Acl, ACL Config, ACL Summary, ACL Create | TP-Link TL-SG2008

Chapter 10 ACL

10.1 ACL Config

An ACL may contain a number of rules, and each rule specifies a different package range. Packets are matched in match order. Once a rule is matched, the switch processes the matched packets taking the operation specified in the rule without considering the other rules, which can enhance the performance of the switch.

The ACL Config function can be implemented on ACL Summary, ACL Create, MAC ACL, Standard-IP ACL and Extend-IP ACL pages.

10.1.1 ACL Summary

On this page, you can view the current ACLs configured in the switch.

Choose the menu ACL→ACL Config→ACL Summary to load the following page.

Figure 10-1 ACL Summary

The following entries are displayed on this screen:

¾Search Option

Select ACL: Select the ACL you have created

ACL Type: Displays the type of the ACL you select.

Rule Order: Displays the rule order of the ACL you select.

¾Rule Table

Display the rule table of the ACL you have selected. Here you can edit the rules, view the details of them, and move them up and down.

10.1.2 ACL Create

On this page you can create ACLs.

Choose the menu ACL→ACL Config→ACL Create to load the following page.

107

Image 114

TP-Link TL-SG2008 manual Acl, ACL Config, ACL Summary, ACL Create, ¾ Rule Table

Contents

TL-SG2008 REV1.0.0 1910010984 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This Guide Chapter Introduction System Appendix a Specifications Introduction Overview of the SwitchMain Features Appearance Description Rear Panel ¾ LEDs Name Status Indication Login to the Switch LoginConfiguration Return to Contents System Summary SystemSystem Info ¾ Port Status Status Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth Utilization System Time ¾ Device Description¾ Time Info Daylight Saving Time System IP System IP Following entries are displayed on this screen ¾ IP Config User ManagementUser Table ¾ User Info User ConfigPassword Type in a password for users’ login User Status User ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System Tools Config Backup Firmware Upgrade¾ Config Backup System Reboot System Reset Access Security Access Control MAC Address SSL ConfigIP Address & Mask Port ¾ Key Download ¾ Global Config¾ Certificate Download Key File SSH Config Select Enable/Disable SSH function ¾ Configuration Procedure Download¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Switching Port ConfigPort Mirroring Port MirrorGroup Mode Number IngressEgress Port Security ¾ Port Security Port Isolation Port Isolation ¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlist Operation Mode LAG LAG Table ¾ LAG Table Static LAG Group NumberMember Lacp Config LAG will delete this LAG ¾ Lacp Config Admin KeyPort Priority Packets Rx Traffic MonitorTraffic Summary Packets Tx ¾ Statistics Traffic StatisticsRefresh Rate Received Way MAC AddressBound MAC address Port Address Table ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address Dynamic Address ¾ Static Address Table ¾ Aging Config ¾ Dynamic Address TableBind Filtering Address ¾ Create Filtering Address Dhcp Filtering ¾ Filtering Address Table¾ Dhcp Working Principle 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Dhcp Filtering Dhcp Filtering¾ Trusted Port Vlan 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Untagged Ports Give a name to the Vlan for identificationName Tagged Ports Untagged ¾ Network DiagramApplication Example for 802.1Q Vlan Tagged Required. On VLAN→802.1Q VLAN→VLAN Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aStep Operation Description Spanning Tree ¾ STP Elements ¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port ¾ Region Config Region ConfigInstance Config Mstp Instance Clear ¾ Instance TableInstance ¾ VLAN-Instance Mapping Instance Port Config Instance IDPath Cost STP Security Port Protect ¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu Filter TC Protect Application Example for STP Function 11 TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview ¾ Multicast Address ¾ Multicast Address Table ¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping Process Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Multicast Vlan ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP Table Static Multicast IP Multicast Filter ¾ Create Static Multicast¾ Static Multicast IP Table IP-Range Port Filter Filter ¾ Port Filter ConfigAction Mode Bound IP-Range ID Multicast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port Filter Return to Contents ¾ Priority Mode QoS¾ QoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Required. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority Level Dscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config Mapping It ranges from 0 to Schedule Mode¾ Priority Level Priority Level ¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Port Voice Vlan Mode Global Config ¾ Security Mode of Voice VlanPacket Type Processing Mode Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging out OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config ACL Summary ACL ConfigACL ACL Create ¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask ¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP Protocol Index Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy ¾ Create Action Policy BindingBinding Table ¾ Policy Bind Table Interface Port BindingVlan Binding Direction Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Limit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config Snmp Config, Notification and Rmon MIB Object ID Snmp ViewSnmp Group View Type ¾ Group Config Snmp Group Following entries are displayed on this screen Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Community Name AccessSnmp Community MIB View Config→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMP IP Address Notification¾ Create Notification UDP Port Retry TimeoutRmon ¾ Notification Table History Control Rmon Group Function¾ History Control Table Event Config Alarm Config¾ Event Table Rising Threshold VariableSample Type Rising Event 131 Maintenance System MonitorCPU Monitor 12.2 Log Memory MonitorLevel Description ¾ Log Info Log TableLevel Description Debugging Time Log Buffer ¾ Local Log ConfigLocal Log Log File ¾ Log Host Backup LogRemote Log Host IP Cable Test Device Diagnostics¾ Backup Log ¾ Cable Test Network Diagnostics Loopback ¾ Ping Config PingTracert ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component Now Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Query Simple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA