Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG2008 manual ¾ Create Filtering Address

Models: TL-SG2008

1 153

Download 153 pages 28.77 Kb

Page 53

Tips:

Setting aging time properly helps implement effective MAC address aging. The aging time that is too long or too short results decreases the performance of the switch. If the aging time is too long, excessive invalid MAC address entries maintained by the switch may fill up the MAC address table. This prevents the MAC address table from updating with network changes in time. If the aging time is too short, the switch may remove valid MAC address entries. This decreases the forwarding performance of the switch. It is recommended to keep the default value.

5.4.4 Filtering Address

The filtering address is to forbid the undesired packets to be forwarded. The filtering address can be added or removed manually, independent of the aging time. The filtering MAC address allows the switch to filter the packets which includes this MAC address as the source address or destination address, so as to guarantee the network security. The filtering MAC address entries act on all the ports in the corresponding VLAN.

Choose the menu Switching→MAC Address→Filtering Address to load the following page.

Figure 5-16 Filtering Address

The following entries are displayed on this screen:

¾Create Filtering Address

MAC Address: Enter the MAC Address to be filtered.

VLAN ID:Enter the corresponding VLAN ID of the MAC address.

¾Search Option

Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in the Filtering Address Table.

•MAC: Enter the MAC address of your desired entry.

•VLAN ID: Enter the VLAN ID number of your desired entry.

46

Image 53

TP-Link TL-SG2008 manual ¾ Create Filtering Address

Contents

REV1.0.0 1910010984 TL-SG2008Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Intended Readers About this GuideConventions Overview of This GuideSystem Chapter IntroductionAppendix a Specifications Main Features Overview of the SwitchIntroduction Appearance Description¾ LEDs Name Status Indication Rear PanelConfiguration Login to the SwitchLogin Return to Contents System Info SystemSystem Summary ¾ Port Status¾ Port Info Device DescriptionStatus Displays the connection status of the port ¾ Bandwidth Utilization¾ Time Info System Time¾ Device Description Daylight Saving Time System IP Following entries are displayed on this screen System IPUser Table ¾ IP ConfigUser Management Password Type in a password for users’ login User Config¾ User Info User StatusConfirm Password Password Display Mode Config RestoreUser ID, Name, Access Level and status Operation System Tools¾ Config Backup Config BackupFirmware Upgrade System Reset System RebootAccess Control Access SecurityIP Address & Mask SSL ConfigMAC Address Port¾ Certificate Download ¾ Global Config¾ Key Download Key FileSelect Enable/Disable SSH function SSH Config¾ Network Requirements ¾ Configuration ProcedureDownload Application Example 2 for SSH Page Page Return to Contents Port SwitchingPort Config Group Port MirrorMirroring ModeEgress NumberIngress ¾ Port Security Port SecurityPort Isolation Port IsolationLoopback Detection ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlistLAG Operation Mode¾ LAG Table LAG TableMember Static LAGGroup Number LAG will delete this LAG Lacp ConfigPort Priority ¾ Lacp ConfigAdmin Key Traffic Summary Traffic MonitorPackets Rx Packets TxRefresh Rate Traffic Statistics¾ Statistics ReceivedBound MAC address MAC AddressWay Port¾ Search Option Address TableStatic Address MAC Address Displays the MAC address learned by the switch¾ Address Table Displays the corresponding Vlan ID of the MAC address¾ Static Address Table Dynamic AddressBind ¾ Aging Config¾ Dynamic Address Table ¾ Create Filtering Address Filtering Address¾ Dhcp Working Principle Dhcp Filtering¾ Filtering Address Table 17 Network diagram of Dhcp ¾ Dhcp Cheating Attack 19 Dhcp Cheating Attack Implementation Procedure¾ Trusted Port ¾ Dhcp FilteringDhcp Filtering Vlan ¾ Link Types of ports 802.1Q Vlan¾ Pvid Vlan ConfigName Give a name to the Vlan for identificationUntagged Ports Tagged PortsApplication Example for 802.1Q Vlan ¾ Network DiagramUntagged TaggedStep Operation Description Required. On VLAN→802.1Q VLAN→VLAN Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a ¾ STP Elements Spanning Tree¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Tips ： Step Operation¾ Mstp Elements ¾ Rstp Elements¾ Port Roles ¾ Port StatesSTP Config STP ConfigVersion Forward DelayHello Time Max AgeSTP Summary Port ConfigExtPath PriorityIntPath Edge PortInstance Config Region Config¾ Region Config Mstp InstanceInstance ¾ Instance TableClear ¾ VLAN-Instance MappingPath Cost Instance Port ConfigInstance ID Port Protect STP Security¾ TC Protect ¾ Root Protect¾ Bpdu Protect ¾ Bpdu FilterTC Protect 11 TC Protect Application Example for STP FunctionOn Spanning Tree→MSTP Instance→Region On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Operation DescriptionOn Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address Table ¾ Multicast AddressMulticast IP Port Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process¾ Igmp Snooping Fundamentals Snooping ConfigDescription Displays Igmp Snooping status Member ¾ Igmp Snooping StatusFast Leave Igmp SnoopingMulticast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Snooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP TableStatic Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast Port Filter IP-RangeAction Mode ¾ Port Filter ConfigFilter Bound IP-Range IDPacket Statistics Port Displays the port number of the switch Query PacketMulticast→Multicast Filter→IP-Range Multicast→Multicast Filter→Port FilterReturn to Contents ¾ QoS ¾ Priority ModeQoS 802.1Q frame ¾ Schedule ModeSP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to2 802.1P/CoS Mapping ¾ 802.1P Priority ConfigRequired. On QoS→DiffServ→Port Priority ¾ Priority Level¾ Dscp Priority Config Configuration Procedure Step Operation DescriptionDscp Priority Mapping¾ Priority Level Schedule ModeIt ranges from 0 to Priority LevelRate Limit ¾ Rate Limit ConfigBandwidth Control Egress Ratebps Storm ControlIngress Rate bps Broadcast Rate Voice VlanBps Mulitcast Rate¾ Port Voice Vlan Mode Packet Type Processing Mode Global Config¾ Security Mode of Voice Vlan Enter the Vlan ID of the voice Vlan Port ModeAging Time OUI address is aging outOUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→VLAN ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global ConfigACL ACL ConfigACL Summary ACL Create¾ Create ACL MAC ACL¾ Create MAC ACL Rule IDExtend-IP ACL Standard-IP ACL¾ Create Standard-IP ACL MaskPolicy Summary Policy Config¾ Create Extend-IP ACL IP ProtocolAction Create Policy CreateIndex Displays the index of the policy Displays the ID of the ACL contained in the policyBinding Table Policy Binding¾ Create Action ¾ Policy Bind TableVlan Binding Port BindingInterface Direction Displays the binding directionApplication Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind TableOn ACL→ACL Config→Standard-IP ACL page, select ACL On ACL→ACL Config→ACL Create page, create ACLLimit2 ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions¾ MIB Introduction ¾ Snmp Configuration OutlineSnmp Config, Notification and Rmon Snmp ConfigSnmp Group Snmp ViewMIB Object ID View TypeSnmp Group Following entries are displayed on this screen ¾ Group Config¾ Group Table Snmp UserAuth Password Auth ModePrivacy Mode Privacy PasswordSnmp Community AccessCommunity Name MIB ViewRequired. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalConfig→Global Config page, enable Snmp On the SNMP→SNMP Config→SNMP¾ Create Notification NotificationIP Address UDP PortRmon TimeoutRetry ¾ Notification Table¾ History Control Table History ControlRmon Group Function ¾ Event Table Event ConfigAlarm Config Sample Type VariableRising Threshold Rising Event131 CPU Monitor MaintenanceSystem Monitor Level Description 12.2 LogMemory Monitor Level Description Debugging Log Table¾ Log Info TimeLocal Log ¾ Local Log ConfigLog Buffer Log FileRemote Log Backup Log¾ Log Host Host IP¾ Backup Log Device DiagnosticsCable Test ¾ Cable TestLoopback Network DiagnosticsTracert ¾ Ping ConfigPing 10 Tracert Following entries are displayed on this screen ¾ Tracert ConfigAppendix a Specifications Configure TCP/IP component Appendix B Configuring the PCsNow Appendix C Glossary Remote Authentication Dial-in User Service Radius Multicast SwitchingIgmp Snooping Igmp QuerySimple Network Management Protocol Snmp Rapid Spanning Tree Protocol RstpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA