On ACL→ACL Config→ACL Create page, create ACL | TP-Link TL-SG2008

¾Network Diagram

¾Configuration Procedure

Step	Operation		Description

1	Configure	for	On ACL→ACL Config→ACL Create page, create ACL 11.
	requirement 1		On ACL→ACL Config→MAC ACL page, select ACL 11, create Rule 1,
			configure the operation as Permit, configure the S-MAC as
			00-64-A5-5D-12-C3 and mask as FF-FF-FF-FF-FF-FF.
			On ACL→Policy Config→Policy Create page, create a policy named
			manager.
			On ACL→Policy Config→Action Create page, add ACL 11 to Policy
			manager.
			On ACL→Policy Binding→Port Binding page, select Policy manager
			to bind to port 3.
2	Configure	for	On ACL→ACL Config→ACL Create page, create ACL 100.
	requirement	2	On ACL→ACL Config→Standard-IP ACL page, select ACL 100,
	and 4		create Rule 1, configure operation as Deny, configure S-IP as
			10.10.70.0 and mask as 255.255.255.0, configure D-IP as 10.10.50.0
			and mask as 255.255.255.0.
			On ACL→ACL Config→Standard-IP ACL page, select ACL 100,
			create Rule 2, configure operation as Permit, configure S-IP as
			10.10.70.0 and mask as 255.255.255.0, configure D-IP as 10.10.88.5
			and mask as 255.255.255.255.
			On ACL→Policy Config→Policy Create page, create a policy named
			limit1.
			On ACL→Policy Config→Action Create page, add ACL 100 to Policy
			limit1.
			On ACL→Policy Binding→Port Binding page, select Policy limit1 to
			bind to port 3.

115

Image 122

TP-Link TL-SG2008 manual On ACL→ACL Config→ACL Create page, create ACL, On ACL→ACL Config→Standard-IP ACL page, select ACL

Contents

TL-SG2008 REV1.0.0 1910010984 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This Guide Chapter Introduction System Appendix a Specifications Introduction Overview of the SwitchMain Features Appearance Description Rear Panel ¾ LEDs Name Status Indication Configuration Login to the SwitchLogin Return to Contents System Summary SystemSystem Info ¾ Port Status Status Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth Utilization ¾ Time Info System Time¾ Device Description Daylight Saving Time System IP System IP Following entries are displayed on this screen User Table ¾ IP ConfigUser Management ¾ User Info User ConfigPassword Type in a password for users’ login User Status User ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System Tools ¾ Config Backup Config BackupFirmware Upgrade System Reboot System Reset Access Security Access Control MAC Address SSL ConfigIP Address & Mask Port ¾ Key Download ¾ Global Config¾ Certificate Download Key File SSH Config Select Enable/Disable SSH function ¾ Network Requirements ¾ Configuration ProcedureDownload Application Example 2 for SSH Page Page Return to Contents Port SwitchingPort Config Mirroring Port MirrorGroup Mode Egress NumberIngress Port Security ¾ Port Security Port Isolation Port Isolation ¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlist Operation Mode LAG LAG Table ¾ LAG Table Member Static LAGGroup Number Lacp Config LAG will delete this LAG Port Priority ¾ Lacp ConfigAdmin Key Packets Rx Traffic MonitorTraffic Summary Packets Tx ¾ Statistics Traffic StatisticsRefresh Rate Received Way MAC AddressBound MAC address Port Address Table ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address Dynamic Address ¾ Static Address Table Bind ¾ Aging Config¾ Dynamic Address Table Filtering Address ¾ Create Filtering Address ¾ Dhcp Working Principle Dhcp Filtering¾ Filtering Address Table 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Trusted Port ¾ Dhcp FilteringDhcp Filtering Vlan 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Untagged Ports Give a name to the Vlan for identificationName Tagged Ports Untagged ¾ Network DiagramApplication Example for 802.1Q Vlan Tagged Step Operation Description Required. On VLAN→802.1Q VLAN→VLAN Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Spanning Tree ¾ STP Elements ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port ¾ Region Config Region ConfigInstance Config Mstp Instance Clear ¾ Instance TableInstance ¾ VLAN-Instance Mapping Path Cost Instance Port ConfigInstance ID STP Security Port Protect ¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu Filter TC Protect Application Example for STP Function 11 TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview ¾ Multicast Address ¾ Multicast Address Table ¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping Process Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Multicast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP Table Static Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast IP-Range Port Filter Filter ¾ Port Filter ConfigAction Mode Bound IP-Range ID Multicast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port Filter Return to Contents ¾ QoS ¾ Priority ModeQoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Required. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority Level Dscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config Mapping It ranges from 0 to Schedule Mode¾ Priority Level Priority Level Rate Limit ¾ Rate Limit ConfigBandwidth Control Egress Ratebps Storm ControlIngress Rate bps Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Port Voice Vlan Mode Packet Type Processing Mode Global Config¾ Security Mode of Voice Vlan Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging out OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config ACL Summary ACL ConfigACL ACL Create ¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask ¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP Protocol Index Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy ¾ Create Action Policy BindingBinding Table ¾ Policy Bind Table Interface Port BindingVlan Binding Direction Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Limit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config Snmp Config, Notification and Rmon MIB Object ID Snmp ViewSnmp Group View Type ¾ Group Config Snmp Group Following entries are displayed on this screen Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Community Name AccessSnmp Community MIB View Config→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMP IP Address Notification¾ Create Notification UDP Port Retry TimeoutRmon ¾ Notification Table ¾ History Control Table History ControlRmon Group Function ¾ Event Table Event ConfigAlarm Config Rising Threshold VariableSample Type Rising Event 131 CPU Monitor MaintenanceSystem Monitor Level Description 12.2 LogMemory Monitor ¾ Log Info Log TableLevel Description Debugging Time Log Buffer ¾ Local Log ConfigLocal Log Log File ¾ Log Host Backup LogRemote Log Host IP Cable Test Device Diagnostics¾ Backup Log ¾ Cable Test Network Diagnostics Loopback Tracert ¾ Ping ConfigPing ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component Now Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Query Simple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA