Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG2008 manual Policy Config, Policy Summary, ¾ Create Extend-IP ACL, IP Protocol

Models: TL-SG2008

1 153

Download 153 pages 28.77 Kb

Page 117

Figure 10-5 Create Extend-IP Rule

The following entries are displayed on this screen:

¾Create Extend-IP ACL

ACL ID:	Select the desired Extend-IP ACL for configuration.
Rule ID:	Enter the rule ID.
Operation:	Select the operation for the switch to process packets which match the
	rules.
	z	Permit: Forward packets.
	z	Deny: Discard Packets.
S-IP:	Enter the source IP address contained in the rule.
D-IP:	Enter the destination IP address contained in the rule.
Mask:	Enter IP address mask. If it is set to 1, it must strictly match the
	address.
IP Protocol:	Select IP protocol contained in the rule.
S-Port:	Configure TCP/IP source port contained in the rule when TCP/UDP is
	selected from the pull-down list of IP Protocol.
D-Port:	Configure TCP/IP destination port contained in the rule when
	TCP/UDP is selected from the pull-down list of IP Protocol.

10.2 Policy Config

A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect.

The Policy Config can be implemented on Policy Summary, Police Create and Action Create pages.

10.2.1 Policy Summary

On this page, you can view the ACL and the corresponding operations in the policy.

110

Image 117

TP-Link TL-SG2008 manual Policy Config, Policy Summary, ¾ Create Extend-IP ACL, IP Protocol

Contents

REV1.0.0 1910010984 TL-SG2008Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Intended Readers About this GuideConventions Overview of This GuideSystem Chapter IntroductionAppendix a Specifications Main Features Overview of the SwitchIntroduction Appearance Description¾ LEDs Name Status Indication Rear PanelLogin to the Switch LoginConfiguration Return to Contents System Info SystemSystem Summary ¾ Port Status¾ Port Info Device DescriptionStatus Displays the connection status of the port ¾ Bandwidth UtilizationSystem Time ¾ Device Description¾ Time Info Daylight Saving Time System IP Following entries are displayed on this screen System IP¾ IP Config User ManagementUser Table Password Type in a password for users’ login User Config¾ User Info User StatusConfirm Password Password Display Mode Config RestoreUser ID, Name, Access Level and status Operation System ToolsConfig Backup Firmware Upgrade¾ Config Backup System Reset System RebootAccess Control Access SecurityIP Address & Mask SSL ConfigMAC Address Port¾ Certificate Download ¾ Global Config¾ Key Download Key FileSelect Enable/Disable SSH function SSH Config¾ Configuration Procedure Download¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Switching Port ConfigPort Group Port MirrorMirroring ModeNumber IngressEgress ¾ Port Security Port SecurityPort Isolation Port IsolationLoopback Detection ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlistLAG Operation Mode¾ LAG Table LAG TableStatic LAG Group NumberMember LAG will delete this LAG Lacp Config¾ Lacp Config Admin KeyPort Priority Traffic Summary Traffic MonitorPackets Rx Packets TxRefresh Rate Traffic Statistics¾ Statistics ReceivedBound MAC address MAC AddressWay Port¾ Search Option Address TableStatic Address MAC Address Displays the MAC address learned by the switch¾ Address Table Displays the corresponding Vlan ID of the MAC address¾ Static Address Table Dynamic Address¾ Aging Config ¾ Dynamic Address TableBind ¾ Create Filtering Address Filtering AddressDhcp Filtering ¾ Filtering Address Table¾ Dhcp Working Principle 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure¾ Dhcp Filtering Dhcp Filtering¾ Trusted Port Vlan ¾ Link Types of ports 802.1Q Vlan¾ Pvid Vlan ConfigName Give a name to the Vlan for identificationUntagged Ports Tagged PortsApplication Example for 802.1Q Vlan ¾ Network DiagramUntagged TaggedRequired. On VLAN→802.1Q VLAN→VLAN Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aStep Operation Description ¾ STP Elements Spanning Tree¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Tips ： Step Operation¾ Mstp Elements ¾ Rstp Elements¾ Port Roles ¾ Port StatesSTP Config STP ConfigVersion Forward DelayHello Time Max AgeSTP Summary Port ConfigExtPath PriorityIntPath Edge PortInstance Config Region Config¾ Region Config Mstp InstanceInstance ¾ Instance TableClear ¾ VLAN-Instance MappingInstance Port Config Instance IDPath Cost Port Protect STP Security¾ TC Protect ¾ Root Protect¾ Bpdu Protect ¾ Bpdu FilterTC Protect 11 TC Protect Application Example for STP FunctionOn Spanning Tree→MSTP Instance→Region On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Operation DescriptionOn Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address Table ¾ Multicast AddressMulticast IP Port Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process¾ Igmp Snooping Fundamentals Snooping ConfigDescription Displays Igmp Snooping status Member ¾ Igmp Snooping StatusFast Leave Igmp SnoopingMulticast Vlan ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Snooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP TableStatic Multicast IP Multicast Filter ¾ Create Static Multicast¾ Static Multicast IP Table Port Filter IP-RangeAction Mode ¾ Port Filter ConfigFilter Bound IP-Range IDPacket Statistics Port Displays the port number of the switch Query PacketMulticast→Multicast Filter→IP-Range Multicast→Multicast Filter→Port FilterReturn to Contents ¾ Priority Mode QoS¾ QoS 802.1Q frame ¾ Schedule ModeSP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to2 802.1P/CoS Mapping ¾ 802.1P Priority ConfigRequired. On QoS→DiffServ→Port Priority ¾ Priority Level¾ Dscp Priority Config Configuration Procedure Step Operation DescriptionDscp Priority Mapping¾ Priority Level Schedule ModeIt ranges from 0 to Priority Level¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps Broadcast Rate Voice VlanBps Mulitcast Rate¾ Port Voice Vlan Mode Global Config ¾ Security Mode of Voice VlanPacket Type Processing Mode Enter the Vlan ID of the voice Vlan Port ModeAging Time OUI address is aging outOUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→VLAN ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global ConfigACL ACL ConfigACL Summary ACL Create¾ Create ACL MAC ACL¾ Create MAC ACL Rule IDExtend-IP ACL Standard-IP ACL¾ Create Standard-IP ACL MaskPolicy Summary Policy Config¾ Create Extend-IP ACL IP ProtocolAction Create Policy CreateIndex Displays the index of the policy Displays the ID of the ACL contained in the policyBinding Table Policy Binding¾ Create Action ¾ Policy Bind TableVlan Binding Port BindingInterface Direction Displays the binding directionApplication Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind TableOn ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACLLimit2 ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions¾ MIB Introduction ¾ Snmp Configuration OutlineSnmp Config, Notification and Rmon Snmp ConfigSnmp Group Snmp ViewMIB Object ID View TypeSnmp Group Following entries are displayed on this screen ¾ Group Config¾ Group Table Snmp UserAuth Password Auth ModePrivacy Mode Privacy PasswordSnmp Community AccessCommunity Name MIB ViewRequired. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalConfig→Global Config page, enable Snmp On the SNMP→SNMP Config→SNMP¾ Create Notification NotificationIP Address UDP PortRmon TimeoutRetry ¾ Notification TableHistory Control Rmon Group Function¾ History Control Table Event Config Alarm Config¾ Event Table Sample Type VariableRising Threshold Rising Event131 Maintenance System MonitorCPU Monitor 12.2 Log Memory MonitorLevel Description Level Description Debugging Log Table¾ Log Info TimeLocal Log ¾ Local Log ConfigLog Buffer Log FileRemote Log Backup Log¾ Log Host Host IP¾ Backup Log Device DiagnosticsCable Test ¾ Cable TestLoopback Network Diagnostics¾ Ping Config PingTracert 10 Tracert Following entries are displayed on this screen ¾ Tracert ConfigAppendix a Specifications Configure TCP/IP component Appendix B Configuring the PCsNow Appendix C Glossary Remote Authentication Dial-in User Service Radius Multicast SwitchingIgmp Snooping Igmp QuerySimple Network Management Protocol Snmp Rapid Spanning Tree Protocol RstpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA