Port Isolation | TP-Link TL-SG2008 guide

Max Learned MAC: Specify the maximum number of MAC addresses that can be learned on the port.

Learned Num: Displays the number of MAC addresses that have been learned on the port.

Learn Mode:Select the Learn Mode for the port.

•Dynamic: When Dynamic mode is selected, the learned MAC address will be deleted automatically after the aging time.

•Static: When Static mode is selected, the learned MAC address will be out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted.

•Permanent: When Permanent mode is selected, the learned MAC address will be out of the influence of the aging time and can only be deleted manually. The learned entries will be saved even the switch is rebooted.

Status:

Select Enable/Disable the Port Security feature for the port.

Note:

The Port Security function is disabled for the LAG port member. Only the port is removed from the LAG, will the Port Security function be available for the port.

5.1.4 Port Isolation

Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forward portlist.

Choose the menu Switching→Port→Port Isolation to load the following page.

Figure 5-5 Port Isolation

The following entries are displayed on this screen:

32

Image 39

TP-Link TL-SG2008 manual Port Isolation

Contents

REV1.0.0 1910010984 TL-SG2008 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Overview of This Guide About this GuideIntended Readers Conventions System Chapter Introduction Appendix a Specifications Appearance Description Overview of the SwitchMain Features Introduction ¾ LEDs Name Status Indication Rear Panel Login to the Switch LoginConfiguration Return to Contents ¾ Port Status SystemSystem Info System Summary ¾ Bandwidth Utilization Device Description¾ Port Info Status Displays the connection status of the port System Time ¾ Device Description¾ Time Info Daylight Saving Time System IP Following entries are displayed on this screen System IP ¾ IP Config User ManagementUser Table User Status User ConfigPassword Type in a password for users’ login ¾ User Info System Tools Config RestoreConfirm Password Password Display Mode User ID, Name, Access Level and status Operation Config Backup Firmware Upgrade¾ Config Backup System Reset System Reboot Access Control Access Security Port SSL ConfigIP Address & Mask MAC Address Key File ¾ Global Config¾ Certificate Download ¾ Key Download Select Enable/Disable SSH function SSH Config ¾ Configuration Procedure Download¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Switching Port ConfigPort Mode Port MirrorGroup Mirroring Number IngressEgress ¾ Port Security Port Security Port Isolation Port Isolation Forward Portlist Display the forwardlist ¾ Port Isolation ConfigLoopback Detection ¾ Port Isolation List LAG Operation Mode ¾ LAG Table LAG Table Static LAG Group NumberMember LAG will delete this LAG Lacp Config ¾ Lacp Config Admin KeyPort Priority Packets Tx Traffic MonitorTraffic Summary Packets Rx Received Traffic StatisticsRefresh Rate ¾ Statistics Port MAC AddressBound MAC address Way ¾ Search Option Address Table Displays the corresponding Vlan ID of the MAC address MAC Address Displays the MAC address learned by the switchStatic Address ¾ Address Table ¾ Static Address Table Dynamic Address ¾ Aging Config ¾ Dynamic Address TableBind ¾ Create Filtering Address Filtering Address Dhcp Filtering ¾ Filtering Address Table¾ Dhcp Working Principle 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Filtering Dhcp Filtering¾ Trusted Port Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Tagged Ports Give a name to the Vlan for identificationName Untagged Ports Tagged ¾ Network DiagramApplication Example for 802.1Q Vlan Untagged Required. On VLAN→802.1Q VLAN→VLAN Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aStep Operation Description ¾ STP Elements Spanning Tree ¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Max Age Forward DelayVersion Hello Time STP Summary Port Config Edge Port PriorityExtPath IntPath Mstp Instance Region ConfigInstance Config ¾ Region Config ¾ VLAN-Instance Mapping ¾ Instance TableInstance Clear Instance Port Config Instance IDPath Cost Port Protect STP Security ¾ Bpdu Filter ¾ Root Protect¾ TC Protect ¾ Bpdu Protect TC Protect 11 TC Protect Application Example for STP Function Operation Description On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast ¾ Multicast Address Table ¾ Multicast Address ¾ Igmp Snooping Process Igmp SnoopingMulticast IP Port ¾ Igmp Snooping ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Multicast Vlan ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Multicast IP Table Snooping→Port ConfigSnooping→Snooping Config Multicast IP Static Multicast IP Multicast Filter ¾ Create Static Multicast¾ Static Multicast IP Table Port Filter IP-Range Bound IP-Range ID ¾ Port Filter ConfigAction Mode Filter Multicast→Multicast Filter→Port Filter Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→IP-Range Return to Contents ¾ Priority Mode QoS¾ QoS 802.1Q frame ¾ Schedule Mode SP-Mode Displays the LAG number which the port belongs to ¾ Port Priority ConfigDiffServ Port Priority ¾ Priority Level ¾ 802.1P Priority Config2 802.1P/CoS Mapping Required. On QoS→DiffServ→Port Priority Mapping Configuration Procedure Step Operation Description¾ Dscp Priority Config Dscp Priority Priority Level Schedule Mode¾ Priority Level It ranges from 0 to ¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps Mulitcast Rate Voice VlanBroadcast Rate Bps ¾ Port Voice Vlan Mode Global Config ¾ Security Mode of Voice VlanPacket Type Processing Mode OUI address is aging out Port ModeEnter the Vlan ID of the voice Vlan Aging Time OUI Config Required. On QoS→Voice VLAN→Global Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Port Config ACL Create ACL ConfigACL ACL Summary Rule ID MAC ACL¾ Create ACL ¾ Create MAC ACL Mask Standard-IP ACLExtend-IP ACL ¾ Create Standard-IP ACL IP Protocol Policy ConfigPolicy Summary ¾ Create Extend-IP ACL Displays the ID of the ACL contained in the policy Policy CreateAction Create Index Displays the index of the policy ¾ Policy Bind Table Policy BindingBinding Table ¾ Create Action Direction Displays the binding direction Port BindingVlan Binding Interface ¾ VLAN-Bind Table ¾ VLAN-Bind ConfigApplication Example for ACL Enter the ID of the Vlan you want to bind On ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACL Limit2 ¾ Snmp Versions Snmp¾ Snmp Overview ¾ Snmp Management Frame ¾ MIB Introduction ¾ Snmp Configuration Outline Snmp Config, Notification and Rmon Snmp Config View Type Snmp ViewSnmp Group MIB Object ID Snmp Group Following entries are displayed on this screen ¾ Group Config ¾ Group Table Snmp User Privacy Password Auth ModeAuth Password Privacy Mode MIB View AccessSnmp Community Community Name On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP Config→Global Config page, enable Snmp UDP Port Notification¾ Create Notification IP Address ¾ Notification Table TimeoutRmon Retry History Control Rmon Group Function¾ History Control Table Event Config Alarm Config¾ Event Table Rising Event VariableSample Type Rising Threshold 131 Maintenance System MonitorCPU Monitor 12.2 Log Memory MonitorLevel Description Time Log TableLevel Description Debugging ¾ Log Info Log File ¾ Local Log ConfigLocal Log Log Buffer Host IP Backup LogRemote Log ¾ Log Host ¾ Cable Test Device Diagnostics¾ Backup Log Cable Test Loopback Network Diagnostics ¾ Ping Config PingTracert 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs Now Appendix C Glossary Igmp Query Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Snooping Spanning Tree Algorithm STA Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Simple Network Time Protocol Sntp