP-Link configuration page, select the '''Quick Setup''' option at the top left.
# When presented with the TP-Link configuration page, select the '''Quick Setup''' option at the top left.
Line 20: Line 26:
# Click '''Next'''
# Click '''Next'''


The 8816 can be set-up as ''either'' '''Bridge''' mode or '''Router-PPPoE''' mode. Bridge mode is used when it will be connected to a separate router. Router mode is used when it will not be connected to a separate router.  Read more on the [[Modem_modes_(DSL)|Bridge versus Router mode decision]].
The 8816 can be set-up as ''either'' '''Bridge''' mode or '''Router-PPPoE''' mode. Bridge mode is used when it will be connected to a separate router. Router mode is used when it will not be connected to a separate router.  Read more on the [[Modem_Modes|Bridge versus Router mode decision]].


* If '''Bridge''' Mode:
* If '''Bridge''' Mode:
Line 38: Line 44:
## Click '''Next'''
## Click '''Next'''


* Click Finish
* Click '''Finish'''
 
The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.


=== Password protect the Admin Role ===  
==Security==
 
===Turn on SPI firewalling===
# In '''Advanced Setup''' select '''Firewall'''.
# '''SPI: Enabled'''
 
<!-- Click on Access Management.
Select UPnP
Select Deactivated for UPnP and Auto-Configured.
Save the changes with Save -->
 
===Deactivate ACL===
In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [[CERT-announced vulnerability of TP-Link modem/router|This page]] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/download/TD-8816.html TP-Link website].
 
Some older TP-Link modems were shipped from the factory with the ACL activated. This should be checked and if activated then deactivated at Access Management &rarr; ACL.
 
<gallery>
File:TP-Link modem with ACL activated.png|TP-Link modem with ACL activated
File:TP-Link modem with ACL deactivated.jpg|TP-Link modem with ACL deactivated
</gallery>
 
=== Protect Admin Role ===  
# Click on '''Maintenance''' in the menu along the top of the page.  Below it other options appear.
# Click on '''Maintenance''' in the menu along the top of the page.  Below it other options appear.
# Select '''Administration'''  
# Select '''Administration'''  
Line 49: Line 78:
A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.
A pop-up log-in screen appears, and asks for sign-in. Use the User-ID '''admin''' and the DSL-Password just set. Return to the same configure page you were just at.


The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.
==Set Daylight Savings Time==
 
===Set daylight savings time===
# In '''Maintenance''' select '''Time Zone'''.
# In '''Maintenance''' select '''Time Zone'''.
# Daylight Saving: Enabled
# '''Daylight Saving: Enabled'''
 
===Turn on SPI firewalling===
# In '''Advanced Setup''' select '''Firewall'''.
# SPI: Enabled
 
==Security==
In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. [http://www.tp-link.com/en/article/?faqid=569 This official TP-Link web page] provides more detailed information on the vulnerability. Latest firmware versions can be checked on the [http://www.tp-link.com/en/support/download/?pcid=203 TP-Link website].


==See also==
=See Also=
*[https://www.ncf.ca/ncf/support/w/images/a/a6/Modem_Info_Pages_-_8816_v1.5.pdf NCF modem instruction sheet]
*[[Dynamic DNS]]
*[[Dynamic DNS]]
*[[Modem Configuration (DSL)]] - for a complete list of instructions for all NCF modems
*[[Modem Configuration]] - for a complete list of instructions for all NCF modems
*[[Port forwarding]]
*[[Port forwarding]]
*[[VOIP]]
*[[VOIP]]


[[Category: DSL]]
[[Category:DSL]]
[[Category:Modems]]

Latest revision as of 11:21, 26 September 2019

Key Modem Pages
The TP-Link 8816 DSL modem

⚠ Vulnerable to Misfortune Cookie: Upgrade Firmware ⚠

In December 2014 it was revealed that some versions of this TP-Link model are subject to hacking if they are running outdated firmware and if the remote access (ACL) is set to allow remote access. We documented this vulnerability on the Misfortune Cookie Vulnerability page.

Read more on the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

NCF Recommendation for this modem:

  • Upgrade the Firmware to the lastest version if available.
  • Also, Deactivate ACL from Access Management → ACL.
  • If there is no firmware update for your version, replace the modem.

  • TP-Link modem with ACL activated

  • TP-Link modem with ACL deactivated

Configure as router

This is the procedure NCF uses to configure a TP-Link 8816 modem out of the box or after a factory reset. To learn more about configuring your particular modem, consult the manual.

  1. Connect power and turn on the modem with the black button on the back.
  2. Connect an Ethernet LAN cable to the yellow rear port
  3. In the browser's address bar, enter the IP address for the modem interface page: 192.168.1.1
  4. If the modem is fresh from the factory, use the default user name and password to gain access
    1. user: admin
    2. password: admin

If the modem was previously configured for someone, the password would be the previous user's DSL password. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.

Using Quick Start Wizard

DSL Quick Configuration Info

(TP-Link DSL modems)

Modem Web Interface http://192.168.1.1
Modem login Username: admin

Password: (see 'password' below)

VPI / VCI (ADSL) 0.35
VLAN (VDSL) 35
Protocol PPPoE
DSL username (eg. aa999@ncf.ca)
DSL Password Starts with 'ncf' (not the same

as your NCF Start Page login)

Firewall Enabled by default (recommended)
Wireless If enabled, WPA-PSK (WPA2)
  1. When presented with the TP-Link configuration page, select the Quick Setup option at the top left.
  2. Select Run Wizard to proceed.

Now a window pops open and you can begin to set up the details of the interface.

  1. Select Next to proceed
  2. Set the Time Zone Eastern
  3. Click Next

The 8816 can be set-up as either Bridge mode or Router-PPPoE mode. Bridge mode is used when it will be connected to a separate router. Router mode is used when it will not be connected to a separate router. Read more on the Bridge versus Router mode decision.

  • If Bridge Mode:
  1. Select "Bridge"
    1. Click Next
    2. Ensure settings are VPI is set to 0 and VCI is set to 35
    3. Leave connection type at default of IP LLC
    4. Click Next
  • If Router Mode:
  1. Select PPPoE/PPPoA
    1. Click Next
    2. Username MUST be in the form ab123@ncf.ca (NOTE the "@ncf.ca" part! - it will not work without that!)
    3. Password uses DSL Password (This is not your NCF account password, but your DSL password and was provided to you when you signed up for service, it starts with "ncf...")
    4. Ensure settings are VPI is set to 0 and VCI is set to 35
    5. Ensure that the encapsulation remains at PPPoE LLC (default)
    6. Click Next
  • Click Finish

The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

Security

Turn on SPI firewalling

  1. In Advanced Setup select Firewall.
  2. SPI: Enabled


Deactivate ACL

In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. This page provides more detailed information on the vulnerability. Latest firmware versions can be checked on the TP-Link website.

Some older TP-Link modems were shipped from the factory with the ACL activated. This should be checked and if activated then deactivated at Access Management → ACL.

  • TP-Link modem with ACL activated

  • TP-Link modem with ACL deactivated

Protect Admin Role

  1. Click on Maintenance in the menu along the top of the page. Below it other options appear.
  2. Select Administration
  3. For the admin user use your DSL-Password or another strong password.
  4. Enter it once and again below to confirm
  5. Save the changes with Save

A pop-up log-in screen appears, and asks for sign-in. Use the User-ID admin and the DSL-Password just set. Return to the same configure page you were just at.

Set Daylight Savings Time

  1. In Maintenance select Time Zone.
  2. Daylight Saving: Enabled

See Also

Retrieved from "https://help.ncf.ca/index.php?title=TP-Link_TD-8816_Configuration&oldid=7069"