Access Security, Access Control | TP-Link TL-SG2008 instruction

Figure 4-14 System Reset

Note:

After the system is reset, the switch will be reset to the default and all the settings will be cleared.

4.4 Access Security

Access Security provides different security measures for the remote login so as to enhance the configuration management security. It can be implemented on Access Control page.

4.4.1 Access Control

On this page you can control the users logging on to the Web management page to enhance the configuration management security. The definitions of Admin and Guest refer to 4.2 User Management.

Choose the menu System→Access Security→Access Control to load the following page.

Figure 4-15 Access Control

The following entries are displayed on this screen:

Page 26

Image 26

TP-Link TL-SG2008 manual Access Security, Access Control

Contents

TL-SG2008 REV1.0.0 1910010984 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This Guide Chapter Introduction System Appendix a Specifications Introduction Overview of the SwitchMain Features Appearance Description Rear Panel ¾ LEDs Name Status Indication Configuration Login to the SwitchLogin Return to Contents System Summary SystemSystem Info ¾ Port Status Status Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth Utilization ¾ Time Info System Time¾ Device Description Daylight Saving Time System IP System IP Following entries are displayed on this screen User Table ¾ IP ConfigUser Management ¾ User Info User ConfigPassword Type in a password for users’ login User Status User ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System Tools ¾ Config Backup Config BackupFirmware Upgrade System Reboot System Reset Access Security Access Control MAC Address SSL ConfigIP Address & Mask Port ¾ Key Download ¾ Global Config¾ Certificate Download Key File SSH Config Select Enable/Disable SSH function ¾ Network Requirements ¾ Configuration ProcedureDownload Application Example 2 for SSH Page Page Return to Contents Port SwitchingPort Config Mirroring Port MirrorGroup Mode Egress NumberIngress Port Security ¾ Port Security Port Isolation Port Isolation ¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlist Operation Mode LAG LAG Table ¾ LAG Table Member Static LAGGroup Number Lacp Config LAG will delete this LAG Port Priority ¾ Lacp ConfigAdmin Key Packets Rx Traffic MonitorTraffic Summary Packets Tx ¾ Statistics Traffic StatisticsRefresh Rate Received Way MAC AddressBound MAC address Port Address Table ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address Dynamic Address ¾ Static Address Table Bind ¾ Aging Config¾ Dynamic Address Table Filtering Address ¾ Create Filtering Address ¾ Dhcp Working Principle Dhcp Filtering¾ Filtering Address Table 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Trusted Port ¾ Dhcp FilteringDhcp Filtering Vlan 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Untagged Ports Give a name to the Vlan for identificationName Tagged Ports Untagged ¾ Network DiagramApplication Example for 802.1Q Vlan Tagged Step Operation Description Required. On VLAN→802.1Q VLAN→VLAN Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Spanning Tree ¾ STP Elements ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port ¾ Region Config Region ConfigInstance Config Mstp Instance Clear ¾ Instance TableInstance ¾ VLAN-Instance Mapping Path Cost Instance Port ConfigInstance ID STP Security Port Protect ¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu Filter TC Protect Application Example for STP Function 11 TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview ¾ Multicast Address ¾ Multicast Address Table ¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping Process Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Multicast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP Table Static Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast IP-Range Port Filter Filter ¾ Port Filter ConfigAction Mode Bound IP-Range ID Multicast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port Filter Return to Contents ¾ QoS ¾ Priority ModeQoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Required. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority Level Dscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config Mapping It ranges from 0 to Schedule Mode¾ Priority Level Priority Level Rate Limit ¾ Rate Limit ConfigBandwidth Control Egress Ratebps Storm ControlIngress Rate bps Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Port Voice Vlan Mode Packet Type Processing Mode Global Config¾ Security Mode of Voice Vlan Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging out OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config ACL Summary ACL ConfigACL ACL Create ¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask ¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP Protocol Index Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy ¾ Create Action Policy BindingBinding Table ¾ Policy Bind Table Interface Port BindingVlan Binding Direction Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Limit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config Snmp Config, Notification and Rmon MIB Object ID Snmp ViewSnmp Group View Type ¾ Group Config Snmp Group Following entries are displayed on this screen Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Community Name AccessSnmp Community MIB View Config→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMP IP Address Notification¾ Create Notification UDP Port Retry TimeoutRmon ¾ Notification Table ¾ History Control Table History ControlRmon Group Function ¾ Event Table Event ConfigAlarm Config Rising Threshold VariableSample Type Rising Event 131 CPU Monitor MaintenanceSystem Monitor Level Description 12.2 LogMemory Monitor ¾ Log Info Log TableLevel Description Debugging Time Log Buffer ¾ Local Log ConfigLocal Log Log File ¾ Log Host Backup LogRemote Log Host IP Cable Test Device Diagnostics¾ Backup Log ¾ Cable Test Network Diagnostics Loopback Tracert ¾ Ping ConfigPing ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component Now Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Query Simple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA