Policy Config, Policy Summary, IP Protocol | TP-Link TL-SG2008

Figure 10-5 Create Extend-IP Rule

The following entries are displayed on this screen:

¾Create Extend-IP ACL

ACL ID:	Select the desired Extend-IP ACL for configuration.
Rule ID:	Enter the rule ID.
Operation:	Select the operation for the switch to process packets which match the
	rules.
	z	Permit: Forward packets.
	z	Deny: Discard Packets.
S-IP:	Enter the source IP address contained in the rule.
D-IP:	Enter the destination IP address contained in the rule.
Mask:	Enter IP address mask. If it is set to 1, it must strictly match the
	address.
IP Protocol:	Select IP protocol contained in the rule.
S-Port:	Configure TCP/IP source port contained in the rule when TCP/UDP is
	selected from the pull-down list of IP Protocol.
D-Port:	Configure TCP/IP destination port contained in the rule when
	TCP/UDP is selected from the pull-down list of IP Protocol.

10.2 Policy Config

A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect.

The Policy Config can be implemented on Policy Summary, Police Create and Action Create pages.

10.2.1 Policy Summary

On this page, you can view the ACL and the corresponding operations in the policy.

110

Image 117

TP-Link TL-SG2008 manual Policy Config, Policy Summary, ¾ Create Extend-IP ACL, IP Protocol

Contents

REV1.0.0 1910010984 TL-SG2008 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Intended Readers About this GuideConventions Overview of This Guide System Chapter Introduction Appendix a Specifications Main Features Overview of the SwitchIntroduction Appearance Description ¾ LEDs Name Status Indication Rear Panel Login to the Switch LoginConfiguration Return to Contents System Info SystemSystem Summary ¾ Port Status ¾ Port Info Device DescriptionStatus Displays the connection status of the port ¾ Bandwidth Utilization System Time ¾ Device Description¾ Time Info Daylight Saving Time System IP Following entries are displayed on this screen System IP ¾ IP Config User ManagementUser Table Password Type in a password for users’ login User Config¾ User Info User Status Confirm Password Password Display Mode Config RestoreUser ID, Name, Access Level and status Operation System Tools Config Backup Firmware Upgrade¾ Config Backup System Reset System Reboot Access Control Access Security IP Address & Mask SSL ConfigMAC Address Port ¾ Certificate Download ¾ Global Config¾ Key Download Key File Select Enable/Disable SSH function SSH Config ¾ Configuration Procedure Download¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Switching Port ConfigPort Group Port MirrorMirroring Mode Number IngressEgress ¾ Port Security Port Security Port Isolation Port Isolation Loopback Detection ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlist LAG Operation Mode ¾ LAG Table LAG Table Static LAG Group NumberMember LAG will delete this LAG Lacp Config ¾ Lacp Config Admin KeyPort Priority Traffic Summary Traffic MonitorPackets Rx Packets Tx Refresh Rate Traffic Statistics¾ Statistics Received Bound MAC address MAC AddressWay Port ¾ Search Option Address Table Static Address MAC Address Displays the MAC address learned by the switch¾ Address Table Displays the corresponding Vlan ID of the MAC address ¾ Static Address Table Dynamic Address ¾ Aging Config ¾ Dynamic Address TableBind ¾ Create Filtering Address Filtering Address Dhcp Filtering ¾ Filtering Address Table¾ Dhcp Working Principle 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Filtering Dhcp Filtering¾ Trusted Port Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Name Give a name to the Vlan for identificationUntagged Ports Tagged Ports Application Example for 802.1Q Vlan ¾ Network DiagramUntagged Tagged Required. On VLAN→802.1Q VLAN→VLAN Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aStep Operation Description ¾ STP Elements Spanning Tree ¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Version Forward DelayHello Time Max Age STP Summary Port Config ExtPath PriorityIntPath Edge Port Instance Config Region Config¾ Region Config Mstp Instance Instance ¾ Instance TableClear ¾ VLAN-Instance Mapping Instance Port Config Instance IDPath Cost Port Protect STP Security ¾ TC Protect ¾ Root Protect¾ Bpdu Protect ¾ Bpdu Filter TC Protect 11 TC Protect Application Example for STP Function On Spanning Tree→MSTP Instance→Region On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast ¾ Multicast Address Table ¾ Multicast Address Multicast IP Port Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Multicast Vlan ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Snooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP Table Static Multicast IP Multicast Filter ¾ Create Static Multicast¾ Static Multicast IP Table Port Filter IP-Range Action Mode ¾ Port Filter ConfigFilter Bound IP-Range ID Packet Statistics Port Displays the port number of the switch Query PacketMulticast→Multicast Filter→IP-Range Multicast→Multicast Filter→Port Filter Return to Contents ¾ Priority Mode QoS¾ QoS 802.1Q frame ¾ Schedule Mode SP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to 2 802.1P/CoS Mapping ¾ 802.1P Priority ConfigRequired. On QoS→DiffServ→Port Priority ¾ Priority Level ¾ Dscp Priority Config Configuration Procedure Step Operation DescriptionDscp Priority Mapping ¾ Priority Level Schedule ModeIt ranges from 0 to Priority Level ¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps Broadcast Rate Voice VlanBps Mulitcast Rate ¾ Port Voice Vlan Mode Global Config ¾ Security Mode of Voice VlanPacket Type Processing Mode Enter the Vlan ID of the voice Vlan Port ModeAging Time OUI address is aging out OUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→VLAN ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global Config ACL ACL ConfigACL Summary ACL Create ¾ Create ACL MAC ACL¾ Create MAC ACL Rule ID Extend-IP ACL Standard-IP ACL¾ Create Standard-IP ACL Mask Policy Summary Policy Config¾ Create Extend-IP ACL IP Protocol Action Create Policy CreateIndex Displays the index of the policy Displays the ID of the ACL contained in the policy Binding Table Policy Binding¾ Create Action ¾ Policy Bind Table Vlan Binding Port BindingInterface Direction Displays the binding direction Application Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind Table On ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACL Limit2 ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions ¾ MIB Introduction ¾ Snmp Configuration Outline Snmp Config, Notification and Rmon Snmp Config Snmp Group Snmp ViewMIB Object ID View Type Snmp Group Following entries are displayed on this screen ¾ Group Config ¾ Group Table Snmp User Auth Password Auth ModePrivacy Mode Privacy Password Snmp Community AccessCommunity Name MIB View Required. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalConfig→Global Config page, enable Snmp On the SNMP→SNMP Config→SNMP ¾ Create Notification NotificationIP Address UDP Port Rmon TimeoutRetry ¾ Notification Table History Control Rmon Group Function¾ History Control Table Event Config Alarm Config¾ Event Table Sample Type VariableRising Threshold Rising Event 131 Maintenance System MonitorCPU Monitor 12.2 Log Memory MonitorLevel Description Level Description Debugging Log Table¾ Log Info Time Local Log ¾ Local Log ConfigLog Buffer Log File Remote Log Backup Log¾ Log Host Host IP ¾ Backup Log Device DiagnosticsCable Test ¾ Cable Test Loopback Network Diagnostics ¾ Ping Config PingTracert 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs Now Appendix C Glossary Remote Authentication Dial-in User Service Radius Multicast SwitchingIgmp Snooping Igmp Query Simple Network Management Protocol Snmp Rapid Spanning Tree Protocol RstpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA