Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG3216 manual Application Example for ACL, ¾ VLAN-Bind Config, ¾ VLAN-Bind Table

Models: TL-SG3216

1 232

Download 232 pages 26.13 Kb

Page 140

Figure10-14 Bind the policy to the VLAN

The following entries are displayed on this screen:

¾VLAN-Bind Config

Policy Name:	Select the name of the policy you want to bind.
VLAN ID:	Enter the ID of the VLAN you want to bind.

¾VLAN-Bind Table

Index:	Displays the index of the binding policy.
Policy Name:	Displays the name of the binding policy.
VLAN ID:	Displays the ID of the VLAN bound to the corresponding policy.
Direction:	Displays the binding direction.

Configuration Procedure:

Step	Operation		Description

1	Configure	effective	Required. On ACL→Time-Rangeconfiguration pages,
	time-range		configure the effective time-ranges for ACLs.

2	Configure ACL rules		Required. On ACL→ACL Config configuration pages,
			configure ACL rules to match packets.

3	Configure Policy		Required. On ACL→Policy Config configuration pages,
			configure the policy to control the data packets those match
			the corresponding ACL rules.

4	Bind the policy	to the	Required. On ACL→Policy Binding configuration pages,
	port/VLAN		bind the policy to the port/VLAN to make the policy effective
			on the corresponding port/VLAN.

10.5 Application Example for ACL

¾Network Requirements

1.The manager of the R&D department can access to the forum of the company and the Internet without any forbiddance. The MAC address of the manager is 00-46-A5-5D-12-C3.

2.The staff of the R&D department can not access to the Internet during the working time but can visit the forum all day.

3.The staff of the marketing department can access to the Internet all day but can not visit the forum during the working time.

133

Image 140

TP-Link TL-SG3216 manual Application Example for ACL, ¾ VLAN-Bind Config, Enter the ID of the Vlan you want to bind

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents About this Guide Intended ReadersConventions Overview of This Guide System Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Introduction Overview of the SwitchMain Features ¾ LEDs Name Status Indication Appearance DescriptionFront Panel Rear Panel Configuration Login to the SwitchLogin Return to Contents System System InfoSystem Summary ¾ Port Status Port TypeRate Status ¾ Device Description Device DescriptionSystem Time Current System Get GMTSynchronize With PC’S Clock ¾ IP Config System IP User Table User ConfigUser Manage User ID, Name, Access Level and status Operation ¾ User InfoUser Status ¾ User Table Config Restore Config Backup¾ Config Restore System Tools Firmware Upgrade ¾ Config Backup Access Security System RebootSystem Reset Access Control ¾ Access Control Config ¾ Session ConfigIP Address&Mask MAC Address SSL Config ¾ Access User Number SSH Config ¾ Global Config¾ Certificate Download ¾ Key Download Max Connect Idle TimeoutProtocol ¾ Configuration Procedure Key TypeDownload ¾ Network Requirements Application Example 2 for SSH Page Return to Contents Switching Port ConfigPort Port Select Port Mirror DescriptionSpeed and Duplex Flow Control Mirror Mode GroupMirroring Mode Port Security ¾ Port Security Learned Num LAGMax Learned MAC LAG Table Aggregate Arithmetic¾ LAG Table Group Number Static LAG Detail Information LAG will delete this LAG Lacp Config¾ LAG Config ¾ Lacp Config Admin KeySystem Priority Port Priority ¾ Auto Refresh Traffic MonitorTraffic Summary Traffic Statistics MAC Address Address Table Bound MAC addressWay Port ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switch Static AddressDisplays the corresponding Vlan ID of the MAC address ¾ Create Static Address Dynamic Address ¾ Static Address Table ¾ Aging Config ¾ Dynamic Address Table Filtering Address Bind ¾ Create Filtering Address ¾ Filtering Address Table Vlan 802.1Q Vlan ¾ Link Types of ports ¾ Pvid Vlan Config ¾ Vlan TableVlan ID Select Description ： ¾ Vlan Config Enter the ID number of VlanIs valid or not ¾ Vlan Members ¾ Vlan Port Config Port Displays the port number Required. On the VLAN→802.1Q VLAN→Port Config page, set Required. On the VLAN→802.1Q VLAN→VLAN Config¾ Vlan of Port Vlan Description VLAN→VLAN Config MAC Vlan Protocol Vlan ¾ MAC Vlan TableMAC Select Step Operation Description ¾ The Procedure for the Switch to Identify Packet Protocol ¾ Encapsulation Format of Ethernet Data ¾ The Implementation of Protocol Vlan Encapsulation802.3 raw 802.2 LLC Snap Protocol Vlan packets are processed in the following way ¾ Protocol Group Table Protocol Group TableProtocol Group ¾ Protocol Group Member ¾ Protocol Group ConfigProtocol Template Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→VLAN Config page, create a ¾ Network Diagram ¾ Configuration ProcedureRequired. On VLAN→802.1Q VLAN→Port Config page, configure Application Example for MAC Vlan ¾ Network Diagram Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template Gvrp On VLAN→Protocol VLAN→Protocol Group page, create protocol ¾ Gvrp ¾ Port Config Select Port Status Registration Mode Configuration Procedure Spanning Tree ¾ STP Elements ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Forward Delay VersionHello Time Max Age Port Config STP Summary Priority ExtPathIntPath Edge Port Port Status Region ConfigMstp Instance Instance Config ¾ Region Config Instance Port Config ¾ Instance TableInstance Clear Port Role Instance IDPath Cost STP Security Port Protect ¾ Bpdu Filter ¾ TC Protect¾ Bpdu Protect Loop Protect Root ProtectTC Protect Bpdu Protect Application Example for STP Function TC Protect On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Address Multicast¾ Multicast Overview ¾ Multicast Address Table Multicast IP Port Igmp Snooping ¾ Igmp Snooping¾ Igmp Snooping Process ¾ Igmp Messages Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Router Port Time Member Port TimeLeave Time Static Router Port Snooping→Snooping Config and Port Config Multicast→IGMP Snooping→VLAN ConfigMulticast Vlan Displays the Vlan ID ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan ¾ Configuration Procedure Step Operation Description Snooping→Port ConfigSnooping→Snooping Config Multicast IP Multicast IP Table Static Multicast IP ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast IP-Range IP Range IDStart Multicast IP End Multicast IP ¾ Port Filter Config Action ModePort Filter Filter Packet Statistics Ports taking up too much bandwidthDisplays the LAG number which the port belongs to Multicast→Multicast Filter→IP-Range ¾ Igmp Statistics ¾ QoS ¾ Priority ModeQoS ¾ Schedule Mode 802.1Q frame SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Schedule Mode Required. On QoS→DiffServ→Schedule Mode¾ Schedule Mode Config Required. On QoS→DiffServ→Port Priority ¾ Priority Level 3 802.1P PriorityDscp Priority ¾ Dscp Priority Config Required. On QoS→DiffServ→DSCP Priority Rate Limit ¾ Rate Limit ConfigBandwidth Control ¾ Storm Control Config Storm Control Voice Vlan Broadcast RateBps Mulitcast Rate ¾ Security Mode of Voice Vlan TAG Enter the Vlan ID of the voice Vlan Global ConfigSecurity Packet Type Processing Mode Select the desired port for voice Vlan configuration. It is OUI Config Configuration Procedure of Voice Vlan Displays the OUI address of the voice device ACL Time-RangeTime-Range Summary Index Time-Range Create ACL Config Holiday Config¾ Create Holiday ¾ Holiday Table ACL Summary ACL Create¾ Rule Table ¾ Create ACL MAC ACL ¾ Create MAC ACLRule ID EtherType Standard-IP ACL Extend-IP ACL¾ Create Standard-IP ACL Time-Range TCP Flag ： ¾ Create Extend-IP ACLIP Protocol Policy Config Policy Summary Policy Create Action Create¾ Create Policy ¾ Create Action Policy Binding Binding Table Direction Displays the binding direction Port BindingVlan Binding ¾ VLAN-Bind Config Application Example for ACLEnter the ID of the Vlan you want to bind ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC Binding Manual Binding ¾ Manual Binding Option Enter the Vlan IDProtect Type Select the Protect Type for the entry ¾ Manual Binding Table ARP Scanning Dhcp Snooping Start IP AddressEnd IP Address Scan Network diagram for DHCP-snooping implementation ¾ Dhcp Working Principle ¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Dhcp Snooping Config Customization Circuit ID Remote ID ¾ Option 82 Config¾ Port Config Port Select ¾ Cheating Gateway ARP Inspection¾ Imitating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ Trusted Port ARP Detect¾ ARP Detect Network Security→ARP ARP DefendRequired. On the Network Security→IP-MAC ARP Statistics ¾ ARP DefendDefend Speed DoS Defend ¾ Illegal ARP Packet DoS Attack Type Description ¾ Configure ¾ Architecture of 802.1X Authentication11.4 ¾ Defend Table ¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Authentication Method 802.1XGuest Vlan Guest Vlan ID Retry Times Supplicant TimeoutServer Timeout Control Mode Radius ServerControl Type Authorized Required. On the Network Security→802.1X→Port On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Radius Snmp ¾ Snmp Overview¾ Snmp Management Frame ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction ¾ Remote Engine Snmp Config¾ Local Engine Snmp View MIB Object IDView Type View Name ¾ Group Config Snmp Group Snmp User ¾ Group Table Auth Mode Auth PasswordPrivacy Mode Privacy Password Snmp Community ¾ Community ConfigAccess Required. On the SNMP→SNMP Config→Global Required. On the SNMP→SNMP Config→SNMPMIB View ¾ Community Table On the SNMP→SNMP Config→SNMP Notification Timeout UDP PortUser Retry Rmon Group Function Rmon¾ Rmon Group ¾ History Control Table Event ConfigHistory Control Alarm Config ¾ Event Table Variable Sample TypeRising Threshold Rising Event 179 Cluster ¾ Cluster Role ¾ Introduction to Cluster 13.1 NDPNeighbor Info ¾ Neighbor Info NDP Summary¾ Neighbor ¾ Port Status Displays the port number of the switch NDP NDP Config EnableDisable ¾ Global Cofig Ntdp Device TableDevice MAC Cluster Name Ntdp Summary HopsNeighbor Info Collect Topology Ntdp Config Port Displays the port number of the switch Ntdp Hop Delay Ntdp Port DelayNtdp Interval Time Ntdp Hops Cluster Cluster Summary¾ Global Cluster Cluster Config ¾ Global Config Cluster ¾ Current Role ¾ Role Change Application Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable 194 CPU Monitor MaintenanceSystem Monitor Memory Monitor 14.2 Log Log Table Local Log ¾ Local Log Config Remote LogLog Buffer Log File Host IP Backup Log¾ Log Host Error Device DiagnoseCable Test Pair Switch is available Network DiagnoseLoopback Ping ¾ Ping Config Tracert ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs 207 Now Configure the Hyper Terminal Appendix C Load Software using FTPHardware Installation 210 Download Firmware via bootUtil menu Figure C-5 Port Settings TP-LINK upgrade You can only use the port 1 to upgrade Are you want to upgrade the firmwareY/N y TP-LINK start Start User Installation Guide Appendix D 802.1X Client Software 215 216 Uninstall Software Figure D-7 InstallShield Wizard Complete Configuration Figure D-11 Uninstall Complete 219 FAQ Figure D-16 Connection Status 221 Appendix E Glossary Multicast Switching Group Attribute Registration Protocol GarpIeee 802.1D Ieee 802.1Q Port Authentication Remote Authentication Dial-in User Service RadiusLink Aggregation Link Aggregation Control Protocol Lacp Simple Network Management Protocol Snmp Simple Network Time Protocol SntpSpanning Tree Algorithm STA Telnet