Global Config, ¾ Security Mode of Voice Vlan | TP-Link TL-SG2008

¾Security Mode of Voice VLAN

When voice VLAN is enabled for a port, you can configure its security mode to filter data stream. If security mode is enabled, the port just forwards voice packets, and discards other packets whose source MAC addresses do not match OUI addresses. If security mode is not enabled, the port forwards all the packets.

Security Mode		Packet Type		Processing Mode
		UNTAG packet		When the source MAC address of the packet is the OUI
				address that can be identified, the packet can be
		Packet with voice		address that can be identified, the packet can be
		Packet with voice		transmitted in the voice VLAN. Otherwise, the packet will
Enable		VLAN TAG		be discarded.
		Packet with other	The processing mode for the device to deal with the packet
		Packet with other	is determined by whether the port permits the VLAN or not,
		VLAN TAG	independent of voice VLAN security mode.
			independent of voice VLAN security mode.

		UNTAG packet		Do not check the source MAC address of the packet and all

		Packet with voice
		Packet with voice		the packets can be transmitted in the voice VLAN.
Disable		VLAN TAG
		Packet with other	The processing mode for the device to deal with the packet
		Packet with other	is determined by whether the port permits the VLAN or
		VLAN TAG	not, independent of voice VLAN security mode.
			not, independent of voice VLAN security mode.

		Table 9-3 Security mode and packets processing mode

Note:

Don’t transmit voice stream together with other business packets in the voice VLAN except for some special requirements.

The Voice VLAN function can be implemented on Global Config, Port Config and OUI Config pages.

9.3.1 Global Config

On this page, you can configure the global parameters of the voice VLAN, including VLAN ID and aging time.

Choose the menu QoS→Voice VLAN→Global Config to load the following page.

Figure 9-12 Global Configuration

The following entries are displayed on this screen:

¾Global Config

Voice VLAN:Select Enable/Disable Voice VLAN function.

103

Image 110

TP-Link TL-SG2008 manual Global Config, ¾ Security Mode of Voice Vlan, Packet Type Processing Mode

Contents

TL-SG2008 REV1.0.0 1910010984 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This Guide Chapter Introduction System Appendix a Specifications Introduction Overview of the SwitchMain Features Appearance Description Rear Panel ¾ LEDs Name Status Indication Configuration Login to the SwitchLogin Return to Contents System Summary SystemSystem Info ¾ Port Status Status Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth Utilization ¾ Time Info System Time¾ Device Description Daylight Saving Time System IP System IP Following entries are displayed on this screen User Table ¾ IP ConfigUser Management ¾ User Info User ConfigPassword Type in a password for users’ login User Status User ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System Tools ¾ Config Backup Config BackupFirmware Upgrade System Reboot System Reset Access Security Access Control MAC Address SSL ConfigIP Address & Mask Port ¾ Key Download ¾ Global Config¾ Certificate Download Key File SSH Config Select Enable/Disable SSH function ¾ Network Requirements ¾ Configuration ProcedureDownload Application Example 2 for SSH Page Page Return to Contents Port SwitchingPort Config Mirroring Port MirrorGroup Mode Egress NumberIngress Port Security ¾ Port Security Port Isolation Port Isolation ¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlist Operation Mode LAG LAG Table ¾ LAG Table Member Static LAGGroup Number Lacp Config LAG will delete this LAG Port Priority ¾ Lacp ConfigAdmin Key Packets Rx Traffic MonitorTraffic Summary Packets Tx ¾ Statistics Traffic StatisticsRefresh Rate Received Way MAC AddressBound MAC address Port Address Table ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address Dynamic Address ¾ Static Address Table Bind ¾ Aging Config¾ Dynamic Address Table Filtering Address ¾ Create Filtering Address ¾ Dhcp Working Principle Dhcp Filtering¾ Filtering Address Table 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Trusted Port ¾ Dhcp FilteringDhcp Filtering Vlan 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Untagged Ports Give a name to the Vlan for identificationName Tagged Ports Untagged ¾ Network DiagramApplication Example for 802.1Q Vlan Tagged Step Operation Description Required. On VLAN→802.1Q VLAN→VLAN Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Spanning Tree ¾ STP Elements ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port ¾ Region Config Region ConfigInstance Config Mstp Instance Clear ¾ Instance TableInstance ¾ VLAN-Instance Mapping Path Cost Instance Port ConfigInstance ID STP Security Port Protect ¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu Filter TC Protect Application Example for STP Function 11 TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview ¾ Multicast Address ¾ Multicast Address Table ¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping Process Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Multicast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP Table Static Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast IP-Range Port Filter Filter ¾ Port Filter ConfigAction Mode Bound IP-Range ID Multicast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port Filter Return to Contents ¾ QoS ¾ Priority ModeQoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Required. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority Level Dscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config Mapping It ranges from 0 to Schedule Mode¾ Priority Level Priority Level Rate Limit ¾ Rate Limit ConfigBandwidth Control Egress Ratebps Storm ControlIngress Rate bps Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Port Voice Vlan Mode Packet Type Processing Mode Global Config¾ Security Mode of Voice Vlan Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging out OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config ACL Summary ACL ConfigACL ACL Create ¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask ¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP Protocol Index Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy ¾ Create Action Policy BindingBinding Table ¾ Policy Bind Table Interface Port BindingVlan Binding Direction Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Limit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config Snmp Config, Notification and Rmon MIB Object ID Snmp ViewSnmp Group View Type ¾ Group Config Snmp Group Following entries are displayed on this screen Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Community Name AccessSnmp Community MIB View Config→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMP IP Address Notification¾ Create Notification UDP Port Retry TimeoutRmon ¾ Notification Table ¾ History Control Table History ControlRmon Group Function ¾ Event Table Event ConfigAlarm Config Rising Threshold VariableSample Type Rising Event 131 CPU Monitor MaintenanceSystem Monitor Level Description 12.2 LogMemory Monitor ¾ Log Info Log TableLevel Description Debugging Time Log Buffer ¾ Local Log ConfigLocal Log Log File ¾ Log Host Backup LogRemote Log Host IP Cable Test Device Diagnostics¾ Backup Log ¾ Cable Test Network Diagnostics Loopback Tracert ¾ Ping ConfigPing ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component Now Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Query Simple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA