¾ Suggestion for Configuration | TP-Link TL-SG2008 specification

¾The topology diagram of the two instances after the topology is stable

zFor Instance 1 (VLAN101, 103 and 105), the red paths in the following figure are connected links; the gray paths are the blocked links.

zFor Instance 2 (VLAN102, 104 and 106), the blue paths in the following figure are connected links; the gray paths are the blocked links.

¾Suggestion for Configuration

zEnable TC Protect function for all the ports of switches.

zEnable Root Protect function for all the ports of root bridges.

zEnable Loop Protect function for the non-edge ports.

Enable BPDU Protect function or BPDU Filter function for the edge ports which are connected to the PC and server.

Return to CONTENTS

Page 82

Image 82

TP-Link TL-SG2008 manual ¾ Suggestion for Configuration

Contents

TL-SG2008 REV1.0.0 1910010984 Copyright & Trademarks FCC Statement Safety Information Contents Loopback Detection 100 Rmon Package Contents Conventions About this GuideIntended Readers Overview of This Guide Chapter Introduction System Appendix a Specifications Introduction Overview of the SwitchMain Features Appearance Description Rear Panel ¾ LEDs Name Status Indication Login Login to the SwitchConfiguration Return to Contents System Summary SystemSystem Info ¾ Port Status Status Displays the connection status of the port Device Description¾ Port Info ¾ Bandwidth Utilization ¾ Device Description System Time¾ Time Info Daylight Saving Time System IP System IP Following entries are displayed on this screen User Management ¾ IP ConfigUser Table ¾ User Info User ConfigPassword Type in a password for users’ login User Status User ID, Name, Access Level and status Operation Config RestoreConfirm Password Password Display Mode System Tools Firmware Upgrade Config Backup¾ Config Backup System Reboot System Reset Access Security Access Control MAC Address SSL ConfigIP Address & Mask Port ¾ Key Download ¾ Global Config¾ Certificate Download Key File SSH Config Select Enable/Disable SSH function Download ¾ Configuration Procedure¾ Network Requirements Application Example 2 for SSH Page Page Return to Contents Port Config SwitchingPort Mirroring Port MirrorGroup Mode Ingress NumberEgress Port Security ¾ Port Security Port Isolation Port Isolation ¾ Port Isolation List ¾ Port Isolation ConfigLoopback Detection Forward Portlist Display the forwardlist Operation Mode LAG LAG Table ¾ LAG Table Group Number Static LAGMember Lacp Config LAG will delete this LAG Admin Key ¾ Lacp ConfigPort Priority Packets Rx Traffic MonitorTraffic Summary Packets Tx ¾ Statistics Traffic StatisticsRefresh Rate Received Way MAC AddressBound MAC address Port Address Table ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address Dynamic Address ¾ Static Address Table ¾ Dynamic Address Table ¾ Aging ConfigBind Filtering Address ¾ Create Filtering Address ¾ Filtering Address Table Dhcp Filtering¾ Dhcp Working Principle 17 Network diagram of Dhcp 19 Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack Dhcp Filtering ¾ Dhcp Filtering¾ Trusted Port Vlan 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid Untagged Ports Give a name to the Vlan for identificationName Tagged Ports Untagged ¾ Network DiagramApplication Example for 802.1Q Vlan Tagged Required. On VLAN→802.1Q VLAN→VLAN Config page, create a Required. On VLAN→802.1Q VLAN→VLAN Config page, configureStep Operation Description Spanning Tree ¾ STP Elements ¾ Bpdu Comparing Principle in STP mode ¾ STP Timers¾ STP Generation Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port ¾ Region Config Region ConfigInstance Config Mstp Instance Clear ¾ Instance TableInstance ¾ VLAN-Instance Mapping Instance ID Instance Port ConfigPath Cost STP Security Port Protect ¾ Bpdu Protect ¾ Root Protect¾ TC Protect ¾ Bpdu Filter TC Protect Application Example for STP Function 11 TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Region Operation Description On Spanning Tree→STP Config→Port Config ¾ Suggestion for Configuration Multicast ¾ Multicast Overview ¾ Multicast Address ¾ Multicast Address Table ¾ Igmp Snooping Igmp SnoopingMulticast IP Port ¾ Igmp Snooping Process Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Multicast Vlan ¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigMulticast→IGMP Snooping→Multicast Vlan Multicast IP Snooping→Port ConfigSnooping→Snooping Config Multicast IP Table Static Multicast IP ¾ Create Static Multicast Multicast Filter¾ Static Multicast IP Table IP-Range Port Filter Filter ¾ Port Filter ConfigAction Mode Bound IP-Range ID Multicast→Multicast Filter→IP-Range Port Displays the port number of the switch Query PacketPacket Statistics Multicast→Multicast Filter→Port Filter Return to Contents QoS ¾ Priority Mode¾ QoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs to Required. On QoS→DiffServ→Port Priority ¾ 802.1P Priority Config2 802.1P/CoS Mapping ¾ Priority Level Dscp Priority Configuration Procedure Step Operation Description¾ Dscp Priority Config Mapping It ranges from 0 to Schedule Mode¾ Priority Level Priority Level Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Port Voice Vlan Mode ¾ Security Mode of Voice Vlan Global ConfigPacket Type Processing Mode Aging Time Port ModeEnter the Vlan ID of the voice Vlan OUI address is aging out OUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→VLAN ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global Config ACL Summary ACL ConfigACL ACL Create ¾ Create MAC ACL MAC ACL¾ Create ACL Rule ID ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Mask ¾ Create Extend-IP ACL Policy ConfigPolicy Summary IP Protocol Index Displays the index of the policy Policy CreateAction Create Displays the ID of the ACL contained in the policy ¾ Create Action Policy BindingBinding Table ¾ Policy Bind Table Interface Port BindingVlan Binding Direction Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Limit2 ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config Snmp Config, Notification and Rmon MIB Object ID Snmp ViewSnmp Group View Type ¾ Group Config Snmp Group Following entries are displayed on this screen Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Community Name AccessSnmp Community MIB View Config→Global Config page, enable Snmp Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP On the SNMP→SNMP Config→SNMP IP Address Notification¾ Create Notification UDP Port Retry TimeoutRmon ¾ Notification Table Rmon Group Function History Control¾ History Control Table Alarm Config Event Config¾ Event Table Rising Threshold VariableSample Type Rising Event 131 System Monitor MaintenanceCPU Monitor Memory Monitor 12.2 LogLevel Description ¾ Log Info Log TableLevel Description Debugging Time Log Buffer ¾ Local Log ConfigLocal Log Log File ¾ Log Host Backup LogRemote Log Host IP Cable Test Device Diagnostics¾ Backup Log ¾ Cable Test Network Diagnostics Loopback Ping ¾ Ping ConfigTracert ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component Now Appendix C Glossary Igmp Snooping Multicast SwitchingRemote Authentication Dial-in User Service Radius Igmp Query Simple Network Time Protocol Sntp Rapid Spanning Tree Protocol RstpSimple Network Management Protocol Snmp Spanning Tree Algorithm STA