Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG3216 manual 802.1X, Authentication Method, Guest Vlan ID, Quiet Period

Models: TL-SG3216

1 232

Download 232 pages 26.13 Kb

Page 167

Figure 11-20 Global Config

The following entries are displayed on this screen:

¾Global Config

802.1X:	Enable/Disable the 802.1X function.
Authentication Method:	Select the Authentication Method from the pull-down list.
	• EAP-MD5:IEEE 802.1X authentication system
	uses extensible authentication protocol (EAP) to
	exchange information between the switch and the
	client.	The EAP protocol packets with
	authentication data can be encapsulated in the
	advanced protocol (such as RADIUS) packets to be
	transmitted to the authentication server.
	• PAP: IEEE 802.1X authentication system uses
	extensible authentication protocol (EAP) to
	exchange information between the switch and the
	client. The transmission of EAP packets is
	terminated at the switch and the EAP packets are
	converted to the other protocol (such as RADIUS)
	packets for transmission.
Guest VLAN:	Enable/Disable the Guest VLAN feature.
Guest VLAN ID:	Enter your desired VLAN ID to enable the Guest VLAN
	feature. The supplicants in the Guest VLAN can access
	the specified network source.
¾ Authentication Config
Quiet:	Enable/Disable the Quiet timer.
Quiet Period:	Specify a value for Quiet Period. Once the supplicant
	160

Image 167

TP-Link TL-SG3216 manual 802.1X, Authentication Method, Guest Vlan ID, Quiet Period

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents Overview of This Guide About this GuideIntended Readers ConventionsSystem Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Introduction Overview of the SwitchMain Features ¾ LEDs Name Status Indication Appearance DescriptionFront Panel Rear Panel Configuration Login to the SwitchLogin Return to Contents ¾ Port Status SystemSystem Info System SummaryStatus PortType Rate¾ Device Description Device DescriptionSystem Time PC’S Clock Current SystemGet GMT Synchronize WithSystem IP ¾ IP ConfigUser Table User ConfigUser Manage ¾ User Table User ID, Name, Access Level and status Operation¾ User Info User StatusSystem Tools Config RestoreConfig Backup ¾ Config Restore¾ Config Backup Firmware UpgradeAccess Control Access SecuritySystem Reboot System ResetMAC Address ¾ Access Control Config¾ Session Config IP Address&Mask¾ Access User Number SSL Config¾ Key Download SSH Config¾ Global Config ¾ Certificate DownloadMax Connect Idle TimeoutProtocol ¾ Network Requirements ¾ Configuration ProcedureKey Type DownloadApplication Example 2 for SSH Page Return to Contents Port Select SwitchingPort Config PortFlow Control Port MirrorDescription Speed and DuplexMode Mirror ModeGroup Mirroring¾ Port Security Port SecurityLearned Num LAGMax Learned MAC Group Number LAG TableAggregate Arithmetic ¾ LAG TableDetail Information Static LAGLAG will delete this LAG Lacp Config¾ LAG Config Port Priority ¾ Lacp ConfigAdmin Key System Priority¾ Auto Refresh Traffic MonitorTraffic Summary Traffic Statistics MAC Address Port Address TableBound MAC address Way¾ Address Table ¾ Search Option¾ Create Static Address MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address¾ Static Address Table Dynamic Address¾ Dynamic Address Table ¾ Aging ConfigBind Filtering Address¾ Filtering Address Table ¾ Create Filtering AddressVlan ¾ Link Types of ports 802.1Q Vlan¾ Pvid Description ： Vlan Config¾ Vlan Table Vlan ID Select¾ Vlan Members ¾ Vlan ConfigEnter the ID number of Vlan Is valid or notPort Displays the port number ¾ Vlan Port ConfigVlan Description Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config ¾ Vlan of PortMAC Vlan VLAN→VLAN ConfigStep Operation Description Protocol Vlan¾ MAC Vlan Table MAC Select¾ Encapsulation Format of Ethernet Data ¾ The Procedure for the Switch to Identify Packet ProtocolVlan packets are processed in the following way ¾ The Implementation of Protocol VlanEncapsulation 802.3 raw 802.2 LLC Snap Protocol¾ Protocol Group Table Protocol Group TableProtocol Group ¾ Protocol Group Member ¾ Protocol Group ConfigProtocol Template Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→VLAN Config page, create a ¾ Network Diagram ¾ Configuration ProcedureRequired. On VLAN→802.1Q VLAN→Port Config page, configure Application Example for MAC Vlan Application Example for Protocol Vlan ¾ Network DiagramRequired. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Group page, create protocol Gvrp¾ Gvrp Select Port Status Registration Mode ¾ Port ConfigConfiguration Procedure ¾ STP Elements Spanning Tree¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Tips ： Step Operation¾ Mstp Elements ¾ Rstp Elements¾ Port Roles ¾ Port StatesSTP Config STP ConfigMax Age Forward DelayVersion Hello TimeSTP Summary Port ConfigEdge Port PriorityExtPath IntPathPort Status Region ConfigMstp Instance ¾ Region Config Instance ConfigClear Instance Port Config¾ Instance Table InstancePort Role Instance IDPath Cost Port Protect STP Security¾ Bpdu Filter ¾ TC Protect¾ Bpdu Protect Bpdu Protect Loop ProtectRoot Protect TC ProtectTC Protect Application Example for STP FunctionOn Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Address Multicast¾ Multicast Overview Multicast IP Port ¾ Multicast Address Table¾ Igmp Messages Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process¾ Igmp Snooping Fundamentals Snooping ConfigDescription Displays Igmp Snooping status Member ¾ Igmp Snooping StatusFast Leave Igmp SnoopingStatic Router Port Router Port TimeMember Port Time Leave TimeDisplays the Vlan ID Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Multicast Vlan¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast IP ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Snooping→Snooping ConfigStatic Multicast IP Multicast IP Table¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast End Multicast IP IP-RangeIP Range ID Start Multicast IPFilter ¾ Port Filter ConfigAction Mode Port FilterMulticast→Multicast Filter→IP-Range Packet StatisticsPorts taking up too much bandwidth Displays the LAG number which the port belongs to¾ Igmp Statistics ¾ QoS ¾ Priority ModeQoS 802.1Q frame ¾ Schedule ModeSP-Mode Port Priority ¾ Port Priority ConfigDiffServ Required. On QoS→DiffServ→Port Priority Schedule ModeRequired. On QoS→DiffServ→Schedule Mode ¾ Schedule Mode Config¾ Priority Level 3 802.1P PriorityDscp Priority Required. On QoS→DiffServ→DSCP Priority ¾ Dscp Priority ConfigRate Limit ¾ Rate Limit ConfigBandwidth Control Storm Control ¾ Storm Control ConfigMulitcast Rate Voice VlanBroadcast Rate BpsTAG ¾ Security Mode of Voice VlanEnter the Vlan ID of the voice Vlan Global ConfigSecurity Packet Type Processing Mode Select the desired port for voice Vlan configuration. It is OUI Config Displays the OUI address of the voice device Configuration Procedure of Voice VlanIndex ACLTime-Range Time-Range SummaryTime-Range Create ¾ Holiday Table ACL ConfigHoliday Config ¾ Create Holiday¾ Create ACL ACL SummaryACL Create ¾ Rule TableEtherType MAC ACL¾ Create MAC ACL Rule IDTime-Range Standard-IP ACLExtend-IP ACL ¾ Create Standard-IP ACLTCP Flag ： ¾ Create Extend-IP ACLIP Protocol Policy Summary Policy Config¾ Create Action Policy CreateAction Create ¾ Create PolicyBinding Table Policy BindingDirection Displays the binding direction Port BindingVlan Binding ¾ VLAN-Bind Table ¾ VLAN-Bind ConfigApplication Example for ACL Enter the ID of the Vlan you want to bindOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL IP-MAC Binding Network SecurityManual Binding ¾ Manual Binding Table ¾ Manual Binding OptionEnter the Vlan ID Protect Type Select the Protect Type for the entryARP Scanning Scan Dhcp SnoopingStart IP Address End IP Address¾ Dhcp Working Principle Network diagram for DHCP-snooping implementation¾ Option ¾ Dhcp Cheating Attack Dhcp Cheating Attack Implementation Procedure¾ Dhcp Snooping Config Customization Circuit ID Remote ID ¾ Option 82 Config¾ Port Config Port Select ¾ Cheating Gateway ARP Inspection¾ Imitating Gateway ¾ Cheating Terminal Hosts 10 ARP Attack Cheating Gateway¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ Trusted Port ARP Detect¾ ARP Detect Network Security→ARP ARP DefendRequired. On the Network Security→IP-MAC Speed ARP Statistics¾ ARP Defend Defend¾ Illegal ARP Packet DoS DefendDoS Attack Type Description ¾ Defend Table ¾ Configure¾ Architecture of 802.1X Authentication 11.4¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Guest Vlan ID Authentication Method802.1X Guest VlanRetry Times Supplicant TimeoutServer Timeout Authorized Control ModeRadius Server Control TypeRequired. On the Network Security→802.1X→Port On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Radius ¾ Snmp Versions Snmp¾ Snmp Overview ¾ Snmp Management Frame¾ MIB Introduction ¾ Snmp Configuration Outline¾ Remote Engine Snmp Config¾ Local Engine View Name Snmp ViewMIB Object ID View TypeSnmp Group ¾ Group Config¾ Group Table Snmp UserPrivacy Password Auth ModeAuth Password Privacy ModeSnmp Community ¾ Community ConfigAccess ¾ Community Table Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP MIB ViewNotification On the SNMP→SNMP Config→SNMPRetry TimeoutUDP Port UserRmon Group Function Rmon¾ Rmon Group ¾ History Control Table Event ConfigHistory Control ¾ Event Table Alarm ConfigRising Event VariableSample Type Rising Threshold179 ¾ Cluster Role Cluster¾ Introduction to Cluster 13.1 NDPNeighbor Info ¾ Neighbor Info NDP Summary¾ Neighbor NDP ¾ Port Status Displays the port number of the switch¾ Global Cofig NDP ConfigEnable DisableCluster Name NtdpDevice Table Device MACCollect Topology Ntdp SummaryHops Neighbor InfoPort Displays the port number of the switch Ntdp ConfigNtdp Hops Ntdp Hop DelayNtdp Port Delay Ntdp Interval TimeCluster ClusterCluster Summary ¾ Global¾ Global Config Cluster Cluster Config¾ Role Change ¾ Current RoleApplication Example for Cluster Function On Cluster→NTDP→NTDP Config page, enable On Cluster→NDP→NDP Config page, enable NDP194 CPU Monitor MaintenanceSystem Monitor Memory Monitor 14.2 Log Local Log Log TableLog File ¾ Local Log ConfigRemote Log Log BufferHost IP Backup Log¾ Log Host Pair ErrorDevice Diagnose Cable TestPing Switch is availableNetwork Diagnose LoopbackTracert ¾ Ping Config10 Tracert Following entries are displayed on this screen ¾ Tracert ConfigAppendix a Specifications Appendix B Configuring the PCs 207 Now Configure the Hyper Terminal Appendix C Load Software using FTPHardware Installation 210 Figure C-5 Port Settings Download Firmware via bootUtil menuAre you want to upgrade the firmwareY/N y TP-LINK upgrade You can only use the port 1 to upgradeUser TP-LINK start StartAppendix D 802.1X Client Software Installation Guide215 216 Figure D-7 InstallShield Wizard Complete Uninstall SoftwareFigure D-11 Uninstall Complete Configuration219 Figure D-16 Connection Status FAQ221 Appendix E Glossary Ieee 802.1Q Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1DLink Aggregation Control Protocol Lacp Port AuthenticationRemote Authentication Dial-in User Service Radius Link AggregationTelnet Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA