Mac Acl, ¾ Create ACL, ¾ Create MAC ACL

Figure 10-2 ACL Create

The following entries are displayed on this screen:

¾Create ACL

ACL ID:

Enter ACL ID of the ACL you want to create.

Rule Order: User Config order is set to be match order in this ACL.

10.1.3 MAC ACL

MAC ACLs analyze and process packets based on a series of match conditions, which can be the source MAC addresses and destination MAC addresses carried in the packets.

Choose the menu ACL→ACL Config→MAC ACL to load the following page.

Figure 10-3 Create MAC Rule

The following entries are displayed on this screen:

¾Create MAC ACL

ACL ID:	Select the desired MAC ACL for configuration.
Rule ID:	Enter the rule ID.
Operation:	Select the operation for the switch to process packets which match the
	rules.
	z	Permit: Forward packets.
	z	Deny: Discard Packets.
S-MAC:	Enter the source MAC address contained in the rule.
D-MAC:	Enter the destination MAC address contained in the rule.
		108

Page 115

Image 115

TP-Link TL-SG2008 manual Mac Acl, ¾ Create ACL, ¾ Create MAC ACL, Rule ID

Contents

REV1.0.0 1910010984 TL-SG2008 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Overview of This Guide About this GuideIntended Readers Conventions System Chapter Introduction Appendix a Specifications Appearance Description Overview of the SwitchMain Features Introduction ¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents ¾ Port Status SystemSystem Info System Summary ¾ Bandwidth Utilization Device Description¾ Port Info Status Displays the connection status of the port ¾ Device Description System Time¾ Time Info Daylight Saving Time System IP Following entries are displayed on this screen System IP User Management ¾ IP ConfigUser Table User Status User ConfigPassword Type in a password for users’ login ¾ User Info System Tools Config RestoreConfirm Password Password Display Mode User ID, Name, Access Level and status Operation Firmware Upgrade Config Backup¾ Config Backup System Reset System Reboot Access Control Access Security Port SSL ConfigIP Address & Mask MAC Address Key File ¾ Global Config¾ Certificate Download ¾ Key Download Select Enable/Disable SSH function SSH Config Download ¾ Configuration Procedure¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Port Config SwitchingPort Mode Port MirrorGroup Mirroring Ingress NumberEgress ¾ Port Security Port Security Port Isolation Port Isolation Forward Portlist Display the forwardlist ¾ Port Isolation ConfigLoopback Detection ¾ Port Isolation List LAG Operation Mode ¾ LAG Table LAG Table Group Number Static LAGMember LAG will delete this LAG Lacp Config Admin Key ¾ Lacp ConfigPort Priority Packets Tx Traffic MonitorTraffic Summary Packets Rx Received Traffic StatisticsRefresh Rate ¾ Statistics Port MAC AddressBound MAC address Way ¾ Search Option Address Table Displays the corresponding Vlan ID of the MAC address MAC Address Displays the MAC address learned by the switchStatic Address ¾ Address Table ¾ Static Address Table Dynamic Address ¾ Dynamic Address Table ¾ Aging ConfigBind ¾ Create Filtering Address Filtering Address ¾ Filtering Address Table Dhcp Filtering¾ Dhcp Working Principle 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure Dhcp Filtering ¾ Dhcp Filtering¾ Trusted Port Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Tagged Ports Give a name to the Vlan for identificationName Untagged Ports Tagged ¾ Network DiagramApplication Example for 802.1Q Vlan Untagged Required. On VLAN→802.1Q VLAN→VLAN Config page, create a Required. On VLAN→802.1Q VLAN→VLAN Config page, configureStep Operation Description ¾ STP Elements Spanning Tree ¾ Bpdu Comparing Principle in STP mode ¾ STP Timers¾ STP Generation Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Max Age Forward DelayVersion Hello Time STP Summary Port Config Edge Port PriorityExtPath IntPath Mstp Instance Region ConfigInstance Config ¾ Region Config ¾ VLAN-Instance Mapping ¾ Instance TableInstance Clear Instance ID Instance Port ConfigPath Cost Port Protect STP Security ¾ Bpdu Filter ¾ Root Protect¾ TC Protect ¾ Bpdu Protect TC Protect 11 TC Protect Application Example for STP Function Operation Description On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast ¾ Multicast Address Table ¾ Multicast Address ¾ Igmp Snooping Process Igmp SnoopingMulticast IP Port ¾ Igmp Snooping ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Multicast Vlan ¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigMulticast→IGMP Snooping→Multicast Vlan Multicast IP Table Snooping→Port ConfigSnooping→Snooping Config Multicast IP Static Multicast IP ¾ Create Static Multicast Multicast Filter¾ Static Multicast IP Table Port Filter IP-Range Bound IP-Range ID ¾ Port Filter ConfigAction Mode Filter Multicast→Multicast Filter→Port Filter Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→IP-Range Return to Contents QoS ¾ Priority Mode¾ QoS 802.1Q frame ¾ Schedule Mode SP-Mode Displays the LAG number which the port belongs to ¾ Port Priority ConfigDiffServ Port Priority ¾ Priority Level ¾ 802.1P Priority Config2 802.1P/CoS Mapping Required. On QoS→DiffServ→Port Priority Mapping Configuration Procedure Step Operation Description¾ Dscp Priority Config Dscp Priority Priority Level Schedule Mode¾ Priority Level It ranges from 0 to Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Mulitcast Rate Voice VlanBroadcast Rate Bps ¾ Port Voice Vlan Mode ¾ Security Mode of Voice Vlan Global ConfigPacket Type Processing Mode OUI address is aging out Port ModeEnter the Vlan ID of the voice Vlan Aging Time OUI Config Required. On QoS→Voice VLAN→Global Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Port Config ACL Create ACL ConfigACL ACL Summary Rule ID MAC ACL¾ Create ACL ¾ Create MAC ACL Mask Standard-IP ACLExtend-IP ACL ¾ Create Standard-IP ACL IP Protocol Policy ConfigPolicy Summary ¾ Create Extend-IP ACL Displays the ID of the ACL contained in the policy Policy CreateAction Create Index Displays the index of the policy ¾ Policy Bind Table Policy BindingBinding Table ¾ Create Action Direction Displays the binding direction Port BindingVlan Binding Interface ¾ VLAN-Bind Table ¾ VLAN-Bind ConfigApplication Example for ACL Enter the ID of the Vlan you want to bind On ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACL Limit2 ¾ Snmp Versions Snmp¾ Snmp Overview ¾ Snmp Management Frame ¾ MIB Introduction ¾ Snmp Configuration Outline Snmp Config, Notification and Rmon Snmp Config View Type Snmp ViewSnmp Group MIB Object ID Snmp Group Following entries are displayed on this screen ¾ Group Config ¾ Group Table Snmp User Privacy Password Auth ModeAuth Password Privacy Mode MIB View AccessSnmp Community Community Name On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP Config→Global Config page, enable Snmp UDP Port Notification¾ Create Notification IP Address ¾ Notification Table TimeoutRmon Retry Rmon Group Function History Control¾ History Control Table Alarm Config Event Config¾ Event Table Rising Event VariableSample Type Rising Threshold 131 System Monitor MaintenanceCPU Monitor Memory Monitor 12.2 LogLevel Description Time Log TableLevel Description Debugging ¾ Log Info Log File ¾ Local Log ConfigLocal Log Log Buffer Host IP Backup LogRemote Log ¾ Log Host ¾ Cable Test Device Diagnostics¾ Backup Log Cable Test Loopback Network Diagnostics Ping ¾ Ping ConfigTracert 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs Now Appendix C Glossary Igmp Query Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Snooping Spanning Tree Algorithm STA Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Simple Network Time Protocol Sntp

Figure 10-2 ACL Create

The following entries are displayed on this screen:

¾Create ACL

ACL ID:

10.1.3 MAC ACL

Figure 10-3 Create MAC Rule

The following entries are displayed on this screen:

¾Create MAC ACL

Rule ID: