Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG3216 manual Access Security, System Reboot, System Reset, Access Control

Models: TL-SG3216

1 232

Download 232 pages 26.13 Kb

Page 27

3.To avoid damage, please don't turn off the device while upgrading.

4.After upgrading, the device will reboot automatically.

5.You are suggested to backup the configuration before upgrading.

4.3.4 System Reboot

On this page you can reboot the switch and return to the login page. Please save the current configuration before rebooting to avoid loosing the configuration unsaved

Choose the menu System→System Tools→System Reboot to load the following page.

Figure 4-12 System Reboot

Note:

To avoid damage, please don't turn off the device while rebooting.

4.3.5 System Reset

On this page you can reset the switch to the default. All the settings will be cleared after the switch is reset.

Choose the menu System→System Tools→System Reset to load the following page.

Figure 4-13 System Reset

Note:

After the system is reset, the switch will be reset to the default and all the settings will be cleared.

4.4 Access Security

Access Security provides different security measures for the remote login so as to enhance the configuration management security. It can be implemented on Access Control, SSL Config and SSH Config pages.

4.4.1 Access Control

On this page you can control the users logging on to the Web management page to enhance the configuration management security. The definitions of Admin and Guest refer to 1.2 User Manage

20

Image 27

TP-Link TL-SG3216 manual Access Security, System Reboot, System Reset, Access Control

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents Overview of This Guide About this GuideIntended Readers ConventionsSystem Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Overview of the Switch Main FeaturesIntroduction Appearance Description Front Panel¾ LEDs Name Status Indication Rear Panel Login to the Switch LoginConfiguration Return to Contents ¾ Port Status SystemSystem Info System SummaryStatus PortType RateDevice Description System Time¾ Device Description PC’S Clock Current SystemGet GMT Synchronize WithSystem IP ¾ IP ConfigUser Config User ManageUser Table ¾ User Table User ID, Name, Access Level and status Operation¾ User Info User StatusSystem Tools Config RestoreConfig Backup ¾ Config Restore¾ Config Backup Firmware UpgradeAccess Control Access SecuritySystem Reboot System ResetMAC Address ¾ Access Control Config¾ Session Config IP Address&Mask¾ Access User Number SSL Config¾ Key Download SSH Config¾ Global Config ¾ Certificate DownloadIdle Timeout ProtocolMax Connect ¾ Network Requirements ¾ Configuration ProcedureKey Type DownloadApplication Example 2 for SSH Page Return to Contents Port Select SwitchingPort Config PortFlow Control Port MirrorDescription Speed and DuplexMode Mirror ModeGroup Mirroring¾ Port Security Port SecurityLAG Max Learned MACLearned Num Group Number LAG TableAggregate Arithmetic ¾ LAG TableDetail Information Static LAGLacp Config ¾ LAG ConfigLAG will delete this LAG Port Priority ¾ Lacp ConfigAdmin Key System PriorityTraffic Monitor Traffic Summary¾ Auto Refresh Traffic Statistics MAC Address Port Address TableBound MAC address Way¾ Address Table ¾ Search Option¾ Create Static Address MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address¾ Static Address Table Dynamic Address¾ Dynamic Address Table ¾ Aging ConfigBind Filtering Address¾ Filtering Address Table ¾ Create Filtering AddressVlan ¾ Link Types of ports 802.1Q Vlan¾ Pvid Description ： Vlan Config¾ Vlan Table Vlan ID Select¾ Vlan Members ¾ Vlan ConfigEnter the ID number of Vlan Is valid or notPort Displays the port number ¾ Vlan Port ConfigVlan Description Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config ¾ Vlan of PortMAC Vlan VLAN→VLAN ConfigStep Operation Description Protocol Vlan¾ MAC Vlan Table MAC Select¾ Encapsulation Format of Ethernet Data ¾ The Procedure for the Switch to Identify Packet ProtocolVlan packets are processed in the following way ¾ The Implementation of Protocol VlanEncapsulation 802.3 raw 802.2 LLC Snap ProtocolProtocol Group Table Protocol Group¾ Protocol Group Table ¾ Protocol Group Config Protocol Template¾ Protocol Group Member Application Example for 802.1Q Vlan ¾ Network Diagram ¾ Configuration Procedure Required. On VLAN→802.1Q VLAN→Port Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Application Example for MAC Vlan Application Example for Protocol Vlan ¾ Network DiagramRequired. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Group page, create protocol Gvrp¾ Gvrp Select Port Status Registration Mode ¾ Port ConfigConfiguration Procedure ¾ STP Elements Spanning Tree¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Tips ： Step Operation¾ Mstp Elements ¾ Rstp Elements¾ Port Roles ¾ Port StatesSTP Config STP ConfigMax Age Forward DelayVersion Hello TimeSTP Summary Port ConfigEdge Port PriorityExtPath IntPathRegion Config Mstp InstancePort Status ¾ Region Config Instance ConfigClear Instance Port Config¾ Instance Table InstanceInstance ID Path CostPort Role Port Protect STP Security¾ TC Protect ¾ Bpdu Protect¾ Bpdu Filter Bpdu Protect Loop ProtectRoot Protect TC ProtectTC Protect Application Example for STP FunctionOn Spanning Tree→STP Config→STP Config On Spanning Tree→STP Config→Port ConfigOn Spanning Tree→MSTP Instance→Instance Configure Switch D ¾ Suggestion for Configuration Multicast ¾ Multicast Overview¾ Multicast Address Multicast IP Port ¾ Multicast Address Table¾ Igmp Messages Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process¾ Igmp Snooping Fundamentals Snooping ConfigDescription Displays Igmp Snooping status Member ¾ Igmp Snooping StatusFast Leave Igmp SnoopingStatic Router Port Router Port TimeMember Port Time Leave TimeDisplays the Vlan ID Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Multicast Vlan¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan Multicast IP ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Snooping→Snooping ConfigStatic Multicast IP Multicast IP TableMulticast Filter ¾ Create Static Multicast¾ Static Multicast IP Table End Multicast IP IP-RangeIP Range ID Start Multicast IPFilter ¾ Port Filter ConfigAction Mode Port FilterMulticast→Multicast Filter→IP-Range Packet StatisticsPorts taking up too much bandwidth Displays the LAG number which the port belongs to¾ Igmp Statistics ¾ Priority Mode QoS¾ QoS 802.1Q frame ¾ Schedule ModeSP-Mode ¾ Port Priority Config DiffServPort Priority Required. On QoS→DiffServ→Port Priority Schedule ModeRequired. On QoS→DiffServ→Schedule Mode ¾ Schedule Mode Config3 802.1P Priority Dscp Priority¾ Priority Level Required. On QoS→DiffServ→DSCP Priority ¾ Dscp Priority Config¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control ¾ Storm Control ConfigMulitcast Rate Voice VlanBroadcast Rate BpsTAG ¾ Security Mode of Voice VlanGlobal Config Security Packet Type Processing ModeEnter the Vlan ID of the voice Vlan Select the desired port for voice Vlan configuration. It is OUI Config Displays the OUI address of the voice device Configuration Procedure of Voice VlanIndex ACLTime-Range Time-Range SummaryTime-Range Create ¾ Holiday Table ACL ConfigHoliday Config ¾ Create Holiday¾ Create ACL ACL SummaryACL Create ¾ Rule TableEtherType MAC ACL¾ Create MAC ACL Rule IDTime-Range Standard-IP ACLExtend-IP ACL ¾ Create Standard-IP ACL¾ Create Extend-IP ACL IP ProtocolTCP Flag ： Policy Summary Policy Config¾ Create Action Policy CreateAction Create ¾ Create PolicyBinding Table Policy BindingPort Binding Vlan BindingDirection Displays the binding direction ¾ VLAN-Bind Table ¾ VLAN-Bind ConfigApplication Example for ACL Enter the ID of the Vlan you want to bindOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL IP-MAC Binding Network SecurityManual Binding ¾ Manual Binding Table ¾ Manual Binding OptionEnter the Vlan ID Protect Type Select the Protect Type for the entryARP Scanning Scan Dhcp SnoopingStart IP Address End IP Address¾ Dhcp Working Principle Network diagram for DHCP-snooping implementation¾ Option ¾ Dhcp Cheating Attack Dhcp Cheating Attack Implementation Procedure¾ Dhcp Snooping Config ¾ Option 82 Config ¾ Port Config Port SelectCustomization Circuit ID Remote ID ARP Inspection ¾ Imitating Gateway¾ Cheating Gateway ¾ Cheating Terminal Hosts 10 ARP Attack Cheating Gateway¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ARP Detect ¾ ARP Detect¾ Trusted Port ARP Defend Required. On the Network Security→IP-MACNetwork Security→ARP Speed ARP Statistics¾ ARP Defend Defend¾ Illegal ARP Packet DoS DefendDoS Attack Type Description ¾ Defend Table ¾ Configure¾ Architecture of 802.1X Authentication 11.4¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Guest Vlan ID Authentication Method802.1X Guest VlanSupplicant Timeout Server TimeoutRetry Times Authorized Control ModeRadius Server Control TypeOn the Network Security→802.1X→Global Config Required. On the Network Security→802.1X→RadiusRequired. On the Network Security→802.1X→Port ¾ Snmp Versions Snmp¾ Snmp Overview ¾ Snmp Management Frame¾ MIB Introduction ¾ Snmp Configuration OutlineSnmp Config ¾ Local Engine¾ Remote Engine View Name Snmp ViewMIB Object ID View TypeSnmp Group ¾ Group Config¾ Group Table Snmp UserPrivacy Password Auth ModeAuth Password Privacy Mode¾ Community Config AccessSnmp Community ¾ Community Table Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP MIB ViewNotification On the SNMP→SNMP Config→SNMPRetry TimeoutUDP Port UserRmon ¾ Rmon GroupRmon Group Function Event Config History Control¾ History Control Table ¾ Event Table Alarm ConfigRising Event VariableSample Type Rising Threshold179 ¾ Cluster Role Cluster13.1 NDP Neighbor Info¾ Introduction to Cluster NDP Summary ¾ Neighbor¾ Neighbor Info NDP ¾ Port Status Displays the port number of the switch¾ Global Cofig NDP ConfigEnable DisableCluster Name NtdpDevice Table Device MACCollect Topology Ntdp SummaryHops Neighbor InfoPort Displays the port number of the switch Ntdp ConfigNtdp Hops Ntdp Hop DelayNtdp Port Delay Ntdp Interval TimeCluster ClusterCluster Summary ¾ Global¾ Global Config Cluster Cluster Config¾ Role Change ¾ Current RoleApplication Example for Cluster Function On Cluster→NTDP→NTDP Config page, enable On Cluster→NDP→NDP Config page, enable NDP194 Maintenance System MonitorCPU Monitor Memory Monitor 14.2 Log Local Log Log TableLog File ¾ Local Log ConfigRemote Log Log BufferBackup Log ¾ Log HostHost IP Pair ErrorDevice Diagnose Cable TestPing Switch is availableNetwork Diagnose LoopbackTracert ¾ Ping Config10 Tracert Following entries are displayed on this screen ¾ Tracert ConfigAppendix a Specifications Appendix B Configuring the PCs 207 Now Appendix C Load Software using FTP Hardware InstallationConfigure the Hyper Terminal 210 Figure C-5 Port Settings Download Firmware via bootUtil menuAre you want to upgrade the firmwareY/N y TP-LINK upgrade You can only use the port 1 to upgradeUser TP-LINK start StartAppendix D 802.1X Client Software Installation Guide215 216 Figure D-7 InstallShield Wizard Complete Uninstall SoftwareFigure D-11 Uninstall Complete Configuration219 Figure D-16 Connection Status FAQ221 Appendix E Glossary Ieee 802.1Q Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1DLink Aggregation Control Protocol Lacp Port AuthenticationRemote Authentication Dial-in User Service Radius Link AggregationTelnet Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA