TP-LINK TL-WDR4300 Wireless N750 Dual Band Router, Gigabit, 2.4GHz 300Mbps+5Ghz 450Mbps, 2 USB port, Wireless On/Off Switch..
Grab Now TP-LINK TL-WDR4300 Wireless N750 Dual Band Router, Gigabit, 2.4GHz 300Mbps+5Ghz 450Mbps, 2 USB port, Wireless On/Off Switch By TP-LINKMost helpful customer reviews
267 of 305 people found the following review helpful.
Super-fast, great range, lots of features
By S. Lionel
Pros:
+ Fastest dual-band router I have used by far
+ Lots of configuration options in admin panel
+ DLNA server, FTP server, USB printer server and USB storage server
Cons:
- Physically large
- Admin user interface can be confusing
For the last two-plus years I have been using the Netgear WNDR3700V1 dual-band router. At the time I bought it, it was considered one of the fastest dual-band routers available, and it had lots of features. It does work very well, but Netgear has revised it twice and the subsequent V2 and V3 releases have diminished functionality and performance. While I have used many brands of routers in the past, TP-Link was new to me so I was curious to see how the TL-WDR4300 compared.
The router itself is a large box. It's attractive and has a nice design, but it is much wider than competing routers. It is also very lightweight. Perhaps the width is so that the three dual-band antennae can be physically separated more - I don't know. There are keyhole slots on the bottom in case you want to wall-mount it, but as with most all routers, the wiring all goes to the back where the antennae are, so this might be awkward if your wiring comes from below.
TP-Link provides a setup "wizard" on a mini-CD (you can also download it from their web site), but I just connected to it directly and configured it through the admin panel. I was delighted to see that the wireless networks came up pre-configured with WPA security and an 8-digit password - many routers are simply "open" when first configured. This encourages users to maintain security. You can set the wireless to WEP or even open if you want, but that's generally ill-advised.
Unlike a certain other brand of router I have tried two examples of (cough - D-Link - cough), the TP-Link had no trouble negotiating with the Ethernet feed of my FiOS optical network box (the equivalent of a cable modem). Some of the configuration features it had that I liked were:
- Dynamic DNS support (though the selection of providers was limited)
- Separate and easy to understand configuration of 2.4 and 5GHz bands
- Ability to reserve IP addresses to specific devices
Some of the things I didn't like:
- Only a single display of DHCP clients connected, rather than separating wired from wireless
- IP reservation page did not let you select from known connections - you have to type the MAC address
- No "guest mode" - this is a feature the Netgear WNDR3700 has that adds a second network which can be configured to give Internet access only and not access to your local network. This is great for houseguests and the like [Edit - TP-Link added Guest Mode in a later firmware update]
The admin user interface is straightforward, though it uses submenus and some of the pages seemed to duplicate others. For example, there were two different pages where one could enter DNS server addresses, and changes to one did not carry over to the other. While each page had pretty good instructions right in the dialog, some of the options were a bit confusing as to how to set them. But what really got me were the pages where I did not notice at first that a frame of the dialog had a scrollbar, and I had to scroll to the right to see additional links, even though there was lots of space for them to show otherwise. A full manual is on the CD as well as on the web site.
Once set up I tested performance at a distance of about 25 feet through two walls. First I ran tests using the Netgear and then the TP-Link with the same remote server. The TP-Link delivered speeds 30-50% better than the Netgear on both the 2.4GHz and 5GHz bands. The Netgear is very good about coverage in my house - it has eight (I think) internal patch antennae where the TP-Link has three, rather tall stick antennae. I found coverage to be at least as good as the Netgear, even about 50-60 feet away and through multiple walls. I could only go by "bars" of signal strength but it seemed to me that the TP-Link's signal was stronger on both bands. Many dual-band routers are particularly weak on the 5GHz band.
As the three antennae suggest, this router supports the "3X" mode of some Wireless N adapters for a theoretical maximum bandwidth of 450Mbps on the 5GHz band and 300Mbps on the 2.4GHz band. Add those together and you get the "750" emblazoned on the router. The spec sheet I got indicates tested speeds of 241Mbps and 135Mbps respectively, still not shabby. The Ethernet ports are all Gigabit, and the test indicates LAN-WAN speeds as much as 935Mbps. That's fast.
The TL-WDR4300 has two USB 2.0 ports on back. These can connect to USB storage or to a USB printer. For storage the router will make the storage available as a network share, or you can enable an FTP server that can, if you wish, be accessed from the Internet. (The default is off.) Unfortunately, only standard FTP is supported, not SFTP over SSH, so your login information (you can set a username/password pair) is sent unencrypted. My advice is to NOT use this feature over the Internet.
I did not test the print server, as my printer is already network-enabled. For Windows there is a utility you install that, if I understand correctly, pretends to be a USB port and relays information to and from your USB printer. Scanners are also supported.
I did test the DLNA media server. You can specify up to six folders on the USB storage to serve and it will relay audio, video and photos to DLNA clients on your local network. I fired up Goodplayer on my iPad and played a movie from a USB hard disk - it worked beautifully. The promotional material claims that it can serve media over the Internet, but I think this is incorrect - there's no setting to enable/disable it and no instructions for how you would access the media from outside your local network. I will verify this with TP-Link support and update this review when I learn more. (Edit: TP-Link confirmed that media serving is local network only.)
TP-Link's documentation takes the unusual step of saying that one can install and run the freeware DD-WRT router software on some of its routers. I checked at the DD-WRT web site and while the WDR4300 is not yet officially supported, there is a beta version that at least partially works, and development for the WDR4300 is proceeding. According to the spec sheet TP-Link included, the WDR4300 has an Atheros chipset that runs at 560MHz, 128MB of RAM and 8MB of flash - these are rather high values for routers in this price range and suggests great performance and resistance to locking up after being on a long time (a problem I have seen with other routers.)
Lastly, as I do for most products I test, I looked at power consumption. For a device you'll leave on all the time, this can matter. I was pleased to see that the WDR4300 maxed out at 4 watts with wireless on, where the older Netgear router was averaging 6-7 watts. Excellent.
Not only does the TP-Link router seem well-designed, but their web site is easy to navigate as well, unlike those of some more well-known brands.
[Edited February 6, 2014 to note that Guest Mode was added after my initial review.]
101 of 116 people found the following review helpful.
Lots to Like (vs. an old WRT54G)
By C. MacPhail
.
A few points that may not be covered in the other reviews...
- - - Good documentation - - -
The 125-page PDF User Guide seems well written and helpful. The setup wizard tries to be very clear and helpful, (but was not quite helpful enough for me -- see Note 1). The administrative interface is good at explaining many of the options instead of just labeling them. (Example in Note 3). If your router-IQ is low-to-medium, this is worth a lot.
- - - Bad documentation - - -
The setup wizard **does not urge or remind you to change the admin password**. It ends with "Congratulations...Enjoy surfing the Internet." (see Note 2)
Also, TP-Link provides no clarity on where their router stands with WPS. That's the convenient but very hackable device pairing procedure that some experts say should be disabled. (see Wikipedia: "Wi-Fi Protected Setup")
- - - Good Support - - -
Mac computers don't self-discover a USB file share on the router. I emailed TP-Link and got an answer 6 hours later. (Finder...Go...Connect to Server...smb:192.168.0.1/volume name)
- - - 2.4 GHz vs 5 GHz - - -
Apparently 5 GHz is ideal for apartments (where interference is the main problem) and 2.4 GHz is better in larger homes (where range is the main problem). You can set it to use either band, or both. (See Note 3)
- - - Energy savings - - -
It runs much cooler than my old Linksys WRT54G. Uses 3.95 watts vs 5.85 watts. Sounds trivial, but over 5 years it will save me $27 -- 40% of the router's cost. (see Note 4)
- - - USB ports - - -
A lot of routers have them now. This one supports printer sharing, and file sharing on USB sticks or USB hard drives. Local sharing is file storage and/or media server. Internet file serving is provided by FTP (File Transfer Protocol). Models like ASUS RT-N16 have direct Bit Torrent support in addition. Nice to have stuff available 24x7, even when various PCs are shut off.
- - - Improved Range - - -
I used the free and very cool NetSpot software (Mac only) to map WiFi signal strength throughout my house... TP-Link TL-WDR3600 (2.4 GHz band) versus Linksys WRT54G. The TP-Link lit up some difficult rooms that were marginal with the Linksys. A very measurable difference. Turns out we don't need two routers, just on decent one.
- - - Summary - - -
Router-world gets cheaper and better every year. I don't know if this one is the very best choice, but there are a lot of reasons to upgrade an old router.
- - - Notes - - -
Note 1: I kept failing the wizard's "Verify Router Settings" check. I had taken a little shortcut that seemed harmless, but wasn't. Instead of wiring my desktop PC directly to the router, I connected through my LAN, which had other devices also powered on. The presence of these other devices during setup apparently threw something off. If your desktop computer is 30 or 90 feet away from your cable modem, you could fall into the same trap.
Note 2: It says "The Easy Setup Assistant has completed a basic configuration of the router. For more advanced settings, please log in to the Web management interface." But that interface has 30+ screens. The average user should be told and guided to set a new admin password.
Note 3: Here's an example of the helpful stuff in the router management interface...
Advantages of 5GHz:
The 5GHz band is less likely to be congested. The 2.4GHz frequency range is much more prone to interference, as it is commonly used by other wireless networks in the area, as well as cordless phones, garage door openers and other home appliances and consumer products.
Disadvantages of 5GHz:
In general, the higher the frequency of a wireless signal, the shorter its range. Thus, 2.4GHz networks cover a substantially larger range than 5GHz wireless networks. In particular, the higher frequency wireless signals of 5GHz networks do not penetrate solid objects nearly as well as 2.4GHz signals, limiting their reach inside homes.
Note 4: That arithmetic is for parts of California, where marginal cost is $ 0.33 per kilowatt hour. If your cost is $ 0.11, your savings would be about $9 over 5 years. (1.9 watts * 8760 hours * 5 years * $ .00011 per watt hour.) 3.95 watts is when running 2.4 GHz band only. With both 2.4 and 5 GHz bands running it's 4.35 watts.
~~~ Comments & questions welcome ~~~
73 of 85 people found the following review helpful.
Good performance, but worrisome pattern of firmware updates and nervousness about security
By Douglas B. Moran
I am currently happily using this WiFi router, but my concerns about its security caused me leave my previous router between it and the Internet.
PRELIMINARIES:
0. Recognize that Amazon has mixed together reviews for a range of different models in this product family -- models that have very different performance, design, features, ... So check that the review is for the model you are considering.
1. Recognize that many of the earlier reviews here contain obsolete information -- problems that have been addressed by firmware upgrades. The 2013-March-19 upgrade added Guest Networking and fixed some other problems. The previous upgrade of 2012-Dec-25 fixed many bugs and performance problems. Having seen the earlier reviews and being a curious techie, I tried the original firmware found that that the _sample_ of reported problems that I could easily test were indeed fixed by the 2012-12-25 firmware.
If you get this device, do NOT disregard these updates thinking that they are only optional (that is, only for those having identifiable problems).
2. (update) Don't stop at the firmware upgrade of 2013-March-19--it has a major vulnerability that is being actively exploited (eg, Web search for CSRF and "router hijack"). There is a subsequent firmware upgrade (2013-06-17) whose description makes it seem innocuous and unnecessary for most users, that update seems to block the version of this exploit that I have access to.
3. The pattern of firmware updates is worrisome. Some of the problems fixed are to be expected: performance problems/enhancements and compatibility problems with certain other network devices. For these, I applaud the manufacturer for putting out fixes on a 3-4 month time scale. HOWEVER some of the other problems are things they should have been correct in the initial release, and consequently I worry about undetected/unfixed problems that remain, especially those related to security since that is a critical function of this device (more below).
In this review, _Security_ comes at the very end for compositional reasons, not because it is low priority.
----
My Background: I evaluate home WiFi Routers on three basic criteria: Security, Performance, and Features, and in that order. I place "Features" last because most home users, and me currently, will not need or use most of the more advanced features. I worked in computer/network security in the 1990s and early 2000s and computer networking starting in the 1980s. Being retired, I now have too small a set of devices to evaluate this router for more sophisticated or demanding settings.
Because friends and neighbors ask for help in setting up/fixing their network problems, I am also exposed to the perspective and choices of the typical home user. This review contains elements of interest to different groups: experts, mass-market consumers,... I have tried to structure the review to simplify your quickly ID'ing and skipping elements that are irrelevant to your interest/experience (not needed, too complicated, too trivial, ...).
----
Features: Summary: The features are as expected for this class of device.
This is unsurprising because this is largely dictated by the chipsets used, and there is relatively modest variability across the competing chipsets at any given time. Because the landscape is ever changing -- what the newest chipsets provide and what device is using which generation of chipset -- my advice is that you use web search to try to find the chipsets used by the various models of router you are considering and if successful look at the reviews of those chipsets as a precursor for comparing the overall router.
The software used in many brands of routers also comes from common software code bases (via different paths) but many manufacturers try to obscure this. And there are various combinations of components, versions-used and customizations-make. While the manual available for download is only minimally out-of-sync with the firmware, the documentation of some of the features is underspecified and can be resolved only through experimentation. But this is quite common for this class of device (not just this model or brand).
The USB printer port worked for my printers -- a Canon MFP and 2 different models of Samsungs. This was only a brief test because the primary printer and the MFP also have Ethernet interfaces (preferred). The utility program was easy to use and worked well.
The USB storage sharing feature also worked, although I don't expect to be using it -- no current need and concerns about the security of the implementation.
----
WiFi Performance: Good
Background: This is replacing a six year-old Buffalo Airstation WHR-G54S with its omnidirectional 2.2dBm antenna replaced by a Hawking Directional 15dB Corner Antenna (Model HAI15SC). I live in an old house that was extended and remodeled several times by previous owners. There are enough perplexing weak/dead spots in my house that I cannot project performance to more conventionally constructed houses.
I tested locations in and just outside my house using the (free) inSSIDer software tool with both routers within 3 feet of each other. In the 2.4 GHz band, the signal strength was equal or slightly better than that of the (enhanced) previous one. Of course, the difference between G and N protocols and 40MHz wide channels improved throughput considerably. For the 5 GHz band, I had no comparables.
I got about 8 Mbps speeds when connecting from across the street -- about 140 ft with some intervening tree foliage. The router is in a front room, but not near a window and my computer was just inside the neighbor's front window.
In the month of use, I have had no problems with the WiFi. No freezing. No unusual patterns of delays or larger latencies. My primary computer is in a separate room, through an open door but well out of line-of-sight, about 30 feet straight line distance.
----
WiFi antenna geometry and separation:
This device has detachable antennas, allowing those that understand optimization of antenna geometry to do so.
Additional spec: Antenna separation: 85 mm (left to center), 98 mm (center to right), 183 mm (left to right).
FYI: For the 2.4Ghz band, the wavelength is roughly 120-125mm; for the 5.0Ghz band, it is roughly 51-58mm.
Background: For a multiple antenna system (such as this), the geometry and separation of the antennas can have significant effect, but I don't know what scheme(s) this device uses and I am too out-of-date to judge whether this device has antennas that are positioned for performance or for manufacturing convenience. Example, one long-established multi-antenna scheme, "Diversity", benefits from having its two antennas separated by one wavelength.
----
Temperature: This device stays cool -- very close to ambient temperature. I have it in a fairly typical location: an out-of-the-way location on a table top that gets somewhat below-average air circulation. Explanation: Heat is a concern because it shortens the lifespan of electronics.
----
Auto-selection of WiFi channel and channel width: This is relevant primarily to a WiFi router that might have another such device placed close to it, such as in neighboring apartments or companies or departments in a suite of offices. Or not, depending on the nature of the walls in between. I live in a dense suburban setting, with my immediate neighbors' WiFi routers about 50 feet from mine, and we have yet to see any signs of interference (unsurprising based on the literature and my measurement of their signal strength as less than half of mine).
Auto-selection was designed for situations where good-enough could be achieved without _careful_ coordination, or where such coordination was impractical (difficult neighbors, rapidly changing environment,...) In these situations, a common practice is to periodically check for _significant_ channel selection conflicts and make appropriate adjustments (manual selection, coordination, increase distance of router from conflicts,...)
I experimented using my previous WiFi-G router to create conflicts, manually setting its channel to the three non-overlapping channels (1, 6, 11) to see how this device responded.
The auto-selection of channels seems to occur only when the router is booted. This is expected because many WiFi adapters (clients) have difficulties or failures if the channel is changed while connected. Usually, it made a non-conflicting choice, but twice it auto-selected channel 6 when the WiFi-G router in the same room was already on that channel, but without any transmissions with its client beyond keep-alives. When the WiFi-G router was on channel 6, this router would predominantly choose channel 11 although I couldn't detect any reason for it to prefer 11 to channel 1.
With auto-selection of channel width, I observed the width change a few times (using the inSSIDer tool) but I don't have the tools for a meaningful test.
----
Utility programs: Download the updated versions.
The EasySetupAssistant utility was fatally and opaquely confused because I connected the new router to a second Ethernet interface on my computer. It seems to do little other than prompt for basic configuration, minus the critical step of changing the default administrative account and password. My recommendation is to start with Web browser interface.
----
Mounting:
Although most people will have this device sitting horizontally, there are slots in the bottom to allow it to be mounted vertically (eg a wall), but there is no stand. The slots are designed to force nose-down or nose-up mounting because of the multi-antenna system. There is a very slight tilt to the indicator panel (on the front), but not enough to enable _easy_ reading when mounted vertically -- while I can see the _presence_ of the lights, I have to put my head close to the vertical surface, or use a mirror, to identify the icons.
----
User Interface and documentation:
The Web browser interface has a panel on the right providing a significant amount of documentation of features being configured, and typically is close to what is in the manual. While this is good for the UI, it represents a deficiency for the manual. The documentation goes beyond simply providing a few words to disambiguate the labels in the setting panels, but routinely falls short of giving the user enough information to make informed decisions. Examples:
1. On selecting what protocols to use, it says that if all your devices use "N", you can select "N only". It fails to mention that selecting "N only" is likely to improve performance. Consequently, the user is likely to unnecessarily leave the default+recommended setting of supporting all protocols on that band.
2. The router provides SW and HW NAT, but doesn't say why you might want to turn off HW NAT (Answer: There are some some devices/apps, particularly older ones, that don't conform to the assumptions built into HW NAT. If such are having problems connecting out to the Internet, try turning off HW NAT to see if that fixes the problem. Otherwise, leave it enabled).
3. "IP & MAC Binding": The explanation in the UI fails to distinguish this from "Address Resolution" under "DHCP". Most users will want the latter, but since it is buried one-step down whereas the former is in the LHS tabs, it is easy to pick the wrong one (a confusion that can be seen with web search). Furthermore, this name is ambiguous, covering a range of capabilities. One use involves preventing ARP spoofing. Another simply improves efficiency.
In most places, the UI does a very good job of providing error messages and warnings (eg need to reboot before settings take effect) and of indicating why a selection isn't available (need to enable X). However, there is no warning that when you install new firmware, all your settings will be lost (so first you need to back them up, then restore after the upgrade).
The quality of the writing in the documentation -- grammar, spelling and content -- was significantly better than I have come to expect for this type of product. The few passages that struck me as "bad" were in fact typical of what I encounter in many similar products (from China) -- awkward, but not unmanageable.
----
UI Annoyances:
The layout assumes that the browser window will be very wide, with things such as excessive space between columns obscuring that you need to scroll to find additional columns with important settings.
Significant amounts of the available status information is not under the "Status" tab, but under the tabs for the associated settings.
MAC addresses have to be in the hyphen-separator format whereas most of my MAC addresses used colons, thereby inhibiting cut-and-paste. I did a cut-and-paste of those addresses into a TXT file, then a search-and-replace, and then a cut-and-paste into the UI.
Some of the log files have Internet addresses in hex rather than dot notation (a0b0c12 for 10.11.12.18).
Lack of inheritance. For example, for entering addresses on the LAN, rather than providing the subnet address and having you enter just the host component, the UI has you enter the full address and (correctly) gives you an error message when you make the inevitable typos.
No uploading of tables: There are tables of data (address mappings, rules) that need to be entered manually that I would like to be able to upload from a TXT file. If you are trying to manage multiple routers, having such makes it much easier to keep all properly updated (no missing entries, no typos from manual entry).
************
SECURITY ISSUES
1. There is no provision for signing off from the administrative interface despite it being a basic security practice to absolutely minimize such connections. There has been a long, long string of exploits that hijack such connections. Of most relevance to the current home user, there is a class of malware that you unknowingly download from an infected web site and if this malware finds an open connection to your router, it modifies the configuration to let the miscreants take over your network.
ADVICE: Do not enable automatic supplying of account or password. The session is _not_ ended by a soft reboot (needed for many setting changes) nor by closing the tab in the browser (tested: Chrome, Firefox, IE10). You need to do a full restart of the browser or, better yet, power cycle the router.
2. Administrative account name and password need to be changed immediately. Both are well-known and are the first ones guessed. If the malware cited in (1) does not find an open connection, it tries to open one and the defaults make it trivial. Other malware that gets on your network will often try the same.
2a. The EasySetupAssistant does not prompt you to change these.
2b. To change this, you need to open the last tab "System Tools" and select "Password" (seventh entry).
3. The USB storage feature comes with an administrative account with the same first-guessed username and password, and with read-write access (shudder). As part of this, you can enable the router to be an FTP server, and make that FTP server accessible over the Internet. I RECOMMEND _AGAINST_ THIS -- see Appendix.
4. Protection from Denial-of-Service (DoS) attacks is turned off by default (under tab Security, under Advanced Security) and requires that you also turn on "System Tools" -> "Statistics" (there is a reminder in red of this). I do not understand why this wasn't enabled by default: My router logs show a set of ICMP/TCP/UDP flood attacks every day or two (much reduced frequency from several years ago) and NMAP probes (the documentation is silent on this).
5. The TFTP ALG (Application Layer Gateway) is enabled. TFTP is a badly obsolete protocol -- it lacks authentication and was designed for devices with miniscule amounts of memory and processing power. For at least 20 years, the widely accepted firewall rules haven't allowed TFTP except on the LAN. This makes me very nervous about all the invisible security decisions embedded in this product.
6. I could not find documentation of what firewall capabilities this router provides, leaving me to make inferences from similar products and the details of how to loosen the firewall security. I don't like having to make inferences because they can too easily be wrong.
7. The description of the 2013-March-19 firmware update includes "6. Fixed some vulnerabilities and improved security". For a device that has a crucial security function in my network, I want to be _notified_ of fixes and not have to periodically check the manufacturer's website to see if there are new releases. I couldn't even find where to register my purchase to enable them to send such notifications. Unfortunately, this failing is common in this category of devices.
And more questionable default settings (this review is intended to give you a sense of the product, not a tutorial).
---- Appendix: Security issues of an Internet-accessible FTP server on a router ----
The USB connectors on this router can be used for USB disks (Flash drive, HDD). The router can be configured to allow access from the WAN (referred to as the "Internet"). Do _NOT_ enable this unless you fully understand your situation and the serious risks (for example, the WAN port is connected to a LAN you control and/or trust). For virtually every use, collaborative storage in the Cloud (Google Drive, Microsoft's SkyDrive,...) is a better alternative.
1. Do you trust the implementation of the server? Among FTP server implementations, there is a long history of exploits that allowed miscreants to:
1a. break out of the FTP directories and modify system file and take over the whole system (your router).
1b. override access controls -- add or modify files when they should have read-only access. If you must do this, at least use a USB Flash Drive that has a physical read-only switch.
2. Do you trust your ability to select account names and passwords that will stand up to a concerted attack? If so, the empirical evidence is that you are fooling yourself. Realize that large sites protect against these attacks with additional software (Intrusion Detection Systems).
3. Do you think that because you have a home network of 1-3 computers, the miscreants won't find you or bother with you? Wrong. They have automated "bots" (software robots) constantly looking for precisely this situation because of the higher chance of success.
Why worry about someone out there on the Internet storing files on your FTP server without your knowledge/authorization? Think child porn. Law Enforcement Organizations (LEOs) in their ignorance and enthusiasm still routinely fail to consider other options for how such files might wind up on your computer. This is not "simply" a matter of time in jail and huge legal bills before the matter is sorted out, or of lingering damage to your reputation. During raids, the LEOs have a tradition of administering "rough justice", including things like allegedly throwing the handcuffed suspect head-first down stairs (the traditional "He tripped") -- this is a famous, widely-used motivational/cautionary story from WiFi hacking, but equally applicable to FTP servers.
-- Douglas B. Moran
See all 1267 customer reviews...More...
