Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG2008 manual Acl, ACL Config, ACL Summary, ACL Create, ¾ Rule Table

Models: TL-SG2008

1 153

Download 153 pages 28.77 Kb

Page 114

Chapter 10 ACL

10.1 ACL Config

An ACL may contain a number of rules, and each rule specifies a different package range. Packets are matched in match order. Once a rule is matched, the switch processes the matched packets taking the operation specified in the rule without considering the other rules, which can enhance the performance of the switch.

The ACL Config function can be implemented on ACL Summary, ACL Create, MAC ACL, Standard-IP ACL and Extend-IP ACL pages.

10.1.1 ACL Summary

On this page, you can view the current ACLs configured in the switch.

Choose the menu ACL→ACL Config→ACL Summary to load the following page.

Figure 10-1 ACL Summary

The following entries are displayed on this screen:

¾Search Option

Select ACL: Select the ACL you have created

ACL Type: Displays the type of the ACL you select.

Rule Order: Displays the rule order of the ACL you select.

¾Rule Table

Display the rule table of the ACL you have selected. Here you can edit the rules, view the details of them, and move them up and down.

10.1.2 ACL Create

On this page you can create ACLs.

Choose the menu ACL→ACL Config→ACL Create to load the following page.

107

Image 114

TP-Link TL-SG2008 manual Acl, ACL Config, ACL Summary, ACL Create, ¾ Rule Table

Contents

TL-SG2008 REV1.0.0 1910010984Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This GuideChapter Introduction SystemAppendix a Specifications Introduction Overview of the SwitchMain Features Appearance DescriptionRear Panel ¾ LEDs Name Status IndicationLogin to the Switch LoginConfiguration Return to Contents System Summary SystemSystem Info ¾ Port StatusStatus Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth UtilizationSystem Time ¾ Device Description¾ Time Info Daylight Saving Time System IP System IP Following entries are displayed on this screen¾ IP Config User ManagementUser Table ¾ User Info User ConfigPassword Type in a password for users’ login User StatusUser ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System ToolsConfig Backup Firmware Upgrade¾ Config Backup System Reboot System ResetAccess Security Access ControlMAC Address SSL ConfigIP Address & Mask Port¾ Key Download ¾ Global Config¾ Certificate Download Key FileSSH Config Select Enable/Disable SSH function¾ Configuration Procedure Download¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Switching Port ConfigPort Mirroring Port MirrorGroup ModeNumber IngressEgress Port Security ¾ Port SecurityPort Isolation Port Isolation¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlistOperation Mode LAGLAG Table ¾ LAG TableStatic LAG Group NumberMember Lacp Config LAG will delete this LAG¾ Lacp Config Admin KeyPort Priority Packets Rx Traffic MonitorTraffic Summary Packets Tx¾ Statistics Traffic StatisticsRefresh Rate ReceivedWay MAC AddressBound MAC address PortAddress Table ¾ Search Option¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC addressDynamic Address ¾ Static Address Table¾ Aging Config ¾ Dynamic Address TableBind Filtering Address ¾ Create Filtering AddressDhcp Filtering ¾ Filtering Address Table¾ Dhcp Working Principle 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack¾ Dhcp Filtering Dhcp Filtering¾ Trusted Port Vlan 802.1Q Vlan ¾ Link Types of portsVlan Config ¾ PvidUntagged Ports Give a name to the Vlan for identificationName Tagged PortsUntagged ¾ Network DiagramApplication Example for 802.1Q Vlan TaggedRequired. On VLAN→802.1Q VLAN→VLAN Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aStep Operation Description Spanning Tree ¾ STP Elements¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Step Operation Tips ：¾ Rstp Elements ¾ Mstp Elements¾ Port States ¾ Port RolesSTP Config STP ConfigHello Time Forward DelayVersion Max AgePort Config STP SummaryIntPath PriorityExtPath Edge Port¾ Region Config Region ConfigInstance Config Mstp InstanceClear ¾ Instance TableInstance ¾ VLAN-Instance MappingInstance Port Config Instance IDPath Cost STP Security Port Protect¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu FilterTC Protect Application Example for STP Function 11 TC ProtectOn Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation DescriptionOn Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview¾ Multicast Address ¾ Multicast Address Table¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping ProcessSnooping Config ¾ Igmp Snooping Fundamentals¾ Igmp Snooping Status Description Displays Igmp Snooping status MemberIgmp Snooping Fast LeaveMulticast Vlan ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP TableStatic Multicast IP Multicast Filter ¾ Create Static Multicast¾ Static Multicast IP Table IP-Range Port FilterFilter ¾ Port Filter ConfigAction Mode Bound IP-Range IDMulticast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port FilterReturn to Contents ¾ Priority Mode QoS¾ QoS ¾ Schedule Mode 802.1Q frameSP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs toRequired. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority LevelDscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config MappingIt ranges from 0 to Schedule Mode¾ Priority Level Priority Level¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps Bps Voice VlanBroadcast Rate Mulitcast Rate¾ Port Voice Vlan Mode Global Config ¾ Security Mode of Voice VlanPacket Type Processing Mode Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging outOUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global ConfigACL Summary ACL ConfigACL ACL Create¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP ProtocolIndex Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy¾ Create Action Policy BindingBinding Table ¾ Policy Bind TableInterface Port BindingVlan Binding Direction Displays the binding directionEnter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind TableOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACLLimit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions¾ Snmp Configuration Outline ¾ MIB IntroductionSnmp Config Snmp Config, Notification and RmonMIB Object ID Snmp ViewSnmp Group View Type¾ Group Config Snmp Group Following entries are displayed on this screenSnmp User ¾ Group TablePrivacy Mode Auth ModeAuth Password Privacy PasswordCommunity Name AccessSnmp Community MIB ViewConfig→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMPIP Address Notification¾ Create Notification UDP PortRetry TimeoutRmon ¾ Notification TableHistory Control Rmon Group Function¾ History Control Table Event Config Alarm Config¾ Event Table Rising Threshold VariableSample Type Rising Event131 Maintenance System MonitorCPU Monitor 12.2 Log Memory MonitorLevel Description ¾ Log Info Log TableLevel Description Debugging TimeLog Buffer ¾ Local Log ConfigLocal Log Log File¾ Log Host Backup LogRemote Log Host IPCable Test Device Diagnostics¾ Backup Log ¾ Cable TestNetwork Diagnostics Loopback¾ Ping Config PingTracert ¾ Tracert Config 10 Tracert Following entries are displayed on this screenAppendix a Specifications Appendix B Configuring the PCs Configure TCP/IP componentNow Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp QuerySimple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA