Application Example for Protocol Vlan | TP-Link TL-SG3216 instruction

zConfigure Switch B

Step	Operation		Description

1	Configure	the	Required. On VLAN→802.1Q VLAN→Port Config page, configure the
	Link Type of the		link type of Port 21 and Port 22 as GENERAL and TRUNK respectively.
	ports

2	Create VLAN10		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 10, owning Port 21 and Port 22, and
			configure the egress rule of Port 21 as Untag.

3	Create VLAN20		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 20, owning Port 21 and Port 22, and
			configure the egress rule of Port 21 as Untag.

4	Configure	MAC	On VLAN→MAC VLAN page, create MAC VLAN10 with the MAC
	VLAN 10		address as 00-19-56-8A-4C-71.

5	Configure	MAC	On VLAN→MAC VLAN page, create MAC VLAN10 with the MAC
	VLAN 20		address as 00-19-56-82-3B-70.

z Configure Switch C

Step	Operation		Description

1	Configure	the	Required. On VLAN→802.1Q VLAN→Port Config page, configure the
	Link Type of the		link type of Port 2 and Port 3 as GENERAL, and configure the link type
	ports		of Port 4 and Port 5 as ACCESS.

2	Create VLAN10		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 10, owning Port 2, Port 3 and Port 5,

3	Create VLAN20		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 20, owning Port 2, Port 3 and Port 4,

6.6 Application Example for Protocol VLAN

¾Network Requirements

zDepartment A is connected to the company LAN via Port12 of Switch A;

zDepartment A has IP host and AppleTalk host;

zIP host, in VLAN10, is served by IP server while AppleTalk host is served by AppleTalk server;

zSwitch B is connected to IP server and AppleTalk server.

¾Network Diagram

64

Image 71

TP-Link TL-SG3216 manual Application Example for Protocol Vlan, ¾ Network Diagram

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents Overview of This Guide About this GuideIntended Readers Conventions System Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Introduction Overview of the SwitchMain Features ¾ LEDs Name Status Indication Appearance DescriptionFront Panel Rear Panel Configuration Login to the SwitchLogin Return to Contents ¾ Port Status SystemSystem Info System Summary Status PortType Rate ¾ Device Description Device DescriptionSystem Time PC’S Clock Current SystemGet GMT Synchronize With System IP ¾ IP Config User Table User ConfigUser Manage ¾ User Table User ID, Name, Access Level and status Operation¾ User Info User Status System Tools Config RestoreConfig Backup ¾ Config Restore ¾ Config Backup Firmware Upgrade Access Control Access SecuritySystem Reboot System Reset MAC Address ¾ Access Control Config¾ Session Config IP Address&Mask ¾ Access User Number SSL Config ¾ Key Download SSH Config¾ Global Config ¾ Certificate Download Max Connect Idle TimeoutProtocol ¾ Network Requirements ¾ Configuration ProcedureKey Type Download Application Example 2 for SSH Page Return to Contents Port Select SwitchingPort Config Port Flow Control Port MirrorDescription Speed and Duplex Mode Mirror ModeGroup Mirroring ¾ Port Security Port Security Learned Num LAGMax Learned MAC Group Number LAG TableAggregate Arithmetic ¾ LAG Table Detail Information Static LAG LAG will delete this LAG Lacp Config¾ LAG Config Port Priority ¾ Lacp ConfigAdmin Key System Priority ¾ Auto Refresh Traffic MonitorTraffic Summary Traffic Statistics MAC Address Port Address TableBound MAC address Way ¾ Address Table ¾ Search Option ¾ Create Static Address MAC Address Displays the MAC address learned by the switchStatic Address Displays the corresponding Vlan ID of the MAC address ¾ Static Address Table Dynamic Address ¾ Dynamic Address Table ¾ Aging Config Bind Filtering Address ¾ Filtering Address Table ¾ Create Filtering Address Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Description ： Vlan Config¾ Vlan Table Vlan ID Select ¾ Vlan Members ¾ Vlan ConfigEnter the ID number of Vlan Is valid or not Port Displays the port number ¾ Vlan Port Config Vlan Description Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config ¾ Vlan of Port MAC Vlan VLAN→VLAN Config Step Operation Description Protocol Vlan¾ MAC Vlan Table MAC Select ¾ Encapsulation Format of Ethernet Data ¾ The Procedure for the Switch to Identify Packet Protocol Vlan packets are processed in the following way ¾ The Implementation of Protocol VlanEncapsulation 802.3 raw 802.2 LLC Snap Protocol ¾ Protocol Group Table Protocol Group TableProtocol Group ¾ Protocol Group Member ¾ Protocol Group ConfigProtocol Template Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→VLAN Config page, create a ¾ Network Diagram ¾ Configuration ProcedureRequired. On VLAN→802.1Q VLAN→Port Config page, configure Application Example for MAC Vlan Application Example for Protocol Vlan ¾ Network Diagram Required. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Group page, create protocol Gvrp ¾ Gvrp Select Port Status Registration Mode ¾ Port Config Configuration Procedure ¾ STP Elements Spanning Tree ¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Tips ： Step Operation ¾ Mstp Elements ¾ Rstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Max Age Forward DelayVersion Hello Time STP Summary Port Config Edge Port PriorityExtPath IntPath Port Status Region ConfigMstp Instance ¾ Region Config Instance Config Clear Instance Port Config¾ Instance Table Instance Port Role Instance IDPath Cost Port Protect STP Security ¾ Bpdu Filter ¾ TC Protect¾ Bpdu Protect Bpdu Protect Loop ProtectRoot Protect TC Protect TC Protect Application Example for STP Function On Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Address Multicast¾ Multicast Overview Multicast IP Port ¾ Multicast Address Table ¾ Igmp Messages Igmp Snooping¾ Igmp Snooping ¾ Igmp Snooping Process ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Static Router Port Router Port TimeMember Port Time Leave Time Displays the Vlan ID Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Multicast Vlan ¾ Multicast Vlan Multicast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast IP ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Snooping→Snooping Config Static Multicast IP Multicast IP Table ¾ Static Multicast IP Table Multicast Filter¾ Create Static Multicast End Multicast IP IP-RangeIP Range ID Start Multicast IP Filter ¾ Port Filter ConfigAction Mode Port Filter Multicast→Multicast Filter→IP-Range Packet StatisticsPorts taking up too much bandwidth Displays the LAG number which the port belongs to ¾ Igmp Statistics ¾ QoS ¾ Priority ModeQoS 802.1Q frame ¾ Schedule Mode SP-Mode Port Priority ¾ Port Priority ConfigDiffServ Required. On QoS→DiffServ→Port Priority Schedule ModeRequired. On QoS→DiffServ→Schedule Mode ¾ Schedule Mode Config ¾ Priority Level 3 802.1P PriorityDscp Priority Required. On QoS→DiffServ→DSCP Priority ¾ Dscp Priority Config Rate Limit ¾ Rate Limit ConfigBandwidth Control Storm Control ¾ Storm Control Config Mulitcast Rate Voice VlanBroadcast Rate Bps TAG ¾ Security Mode of Voice Vlan Enter the Vlan ID of the voice Vlan Global ConfigSecurity Packet Type Processing Mode Select the desired port for voice Vlan configuration. It is OUI Config Displays the OUI address of the voice device Configuration Procedure of Voice Vlan Index ACLTime-Range Time-Range Summary Time-Range Create ¾ Holiday Table ACL ConfigHoliday Config ¾ Create Holiday ¾ Create ACL ACL SummaryACL Create ¾ Rule Table EtherType MAC ACL¾ Create MAC ACL Rule ID Time-Range Standard-IP ACLExtend-IP ACL ¾ Create Standard-IP ACL TCP Flag ： ¾ Create Extend-IP ACLIP Protocol Policy Summary Policy Config ¾ Create Action Policy CreateAction Create ¾ Create Policy Binding Table Policy Binding Direction Displays the binding direction Port BindingVlan Binding ¾ VLAN-Bind Table ¾ VLAN-Bind ConfigApplication Example for ACL Enter the ID of the Vlan you want to bind On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL IP-MAC Binding Network Security Manual Binding ¾ Manual Binding Table ¾ Manual Binding OptionEnter the Vlan ID Protect Type Select the Protect Type for the entry ARP Scanning Scan Dhcp SnoopingStart IP Address End IP Address ¾ Dhcp Working Principle Network diagram for DHCP-snooping implementation ¾ Option ¾ Dhcp Cheating Attack Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Snooping Config Customization Circuit ID Remote ID ¾ Option 82 Config¾ Port Config Port Select ¾ Cheating Gateway ARP Inspection¾ Imitating Gateway ¾ Cheating Terminal Hosts 10 ARP Attack Cheating Gateway ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ Trusted Port ARP Detect¾ ARP Detect Network Security→ARP ARP DefendRequired. On the Network Security→IP-MAC Speed ARP Statistics¾ ARP Defend Defend ¾ Illegal ARP Packet DoS Defend DoS Attack Type Description ¾ Defend Table ¾ Configure¾ Architecture of 802.1X Authentication 11.4 ¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Guest Vlan ID Authentication Method802.1X Guest Vlan Retry Times Supplicant TimeoutServer Timeout Authorized Control ModeRadius Server Control Type Required. On the Network Security→802.1X→Port On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Radius ¾ Snmp Versions Snmp¾ Snmp Overview ¾ Snmp Management Frame ¾ MIB Introduction ¾ Snmp Configuration Outline ¾ Remote Engine Snmp Config¾ Local Engine View Name Snmp ViewMIB Object ID View Type Snmp Group ¾ Group Config ¾ Group Table Snmp User Privacy Password Auth ModeAuth Password Privacy Mode Snmp Community ¾ Community ConfigAccess ¾ Community Table Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP MIB View Notification On the SNMP→SNMP Config→SNMP Retry TimeoutUDP Port User Rmon Group Function Rmon¾ Rmon Group ¾ History Control Table Event ConfigHistory Control ¾ Event Table Alarm Config Rising Event VariableSample Type Rising Threshold 179 ¾ Cluster Role Cluster ¾ Introduction to Cluster 13.1 NDPNeighbor Info ¾ Neighbor Info NDP Summary¾ Neighbor NDP ¾ Port Status Displays the port number of the switch ¾ Global Cofig NDP ConfigEnable Disable Cluster Name NtdpDevice Table Device MAC Collect Topology Ntdp SummaryHops Neighbor Info Port Displays the port number of the switch Ntdp Config Ntdp Hops Ntdp Hop DelayNtdp Port Delay Ntdp Interval Time Cluster ClusterCluster Summary ¾ Global ¾ Global Config Cluster Cluster Config ¾ Role Change ¾ Current Role Application Example for Cluster Function On Cluster→NTDP→NTDP Config page, enable On Cluster→NDP→NDP Config page, enable NDP 194 CPU Monitor MaintenanceSystem Monitor Memory Monitor 14.2 Log Local Log Log Table Log File ¾ Local Log ConfigRemote Log Log Buffer Host IP Backup Log¾ Log Host Pair ErrorDevice Diagnose Cable Test Ping Switch is availableNetwork Diagnose Loopback Tracert ¾ Ping Config 10 Tracert Following entries are displayed on this screen ¾ Tracert Config Appendix a Specifications Appendix B Configuring the PCs 207 Now Configure the Hyper Terminal Appendix C Load Software using FTPHardware Installation 210 Figure C-5 Port Settings Download Firmware via bootUtil menu Are you want to upgrade the firmwareY/N y TP-LINK upgrade You can only use the port 1 to upgrade User TP-LINK start Start Appendix D 802.1X Client Software Installation Guide 215 216 Figure D-7 InstallShield Wizard Complete Uninstall Software Figure D-11 Uninstall Complete Configuration 219 Figure D-16 Connection Status FAQ 221 Appendix E Glossary Ieee 802.1Q Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1D Link Aggregation Control Protocol Lacp Port AuthenticationRemote Authentication Dial-in User Service Radius Link Aggregation Telnet Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Spanning Tree Algorithm STA