TP-Link TD-W8901G Configuration

Key Modem Pages

• Modem Lights
• Modem Manuals
• Modem Installation
• Firmware
• Modem Modes
• Stages of DSL connection-making
• DSL Equipment Buy/Sell Discussion Group

The TP-Link 8901G modem

Update Firmware: Misfortune Cookie

As of 2014-Dec-23 we are advising our members to update the FW in their modem/router to counter possible vulnerability to the Misfortune Cookie as reported in http://www.kb.cert.org/vuls/id/561444.

This is the procedure NCF uses to configure a TP-Link 8901G modem out of the box or after a factory reset.

To learn more about configuring your particular modem, consult the manual.

Configure as router

1. Connect power and turn on the modem with the black button on the back.
2. Connect an Ethernet LAN cable to one of the yellow rear ports
3. In the browser's address bar, enter the IP address for the modem interface page: 192.168.1.1
4. If the modem is fresh from the factory, use the default user name and password to gain access
   1. user: admin
   2. password: admin

If the modem was previously configured for someone, the password would be the previous user's DSL password. If it is unknown then do a reset to factory default, using a paper-clip in the reset hole on the back. Hold for 15 seconds to reset. The user name and password will now be as above.

DSL Quick Configuration Info (TP-Link DSL modems)
Modem Web Interface	http://192.168.1.1
Modem login	Username: admin Password: (see 'password' below)
VPI / VCI (ADSL)	0.35
VLAN (VDSL)	35
Protocol	PPPoE
DSL username	(eg. aa999@ncf.ca)
DSL Password	Starts with 'ncf' (not the same as your NCF Start Page login)
Firewall	Enabled by default (recommended)
Wireless	If enabled, WPA-PSK (WPA2)

1. When presented with the TP-Link configuration page, select the Quick Setup option at the top left.
2. Select Run Wizard to proceed.

Now a window pops open and you can begin to set up the details of the interface.

1. Select Next to proceed
2. Set the Time Zone Eastern
3. Click Next
4. Set the connection type of PPPoE/PPPoA
5. Click Next
6. Ensure VPI is set to 0 and VCI is set to 35
7. Click Next
8. Verify that PPPoverEthernet PPPoE is selected
9. Click Next

Continuing now to set the user name and password

1. PPPoE Service name can remain blank
2. PPP username in the form ab123@ncf.ca (NOTE the "@ncf.ca" part! - it will not work without that!)
3. PPP Password uses DSL Password (This is not your NCF account password, but your DSL password and was provided to you when you signed up for service, it starts with "ncf...")
4. Ensure that the encapsulation remains at PPPoE LLC (default)
5. Click Next

Continuing now to set the wireless configuration

1. Ensure Access Point indicates activated
2. The SSID is set to NCF plus the 3 numeric characters of your ID, such as NCF_123. It is recommended you not use your first or last name, or street address as this information is broadcast and other people in your area will be able to associate the signal with which home it is coming from.
3. Broadcast SSID remains selected
4. Auth Type - must be set to WPA2-PSK

...wait a moment for it to offer additional field for encryption and password...

1. Set Encryption Type to be AES
2. Set the Preshared Key to be your DSL-Password
3. Click Next to Finish the wizard.

Proceed with four more steps - Setting administrator access, and wireless locale setting

Password protect the Admin Role

1. Click on Maintenance in the menu along the top of the page. Below it other options appear.
2. Select Administration
3. For the admin user use your DSL-Password or another strong password.
4. Enter it once and again below to confirm
5. Save the changes with Save

A pop-up log-in screen appears, and asks for sign-in. Use the User-ID admin and the DSL-Password just set. Return to the same configure page you were just at.

Set daylight savings time

1. In Maintenance select Time Zone.
2. Daylight Saving: Enabled

Turn on SPI firewalling

1. In Advanced Setup select Firewall.
2. SPI: Enabled

Final area setting and check

1. Click Interface Setup in the top-of-page menu
2. Now select Wireless in the menu below that.
3. Choose Canada for the Channel Setup
4. Click SAVE

Still on this page, Verify:

1. The SSID in the form NCF_XXXXX or as you set.
2. The Auth Type is WPA2-PSK
3. The Encryption Type is AES and key is DSL-Password
4. Click on the Internet tab
5. Ensure that PVC2 has VPI/VCI set at 0/35
6. Ensure that PPPoE credentials are set properly for your user name and password.

The modem should now synchronize and connect to your DSL service if the service is operating. You may need to reboot the modem to get it to connect.

Security

In January 2014 it was revealed that some models of TP-Link modem, including this model, are subject to hacking if they are running out dated firmware and if the remote access (ACL) is set to allow remote access. This web page provides more detailed information on the vulnerability. Latest firmware versions can be checked on the TP-Link website.

Some older TP-Link modems were shipped from the factory with the ACL activated. This should be checked and if activated then deactivated at Access Management → ACL.

• 

  TP-Link modem with ACL activated

• 

  TP-Link modem with ACL deactivated

See also

• CERT-announced vulnerability of TP-Link modem/router
• Modem Configuration - for a complete list of instructions for all NCF modems
• Port forwarding
• VOIP