Application Example for ACL, ¾ VLAN-Bind Config | TP-Link TL-SG2008

The following entries are displayed on this screen:

¾VLAN-Bind Config

Policy Name:	Select the name of the policy you want to bind.
VLAN ID:	Enter the ID of the VLAN you want to bind.

¾VLAN-Bind Table

Index:	Displays the index of the binding policy.
Policy Name:	Displays the name of the binding policy.
VLAN ID:	Displays the ID of the VLAN bound to the corresponding policy.
Direction:	Displays the binding direction.

Configuration Procedure:

Step	Operation		Description

1	Configure ACL rules		Required. On ACL→ACL Config configuration pages,
			configure ACL rules to match packets.

2	Configure Policy		Required. On ACL→Policy Config configuration pages,
			configure the policy to control the data packets those match
			the corresponding ACL rules.

3	Bind the policy to	the	Required. On ACL→Policy Binding configuration pages,
	port/VLAN		bind the policy to the port/VLAN to make the policy effective
			on the corresponding port/VLAN.

10.4 Application Example for ACL

¾Network Requirements

1.The manager of the R&D department can access to the forum of the company. The MAC address of the manager is 00-64-A5-5D-12-C3.

2.The staff of the R&D department can visit the forum.

3.The staff of the marketing department can not visit the forum.

4.The R&D department and marketing department can not communicate with each other.

114

Image 121

TP-Link TL-SG2008 manual Application Example for ACL, ¾ VLAN-Bind Config, Enter the ID of the Vlan you want to bind

Contents

REV1.0.0 1910010984 TL-SG2008 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Intended Readers About this GuideConventions Overview of This Guide System Chapter Introduction Appendix a Specifications Main Features Overview of the SwitchIntroduction Appearance Description ¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents System Info SystemSystem Summary ¾ Port Status ¾ Port Info Device DescriptionStatus Displays the connection status of the port ¾ Bandwidth Utilization ¾ Device Description System Time¾ Time Info Daylight Saving Time System IP Following entries are displayed on this screen System IP User Management ¾ IP ConfigUser Table Password Type in a password for users’ login User Config¾ User Info User Status Confirm Password Password Display Mode Config RestoreUser ID, Name, Access Level and status Operation System Tools Firmware Upgrade Config Backup¾ Config Backup System Reset System Reboot Access Control Access Security IP Address & Mask SSL ConfigMAC Address Port ¾ Certificate Download ¾ Global Config¾ Key Download Key File Select Enable/Disable SSH function SSH Config Download ¾ Configuration Procedure¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Port Config SwitchingPort Group Port MirrorMirroring Mode Ingress NumberEgress ¾ Port Security Port Security Port Isolation Port Isolation Loopback Detection ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlist LAG Operation Mode ¾ LAG Table LAG Table Group Number Static LAGMember LAG will delete this LAG Lacp Config Admin Key ¾ Lacp ConfigPort Priority Traffic Summary Traffic MonitorPackets Rx Packets Tx Refresh Rate Traffic Statistics¾ Statistics Received Bound MAC address MAC AddressWay Port ¾ Search Option Address Table Static Address MAC Address Displays the MAC address learned by the switch¾ Address Table Displays the corresponding Vlan ID of the MAC address ¾ Static Address Table Dynamic Address ¾ Dynamic Address Table ¾ Aging ConfigBind ¾ Create Filtering Address Filtering Address ¾ Filtering Address Table Dhcp Filtering¾ Dhcp Working Principle 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure Dhcp Filtering ¾ Dhcp Filtering¾ Trusted Port Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Name Give a name to the Vlan for identificationUntagged Ports Tagged Ports Application Example for 802.1Q Vlan ¾ Network DiagramUntagged Tagged Required. On VLAN→802.1Q VLAN→VLAN Config page, create a Required. On VLAN→802.1Q VLAN→VLAN Config page, configureStep Operation Description ¾ STP Elements Spanning Tree ¾ Bpdu Comparing Principle in STP mode ¾ STP Timers¾ STP Generation Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Version Forward DelayHello Time Max Age STP Summary Port Config ExtPath PriorityIntPath Edge Port Instance Config Region Config¾ Region Config Mstp Instance Instance ¾ Instance TableClear ¾ VLAN-Instance Mapping Instance ID Instance Port ConfigPath Cost Port Protect STP Security ¾ TC Protect ¾ Root Protect¾ Bpdu Protect ¾ Bpdu Filter TC Protect 11 TC Protect Application Example for STP Function On Spanning Tree→MSTP Instance→Region On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast ¾ Multicast Address Table ¾ Multicast Address Multicast IP Port Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Multicast Vlan ¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigMulticast→IGMP Snooping→Multicast Vlan Snooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP Table Static Multicast IP ¾ Create Static Multicast Multicast Filter¾ Static Multicast IP Table Port Filter IP-Range Action Mode ¾ Port Filter ConfigFilter Bound IP-Range ID Packet Statistics Port Displays the port number of the switch Query PacketMulticast→Multicast Filter→IP-Range Multicast→Multicast Filter→Port Filter Return to Contents QoS ¾ Priority Mode¾ QoS 802.1Q frame ¾ Schedule Mode SP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to 2 802.1P/CoS Mapping ¾ 802.1P Priority ConfigRequired. On QoS→DiffServ→Port Priority ¾ Priority Level ¾ Dscp Priority Config Configuration Procedure Step Operation DescriptionDscp Priority Mapping ¾ Priority Level Schedule ModeIt ranges from 0 to Priority Level Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Broadcast Rate Voice VlanBps Mulitcast Rate ¾ Port Voice Vlan Mode ¾ Security Mode of Voice Vlan Global ConfigPacket Type Processing Mode Enter the Vlan ID of the voice Vlan Port ModeAging Time OUI address is aging out OUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→VLAN ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global Config ACL ACL ConfigACL Summary ACL Create ¾ Create ACL MAC ACL¾ Create MAC ACL Rule ID Extend-IP ACL Standard-IP ACL¾ Create Standard-IP ACL Mask Policy Summary Policy Config¾ Create Extend-IP ACL IP Protocol Action Create Policy CreateIndex Displays the index of the policy Displays the ID of the ACL contained in the policy Binding Table Policy Binding¾ Create Action ¾ Policy Bind Table Vlan Binding Port BindingInterface Direction Displays the binding direction Application Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind Table On ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACL Limit2 ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions ¾ MIB Introduction ¾ Snmp Configuration Outline Snmp Config, Notification and Rmon Snmp Config Snmp Group Snmp ViewMIB Object ID View Type Snmp Group Following entries are displayed on this screen ¾ Group Config ¾ Group Table Snmp User Auth Password Auth ModePrivacy Mode Privacy Password Snmp Community AccessCommunity Name MIB View Required. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalConfig→Global Config page, enable Snmp On the SNMP→SNMP Config→SNMP ¾ Create Notification NotificationIP Address UDP Port Rmon TimeoutRetry ¾ Notification Table Rmon Group Function History Control¾ History Control Table Alarm Config Event Config¾ Event Table Sample Type VariableRising Threshold Rising Event 131 System Monitor MaintenanceCPU Monitor Memory Monitor 12.2 LogLevel Description Level Description Debugging Log Table¾ Log Info Time Local Log ¾ Local Log ConfigLog Buffer Log File Remote Log Backup Log¾ Log Host Host IP ¾ Backup Log Device DiagnosticsCable Test ¾ Cable Test Loopback Network Diagnostics Ping ¾ Ping ConfigTracert 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs Now Appendix C Glossary Remote Authentication Dial-in User Service Radius Multicast SwitchingIgmp Snooping Igmp Query Simple Network Management Protocol Snmp Rapid Spanning Tree Protocol RstpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA