Application Example for MAC Vlan | TP-Link TL-SG3216 manual

6.5 Application Example for MAC VLAN

¾Network Requirements

zSwitch A and Switch B are connected to meeting room A and meeting room B respectively, and the two rooms are for all departments;

zNotebook A and Notebook B, special for meeting room, are of two different departments;

zThe two departments are in VLAN10 and VLAN20 respectively. The two notebooks can just access the server of their own departments, that is, Server A and Server B, in the two meeting rooms;

zThe MAC address of Notebook A is 00-19-56-8A-4C-71, Notebook B’s MAC address is 00-19-56-82-3B-70.

¾Network Diagram

¾Configuration Procedure

zConfigure Switch A

Step	Operation		Description

1	Configure	the	Required. On VLAN→802.1Q VLAN→Port Config page, configure the
	Link Type of the		link type of Port 11 and Port 12 as GENERAL and TRUNK respectively.
	ports

2	Create VLAN10		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 10, owning Port 11 and Port 12, and configure
			the egress rule of Port 11 as Untag.

3	Create VLAN20		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 20, owning Port 11 and Port 12, and configure
			the egress rule of Port 11 as Untag.

4	Configure	MAC	On VLAN→MAC VLAN page, create MAC VLAN10 with the MAC
	VLAN 10		address as 00-19-56-8A-4C-71.
5	Configure	MAC	On VLAN→MAC VLAN page, create MAC VLAN10 with the MAC
	VLAN 20		address as 00-19-56-82-3B-70.
			63

Image 70

TP-Link TL-SG3216 manual Application Example for MAC Vlan

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents Conventions About this GuideIntended Readers Overview of This Guide System Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Main Features Overview of the SwitchIntroduction Front Panel Appearance Description¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents System Summary SystemSystem Info ¾ Port Status Rate PortType Status System Time Device Description¾ Device Description Synchronize With Current SystemGet GMT PC’S Clock ¾ IP Config System IP User Manage User ConfigUser Table User Status User ID, Name, Access Level and status Operation¾ User Info ¾ User Table ¾ Config Restore Config RestoreConfig Backup System Tools Firmware Upgrade ¾ Config Backup System Reset Access SecuritySystem Reboot Access Control IP Address&Mask ¾ Access Control Config¾ Session Config MAC Address SSL Config ¾ Access User Number ¾ Certificate Download SSH Config¾ Global Config ¾ Key Download Protocol Idle TimeoutMax Connect Download ¾ Configuration ProcedureKey Type ¾ Network Requirements Application Example 2 for SSH Page Return to Contents Port SwitchingPort Config Port Select Speed and Duplex Port MirrorDescription Flow Control Mirroring Mirror ModeGroup Mode Port Security ¾ Port Security Max Learned MAC LAGLearned Num ¾ LAG Table LAG TableAggregate Arithmetic Group Number Static LAG Detail Information ¾ LAG Config Lacp ConfigLAG will delete this LAG System Priority ¾ Lacp ConfigAdmin Key Port Priority Traffic Summary Traffic Monitor¾ Auto Refresh Traffic Statistics MAC Address Way Address TableBound MAC address Port ¾ Search Option ¾ Address Table Displays the corresponding Vlan ID of the MAC address MAC Address Displays the MAC address learned by the switchStatic Address ¾ Create Static Address Dynamic Address ¾ Static Address Table ¾ Aging Config ¾ Dynamic Address Table Filtering Address Bind ¾ Create Filtering Address ¾ Filtering Address Table Vlan 802.1Q Vlan ¾ Link Types of ports ¾ Pvid Vlan ID Select Vlan Config¾ Vlan Table Description ： Is valid or not ¾ Vlan ConfigEnter the ID number of Vlan ¾ Vlan Members ¾ Vlan Port Config Port Displays the port number ¾ Vlan of Port Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config Vlan Description VLAN→VLAN Config MAC Vlan MAC Select Protocol Vlan¾ MAC Vlan Table Step Operation Description ¾ The Procedure for the Switch to Identify Packet Protocol ¾ Encapsulation Format of Ethernet Data 802.3 raw 802.2 LLC Snap Protocol ¾ The Implementation of Protocol VlanEncapsulation Vlan packets are processed in the following way Protocol Group Protocol Group Table¾ Protocol Group Table Protocol Template ¾ Protocol Group Config¾ Protocol Group Member Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→Port Config page, configure ¾ Network Diagram ¾ Configuration ProcedureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Application Example for MAC Vlan ¾ Network Diagram Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template Gvrp On VLAN→Protocol VLAN→Protocol Group page, create protocol ¾ Gvrp ¾ Port Config Select Port Status Registration Mode Configuration Procedure Spanning Tree ¾ STP Elements ¾ Bpdu Comparing Principle in STP mode ¾ STP Timers¾ STP Generation Step Operation Tips ： ¾ Rstp Elements ¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Hello Time Forward DelayVersion Max Age Port Config STP Summary IntPath PriorityExtPath Edge Port Mstp Instance Region ConfigPort Status Instance Config ¾ Region Config Instance Instance Port Config¾ Instance Table Clear Path Cost Instance IDPort Role STP Security Port Protect ¾ Bpdu Protect ¾ TC Protect¾ Bpdu Filter TC Protect Loop ProtectRoot Protect Bpdu Protect Application Example for STP Function TC Protect On Spanning Tree→STP Config→Port Config On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→MSTP Instance→Instance Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address ¾ Multicast Address Table Multicast IP Port ¾ Igmp Snooping Process Igmp Snooping¾ Igmp Snooping ¾ Igmp Messages Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Leave Time Router Port TimeMember Port Time Static Router Port Multicast Vlan Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Displays the Vlan ID ¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigMulticast→IGMP Snooping→Multicast Vlan Snooping→Snooping Config ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Multicast IP Multicast IP Table Static Multicast IP ¾ Create Static Multicast Multicast Filter¾ Static Multicast IP Table Start Multicast IP IP-RangeIP Range ID End Multicast IP Port Filter ¾ Port Filter ConfigAction Mode Filter Displays the LAG number which the port belongs to Packet StatisticsPorts taking up too much bandwidth Multicast→Multicast Filter→IP-Range ¾ Igmp Statistics QoS ¾ Priority Mode¾ QoS ¾ Schedule Mode 802.1Q frame SP-Mode DiffServ ¾ Port Priority ConfigPort Priority ¾ Schedule Mode Config Schedule ModeRequired. On QoS→DiffServ→Schedule Mode Required. On QoS→DiffServ→Port Priority Dscp Priority 3 802.1P Priority¾ Priority Level ¾ Dscp Priority Config Required. On QoS→DiffServ→DSCP Priority Bandwidth Control ¾ Rate Limit ConfigRate Limit ¾ Storm Control Config Storm Control Bps Voice VlanBroadcast Rate Mulitcast Rate ¾ Security Mode of Voice Vlan TAG Security Packet Type Processing Mode Global ConfigEnter the Vlan ID of the voice Vlan Select the desired port for voice Vlan configuration. It is OUI Config Configuration Procedure of Voice Vlan Displays the OUI address of the voice device Time-Range Summary ACLTime-Range Index Time-Range Create ¾ Create Holiday ACL ConfigHoliday Config ¾ Holiday Table ¾ Rule Table ACL SummaryACL Create ¾ Create ACL Rule ID MAC ACL¾ Create MAC ACL EtherType ¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL Time-Range IP Protocol ¾ Create Extend-IP ACLTCP Flag ： Policy Config Policy Summary ¾ Create Policy Policy CreateAction Create ¾ Create Action Policy Binding Binding Table Vlan Binding Port BindingDirection Displays the binding direction Enter the ID of the Vlan you want to bind ¾ VLAN-Bind ConfigApplication Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC Binding Manual Binding Protect Type Select the Protect Type for the entry ¾ Manual Binding OptionEnter the Vlan ID ¾ Manual Binding Table ARP Scanning End IP Address Dhcp SnoopingStart IP Address Scan Network diagram for DHCP-snooping implementation ¾ Dhcp Working Principle ¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack ¾ Dhcp Snooping Config ¾ Port Config Port Select ¾ Option 82 ConfigCustomization Circuit ID Remote ID ¾ Imitating Gateway ARP Inspection¾ Cheating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ ARP Detect ARP Detect¾ Trusted Port Required. On the Network Security→IP-MAC ARP DefendNetwork Security→ARP Defend ARP Statistics¾ ARP Defend Speed DoS Defend ¾ Illegal ARP Packet DoS Attack Type Description 11.4 ¾ Configure¾ Architecture of 802.1X Authentication ¾ Defend Table ¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Guest Vlan Authentication Method802.1X Guest Vlan ID Server Timeout Supplicant TimeoutRetry Times Control Type Control ModeRadius Server Authorized Required. On the Network Security→802.1X→Radius On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Port ¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction ¾ Local Engine Snmp Config¾ Remote Engine View Type Snmp ViewMIB Object ID View Name ¾ Group Config Snmp Group Snmp User ¾ Group Table Privacy Mode Auth ModeAuth Password Privacy Password Access ¾ Community ConfigSnmp Community MIB View Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP ¾ Community Table On the SNMP→SNMP Config→SNMP Notification User TimeoutUDP Port Retry ¾ Rmon Group RmonRmon Group Function History Control Event Config¾ History Control Table Alarm Config ¾ Event Table Rising Threshold VariableSample Type Rising Event 179 Cluster ¾ Cluster Role Neighbor Info 13.1 NDP¾ Introduction to Cluster ¾ Neighbor NDP Summary¾ Neighbor Info ¾ Port Status Displays the port number of the switch NDP Disable NDP ConfigEnable ¾ Global Cofig Device MAC NtdpDevice Table Cluster Name Neighbor Info Ntdp SummaryHops Collect Topology Ntdp Config Port Displays the port number of the switch Ntdp Interval Time Ntdp Hop DelayNtdp Port Delay Ntdp Hops ¾ Global ClusterCluster Summary Cluster Cluster Config ¾ Global Config Cluster ¾ Current Role ¾ Role Change Application Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable 194 System Monitor MaintenanceCPU Monitor Memory Monitor 14.2 Log Log Table Local Log Log Buffer ¾ Local Log ConfigRemote Log Log File ¾ Log Host Backup LogHost IP Cable Test ErrorDevice Diagnose Pair Loopback Switch is availableNetwork Diagnose Ping ¾ Ping Config Tracert ¾ Tracert Config 10 Tracert Following entries are displayed on this screen Appendix a Specifications Appendix B Configuring the PCs 207 Now Hardware Installation Appendix C Load Software using FTPConfigure the Hyper Terminal 210 Download Firmware via bootUtil menu Figure C-5 Port Settings TP-LINK upgrade You can only use the port 1 to upgrade Are you want to upgrade the firmwareY/N y TP-LINK start Start User Installation Guide Appendix D 802.1X Client Software 215 216 Uninstall Software Figure D-7 InstallShield Wizard Complete Configuration Figure D-11 Uninstall Complete 219 FAQ Figure D-16 Connection Status 221 Appendix E Glossary Ieee 802.1D Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1Q Link Aggregation Port AuthenticationRemote Authentication Dial-in User Service Radius Link Aggregation Control Protocol Lacp Spanning Tree Algorithm STA Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Telnet