TRENDNET AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router User Guide

: June 15, 2024
: TRENDnet

Table of Contents

AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router
Product Information
Specifications:
- Product Usage Instructions
Router Installation
- Desktop Hardware Installation:
- Rack Mount Hardware Installation:
Basic Installation and Configuration
- FAQ (Frequently Asked Questions)
Q: How do I reset the router to factory defaults?
Q: How can I update the firmware of the router?

AX1800 Dual Band Wifi 6 Gigabit Dual Wan VPN SMB Router

Product Information

Specifications:

Product Name: TRENDnet Router
Model Number: [Insert Model Number]
Hardware Installation: Desktop and Rack Mount
Features: Application layer gateway (ALG), UPnP and NAT-PMP,
Static routes, Dynamic routing protocols, Quality of Service (QoS),
Dynamic DNS, File sharing server, Wake on LAN (WoL), Wireless
Networking and Security, Firewall & security settings, DMZ
Host, One-to-One NAT, RADIUS Authentication, Multiple WAN
Configuration, Virtual Private Networking (VPN), PPTP VPN Server,
L2TP VPN Server, IPsec (Internet Protocol Security)

Product Usage Instructions

Router Installation

To install the TRENDnet Router, follow the steps below:

Desktop Hardware Installation:

Place the router in a suitable location near your internet
connection.
Connect the power adapter to the router and plug it into a
power outlet.
Connect one end of an Ethernet cable to the WAN port on the
router.
Connect the other end of the Ethernet cable to your modem or
internet source.
Connect your computer or device to one of the LAN ports on the
router using another Ethernet cable.

Rack Mount Hardware Installation:

Attach the mounting brackets to the router using the provided
screws.
Securely mount the router onto a rack using the mounting
brackets.
Connect the power adapter and Ethernet cables as mentioned in
the desktop hardware installation section.

Basic Installation and Configuration

After completing the hardware installation, follow these steps
to perform basic installation and configuration:

Open a web browser on your computer.
Type the default IP address of the router into the address bar
(e.g., 192.168.1.1).
Press Enter to access the router’s web interface.
Enter the default username and password provided in the user
manual or on the product label.
Follow the on-screen instructions to configure basic settings
such as network name (SSID) and password.
Save the settings and wait for the router to reboot.

… (continue with the rest of the sections)

FAQ (Frequently Asked Questions)

Q: How do I reset the router to factory defaults?

A: To reset the router to factory defaults, locate the reset
button on the router’s back panel. Use a paperclip or similar tool
to press and hold the reset button for approximately 10 seconds.
The router will restart and all settings will be restored to their
default values.

Q: How can I update the firmware of the router?

A: To update the firmware of the router, visit the
manufacturer’s website and download the latest firmware file for
your specific model. Access the router’s web interface, navigate to
the firmware update section, and follow the instructions to upload
and install the new firmware file.

… (continue with more frequently asked questions)

TRENDnet User’s Guide

Cover Page

TRENDnet User’s Guide
Table of Contents
Product Overview …………………………………………………………………1
Package Contents ……………………………………………………………………………………………. 1 Features …………………………………………………………………………………………………………. 1 Product Hardware Features………………………………………………………………………………. 3 Applications ……………………………………………………………………………………………………. 5
Router Installation ………………………………………………………………..1
Desktop Hardware Installation ………………………………………………………………………….. 1 Rack Mount Hardware Installation …………………………………………………………………….. 1 Basic Installation and Configuration …………………………………………………………………… 2
Basic Router Settings……………………………………………………………..6
Access your router management page ……………………………………………………………….. 6 Saving and applying router configuration changes ………………………………………………. 6 Change your administrator password ………………………………………………………………… 6 Set your router date and time …………………………………………………………………………… 7 Create time schedules ……………………………………………………………………………………… 8 Change LAN IPv4 address settings ……………………………………………………………………… 8 Configure LAN IPv4 DHCP server settings……………………………………………………………. 9 Add static DHCP reservations ………………………………………………………………………….. 11 Add static host name entries …………………………………………………………………………… 11 Add static ARP entries ……………………………………………………………………………………. 12 Configure WAN1 / WAN2 interfaces for Internet connectivity …………………………….. 13 IPv6 settings………………………………………………………………………………………………….. 15 Virtual LANs (VLANs)………………………………………………………………………………………. 15
· Create a port-based VLAN ……………………………………………………………………… 15 · Create a port- based VLAN with 802.1Q tagging ………………………………………… 17 · Assigning VLAN IDs to Wireless SSIDs ………………………………………………………. 19
© Copyright 2023 TRENDnet. All Rights Reserved.

Table of Contents
Application layer gateway (ALG) ……………………………………………………………………… 21 UPnP and NAT- PMP……………………………………………………………………………………….. 22 Static routes………………………………………………………………………………………………….. 22 Dynamic routing protocols ……………………………………………………………………………… 23
· Routing Information Protocol (RIP) …………………………………………………………. 23 · OSPF (Open Shortest Path First) ……………………………………………………………… 24
Quality of Service (QoS)………………………………………………………………………………….. 25 Dynamic DNS ………………………………………………………………………………………………… 26 File sharing server………………………………………………………………………………………….. 27 Wake on LAN (WoL)……………………………………………………………………………………….. 28
Wireless Networking and Security…………………………………………. 29
Wireless Settings …………………………………………………………………………………………… 29
· Primary SSID ………………………………………………………………………………………… 29 · Multiple SSID ……………………………………………………………………………………….. 31
How to choose the type of security for your wireless network ……………………………. 32 Secure your wireless network …………………………………………………………………………. 33 Guest Network………………………………………………………………………………………………. 35 WiFi client bridge mode …………………………………………………………………………………. 36 Connect wireless devices using WPS ………………………………………………………………… 37 Steps to improve wireless connectivity …………………………………………………………….. 38
Firewall & security settings ………………………………………………….. 39
General settings…………………………………………………………………………………………….. 39 Port forwarding rules……………………………………………………………………………………… 40 Port trigger rules……………………………………………………………………………………………. 40 IP filtering …………………………………………………………………………………………………….. 41 MAC filtering…………………………………………………………………………………………………. 42 Denial of service (DoS) prevention …………………………………………………………………… 42
i

TRENDnet User’s Guide
DMZ Host ……………………………………………………………………………………………………… 43 One-to-One NAT ……………………………………………………………………………………………. 43 RADIUS Authentication…………………………………………………………………………………… 44
Multiple WAN Configuration …………………………………………………45
Multiple WAN Management Settings ……………………………………………………………….. 45
· MWAN Status ………………………………………………………………………………………. 46 · Link Tracking ………………………………………………………………………………………… 46 · Default Traffic Rule ……………………………………………………………………………….. 46 Web Management System (Bark®) …………………………………………47
Setup your router with Bark® ………………………………………………………………………….. 48
Virtual Private Networking (VPN) …………………………………………..53
Creating a Virtual Private Network (VPN)………………………………………………………….. 53 PPTP VPN Server ……………………………………………………………………………………………. 54
· Setting up the PPTP VPN server………………………………………………………………. 54 · Setting up the PPTP VPN client (Windows)……………………………………………….. 55
L2TP VPN Server ……………………………………………………………………………………………. 57
· Setting up the L2TP VPN server without IPsec encryption ………………………….. 57 · Setting up the L2TP VPN client (Windows) with IPsec encryption (PSK) ……….. 58
IPsec (Internet Protocol Security) …………………………………………………………………….. 59
· Setting up IPsec site-to-site VPN (PSK) …………………………………………………….. 59 · Setting up IPsec server VPN (PSK with xAUTH)………………………………………….. 63 · Setting up IPsec site-to-site VPN Failover (PSK)…………………………………………. 66
Secure Socket Layer VPN (SSL) / OpenVPN………………………………………………………… 70
· SSL VPN Server Setup…………………………………………………………………………….. 70 · SSL VPN Client Setup (Windows) …………………………………………………………….. 72
Certificate Management…………………………………………………………………………………. 76
· IPsec ……………………………………………………………………………………………………. 76 · OpenVPN …………………………………………………………………………………………….. 77
© Copyright 2023 TRENDnet. All Rights Reserved.

Table of Contents
Router Maintenance and Monitoring …………………………………….. 78
Managing access to the router management interface ………………………………………. 78
· Local Access Management …………………………………………………………………….. 78 · Remote Access Management …………………………………………………………………. 78
Diagnostic tools …………………………………………………………………………………………….. 79
· Speed Test This section allows for a speed test of your ISP connection …….. 80
Backup and restore your router configuration settings ………………………………………. 81 Reboot your router………………………………………………………………………………………… 81 Scheduled automatic reboot …………………………………………………………………………… 82 Console access ………………………………………………………………………………………………. 82 Command Line Interface ………………………………………………………………………………… 82 Router Default Settings ………………………………………………………………………………….. 83 Reset your router to factory defaults ……………………………………………………………….. 83 Upgrade your router firmware ………………………………………………………………………… 84 Ping Watchdog ……………………………………………………………………………………………… 86
· Local Access Management …………………………………………………………………….. 86
Check the router status information ………………………………………………………………… 86 Check WiFi status information ………………………………………………………………………… 89 Deep Packet Inspection ………………………………………………………………………………….. 89 Real-Time Graphs ………………………………………………………………………………………….. 90 View routing table and ARP entries………………………………………………………………….. 92 View your router logging ………………………………………………………………………………… 92
Technical Specifications ………………………………………………………. 94 Troubleshooting ………………………………………………………………… 97 Appendix ………………………………………………………………………….. 98
ii

TRENDnet User’s Guide
Product Overview
TEW-929DRU
Package Contents
In addition to your router, the package includes: · Quick Installation Guide · 2 x detachable high gain antennas · Network cable (1.5 m/5 ft.) · RJ-45 to RS-232 console cable (1.5m / 5 ft.) · Power adapter (12V DC, 2 A) · Rack mount kit
If any package contents are missing or damaged, please contact the retail store, online retailer, or reseller/distributor from which the product was purchased.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-829DRU
Features
TRENDnet’s AX1800 Dual-Band Wireless Gigabit Dual-WAN VPN SMB Router, model TEW-929DRU, features two concurrent WiFi bands to maximize device networking speeds: two separate high performance 802.11ax networks (5GHz: 1201Mbps / 2.4GHz: 574Mbps). It features dual-WAN ports for load balancing or fail-over modes, and encrypted Virtual Private Network (VPN) access for remote users. Dual-WAN ports smooth network loading, minimize network downtime, and allow employees to access your network from the Internet–all with a single router. This WiFi 6 router comes equipped with a 2.5GBASE-T RJ-45 LAN port that provides higher gigabit speeds capable of up to 2.5Gbps over your existing Cat5e or better cabling. Providing faster throughput to your 2.5G compatible devices such as Network attached storage and high-speed WiFi 6 access points. This wireless router features advanced management, QoS, VLAN, VPN, and other capabilities to ensure optimal performance, scalability, and protection of your network. Intelligently manage your offices’ web access with our advanced content filtering tool powered by Bark®, increase employee productivity and finally take control of your internet.
Dual-WAN
Supports up to two separate WAN internet connections for load-balancing or fail-over modes
Ports
1x 2.5G LAN port, 2 x Gigabit LAN ports, 1 x RJ-45 console port, 1 x USB 2.0 share port
Dual-Band WiFi 6
Two concurrent WiFi bands maximize device networking speeds: two separate high performance 802.11ax networks 1201Mbps (5GHz) + 574Mbps (2.4GHz) bands
2.5G Support
Features a 2.5GBASE-T RJ-45 LAN port that delivers higher gigabit speeds capable of up to 2.5Gbps over your existing Cat5e or better cabling. Providing faster throughput to your 2.5G compatible devices such as Network attached storage and high-speed WiFi 6 access points.
1

TRENDnet User’s Guide
Pre-Encrypted Wireless
For your convenience the router’s WiFi bands are pre-encrypted with their own unique WPA3 passwords
VPN
Supports IPsec, PPTP, L2TP w/ IPsec, and SSL VPN protocols for encrypted remote access to local area network (LAN) resources over the internet
Inter-VLAN Routing
Provides routing capabilities between VLANs
QoS
Intelligently prioritize voice, video, and other data traffic to improve network efficiency and overall performance
Rack Mount Design
Sturdy metal housing with rack mount brackets included
Wall Mountable
Wall mount ready
Online Firmware Updates
Automatic notification of firmware updates
Management
Supports web browser (HTTP, HTTPS), CLI, SSH and Telnet management
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-829DRU
2

TRENDnet User’s Guide Product Hardware Features
Front Panel View

TEW-829DRU
Rear Panel View

Security Slot

Reset Button

RJ-45 Console
Port

Gigabit LAN Ports
2-3

WAN2 Port

USB 2.0 Port

2.5Gbps Lan Port 1

WAN1 Port

LED Indicators

Power Port

On(-)/Off(o) Power Switch

3

TRENDnet User’s Guide

LED Indicators LED
Port LEDs

Description Solid Blue Device is receiving power and turned on. Off Device is not receiving power or turned off.
Solid Blue WPS connection process was successful. WPS LED will remain on after successful connection for 2 minutes. Blinking Blue WPS is activated and setup process has started. Within 2 minutes, start the WPS process on your WPS client device to connect. Off WPS setup process has stopped or has not been activated. Solid Blue 2.4GHz (2-stream) wireless radio is turned on. Blinking Blue Data transmission on 2.4GHz radio. Off 2.4GHz (2-stream) wireless radio turned off. Solid Blue 5GHz1 (2-stream) wireless radio is turned on. Blinking Blue Data transmission on 5GHz1 radio. Off 5GHz1 (2-stream) wireless radio turned off.
LAN 1-3, WAN1 & WAN2 Ports
LED (Left Side) Solid Green Port is connected at 1Gbps or 2.5Gbps link speed. Off Port is connected at 10Mbps or 100Mbps link speed.
LED (Right Side) Blinking Green – Data activity/transmission on port.

Port/Button Description Ports/Buttons Description
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-829DRU

Grounding Point

Allows the device chassis to be connected to a known ground point for electrical safety and protection possible shock or surge during device operation and handling. (Grounding wire and screw not included.)

Security Slot RJ-45 Console Port
USB 3.0 Port
LAN Interface Ports 1-3
WAN1 Interface Port
WAN2 Interface Port
Reset Button
Power Port On(-)/Off(o) Power Switch

Allows for an optional cable lock attachment to secure the device to a physical location. Using the included RJ-45 to RS-232 console cable, this interface provides console/terminal (command line interface) access to the device for management and troubleshooting purposes.
Terminal Settings: Baud: 115200 / Data: 8 / Stop: 1 / Parity: None / Flow: None Allows for an optional USB storage device (flash drive, external HDD, etc.) to be connected and used as a network share through the Samba protocol. (FAT32/NTFS format only) Connect network devices to the LAN interface ports 1-3 at 2.5Gbps (Port 1 only), Gigabit, 10Mbps/100Mbps Full/Half Duplex. By default, management access to the GUI and command line interface via default LAN IP address: 192.168.10.1 / 255.255.255.0 Connects to your Internet Service Provider (ISP) equipment for Internet connectivity such as modem. By default, WAN mode is set for failover and WAN1 is configured as the primary WAN link for Internet connectivity. Connects to your Internet Service Provider (ISP) equipment for Internet connectivity such as modem. By default, WAN mode is set for failover and WAN2 is configured as the secondary WAN link for Internet connectivity. Resets device to factory defaults. Using a paperclip, push and hold the reset button for 15 seconds and release to reset the device to factory defaults. Connects the included power adapter to supply device power. Turns the device power On(-) or Off(o).

4

TRENDnet User’s Guide Applications

TEW-829DRU

TRENDnet User’s Guide
Router Installation
Desktop Hardware Installation
The site where you install the hub stack may greatly affect its performance. When installing, consider the following pointers:
Note: The router model may be different than the one shown in the example illustrations.
· Install the Router in a fairly cool and dry place. · Install the Router in a site free from strong electromagnetic field generators (such
as motors), vibration, dust, and direct exposure to sunlight. · Leave at least 10cm of space at the front and rear of the hub for ventilation. · Install the Router on a sturdy, level surface that can support its weight, or in an
EIA standard-size equipment rack. For information on rack installation, see the next section, Rack Mounting. · When installing the Router on a level surface, attach the rubber feet to the bottom of each device. The rubber feet cushion the hub and protect the hub case from scratching.

TEW-829DRU Rack Mount Hardware Installation
The router can be mounted in an EIA standard-size, 19-inch rack, which can be placed in a wiring closet with other equipment. Attach the mounting brackets at the router’s front panel (one on each side), and secure them with the provided screws.
Then, use screws provided with the equipment rack to mount each router in the rack.

Note: The look of the router may be different than what is actually displayed. 1

TRENDnet User’s Guide
Basic Installation and Configuration
Note: It is recommended that you configured the wireless router from a wired computer.
1. Attach the antennas to the front and back of the router and position them for the best WiFi coverage. It is recommended that you position all antennas vertically as shown for initial installation and adjust as needed later on.

TEW-829DRU
2. Connect a network cable from the WAN1 port of your router to your modem.
3. Connect a network cable from one of the LAN ports (1-3) of your router to your computer.
4. Connect the includes power adapter from a power outlet to your router power port and push the Power On(-)/Off(o) switch into the On(-) position.

TRENDnet User’s Guide
5. The Power ( ), 2.4G, 5G LEDs will turn on solid indicating that the router is ready.

TEW-829DRU
7. Enter the default User Name and Password, then click Login. By default, the preconfigured user name and password are located on the included preset wireless settings sticker or device label located on the bottom of the router.

6. Open your web browser on the connected computer and in the address bar, enter http://tew-929dru or http://192.168.10.1 and press Enter to access the router web configuration page.

8. To change the administrator password for the router configuration, click Management and click Administration.
Note: By default, the administrator password has been pre-configured for your convenience and can be located on the included wireless settings sticker or on the device label located on the bottom of the router. If you are modifying the administrator password, you will need to log into the router configuration using the new password.

TRENDnet User’s Guide

TEW-829DRU

9. Enter the new administrator username/password in the User Name, Old Password, New Password field and re-type the new password in the Confirmation field. Click Apply to save and commit the changes.

11. Under Common Configuration and General Setup, enter the new LAN IPv4 address and subnet mas in the IPv4 address and IPv4 netmask fields. Click Apply to save and commit the changes. Please wait for the new address settings to be applied and log back into the router web configuration page using the new LAN IPv4 address.
Note: If your computer IP address settings are not automatically updated to the new settings, you may need to manually renew your computer IP address settings in order for your to log back into the router web configuration with the new LAN IPv4 address settings.

12. To configure your WAN1 Internet connection settings, click Network, click WAN, and click WAN1.
10. To change your router’s LAN IPv4 address settings, click on Network and click LAN.
© Copyright 2019 TRENDnet. All Rights Reserved. 4

TRENDnet User’s Guide
13. Under Common Configuration and General Setup, click the Protocol drop- down list and select the appropriate protocol (Static address, DHCP client, PPTP, PPPoE, L2TP) for your Internet connection. DHCP client is the typical protocol in which the connection settings are automatically obtained by your ISP (Internet Service Provider). If you are unsure about the Internet connection settings, please contact your ISP for details. After you have completed the Internet connection settings, click Apply to save and commit the changes.

TEW-829DRU
15. To change the wireless network name/SSID for the selected wireless band, under Interface Configuration and General Setup, enter the new name in the ESSID field and click Apply to save and commit the changes. Note: The wireless network name/SSID is the name your WiFi clients will need to search and discover when connecting to your router wireless network.

14. To configure your wireless network name/SSID and wireless encryption settings, click Network and click the wireless band you would like to configure. Wireless 2.4GHz, or Wireless 5GHz.
Note: By default, the wireless network name/SSID has been pre-configured for your convenience and can be located on the included wireless settings sticker or on the device label located on the bottom of the router. If you are modifying the wireless settings, you will need to connect to the router with your WiFi clients using the new settings.

16. To change the wireless encryption key for the selected wireless band, under Interface Configuration Wireless Security, enter the new encryption in the Key field and
click Apply to save and commit the changes.
Note: WPA2-PSK AES wireless encryption is strongly recommended. The wireless encryption key is the key your WiFi clients will need to enter when connecting to your router wireless network.

TRENDnet User’s Guide
Basic Router Settings
Access your router management page
Note: Your router management page URL/domain name http://tew-929dru or IP address http://192.168.10.1 is accessed through the use of your Internet web browser (e.g. Internet Explorer®, Firefox®, ChromeTM, Safari®, OperaTM) and will be referenced frequently in this User’s Guide.
1. Open your web browser and go to URL/domain name http://tew-929dru/ or IP address http://192.168.10.1. Your router will prompt you for a user name and password.
2. For added security, the router is pre-configured with a unique administrator password. You can find the Password on the sticker included in the router package contents or on the device label located on the bottom of the router. Enter your Username and Password, then click LOGIN.
· User Name: admin · Password: (xxxxxxxx) Note: User Name and Password are case sensitive.

TEW-829DRU
Saving and applying router configuration changes
In the router management page, pages may include all, some, or one of the options below. Some configuration changes may require a device reboot.
· Reset Clicking this option will reset all settings to their previous configuration on a specific page.
· Apply Clicking this option will save and apply the configuration changes on a specific page which will take effect immediately.
· Save Clicking this option will temporarily save the changes and allow you to temporarily save multiple configuration changes and apply all configuration changes at the same time. When you are ready to save and apply the configuration changes permanently, click on the notification in the top right corner.
Change your administrator password
Administrator > Administration By default, the administrator password has been pre-configured a unique password for your convenience. You can find the pre- configured administrator password on the wireless sticker included in your router package contents or also located on the router device label located on the bottom of the device. This section will allow you to change the default administrator password used to log into your router management page.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Management and click on Administration.
3. Enter the new administrator username/password in the User Name, Old Password, New Password field and re-type the new password in the Confirmation field. Click Apply to save and commit the changes. Note: The idle timeout setting is used to define the period of inactivity in the router management page before automatically logging out.

6

TRENDnet User’s Guide

TEW-929DRU

Note: If you change the administrator password, you will need to access the router management page using the User Name “admin” and the new password instead of the pre-configured default password. If you reset the device to factory defaults, you will need to access the router management page using the pre-configured settings on the included wireless sticker in the router package contents or on device label located on the bottom of the router.
Set your router date and time
System > Time/Date It is recommended to set the router date and time for scheduling functions and logging functions for monitoring and troubleshooting.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on System and click on Time/Date.
3. Review the settings below. Click Apply to save and commit the changes.
System Properties
© Copyright 2023 TRENDnet. All Rights Reserved.

· Local Time Displays the current day, date, and time. Clicking the SYNC WITH BROWSER button will automatically copy the current day, date, and time settings from the web browser and allows the time to be set manually.
· Hostname Modifies the router host name. The host name identifies is the name used to identify the router to other computer or devices on the network. Modifying this setting will modify the hostname used when accessing the router management page using the hostname or when using the Samba USB share feature.
· Timezone Click the drop-down list to select the appropriate time zone.
Time Synchronization
· Clock Mode Select the method of clock mode o Local Time: Manually input the time o NTP: Time is grabbed by a designated NTP server NTP server candidates Enter the domain name of the network time server to obtain time and settings. (e.g. pool.ntp.org) o Cloud Sync Time: The time will be synched with TRENDnet Hive cloud server (optional license is required)
Note: You can add multiple time servers by clicking . If one server is not available, your router will try the next available server in the list.
7

TRENDnet User’s Guide
Create time schedules
System > Schedule Your router allows you to create schedules to specify a time period when a feature should be activated and deactivated. Before you use the scheduling feature on your router, ensure that your router system time and date settings are configured correctly.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on System and click Schedule.
3. Review the settings below. Click Add to add the new schedule to the list and Apply to save and commit the changes. · Name Enter a name for the new schedule rule. · Days Choosing Daily will set the set the schedule rule to occur at the specified time every day. Choosing Select Day(s) will allow to manually select which specific days for the schedule. · All Day 24 Hrs Checking this option will set the schedule to run all 24 hours instead of manually configured a specified time period. · Start Time / End Time Manually define a time period for the schedule. Note: The time period is specified in 24 hour format.

TEW-929DRU
Change LAN IPv4 address settings
Network > LAN Note: The default LAN interface IPv4 address settings is 192.168.10.1 / 255.255.255.0 and also assigned to LAN ports 1-8 by default. If the LAN IPv4 address settings are modified, you will need to log into the router management page with the new IPv4 address settings.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click LAN.
3. Under the Common Configuration section, you can enter the new LAN interface IP address settings. · IPv4 address Enter the new LAN IPv4 address. (e.g. 192.168.50.1) · IPv4 netmask Select or Enter the new LAN IPv4 subnet mask. The drop-down menu will list class A, B, C, or custom which will allow you to manually enter a custom subnet mask. (e.g. 255.255.255.0)

4. Click Apply to
© Copyright 2023 TRENDnet. All Rights Reserved. 8

TRENDnet User’s Guide
Below is a reference of the additional LAN settings if you choose to make other configuration changes to these sections.
General Setup
· Status LAN Interface (br-lan) o Uptime Displays the amount time the LAN interface has been up and continuously running. This time will reset if the router is powered off or router is rebooted. o MAC-Address Displays the current MAC address assigned to the LAN interface. o Rx Displays the total amount of data received by the LAN interface in MB (# of packets) since the start of the currently displayed uptime. o Tx Displays the total amount of data transmitted by the LAN interface in MB (# of packets) since the start of the currently displayed uptime. o IPv4: Displays the current IPv4 address settings assigned to the LAN interface.
· Mode Allows you to change the function between NAT mode or Route Only (NAT-less). o NAT The default router mode which uses network address translation between the local internal (LAN/VLAN) interfaces and external (WAN1/WAN2) interfaces translating public and private IP addressing. o Route Only (NAT-less) This mode disables the NAT function between internal and external interfaces and may also be known as classical routing mode. This mode should only be used when the router is using for local internal IP routing only
Advanced Settings

TEW-929DRU
· Override MTU The default MTU (maximum transfer unit) or frame size is set to 1500 bytes. This parameter allows you to assign a new MTU size. Typically, this parameter does not need to be modified.
Configure LAN IPv4 DHCP server settings
Network > LAN Note: The internal DHCP server function is enabled by default on the LAN interface to automatically distribute IP address settings to network devices connected to the LAN and wireless LAN interfaces. The internal DHCP server only supports only class C IP address range. The default IP range is 101 199 (192.168.10.101 192.168.10.199)
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click LAN.
3. Under the DHCP Server/Relay section, you can modify or enter the new DHCP settings and click Apply to save and commit the changes.

· Override MAC Address This parameter allows you to assign a new LAN interface (br-lan) MAC address. Typically, this parameter does not need to be modified. (e.g. AA:BB:CC:DD:EE:FF)
© Copyright 2023 TRENDnet. All Rights Reserved. 9

TRENDnet User’s Guide
· DHCP mode Allows you to set the mode to Enable, Disable, or Relay. o Enable Using this setting enables the DHCP server function the LAN interface. o Disable – Using this setting disabled the DHCP server function on the LAN interface. o Relay Using this setting allows you to use an external DHCP server instead of your router’s internal DHCP server to distribute IP address settings on the LAN interface. If choosing this setting, enter the IP address of your external DHCP relay server.
· Start address Enter the starting value of DHCP IPv4 address range. (e.g. If your LAN IPv4 address is 192.168.50.1, entering 120 will define the first IP address of the DHCP pool is 192.168.50.120)
· End address Enter the ending value of DHCP IPv4 address range. (e.g. If your LAN IPv4 address is 192.168.50.1, entering 200 will define the last IP address of the DHCP pool is 192.168.50.200)
· Leasetime Enter the lease time in hours (h) or minutes (m) DHCP clients will hold their IP address settings before automatically requesting a new lease (IP address settings) from the internal DHCP server. (e.g. To specify 24 hours, enter 24h. To specify 480 minutes, enter 480m.)
· WINS server Enter the IPv4 address of your WINS (Windows Internet Name Server) for internal host name resolution on your local network to be distributed to DHCP clients. The WINS server provides host name to IP address resolution for the NetBIOS naming service. This parameter is optional. (e.g. 192.168.50.250)
· Primary DNS Enter the IPv4 address of your primary DNS (Domain Name System) server for Internet domain name resolution to be distributed to DHCP clients. By default, the internal DHCP server uses DNS relay and provides the router LAN IPv4 address as the primary DNS server to DHCP clients. The DNS server provides Internet domain name to IP address resolution when computers are accessing or browsing Internet websites. This parameter is optional. (e.g. If entering 8.8.8.8, this DNS server will be provided DHCP clients instead of the router’s LAN IPv4 address to resolve Internet domain names such as trendnet.com )
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
· Secondary DNS Enter the IPv4 address of your secondary DNS (Domain Name System) server for Internet domain name resolution to be distributed to DHCP clients. If the primary DNS server cannot be reached, the secondary DNS server will be used. This parameter is optional. (e.g. 8.8.4.4)
· Local domain name Enter a domain name to distribute to DHCP clients. This parameter is optional. (e.g. trendnet.com)
Below is a reference of the additional DHCP Server/Relay settings if you choose to make other configuration changes to these sections.
10

TRENDnet User’s Guide
Advanced Settings
· Dynamic DHCP Checking this option the enables the DHCP server to distribute IPv4 address settings dynamically to clients. If this option is unchecked, IPv4 address settings will only be assigned to DHCP clients with a static DHCP reservation. Typically, this parameter does not need to be modified.
· Log Queries Checking this option will enable generate logging to internal or syslog of any DNS queries. Typically, this parameter does not need to be modified.
Add static DHCP reservations
Network > LAN 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network and click LAN. 3. Under the Static Leases section, click Add.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
4. Enter the parameters for the static DHCP reservation and click Apply to save and commit the changes.
Note: The network device or computer the reservation is created will need to release and renew the IPv4 address settings in order to obtain the new IP address settings.
· Hostname Enter a name for the DHCP reservation. (e.g. trendnetpc) · MAC- Address Enter the MAC (Media Access Control) address of the
computer or network device to assign to the reservation. You can also click the drop-down list to select from a list of network devices detected by the router that have been assigned IPv4 address settings through DHCP. (e.g. AA:BB:CC:DD:EE:FF) · IPv4-Address Enter the IPv4 address to assign to the computer or network device for the reservation. You can also click the drop- down list to select from list o of network devices detected by the router through DHCP. (e.g. 192.168.50.150)
Add static host name entries
Network > LAN The router can be used for host name to IP address resolution of computers or network devices on your local network similar to a WINS server however, entries will not dynamically populate and each entry must be manually entered. For clients to resolve the manually entered static entries, DHCP clients must use the router LAN IPv4 address as the WINS server.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click LAN.
3. Under the Host Entries section, click Add.
11

TRENDnet User’s Guide
4. Enter the parameters for the static host name entry and click Apply to save and commit the changes. · Hostname Enter the host name. (e.g. trendnetpc) · IP Address Enter the IPv4 address to resolve to host name. (e.g. 192.168.50.150)

TEW-929DRU
3. Under the Static ARP section, click the MAC-Address drop-down list to select a MAC address from the list or select customer to manually enter a MAC address (format example: aa:bb:cc:dd:ee:ff).
4. Click the IPv4-Address drop-down list and select the IPv4 address to assign to the MAC address ARP table entry or select custom to manually enter an IPv4 address (format example: 192.168.10.129)

Add static ARP entries
Network > LAN ARP (Address Resolution Protocol) is the protocol responsible for resolve IP addresses to hardware MAC addresses. Typically, ARP entries are dynamically learned and refreshed in the ARP table however, in the case where your application requires static ARP entries to always be present in the router ARP table, you can manually enter and add them to the router. (ex. applications: WoL (Wake on LAN) or Wake on WAN)
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click LAN.

5. Click Apply to save and commit the changes.
Note: You can specify additional static ARP entries by clicking Add. Delete existing entries by clicking the Delete button next to the entry to be removed.

TRENDnet User’s Guide Configure WAN1 / WAN2 interfaces for Internet connectivity
Network > WAN1/WAN2 By default, the WAN configuration is set to use WAN1 as the primary connection for Internet connectivity and failover to WAN2 secondary if there is fault in connectivity to WAN1. This section will explain how to set up the WAN1 or WAN2 interfaces for Internet connectivity to your ISP (Internet Service Provider). 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network and click WAN. Click WAN1 or WAN2 to configure the selected
WAN. 3. Under the Common Configuration section, click the Protocol drop-down list and
select the Internet connection provided by your ISP.
4. Complete all of the fields required by your ISP and click Apply to save and commit the changes.
Below is a reference of the additional WAN settings if you choose to make other configuration changes to these sections. General Setup
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
· Status LAN Interface (br-lan) o Uptime Displays the amount time the WAN1/WAN2 interface has been up and continuously running. This time will reset if the router is powered off or router is rebooted. o MAC-Address Displays the current MAC address assigned to the WAN1/WAN2 interface. o Rx Displays the total amount of data received by the WAN1/WAN2 interface in MB (# of packets) since the start of the currently displayed uptime. o Tx Displays the total amount of data transmitted by the WAN1/WAN2 interface in MB (# of packets) since the start of the currently displayed uptime. o IPv4: Displays the current IPv4 address settings assigned to the WAN1/WAN2 interface.
· Dual WAN priority Displays the current priority assignment for the selected WAN interface. The WAN priority settings can be configured under Network > Multiple WAN. By default, the WAN configuration is set to use WAN1 as the primary connection for Internet connectivity and failover to WAN2 secondary if there is fault in connectivity to WAN1.
· Hostname to send when requesting DHCP If your ISP requires to send specific hostname with the DHCP request for Internet connectivity, enter the required host name in the field. Applies to DHCP client/PPTP/L2TP WAN protocols.
· WAN mode Applies to PPTP/L2TP WAN protocols. o DHCP client Using this option will set the WAN to obtain IP address settings automatically from your ISP for Internet connectivity. o Static IP Using this option will require you to manually enter the WAN IP settings required by your ISP for Internet connectivity.
· Connect mode Applies to PPPoE/PPTP/L2TP WAN protocols. o Keep alive This option will keep the connection on at all times. o On demand This option will automatically disconnect after the max. idle time is reached and will automatically re-establish connection when Internet access is used.
· Access concentrator / Service name Optional parameters required only if ISP requires for Internet connectivity. Applies to PPPoE WAN protocol.
· MPPE support Optional parameter (applies Microsoft Point-to-Point Encryption) required only if ISP requires for Internet connectivity. Applies to PPTP WAN protocol.
13

TRENDnet User’s Guide
· Use DNS servers advertised by peer- If checked, automatically obtains DNS service IP address settings from your ISP. If unchecked, allows you to specify custom DNS server IP addresses. Applies to PPPoE/PPTP/L2TP WAN protocols.
Advanced Settings · Bring up on boot The parameter is enabled to bring the WAN1/WAN2 interface up during device boot. Typically, this parameter does not need to be modified. · Use builtin IPv6-management Enables/disables IPv6 protocol on the WAN1/WAN2 interface. Typically, this parameter does not need to be modified. · Enable IPv6 negotiation on PPP link Enables/disables IPv6 when using the PPPoE/L2TP WAN protocols. Typically, this parameter does not need to be modified. · Use broadcast flag Optional parameter if your ISP may requires that DHCP requests from your device be sent as broadcasts or unicasts for IP address settings for Internet access. · Use default gateway This parameter automatically created a default gateway route in the device routing table to access the Internet through the selected WAN interface. If unchecked, the default gateway route for Internet access must be entered in manually in the device routing table settings. Typically, this parameter does not need to be modified. · Use gateway metric This parameter is the route priority value assigned to the default gateway route. Range: 0-9999, 0 being the highest priority. Typically, this parameter does not need to be modified. · Use DNS servers advertised by peer- If checked, automatically obtains DNS service IP address settings from your ISP. If unchecked, allows you to specify custom DNS server IP addresses. Applies to the DHCP client WAN protocol. · Client ID to send when requesting DHCP Optional parameter only required if your ISP requires a specific client ID to be sent when requesting IP address settings for Internet access. Applies to DHCP client WAN protocol. · Vendor Class to send when requesting DHCP Optional parameter only required if your ISP requires a specific vendor class to be sent when requesting IP address settings for Internet access. Applies to DHCP client WAN protocol. · Override MAC address Optional parameter used to change the WAN interface MAC address if you are experiencing issues obtaining IP address settings from your ISP. This parameter is more commonly known as MAC

TEW-929DRU
address cloning where you can assign a LAN computer MAC address to the WAN interface. Applied to DHCP client WAN protocol. · Override MTU The default MTU (maximum transfer unit) or frame size is set to 1500 bytes. This parameter allows you to assign a new MTU size. For PPPoE/PPTP/L2TP WAN protocols, if you experience issues accessing SSL/HTTPS secure websites, you can try lower the MTU value to 1492 to decrease the amount of packet errors. Typically, this parameter does not need to be modified.
WAN VLAN Tagging Some ISPs require VLAN tag assignment of a specific VLAN ID when for Internet access or other services. You can follow the steps below to assign a specific VLAN ID to the WAN interface.
1. Log into your router management page (see “Access your router management page” on page 8).
2. Click on Network and click VLAN. 3. Under the VID, you can enter the VID required by your ISP and set the WAN interface
to tagged or untagged. Click Apply to save and commit the changes.

TRENDnet User’s Guide
IPv6 settings
Network > IPv6 IPv6 (Internet Protocol Version 6) is a new protocol that significantly increases the number of available Internet public IP addresses due to the 128-bit IP address structure versus IPv4 32-bit address structure. In addition, there are several integrated enhancements compared to the most commonly used and well known IPv4 (Internet Protocol Version 4) such as:
· Integrated IPsec Better Security · Integrated Quality of Service (QoS) Lower latency for real-time applications · Higher Efficiency of Routing Less transmission overhead and smaller routing
tables · Easier configuration of addressing
Note: In order to use IPv6 Internet connection settings, it is required that your ISP provide you with the IPv6 service. Please contact your ISP for availability and more information about the IPv6 service.
1. Log into your router management page (see “Access your router management page” on page 8).
2. Click on Network and click on IPv6.
3. Review the IPv6 Internet Connection settings and enter information settings specified by your ISP. Complete all of the fields required by your ISP and click Apply to save and commit the changes.
Note: Please contact your ISP for IPv6 service availability.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
Select the IPv6 WAN connection type provided by your ISP. · Static IPv6 · Auto-configuration (SLAAC/DHCPv6) · PPPoE · Link-Local Only
Virtual LANs (VLANs)
Network > VLAN Your router supports port-based 802.1Q VLANs as well inter-VLAN routing. VLANs can be assigned different IP address interfaces in which the router can route be between VLAN IP subnets.
Create a port-based VLAN 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network and click VLAN. 3. Before assigning which untagged and tagged VLAN member ports are assigned to a
new VLAN, the ports must be set to Off in the default VLAN VID: 1 (LAN). Also, click the Inter VLAN Routing drop-down list and select Enabled to enable communication between the LAN and other VLAN interfaces. Click Apply to save and commit the changes. Example: We will remove port 3 from the default VLAN VID: 1 (LAN) interface
15

TRENDnet User’s Guide
so these ports can be re-assigned as untagged member ports of new VLANs in example below.

TEW-929DRU

6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask.
Example: In the example below, we will enter the VLAN 50 interface IP address as 192.168.50.1 and subnet mask 255.255.255.0.

4. To create a new 802.1Q VLAN, under the VLANs section, click Add.

5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the untagged VLAN member ports. Example: In the example below, we will create a new VLAN with
VLAN ID: 50 and assign ports 2 as untagged member ports.

7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure any devices connected to this VLAN obtain IP address information via DHCP.

TRENDnet User’s Guide
If following the port-based VLAN configuration example, any computers or devices connecting to ports 2 will obtain 192.168.50.x/255.255.255.0 address settings and use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to other local IP subnets.

TEW-929DRU
Create a port-based VLAN with 802.1Q tagging Your router supports 802.1Q VLAN tagging/trunking to other 802.1Q VLAN devices such as managed switches.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click VLAN.
3. Under VLAN VID:1 (LAN), click the Inter VLAN Routing drop-down list and select Enabled and click Apply to commit and save the changes.

4. To create a new 802.1Q VLAN, under the VLANs section, click Add.

TRENDnet User’s Guide
5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged VLAN member port. Example: In the example below, we will create a new VLAN with VLAN ID: 50 and assign port 8 as a tagged VLAN member port.

TEW-929DRU

6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask.
Example: In the example below, we will enter the VLAN 50 interface IP address as 192.168.50.1 and subnet mask 255.255.255.0.

If following the 802.1Q VLAN configuration example, a managed/web smart switch with 802.1Q VLAN support can be connected and pass VLAN 50 traffic between the router and switch. Any computers or devices connecting to the untagged VLAN ports (PVID: 50) on the managed/web smart will obtain 192.168.50.x/255.255.255.0 address settings and use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to other local IP subnets. Additional VLANs can be created on the router and switch in which 802.1Q VLAN traffic can pass through the same single 802.1Q VLAN tag/trunk link.

7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure any devices connected to this VLAN obtain IP address information via DHCP.
© Copyright 2023 TRENDnet. All Rights Reserved. 18

TRENDnet User’s Guide
Example below of multiple VLANs configured and passing traffic through the same 802.1Q VLAN tag/trunk link.

TEW-929DRU

4. To create a new 802.1Q VLAN, under the VLANs section, click Add.
5. Under VID, enter the VLAN ID to assign to the new VLAN (4-4094, VLAN IDs 1-3 are reserved for use with the default LAN, WAN1, WAN2 interfaces) and set the tagged VLAN member port. Example: In the example below, we will create a new VLAN with VLAN ID: 50 and assign port 8 as a tagged VLAN member port.

Assigning VLAN IDs to Wireless SSIDs Your router supports assigning specific VLAN IDs to wireless SSIDs to extend VLAN traffic manageability and control to your router wireless network. By default, primary and multiple SSIDs are assigned to the LAN (VLAN 1) IP network.
1. Log into your router management page (see “Access your router management page” on page 8).
2. Click on Network and click VLAN.
3. Under VLAN VID:1 (LAN), click the Inter VLAN Routing drop-down list and select Enabled and click Apply to commit and save the changes.
© Copyright 2023 TRENDnet. All Rights Reserved.

6. Enter the VLAN IP interface configuration under IP Address and Subnet Mask. Example: In the example below, we will enter the VLAN 50 interface IP address as 192.168.50.1 and subnet mask 255.255.255.0.
19

TRENDnet User’s Guide

TEW-929DRU

7. Under DHCP Server, click the Mode drop-down list and select Enabled to enable the DHCP server on the VLAN. Click Apply to save and commit the changes.
Example: In the example below, we will enable the DHCP server on VLAN 50 and leave IP address range and lease defaults. This will assign a DHCP IP range of 101-199 to ensure any devices connected to this VLAN obtain IP address information via DHCP.
8. Under Reassign SSID to VLAN, next to the SSID you would like to assign the new VLAN ID, click the Network/VID drop-down list and select the VLAN ID. Click Apply to save and commit the changes.
© Copyright 2023 TRENDnet. All Rights Reserved.

If following the 802.1Q VLAN configuration example, a managed/web smart switch with 802.1Q VLAN support can be connected and pass VLAN 50 traffic between the router and switch and 2.4GHz wireless SSID. Any computers or devices connecting to the untagged VLAN ports (PVID: 50) on the managed/web smart will obtain 192.168.50.x/255.255.255.0 address settings and use the VLAN 50 IP interface 192.168.50.1 as the Internet gateway and gateway to other local IP subnets. Any wireless computers or devices connecting to the 2.4GHz wireless SSID will also obtain 192.168.50.x/255.255.255.0 address settings while connecting to 5GHz1 or 5GHz2 SSIDs will remain on the LAN network. Additional VLANs can be created on the router and switch in which 802.1Q VLAN traffic can pass through the same single 802.1Q VLAN tag/trunk link. Multiple SSIDs will appear in this section when enabled and configured. Guest network SSID does not apply.
Below is a reference of the additional VLAN settings if you choose to make other configuration changes to these sections.
· VID The VLAN ID assigned to a specific VLAN. · Ports 1-3 Configure port VLAN membership settings.
o Untagged Default setting. Sets port membership as untagged and allows connectivity to network devices such as computers. The router will use the internal port VLAN ID (PVID) to forward VLAN traffic accordingly to these ports based on their untagged VLAN membership.
o Tagged Sets port membership as tagged and used for VLAN tag or trunk links to other VLAN aware devices such as managed switches or access points.
o Off Removes port membership from a specific VLAN.
20

TRENDnet User’s Guide
· Inter VLAN Routing Allows communication between local network interfaces/IP subnets such as the LAN and VLAN interfaces.
· IP Address/Subnet Mask The IP address and subnet mask assigned to a specific VLAN interface.
· Mode Configures the DHCP server settings for a specific VLAN interface. o Disabled Disables DHCP on a specific VLAN interface. o Enabled Enables the internal DHCP server on a specific VLAN interface. Allows you to set the IP address range/pool, lease time, WINS/DNS servers, and local domain name for the DHCP server. o Relay Enables DHCP relay on a specific VLAN interface and forwards DHCP requests on the VLAN interface to an external DHCP server IP address (e.g. 192.168.50.20).

TEW-929DRU
Application layer gateway (ALG)
Security > ALG You may want to configure your router to allow computers the use of specific high layer applications or service sessions to pass through. Application Layer Gateways (ALG) allows you to easily enable or disable these applications to pass through your router. Note: It is recommended to leave these settings enabled.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security and click on ALG. 3. Review the applications. Click Apply to save and commit the changes.

TRENDnet User’s Guide
UPnP and NAT-PMP
Security > UPnP UPnP (Universal Plug and Play) and NAT-PMP (NAT Port Mapping Protocol) allows devices connected to a network to discover each other and automatically open the connections or services for specific applications (e.g. instant messenger, online gaming applications, etc.) UPnP and NAT-PMP is disabled on your router by default and should only be enabled to allow specific applications required by your computers or devices to allow connections through your router as they are needed.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security and click on UPnP / NAT-PMP.
3. Under the UPnP / NAT-PMP section, check the Enable UPnP / NAT-PMP functionality option. Click Apply to save and commit the changes.
Note: When UPnP/NAT-PMP is enabled, you can check the currently open connections in the UPnP/NAT-PMP entries table..

TEW-929DRU
Static routes
Network > Routing You may want set up your router to route computers or devices on your network to other local networks through other routers. Generally, different networks can be determined by the IP addressing assigned to those networks. Generally speaking and for the case of this example, your network may have 192.168.10.x IP addressing and another network may have 192.168.20.x IP addressing and because the IP addressing of these two networks are different, they are separate IP networks. In order to communicate between the two separate networks, static routing needs to be configured.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click on Routing.
3. Review the Routing section. Click Add to add the new static route. Click Apply to save and commit the changes.
· Interface Select the interface to assign the route. · Target Host-IP or Network: Enter the IP network address of the destination
network for the route. (e.g. 192.168.20.0) · IPv4-Netmask: Enter the subnet mask of the destination network for the
route.(e.g. 255.255.255.0) · IPv4-Gateway: Enter the gateway to the destination network for the route.
(e.g. 192.168.10.2) · Metric: Enter the metric or priority of the route. The metric range is 0-9999, the
lowest number 0 being the highest priority.

TRENDnet User’s Guide
You can check the current routing table under Status > Routes under Active IPv6Routes.
Dynamic routing protocols
Network > Routing > RIP You may want set up your router to route computers or devices on your network to other local networks through other routers. Generally, different networks can be determined by the IP addressing assigned to those networks. Generally speaking and for the case of an example, your network may have 192.168.10.x IP addressing and another network may have 192.168.20.x IP addressing and because the IP addressing of these two networks are different, they are separate networks. In order to communicate between the two separate networks, static routing needs to be configured. Below is an example diagram where routing is needed for devices and computers on your network to access the other network. If you have other routing devices that support dynamic routing protocol, you can enable these routing protocols on your router to learn and automatically generate the routes needed between these networks.
Routing Information Protocol (RIP) Network > Routing > RIP
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network, click on Routing, and click on the RIP tab.
3. Review the RIP Routing section. To save changes to this section, click Apply to command save your changes.
· RIP enable: Check the option to enable the RIP dynamic routing protocol globally on the router.
In the Overview table, you can enable and configure RIP for each interface by clicking Edit next to the interface.

TEW-929DRU
· RIP enable: Check the option to enable RIP on the specified interface. · protocols and redistribute the routing information using OSPF protocol. · Send version Select the RIP protocol version to send. · Receive version Select the RIP protocol version to receive. · Key Authentication Enables MD5 authentication on all RIP messages sent and
received. · Key String If authentication is enabled, enter the authentication key
string/password to use for RIP messages sent and received. · Plain text password This option will set the password to be send in clear text
instead of using the MD5 hash. This setting is not recommended. You can check the current routing table under Status > Routes under Active IPv6Routes.

TRENDnet User’s Guide
OSPF (Open Shortest Path First) Network > Routing > OSPF 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network, click on Routing, and click on the OSPF tab. 3. Review the OSPF Routing section. To save changes to this section, click Apply to commit and save your changes. In the Overview table, you can enable and configure RIP for each interface by clicking Edit next to the interface.
· OSPF enable: Check the option to enable OSPF dynamic routing globally on the router.
· Router ID: Enter the OSPF router ID.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
· OSPF enable: Check the option to enable OSPF dynamic routing on the specified interface.
· Network type: Select the OSPF network type. Select only Point to Point or Point to Multi-point if connecting to your networking using PPP protocol, otherwise select Broadcast. If only exchanging OSPF routing information to one other device, select Non-Broadcast and enter in the Neighbor IP address at the bottom.
· Key authentication Enables MD5 authentication on all OSPF messages sent and received.
· Key string If authentication is enabled, enter the authentication key string/password to use for OSPF messages sent and received.
· Plain text password This option will set the password to be send in clear text instead of using the MD5 hash. This setting is not recommended.
· Cost Enter the OSPF cost value. · Priority Enter the OSPF priority value. · Area – Enter the area id for OSPF. You can check the current routing table under Status > Routes under Active IPv6Routes.
24

TRENDnet User’s Guide
Quality of Service (QoS)
Multi-WAN/QoS > QoS The router supports up to four QoS priority queues for traffic classification and priority.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Multi-WAN/QoS and click on QoS. 3. Under QoS settings, review the settings below. When complete, click Apply to save and commit your changes.
QoS Settings · Enable: Check the enable option to Enable QoS. · Download speed (kbit/s): Enter the maximum download speed provided by your ISP in kilobits per sec. It is important to set this value accurately. Note: If your multiple mode is set to load balancing, you can combine the total download bandwidth of both WAN connections. · Upload speed (kbit/s): Enter the maximum upload speed provided by your ISP in kilobits per sec. It is important to set this value accurately. · Note: If your multiple mode is set to load balancing, you can combine the total upload bandwidth of both WAN connections. · Calculate overhead Typically, when this option is unchecked/disabled, the overhead value will not be added to the upload and download speeds entered in the fields. When this option is checked/enabled, the total overhead calculation is included in the total upload/download speed specified to ensure the values entered are the absolute maximum value limits entered. · Default class When QoS is enabled, select the default priority class used for all other traffic when QoS after all specific QoS classification rules have been applied. You can typically set this to Low or Medium.

TEW-929DRU
Classes The QoS priority classes define the bandwidth maximum limits of total bandwidth that can be used and total bandwidth that can be shared for a particular class. Note: Typically, you do not need to modify the QoS priority class percentage settings.
· Download link share bandwidth (%) This defines the guaranteed bandwidth % from the total download speed defined in the QoS settings. The class setting will attempt to guarantee this bandwidth % minimum limit is allocated.
· Download max bandwidth (%) This defines the maximum bandwidth % allowable from the total download speed defined in the QoS settings. This class setting is the maximum bandwidth % limit that can be allocated above the link share bandwidth %.
· Upload link share bandwidth (%) This defines the guaranteed bandwidth % from the total upload speed defined in the QoS settings. The class setting will attempt to guarantee this bandwidth % minimum limit is allocated.
· Upload max bandwidth (%) This defines the maximum bandwidth % allowable from the total upload speed defined in the QoS settings. This class setting is the maximum bandwidth % limit that can be allocated above the link share bandwidth %.

TRENDnet User’s Guide
Classification Rules Click Add to create a new QoS classification rule. When complete, click Apply to save and commit your changes.
· Target Select the QoS priority class to apply to the rule. · Direction Select the direction of traffic in which to apply the QoS
classification, Download (Inbound Traffic) or Upload (Outbound Traffic). · Source Host Click the drop-down list to select All (any IP address), a specific
source host IP address from the list or select Custom to define a particular source IP address not listed. · Destination Host Click the drop-down list to select All (any IP address), a specific destination host IP address from the list or select Custom to define a particular destination IP address not listed. · Protocol Click the drop-down to select the type of traffic to apply the QoS classification rule. All/TCP/UDP/ICMP or custom to specify a particular protocol not listed. · Source Port (range) Enter the source port or source port range to apply the QoS classification rule. · Destination Port (range) Enter the source port or source port range to apply the QoS classification rule. ·

TEW-929DRU
When using a dynamic IP/DHCP WAN type from your ISP where your public IP or Internet IP address always changes, dynamic DNS provides a method of accessing your router or network remotely over the Internet for devices such as IP cameras, storage, or computers hosted on the local LAN side of your router. Dynamic DNS services do thi by assigning a custom hostname or DNS name for you to reference. Your router will send updates to the dynamic DNS service provider if the WAN or Internet IP address(es) change providing the emulation of a virtual fixed IP address that you can always reference to access your router over the Internet.
Note: First, you will need to sign up for one of the DDNS service providers listed in the Server Address drop-down list.
1. Sign up for one of the DDNS available service providers list under Server Address. (e.g. no-ip.com, dyndns.org etc.)
2. Log into your router management page (see “Access your router management page” on page 6).
3. Click on System and click on Dynamic DNS. 4. Review the DDNS settings below. When complete, click Apply to save and commit your changes.
· Enabled Check the enabled option to enable dynamic DNS on the selected WAN interface.
· DDNS Provider [IPv4]: Click the drop-down list Select your DDNS service. · Hostname/Domain: Enter the custom hostname or DNS name you created with
DDNS account. (e.g. trendnet.ddns.net) · Username: The user name needed to login to your Dynamic DNS service account. · Password: This is the password to login to your Dynamic DNS service account. · Detect WAN IP address behind NAT: This will allow your router to detect the IP
address

Dynamic DNS
System > Dynamic DNS
© Copyright 2023 TRENDnet. All Rights Reserved. 26

TRENDnet User’s Guide
Below is a reference of the additional Dynamic DNS settings if you choose to make other configuration changes to these sections. Timer Settings Allows you to configure a specified interval to force your router to send a DDNS update to your DDNS service provider. Note: Please note that it is recommended not to set the interval too low and send updates too often as this may not meet the minimum requirements of your DDNS service provider client update policy.
· Force Interval Enter a value in days, hours, or minutes. Note: The smallest interval allowed is 10 minutes. Setting the value to 0 will force your router to send a DDNS update only once and will not resend any more DDNS updates for the specified WAN.
Log File Viewer Allows you to view the log status for Dynamic DNS of your router.
· Refresh Clears any logged displayed and reload new logs

TEW-929DRU
File sharing server
System > Samba (USB) Your router’s USB port can be used to share files through the network when a USB storage device is connected on the back USB port. The router supports Samba (SMB) file sharing protocol and is compatible with SMB/CIFS.
Note: Only FAT32 or NTFS file formats are supported, up to 4TB max. storage size.
After you have connected your USB storage device: 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on System and click on Samba (USB). 3. Review the settings below. When complete, click Apply to save and commit your changes.
Note: By default, the Samba server name is set to TEW-829DRU or the LAN IP address may also be used default LAN IP: 192.168.10.1. To change the Samba server name, you can modify this setting under Administrator > System and edit the Host Name setting.
Samba General Settings · Enable Check the enable option to enable Samba file sharing. · Description: Enter a description for the server. · Workgroup: Enter the workgroup name. It is recommended to keep the standard default “WORKGROUP”. If you change this setting, you will need to change the workgroup name on all computers in your network that are allowed access to the USB storage in order to discover it automatically. Otherwise, you will need to access the server by IP address. · Login Required Selecting No will not require computers to login when accessing the USB share. Select Yes will require computers to enter a user name and password when accessing the USB share and user account can be modified under the Samba Users list. This user account will have full read/write permissions on the USB share.

TRENDnet User’s Guide
Samba Users · User Name: Enter the user name to be used to access the USB share. · Password: Enter the password to be used to access the USB share.
Shared Devices · Device Name: Displays the USB storage device name. · Shared Name: Displays the Samba share name used to access the USB share over the network. Example: You can access the USB share by typing in the path \TEW929DRUusb_A1 or \usb_A1.
· Size Displays the total size of the USB storage device. · Used Displayed the storage space currently used on the USB storage device. · Available Displays the storage space currently available on the USB storage
device. · Eject Device Clicking the Eject button will allow you to safely remove/dismount
and disconnect the USB storage device.

TEW-929DRU
Wake on LAN (WoL)
System > WoL (Wake on LAN) Wake on LAN (WoL) is used to remotely wake up or turn on device that support the WoL feature from your router. Note: In order for the WoL feature to work, the device must support the WoL and it must be enabled configured properly on the device.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on System and click on WoL
3. Review the settings below. When complete, click Apply to save and commit your changes.
· Name: Input the name of the WoL · Host to wake up: Click the drop-down list to select a computer/device from the
list or manually enter the MAC address of the device. Clicking the WAKE UP HOST INSTANTLY button will immediately send a wake up message to the WoL device. · Add new WoL schedule: Allows you to select a schedule when to send a wake up message to the WoL device.

TRENDnet User’s Guide
Wireless Networking and Security
Wireless Settings
Wireless > Wireless (2.4GHz or 5GHz) This section covers the wireless settings of your router such as wireless network names (SSIDs), channels, 802.11 mode, and other wireless settings.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click on the wireless band you would like to configure Wireless (2.4GHz or 5GHz)
3. Review the settings below. When complete, click Apply to save and commit your changes. Primary SSID This tab involves the configuration parameters for the primary SSID for a specific wireless band.
· Device Configuration o General Setup Status Displays current information about the wireless radio/band such as SSID, BSSID/wireless MAC address, encryption, operating channel, transmit power, bitrate, and country/region. Enable wireless radio This option is checked by default to enable the wireless radio/band. Unchecking this option will disable the wireless radio/band including all additional SSIDs configured on the specific band. Turn off wireless radio by schedule Allows you to assign a time schedule when the band should be turned on and off. Note: Modifying the channel settings will force currently connected wireless client devices to disconnect and reconnect to your router’s wireless networks.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
o Advanced Settings Mode By default, 802.11b/g/n and 802.11a/n/ac modes are configured to ensure the best compatibility with wireless client devices. These settings will allow all wireless client devices to connect to you router’s wireless networks including devices that support older standards such as 802.11a/b/g. Note: If older slower wireless client devices connect to your wireless network, this may reduce the speed and performance of all other wireless client devices connecting to the same wireless network. HT mode: Select the appropriate channel width for your wireless network. For greater 2.4GHz performance/data rate capability, you can select Auto 20/40MHz (Options: 20MHz or Auto 20/40MHz). It is recommended to use the default channel bandwidth settings. For greater 5GHz performance/data rate capability, you can select Auto 20/40/80MHz (Options: 20MHz, Auto 20/40MHz, Auto 20/40/80MHz). It is recommended to use the default channel width settings. Note: Please note that the default settings may provide more stability than the higher channel bandwidth settings such as Auto 20/40MHz or Auto 20/40/80MHz for connectivity in busy wireless environments where there are several wireless networks in the area. · 20 MHz This mode operates using a single 20MHz channel for wireless devices connecting at 802.11n on both 2.4GHz and 5GHz. This setting may provide
29

TRENDnet User’s Guide
more stability than 20/40MHz (Auto) for connectivity in busy wireless environments where there are several neighboring wireless networks in the area. · Auto 20/40MHz (11n) or Auto 20/40/80MHz (11ac/11ax) When this setting is active, this mode is capable of providing higher performance only if the wireless devices support the channel width settings. Enabling Auto 20/40MHz or Auto 20/40/80 MHz typically results in substantial performance increases when connecting an 802.11ac/n wireless client.
· Interface Configuration o General Setup ESSID This is wireless network name setting for the primary SSID band. This name will differentiate your wireless network from other neighboring wireless networks so you can identify and connect your wireless client devices. Enter the wireless network name to assign to the wireless band. Hide ESSID Checking this option will hide your wireless network name from being discovered by wireless client devices scanning for available wireless networks. This will not disable the wireless band or network and wireless client devices can still connect. It only hides the network name from being discovered.
o Wireless Security Allows you to configure the wireless encryption/security for the wireless band. See the “How to choose the
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
type of wireless security” and “Secure your wireless network” sections for details configuring wireless security.
o MAC-Filter This feature adds additional security to your wireless band by allowing you to enter a list of specific MAC addresses that can either be allowed to connect (Allow listed only) or blocked (Deny listed) from connecting to your wireless network. This feature must be specified on each wireless band. MAC-Address Filter · Disable – Disables MAC address filtering on the wireless band. · Allow listed only (Whitelist) Sets the MAC filter action to allow only the MAC addresses listed and deny all others on the wireless band. · Deny listed (Blacklist) Sets the MAC filter action to deny only the MAC addresses listed and allow all others on the wireless band. MAC- List Enter the MAC addresses to allow or deny. For each additional MAC address entries, click . (e.g. a1:b2:c3:d4:e5:f6)
o Advanced Settings Separate Clients By default, this option is left unchecked and allows all wireless client devices that are connected to the same wireless SSID to communicate with other wireless client devices. Checking this option will block communication between wireless client devices connecting with other
30

TRENDnet User’s Guide
wireless client devices. This feature is also known as L2 isolation or L2 client isolation. WMM Mode This feature enables Wi-Fi Multimedia QoS prioritization for wireless client devices that support WMM using the default priority level settings. Unchecking this option will disable WMM QoS on the wireless band. Enable HT20/40 coexistence Applies to 2.4GHz band only. This option is enabled by default to ensure connection stability on the 2.4GHz band. When this option is enabled, the radio will attempt to operate at the higher 40MHz channel width mode if there are not too many neighboring wireless networks. If the current wireless environment is too busy the radio will automatically operate at the lower 20MHz channel width mode. Unchecking this option forces the radio to operate at the higher 40MHz channel which cause instability if there are too many neighboring 2.4GHz wireless networks.

TEW-929DRU
Multiple SSID – This tab involves the configuration parameters for the additional SSIDs for a specific wireless band. Up to 7 additional SSIDs can be created per wireless band. You can view a summarized list of the current operating SSID and channels under Status > Overview in the Wireless section.
· General Setup o Enabled Checking this option will enable the additional SSID on the specific wireless band. Before checking Enabled, click the Multiple SSID drop-down and select which index number SSID to configure. o Multiple SSID Click the drop-down to select the index number SSID to configure, then check Enabled. o ESSID This is wireless network name setting for the additional SSID band. This name will differentiate your wireless network from other neighboring wireless networks so you can identify and connect your wireless client devices. Enter the wireless network name to assign to the additional SSID. o Hide ESSID Checking this option will hide your wireless network name from being discovered by wireless client devices scanning for available wireless networks. This will not disable the additional SSID and wireless client devices can still connect. It only hides the network name from being discovered. o Turn off wireless radio by schedule Allows you to assign a time schedule when the band should be turned on and off.

· Wireless Security Allows you to configure the wireless encryption/security for the additional SSID. See the “How to choose the type of wireless security” and
31

TRENDnet User’s Guide
“Secure your wireless network” sections for details configuring wireless security.
· Advanced Settings o Separate Clients By default, this option is left unchecked and allows all wireless client devices that are connected to the same wireless SSID to communicate with other wireless client devices. Checking this option will block communication between wireless client devices connecting with other wireless client devices. This feature is also known as L2 isolation or L2 client isolation. o Protected Management Frames This feature enables protection for multicast management action frames.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
How to choose the type of security for your wireless network
Setting up wireless security is very important. Leaving your wireless network open and unsecure could expose your entire network and personal files to outsiders. TRENDnet recommends reading through this entire section and setting up wireless security on your new access point. There are a few different wireless security types supported in wireless networking each having its own characteristics which may be more suitable for your wireless network taking into consideration compatibility, performance, as well as the security strength along with using older wireless networking hardware (also called legacy hardware). It is strongly recommended to enable wireless security to prevent unwanted users from accessing your network and network resources (personal documents, media, etc.). In general, it is recommended that you choose the security type with the highest strength and performance supported by the wireless computers and devices in your network. Please review the security types to determine which one you should use for your network.
Wireless Encryption Types · WPA/WPA2-Personal: This setting provides the router with the ability to detect wireless devices using either WPA or WPA2 encryption. Your wireless network will automatically change the encryption setting based on the first wireless device connected. For example, if the first wireless client that connects to your wireless network uses WPA encryption your wireless network will use WPA encryption. Only when all wireless clients disconnect to the network and a wireless client with WPA2 encryption connects your wireless network will then change to WPA2 encryption. Note: WPA2 encryption supports 802.11n speeds and WPA encryption will limit your connection speeds to 54Mbps · WPA2-Personal: This is the most secure wireless encryption available today, similar to WPA encryption but more robust. This encryption standard also supports the highest connection speeds. TRENDnet recommends setting your router to this encryption standard. If you find that one of your wireless network devices does not support WPA2 encryption, then set your router to either WPA or WPA-Auto encryption. Note: Check the specifications of your wireless network adapters and wireless appliances to verify the highest level of encryption supported. Below is brief comparison chart of the wireless security types and the recommended configuration depending on which type you choose for your wireless network. · WPA3-Personal: This is the latest wireless encryption. It is similar to WPA2 encryption, but more robust. This encryption standard also supports the highest
32

TRENDnet User’s Guide

possible connection speed. TRENDnet recommends setting your router to this

encryption standard. If you find that one of your wireless network devices does not

support WPA3 encryption, then set your router to either WPA2 or WPA encryption.

· WPA2/WPA3-Personal: This setting provides the router with the ability to detect wireless devices using either WPA2 or WPA3 encryption. Your wireless network will

automatically change the encryption setting based on the first wireless device

connected.

Note: Check the specifications of your wireless network adapters and wireless appliances to verify the highest level of encryption supported. Below is brief

comparison chart of the wireless security types and the recommended

configuration depending on which type you choose for your wireless network

Security

Standard

WPA

WPA2

WPA3

802.11a/b/g

(802.11ac/802.11

n devices will

operate at

Compatible

802.11g/802.11a

Wireless

to connect using

Standards

this standard)

802.11a/b/g/n/ac

IEEE 802.11 n/ac/ax

Highest

Performance

Up to 450Mbps

Up to 600Mbps

Under This

(11n) and up to

Setting

Up to 54Mbps 1.3Gbps (11ac)*

1.2Gbps (11ax)*

Encryption

Strength

Medium

High

Highest

Additional Options

TKIP or AES, Preshared Key or RADIUS

Recommended Configuration

TKIP Preshared Key 8-63 characters

AES Preshared Key 8-63 characters

*Dependent on the maximum 802.11n/ac/ax data rate

supported by the device (150Mbps, 300Mbps, 450Mbps,

867Mbps, 1.3Gbps, 2.4Gbps, or 4.8Gbps)

AES AES Preshared Key 8-63 characters

TEW-929DRU
Secure your wireless network
Network > Wireless 2.4GHz / 5GHz1 / 5GHz2 By default, your router is pre- configured with wireless network names (SSIDs) and a wireless encryption key using WPA2-PSK (AES). The predefined wireless network name and security can be found on the sticker on the side of the router or on the device label at the bottom of the router. The following sections involve changing the default wireless security settings and encryption key.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network and click on the wireless band you would like to configure, Wireless 2.4GHz / 5GHz1.
3. Under Interface Configuration and in the Wireless Security tab, click on the Encryption drop-down list to select your wireless security type.

TRENDnet User’s Guide
Selecting WPA2-PSK, WPA-PSK / WPA2-PSK Mixed Mode (WPA2-PSK recommended): In the Security Mode drop-down list, select WPA2-PSK or WPA-PSK / WPA2-PSK Mixed Mode. Review the settings below. When complete, click Apply to save and commit your changes.

TEW-929DRU
Selecting WPA2-EAP, WPA-EAP / WPA2-EAP Mixed Mode The following section outlines options when selecting WPA2-EAP or WPA-EAP / WPA2EAP Mixed Mode (EAP or RADIUS). This security type is also known as EAP (Extensible Authentication Protocol) or RADIUS (Remote Authentication Dial-In User Service). Review the settings below. When complete, click Apply to save and commit your changes. Note: This security type requires an external RADIUS server, Pre-Shared Key only requires you to create a wireless password, pre-shared key, or passphrase.

The following section outlines options when selecting WPA2-PSK, or WPA-PSK / WPA2PSK Mixed Mode.
· Cipher: Select a Cipher Type to use. o When selecting WPA-PSK / WPA2-PSK Mixed Mode security, it is recommended to use Force TKIP and CCMP (AES). o When selecting WPA2-PSKsecurity, it is recommended to use Force CCMP (AES). Key: Enter the pre-shared key or passphrase. (8-63 alphanumeric characters (a,b,C,?,*, /,1,2, etc.) Note: This is the wireless password, pre-shared key, or passphrase wireless client devices will use to connect to your wireless network.

· Cipher: Select a Cipher Type to use. o When selecting WPA-EAP / WPA2-EAP Mixed Mode security, it is recommended to use Force TKIP and CCMP (AES). o When selecting WPA2-EAP security, it is recommended to use Force CCMP (AES).
· Radius-Authentication-Server: Enter the IP address of the RADIUS server. (e.g. 192.168.10.250)
· Radius-Authentication-Port: Enter the port your RADIUS server is configured to use for RADIUS authentication.
Note: It is recommended to use port 1812 which is typical default port used for the
RADIUS service. · Radius-Authentication-Secret: Enter the shared secret used to authorize your
router with your RADIUS server.

TRENDnet User’s Guide
Guest Network
Wireless > Guest Network Creating an isolated and separate wireless guest network on each wireless band allows wireless clients to connect to your network for Internet access only and keep your local LAN network safe by restricting guest access to your LAN network resources such as shared documents and media files on your computers, network storage, and printers.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Wireless and click on Guest Network.
3. Review the settings below. When complete, click Apply to save and commit your changes.
First, choose the wireless band guest network you would like to configure, Wireless 2.4GHz Guest Network / 5GHz1 Guest Network / 5GHz2 Guest Network.
· Enable/Disable Guest Network Selecting Enable turns on the wireless guest network and selecting Disable turns off the wireless guest network for the specific wireless band.
· Network Name(SSID) – This is wireless network name setting for the guest network. This name will differentiate your wireless network from other neighboring wireless networks so you can identify and connect your wireless client devices. Enter the wireless network name to assign to the wireless guest network.
· Wireless Security Allows you to configure the wireless encryption/security for the wireless band. See the “How to choose the type of wireless security” and “Secure your wireless network” sections for details configuring wireless security. Note: You can only select WPA2-PSK or WPA-PSK / WPA2-PSK Mixed Mode. EAP security cannot be applied to the wireless guest networks.
· Protected Management Frames – This feature enables protection for multicast management action frames.

TEW-929DRU
Guest DHCP The wireless guest networks are assigned to a different IP address subnet from the router LAN network for isolation.
· IPv4 Address Enter the IP address interface for the wireless guest network. The IP address subnet should be different from any other LAN or VLAN IP networks configured on your router. Note: The guest network IP address subnet only supports a class C subnet, subnet mask 255.255.255.0.
· Start Enter the starting value of DHCP IPv4 address range for the wireless guest newtork. (e.g. If your guest network IPv4 address is 192.168.20.1, entering 120 will define the first IP address of the DHCP pool is 192.168.20.120)
· End Enter the ending value of DHCP IPv4 address range. (e.g. If your LAN IPv4 address is 192.168.20.1, entering 200 will define the last IP address of the DHCP pool is 192.168.20.200)
· Lease Time Enter the lease time in hours (h) or minutes (m) DHCP clients will hold their IP address settings before automatically requesting a new lease (IP address settings) from the internal DHCP server. (e.g. To specify 24 hours, enter 24h. To specify 480 minutes, enter 480m.)
· Separate Clients This option allows all wireless client devices that are connected to the guest network wireless SSIDs to communicate with other wireless client devices. Checking this option will block communication between wireless client devices connecting with other wireless client devices. This feature is also known as L2 isolation or L2 client isolation.

TRENDnet User’s Guide

TEW-929DRU
2. Click on Administrator and click on Device Mode. Note: After changing the device mode to client bridge, the router will keep the existing static LAN IP address. By default, the static LAN IP address: 192.168.10.1 / 255.255.255.0.
3. After the device completely apply the configuration changes and reboots, click Network and click Site Survey to scan for available wireless networks.

WiFi client bridge mode
System > Device Mode
The function of client bridge mode is to extend wireless connectivity to multiple wired Ethernet client devices. A typical application where this mode may be used is in your home entertainment/media center where multiple network enabled media devices require Internet or network connectivity such as an HD smart TV, game console, set top box, or DVR. The device will first establish connectivity (similar to a wireless enabled client device such as a laptop or mobile phone) to your wireless network (typically provided by a wireless router or access point) and bridge the connectivity to your network over to the wired client devices using the LAN switch ports (1-8). After selecting and applying this mode, click on Wireless > Wireless Network and click Site Survey to scan for the wireless network to connect and enter the wireless security key (if required) to establish connectivity to your network. After you have successfully set up the device to connect to your wireless network, you can plug in the device in the area where you would like to bridge network connectivity to wired client devices using the LAN switch ports (1-8). In this mode, the device can only connect to one band at a time (2.4GHz or 5GHz) and will not provide any of the access control features typically provided in router mode.
1. Log into your router management page (see “Access your router management page” on page 6).

4. Select the WiFi network to connect to in the list by clicking on the Select button next to the WiFi network name or SSID and click Connect. Note: If you do not find your WiFi network in the list, you can click Rescan to scan again for networks.
5. If the network selected network requires a WiFi password/key, enter the key under WiFi Key/Password and click Apply to save and commit your changes. Note: The router keep the existing static LAN IP address settings after you have connected to a WiFi network.

TRENDnet User’s Guide
Connect wireless devices using WPS
Wireless > WPS WPS (Wi-Fi Protected Setup) is a feature that makes it easy to connect devices to your wireless network. If your wireless devices support WPS, you can use this feature to easily add wireless devices to your network. Note: You will not be able to use WPS if you set the Hide ESSID option to enabled under Network > Wireless 2.4GHz / Wireless 5GHz1 / Wireless 5GHz2 sections.
There are two methods the WPS feature can easily connect your wireless devices to your network.
· Virtual Push Button Configuration (PBC) method (Recommended) · PIN (Personal Identification Number) Method – located in router management page
Note: Refer to your wireless client device documentation for details on the operation of WPS.
PBC (Software/Virtual Push Button) In addition to the hardware push button located physically on your router, the router management page also has push button which is a software or virtual push button you can click to activate WPS on your router.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Wireless and click on WPS.
3. Click Enable to enable WPS and click Apply. WPS can also be enabled by wireless band (2.4GHz / 5GHz) and External Registrar can also be enabled.
3. To add a wireless device to your network, under WPS Method, next to Push Button, click the PBC Start button. Then push the WPS button on the wireless device (consult wireless client device’s User’s Guide for length of time) you are connecting to your router.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
4. The WPS LED on the front panel will flash repeatedly when the WPS process is activated. The WPS LED will flash for approximately 2 minutes. 5. Wait for the status of the wireless client device to inidicate that connection was successful. PIN (Personal Identification Number) If your wireless client device has WPS PIN (typically an 8-digit code printed on the wireless device product label or located in the wireless device wireless software utility), you can use this method. 1. Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network and click on WPS. 3. To add a wireless device to your network, in the Station PIN field, enter the 8-digit numeric PIN number of the wireless client device and click ADD ENROLLLE. Note: You may need to initiate the WPS PIN on your wireless device first when using this method. Refer to your wireless client device documentation for details on the operation of WPS.
4. Wait for the status of the wireless client device to inidicate that the connection was successful.
37

TRENDnet User’s Guide
Below is a reference of the additional settings if you choose to make other configuration changes to these sections. Review the settings below. When complete, click Apply to save and commit your changes.
WPS Configuration · Enable Check this option to enable WPS or uncheck to disable WPS. · Band Trigger Click the drop-down list to select which wireless band to trigger and activate for WPS connectivity. Select the wireless band and click Apply first before initiating WPS connection to a wireless client device. · External Registrar Enable By default, the router functions in WPS registrar mode. In WPS client connectivity, one device functions as a registrar and the other functions as an enrollee. Checking this option will allow the router to function enrollee mode instead of registrar mode. For security purposes, it is recommended to leave this settings unchecked/disabled.
WPS Method · Push Button o PBC Start/PBC Again Clicking this button will activate WPS. o PBC Stop Clicking this button will stop the WPS process. · Station PIN Enter the wireless client device 8 digit WPS PIN number and click ADD ENROLLEE to activate WPS via PIN. · Device PIN This displays the router current WPS PIN. Wireless client devices may have the ability to enter the PIN of the wireless router/access point you would like to connect. Instead of entering the wireless client device PIN under station PIN, you can enter the router device PIN in the wireless client device to activate WPS via PIN method.
WPS Status · Current Status Displays the current WPS process status.

TEW-929DRU
· Network Name(SSID) Displays the current wireless network name for each wireless band.
· Security Displays the current security used on each wireless band. · Status Displays the current configuration status of WPS on the router.
Steps to improve wireless connectivity
There are a number of factors that can impact the range of wireless devices. Follow these tips to help improve your wireless connectivity:
1. Keep the number of obstructions to a minimum. Each obstruction can reduce the range of a wireless device. Position the wireless devices in a manner that will minimize the amount of obstructions between them. a. For the widest coverage area, install your router near the center of your home, and near the ceiling, if possible. b. Avoid placing the router on or near metal objects (such as file cabinets and metal furniture), reflective surfaces (such as glass or mirrors), and masonry walls.
c. Any obstruction can weaken the wireless signal (even non-metallic objects), so the fewer obstructions between the router and the wireless device, the better.
d. Place the router in a location away from other electronics, motors, and fluorescent lighting.

TRENDnet User’s Guide
e. Many environmental variables can affect the router’s performance, so if your wireless signal is weak, place the router in several locations and test the signal strength to determine the ideal position.
2. Building materials can have a large impact on your wireless signal. In an indoor environment, try to position the wireless devices so that the signal passes through less dense material such as dry wall. Dense materials like metal, solid wood, glass or even furniture may block or degrade the signal.
3. Antenna orientation can also have a large impact on your wireless signal. Use the wireless adapter’s site survey tool to determine the best antenna orientation for your wireless devices.
4. Interference from devices that produce RF (radio frequency) noise can also impact your signal. Position your wireless devices away from anything that generates RF noise, such as microwaves, radios and baby monitors.
If possible, upgrade wireless network interfaces (such as wireless cards in computers) from older wireless standards to 802.11n, 802.11ac, or 802.11ax. If a wirelessly networked device uses an older standard, the performance of the entire wireless network may be slower. If you are still experiencing low or no signal consider repositioning the wireless devices, installing additional access points or wireless extenders.

TEW-929DRU
Firewall & security settings
General settings
Security > Firewall > General Settings
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network, click on Firewall, and click on the General Settings tab.
3. Review the settings below. When complete, click Apply to save and commit your changes. General Settings WAN Ping Respond
· Enable By default, this function is disabled to prevent the WAN port interfaces from responding to ping/ICMP requests. Enabling this option will set your WAN port interfaces to respond ping/ICMP requests from the Internet.

TRENDnet User’s Guide
Port forwarding rules
Security > Firewall > Port Forward Port forwarding rules allow to create inbound rules from the WAN interfaces/Internet to your internal computers or devices for specific services/protocols such as a file server (FTP), IP camera, web server (HTTP/HTTPS), or remote access, etc.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security, click on Firewall, and click on the Port Forward tab.
3. Review the settings below. When complete, click Add to add the new entry to the list and Apply to save and commit your changes.

TEW-929DRU
Note: You can also enter a consecutive range of ports in the following format: 80-90 · Internal IP address Click the drop-down list to select a device from the list or
enter the local/internal IP address of the device to forward the port/protocol service. · Internal Port Enter the internal port number for the service to allow. Note: You can also enter a consecutive range of ports in the following format: 80-90 Typically, the internal port or port range is same as the external port or port range. · Schedule Allows you to select a schedule when the port forwarding rule should be enabled or disabled.
Note: To restrict access to source IP address, after you have created the port forward rule, click Edit on the port forwarding entry in the list and enter the IP address in Source IP address field, then click Apply.

· Name Enter a name for the new port forwarding rule. · Protocol Click the drop-down list to select the protocol for the service to allow:
TCP, UDP, TCP+UDP, or Other. · External Interface Click the drop-down list to select the external WAN interface(s)
to allow: WAN1, WAN2, or WAN1+WAN2. For example, choosing WAN1 will only allow the port forward to work on inbound connection requests on WAN1 only and inbound connections requests on WAN2 will be denied. · External Port Enter the external port number for the service to allow.
© Copyright 2023 TRENDnet. All Rights Reserved.

Port trigger rules
Security > Firewall > Port Trigger Port triggering is typically used for applications that require a range of ports to be dynamically opened on request to an internal device on your network. The router will wait for a request on a specific port or range of ports (trigger port) from a device on your network and once a request is detected by your router, the router will forward a port or range of ports (match port) to the device on your network.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security, click on Firewall, and click on the Port Trigger tab.
3. Review the settings below. When complete, click Add to add the new entry to the list and Apply to save and commit your changes.
40

TRENDnet User’s Guide

TEW-929DRU
2. Click on Security, click on Firewall, and click on the IP Filtering tab. 3. Review the settings below. When complete, click Add to add the new entry to the list and Apply to save and commit your changes.

· Name Enter a name for the new port trigger rule. · Match Protocol Click the drop-down list to select the match port protocol for the
service to allow: TCP, UDP, or TCP+UDP. · Match Port Enter the match port number for the service to allow.
Note: You can also enter a consecutive range of ports in the following format: 80-90 · Trigger Protocol Click the drop-down list to select the trigger port protocol for the
service to allow: TCP, UDP, or TCP+UDP. · Trigger Port Enter the match port number for the service to allow.
Note: You can also enter a consecutive range of ports in the following format: 80-90 · Internal Port Enter the internal port number for the service to allow.
Note: You can also enter a consecutive range of ports in the following format: 80-90 Typically, the internal port or port range is same as the external port or port range. · Schedule Allows you to select a schedule when the port trigger rule should be enabled or disabled.
IP filtering
Security > Firewall > IP Filtering IP filtering allows you to restrict access to the Internet to specific IP addresses on your network. You can check the current IP addresses assigned to devices connected to your router under Status

Overview under the DHCP leases section. You can also lock the IP address assigned to specific devices connected to your router by adding static DHCP leases or reservations.
1. Log into your router management page (see “Access your router management page” on page 6).
© Copyright 2023 TRENDnet. All Rights Reserved.

· Name Enter a name for the new IP filtering rule. · Source IP This is the source IP address or device IP address to filter. Click the drop-
down list to select a device from the list or enter the local/internal IP address of the device to filter or restrict. · Destination IP This is the destination IP address for the IP filtering rule. Since the IP filtering rule only applies to outbound Internet access, this will need to be a public Internet IP. You can leave this setting blank to set the rule to apply to any public Internet IP address. · Protocol Click the drop-down list to select the protocol for the service to restrict: All, TCP, UDP, TCP+UDP, or ICMP. · Source Port This is the source port number. Enter the source port number for the service to restrict. Note: You can also enter a consecutive range of ports in the following format: 80-90 · Destination Port This is the destination port number. Enter the destination port number for the service to restrict. Note: You can also enter a consecutive range of ports in the following format: 80-90 · Schedule Allows you to select a schedule when the IP filter rule should be enabled or disabled.
41

TRENDnet User’s Guide
MAC filtering
Security > Firewall > MAC Filtering Every network device has a unique, 12-digit MAC (Media Access Control) address. MAC filtering allows you to restrict access to the Internet to specific MAC addresses on your network. MAC filtering in this section applies to both wired and wireless devices. To create MAC filtering rules on your wireless network only, go to the Wireless Settings section under MAC-filter. You can check the current MAC addresses of devices connected to your router under Status > Overview under the DHCP leases section.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security, click on Firewall, and click on the MAC Filtering tab.
3. Check the Enable option to enable MAC filtering and select Mode. Note: Please make sure to add the MAC addresses in the list first before clicking Apply.
· Enable Check this option to enable MAC filtering. · Mode Select the mode used for MAC filtering.
o Deny Mode (Blacklist) Sets the MAC filter action to deny only the MAC addresses listed and allow all others access to the Internet.
o Allow Mode (Whitelist) Sets the MAC filter action to allow only the MAC address listed and deny all others access to the Internet. Important Note: Please make sure to add the MAC addresses in this list before applying the setting especially in Allow mode.
4. Review the settings below. When complete, click Add to add the new entry to the list and Apply to save and commit your changes.
· Name Enter the name for the MAC filter rule. · MAC Address Click the drop-down list to select a device from the list or enter
the MAC address manually. (e.g. a1:b2:c3:d4:e5:f6)
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
· Schedule Allows you to select a schedule when the MAC filter rule should be enabled or disabled.
Denial of service (DoS) prevention
Security > Firewall > DoS Prevention The router supports prevention against common denial of service (DoS) attacks. Malicious users use denial of service attacks to temporarily or permanently disrupt the availability of services from network resource such as your router. Typically, DoS attacks are achieved by flooding a specific network resource by excessively sending unnecessary requests which can cause the network device or resource to stop functioning.

Log into your router management page (see “Access your router management page”
on page 6). 2. Click on Network, click on Firewall, and click on the DoS Prevention tab. 3. Review the settings below. When complete, Apply to save and commit your changes. Choose the DoS prevention type to enable, TCP SYN flood, UDP flood, or ICMP flood.
· Enable Check this option to enable DoS prevention.
42

TRENDnet User’s Guide
· Rate (times per second) This value limits the amount of packets that can be received by the router per second for a specific session.
· Burst This value limits the total amount of packets that can be received and stored in buffer memory for a specific session.

TEW-929DRU

DMZ Host
Security > Firewall > DMZ Host You may want to expose a specific computer or device on your network to the Internet to allow anyone to access it. Your router includes the DMZ (Demilitarized Zone) feature that makes all the ports and services available on the WAN/Internet side of the router and forwards all ports to a single IP address (computer or network device) on your network. The DMZ feature is an easy way of allowing access from the Internet however, it is a very insecure method and will open your local area network to greater threats from Internet attacks. It is recommended to use port forwarding instead to limit rules to specific ports/services only.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Network, click on Firewall, and click on the DMZ Host tab.
3. Review the settings below. When complete, Apply to save and commit your changes.
· Enable Check this option to enable DMZ host. · DMZ Host IP Address – Enter the IP address you assigned to the computer or
network device to expose to the Internet. (e.g. 192.168.10.250)

One-to-One NAT
Network > Firewall > One-to-One NAT If you have multiple static public WAN/Internet IP addresses assigned by your ISP, you can map the additional public IP addresses to a local computer or device on your network and allow all or specific ports or services similar to port forwarding but using different public IP addresses through your router. Please check with your ISP if you have multiple static public IP addresses available that can be used to map to devices on your local network. Note: This feature will only work when using a static IP address WAN type/protocol.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security, click on Firewall, and click on the One-to-One NAT tab.
3. Review the settings below. When complete, click Add to add the new entry to the list and Apply to save and commit your changes.

TRENDnet User’s Guide
· Name Enter a name for the new one-to-one NAT rule. · Private IP address Click the drop-down list to select a device from the list or enter
the local/internal IP address of the device to forward the port/protocol service. · Public IP Enter the additional static public Internet IP address you would like to
map to the local/internal IP address. · Interface Click the drop-down list to select the external WAN interface(s) to allow:
WAN1 or WAN2. For example, choosing WAN1 will only allow the port forward to work on inbound connection requests on WAN1 only and inbound connections requests on WAN2 will be denied. · Forwarding Mode – Select DMZ to forward all ports/protocols or Port Forwarding to specify which ports/protocols to allow.
o DMZ Selecting this option will set the rule to forward all ports/protocols to the device internal private IP address. Schedule Allows you to select a schedule when the port forwarding rule should be enabled or disabled.
o Port Forward Selecting this option will allow to set the specific ports/protocols to allow for the rule. Protocol Click the drop-down list to select the protocol for the service to allow: TCP, UDP, TCP+UDP, ICMP, or Custom. External Port Enter the external port number for the service to allow. Note: You can also enter a consecutive range of ports in the following format: 80-90
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
Internal Port Enter the internal port number for the service to allow. Note: You can also enter a consecutive range of ports in the following format: 80-90 Typically, the internal port or port range is same as the external port or port range.
Enable NAT Loopback Checking this option will allow devices to resolve the additional public static IP addresses from the local interfaces (e.g. LAN, VLAN). Unchecking this option will not allow to devices to resolve the additional public static IP addresses from the local interfaces. (e.g. LAN, VLAN)
Schedule Allows you to select a schedule when the port forwarding rule should be enabled or disabled.
RADIUS Authentication
Security > Administrator > RADIUS For additional security, the RADIUS authentication feature will allow you use an external RADIUS server to access the router management configuration page instead of using the internal administrator user account.
Note: This feature requires an external RADIUS authentication server to be set up and configured prior to enabling the feature on your router.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security and click on RADIUS.
3. Review the settings below. When complete, click Apply to save and commit your changes.
· Enabled Check this option to enable RADIUS authentication. · Server IP Address Enter the IP address of the external RADIUS server.
44

TRENDnet User’s Guide
· Server Port Enter the port used for the RADIUS service. Note: The default port used for RADIUS server authentication is 1812.
· Server Secret Enter the shared secret used to authorize the router for use with the external RADIUS server.
· Confirm Secret Re-enter the shared secret for confirmation. · Timeout Enter the RADIUS server authentication timeout value in seconds. This is
the number of seconds between transmissions for authentication requests. Note: If you encounter issues with repeated authentication attempts, it is recommended to increase this value. · Retries Enter the number of retries allowed before RADIUS server will deny authentication requests for a specific user. · Allow local account login Checking this option will still allow login to the router configuration page using the internal administrator account.

Multiple WAN Configuration

TEW-929DRU

Multiple WAN Management Settings
Multi-WAN / QoS > Multiple WAN The section provides an overview of the multiple WAN management settings and the dual WAN mode functionality.
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Multi-WAN / QoS and click on Multiple WAN.
3. Review the settings below. When complete, click Apply to save and commit your changes. Note: Multiple WAN diagnostics can be used under Administrator > Diagnostics under the MWAN Interface Diagnostics section.

TRENDnet User’s Guide
MWAN Status · Interface Live Status This section displays the current status of the WAN interfaces of your router. Tracking is enabled using physical link status and L2 based methods but the tracking status displayed refers to the status of IP based link tracking which can be configured under the Link Tracking section.
Link Tracking Allows you to setup WAN link tracking by pinging Internet IP addresses. · Enable Tracking Checking this option enables IP based WAN link tracking on the specific WAN interface. · Tracking hostname or IP Enter an Internet IP address to send ping requests used to verify the link status of a specific WAN interface. You can add additional IP address by clicking . · Ping Interval Click the drop-down list to set the time interval between consecutive ping requests.
Default Traffic Rule · Policy This setting controls the default WAN mode for Internet connectivity access for all local interface such as LAN, wireless LAN, and VLAN interfaces.
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
o WAN1 (Failover to WAN2) This is the default WAN mode. In this mode, the primary WAN interface is set to WAN1 and secondary WAN interface is set to WAN2. All traffic will be routed only through WAN1 and will only route to WAN2 for Internet connectivity if the WAN1 primary interface link status fails. If WAN1 connectivity is restored, all Internet traffic will revert back to the primary WAN1 interface.
o WAN2 (Failover to WAN1) In this mode, the primary WAN interface is set to WAN2 and secondary WAN interface is set to WAN1. All traffic will be routed only through WAN2 and will only route to WAN1 if the WAN2 primary fails or is disconnected. If WAN2 connectivity is restored, all Internet traffic will revert back to the primary WAN2 interface.
o WAN1 (Fixed) In this mode, all Internet traffic will only be routed to the WAN1 interface. The WAN2 interface is not used.
o WAN2 (Fixed) In this mode, all Internet traffic will only be routed to the WAN2 interface. The WAN1 interface is not used.
46

TRENDnet User’s Guide

TEW-929DRU
o Default (Use main routing table) Selecting this option will use the internal routing table to make routing decisions between WAN1 and WAN2 and allow you to device custom policies under the Advanced tab.
Web Management System (Bark®)
Bark web management system allows you to easily setup and monitor the content accessed by devices on your network to maximize Internet bandwidth usage, control, and productivity. Note: Please make sure to set your router date and time settings correctly to ensure proper functionality of the Bark feature. Subscription based web management filtering content services are available with account sign up. Additional upgrades may be available with an additional cost. Services may be subject to change without notice.

o Load Balance In this mode, Internet traffic will be routed to both WAN1 and WAN2 interfaces based on weighted percentage. Traffic will be distributed to WAN1 and WAN2 based on the total of sessions and weighted % assignment. For example: If selecting a weight of 60% : 40% (WAN1:WAN2), 60% of all Internet sessions will be sent to WAN1 and the remaining 40% will be sent to WAN2.

TRENDnet User’s Guide
Setup your router with Bark®
System > Bark
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on System and click on Bark®.
3. Check the Enable option and click Apply. Note: You may be prompted to make sure your router date and time configuration settings are configured correctly. Please make sure manually configure the router date and time settings or synchronize date and time with an NTP server. It is important to make sure the router date and time settings are configured correctly before enabling and configuring Bark®. To configure the router date and time settings, refer to page 7.

TEW-929DRU
4. At the signup page, to create a new Bark® account, click No, I’m new to Bark. Note: If you had previously created an account with Bark®, click Yes, I’m already a Bark parent and you will be prompted to login and continue with the steps to add your router to your Bark account.

5. Click Get Started and continue with the steps following to create your Bark account. 48

TRENDnet User’s Guide

TEW-929DRU
6. After your have successfully created your Bark account, click Next to add your router device to your Bark account.

TRENDnet User’s Guide
7. On the next page, click Next.

8. On the next page, click Continue.

TEW-929DRU

TRENDnet User’s Guide
9. To get started, create a new Child Profile and enter the name Other. Select any date for the Birthday. Note: Bark works by assigning specific devices to created profiles in which each profile can be assigned a specific set of access rules. If you are using the router on a home network, you can create a Bark profile named Children or Kids and apply the specific devices and rules later on.

10. Click Done Adding Children.

TEW-929DRU

TRENDnet User’s Guide
11. A list of devices connected and discovered by your router will be listed prompted if you would like to assign these devices to the new profile “Other”. If you would like to do this later, scroll to the bottom of the page and click Next or I’ll do this later.

TEW-929DRU
12. On the Dashboard page, scroll down and under the Bark Home section, you will find that the TRENDnet TEW-929DRU router has been added to your Bark account. For additional information regarding Bark functionality and configuration, please refer to the Bark website under the Discover section for details.

TRENDnet User’s Guide
Virtual Private Networking (VPN)
Creating a Virtual Private Network (VPN)
Network > VPN
What is a VPN? A VPN provides secure communications typically over the Internet by creating a secure tunnel between two or more VPN routers (gateways) also known as a site-to-site VPN or between a single client computer and a VPN router (gateway) also known as a clientserver VPN. On your router, the following types of tunnels can be created:
· Site-to-Site VPN Connects two or more VPN routers (gateways) allowing the LAN network from each router to securely communicate to each other over the Internet. Tunneling Methods: IPsec
· Client-Server VPN A single client computer or device with VPN client software installed connects to a VPN router (gateway) allow the single client computer or device to securely communicate to the LAN network of the VPN router over the Internet. Tunneling Methods: IPsec/SSL(OpenVPN)/PPTP/L2TP/L2TP with IPsec
© Copyright 2023 TRENDnet. All Rights Reserved.

TEW-929DRU
Tunneling methods supported by your router:
· SSL (Secure Socket Layer) VPN This type of VPN can be used for Client- Server VPN only. There is support for both Layer 3 and Layer 7 network access with SSL VPN but your router only supports Layer 3 access. Additionally, your router utilizes the use of OpenVPN® for SSL VPN. The third party software client is available for free download using the following link for both Windows® and Linux operating systems https://openvpn.net/index.php/opensource/downloads.html.
· IPsec (Internet Protocol Security) VPN This type of VPN can be used for either Site-to-Site VPN or Client-Server VPN, however, the most common application for this type is a Site-to-Site VPN. This type of VPN can provide highest degree of security. For a Client-Server VPN, typically, a third party VPN client software is required to be installed and configured and can be difficult when installing and configuring on VPN client computers. This VPN type can provide the highest degree of security.
· PPTP (Point-to-Point Tunneling Protocol) VPN This type of VPN can be used for Client-Server VPN only however both server mode and client mode are supported on your router. Most computer operating systems already include a pre-installed PPTP VPN client software that can be easily configured which eliminates the need for an additional third party VPN client software to be purchased and installed. Since it provides less security overall than IPsec VPN, it is not recommended for a Site-to-Site VPN.
· L2TP (Layer 2 Tunneling Protocol) VPN This type of VPN is very similar to PPTP VPN as it is most commonly used for a Client-Server VPN, pre-installed on most computer operating systems and easy to configure, and provides less overall security than IPsec VPN. Most of the current operating systems with L2TP VPN client software pre-installed use L2TP VPN in conjunction with IPsec VPN to improve the overall security provided. This router does not support the L2TP over IPsec VPN method.
Important Note: For any tunneling or VPN method used, to avoid IP address conflict and to ensure connectivity, it is required that each end (LAN IP network or single client) of the VPN tunnel is configured with a different IP network or subnet.
53

TRENDnet User’s Guide
PPTP VPN Server
Security > VPN > PPTP Server You can enable and configure the PPTP VPN server on your router to allow remote computers or mobile devices with PPTP VPN support to connect securely over the Internet and access the company LAN network.

TEW-929DRU
5. In the Client IP field, enter an IP address range (within the same LAN IP subnet range) to assign to PPTP VPN clients. By default, the router LAN DHCP server pool is 192.168.10.101-192.168.10.199, therefore, we will assign a range that does not conflict with the DHCP server range such as 192.168.10.10-192.168.10.20.
6. Click the Authentication drop-down list and select MS-CHAPv2.

Setting up the PPTP VPN server
1. Log into your router management page (see “Access your router management page” on page 6).
2. Click on Security, click VPN, and click the PPTP Server tab.
3. Under Service Setting, check the Enable option to enable the PPTP server.
4. In the Local IP field, enter the LAN IP address. (Default LAN IP: 192.168.10.1) Note: Entering the LAN IP address as the Local IP of the PPTP server ensures your PPTP VPN clients are able to access the Internet and the router LAN network via full tunneling. If an IP address different from the LAN IP is entered, PPTP VPN clients will be allowed to access router LAN and not the Internet.

7. Under the User Account section, enter a profile name for the new user account and click Add. (e.g. User1)
8. Check the Enable option and enter a User name and Password for the new user account. (e.g. User name: user1 / Password: user1)
9. Click Apply and the bottom of the page so save and commit the changes.
10. Click on the Status > Overview page and under the Network section, make note of your WAN IPv4 addresses to configure the PPTP VPN clients. You can also configure dynamic DNS to use a dynamic DNS hostname instead of dynamic WAN IP address.
Note: For the VPN client computer, you will require a third party PPTP VPN software to be installed configured matching the PPTP VPN settings on your router. Typically, PPTP VPN software is pre-installed with most operating systems. Please refer to your

TRENDnet User’s Guide
operating system or mobile device User’s Guide/Manual for configuring the VPN settings.
Below is a reference of the additional PPTP VPN server settings if you choose to make other configuration changes to these sections.
· Enable Check this option to enable the PPTP VPN serve