Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG3216 manual ¾ Suggestion for Configuration

Models: TL-SG3216

1 232

Download 232 pages 26.13 Kb

Page 96

zFor Instance 2 (VLAN 102, 104 and 106), the blue paths in the following figure are connected links; the gray paths are the blocked links.

¾Suggestion for Configuration

zEnable TC Protect function for all the ports of switches.

zEnable Root Protect function for all the ports of root bridges.

zEnable Loop Protect function for the non-edge ports.

Enable BPDU Protect function or BPDU Filter function for the edge ports which are connected to the PC and server.

Return to CONTENTS

89

Image 96

TP-Link TL-SG3216 manual ¾ Suggestion for Configuration

Contents

TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch Copyright & Trademarks Contents Gvrp 100 VII NDP Package Contents About this Guide Intended ReadersConventions Overview of This GuideSystem Switching Vlan Spanning Tree Multicast QoS ACL Network Security Snmp Cluster Return to Contents Overview of the Switch Main FeaturesIntroduction Appearance Description Front Panel¾ LEDs Name Status Indication Rear Panel Login to the Switch LoginConfiguration Return to Contents System System InfoSystem Summary ¾ Port StatusPort TypeRate StatusDevice Description System Time¾ Device Description Current System Get GMTSynchronize With PC’S Clock¾ IP Config System IPUser Config User ManageUser Table User ID, Name, Access Level and status Operation ¾ User InfoUser Status ¾ User TableConfig Restore Config Backup¾ Config Restore System ToolsFirmware Upgrade ¾ Config BackupAccess Security System RebootSystem Reset Access Control¾ Access Control Config ¾ Session ConfigIP Address&Mask MAC AddressSSL Config ¾ Access User NumberSSH Config ¾ Global Config¾ Certificate Download ¾ Key DownloadIdle Timeout ProtocolMax Connect ¾ Configuration Procedure Key TypeDownload ¾ Network RequirementsApplication Example 2 for SSH Page Return to Contents Switching Port ConfigPort Port SelectPort Mirror DescriptionSpeed and Duplex Flow ControlMirror Mode GroupMirroring ModePort Security ¾ Port SecurityLAG Max Learned MACLearned Num LAG Table Aggregate Arithmetic¾ LAG Table Group NumberStatic LAG Detail InformationLacp Config ¾ LAG ConfigLAG will delete this LAG ¾ Lacp Config Admin KeySystem Priority Port PriorityTraffic Monitor Traffic Summary¾ Auto Refresh Traffic Statistics MAC Address Address Table Bound MAC addressWay Port¾ Search Option ¾ Address TableMAC Address Displays the MAC address learned by the switch Static AddressDisplays the corresponding Vlan ID of the MAC address ¾ Create Static AddressDynamic Address ¾ Static Address Table¾ Aging Config ¾ Dynamic Address TableFiltering Address Bind¾ Create Filtering Address ¾ Filtering Address TableVlan 802.1Q Vlan ¾ Link Types of ports¾ Pvid Vlan Config ¾ Vlan TableVlan ID Select Description ：¾ Vlan Config Enter the ID number of VlanIs valid or not ¾ Vlan Members¾ Vlan Port Config Port Displays the port numberRequired. On the VLAN→802.1Q VLAN→Port Config page, set Required. On the VLAN→802.1Q VLAN→VLAN Config¾ Vlan of Port Vlan DescriptionVLAN→VLAN Config MAC VlanProtocol Vlan ¾ MAC Vlan TableMAC Select Step Operation Description¾ The Procedure for the Switch to Identify Packet Protocol ¾ Encapsulation Format of Ethernet Data¾ The Implementation of Protocol Vlan Encapsulation802.3 raw 802.2 LLC Snap Protocol Vlan packets are processed in the following wayProtocol Group Table Protocol Group¾ Protocol Group Table ¾ Protocol Group Config Protocol Template¾ Protocol Group Member Application Example for 802.1Q Vlan ¾ Network Diagram ¾ Configuration Procedure Required. On VLAN→802.1Q VLAN→Port Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Application Example for MAC Vlan ¾ Network Diagram Application Example for Protocol VlanRequired. On VLAN→Protocol VLAN→Protocol Template Gvrp On VLAN→Protocol VLAN→Protocol Group page, create protocol¾ Gvrp ¾ Port Config Select Port Status Registration ModeConfiguration Procedure Spanning Tree ¾ STP Elements¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Step Operation Tips ：¾ Rstp Elements ¾ Mstp Elements¾ Port States ¾ Port RolesSTP Config STP ConfigForward Delay VersionHello Time Max AgePort Config STP SummaryPriority ExtPathIntPath Edge PortRegion Config Mstp InstancePort Status Instance Config ¾ Region ConfigInstance Port Config ¾ Instance TableInstance ClearInstance ID Path CostPort Role STP Security Port Protect¾ TC Protect ¾ Bpdu Protect¾ Bpdu Filter Loop Protect Root ProtectTC Protect Bpdu ProtectApplication Example for STP Function TC ProtectOn Spanning Tree→STP Config→STP Config On Spanning Tree→STP Config→Port ConfigOn Spanning Tree→MSTP Instance→Instance Configure Switch D ¾ Suggestion for Configuration Multicast ¾ Multicast Overview¾ Multicast Address ¾ Multicast Address Table Multicast IP PortIgmp Snooping ¾ Igmp Snooping¾ Igmp Snooping Process ¾ Igmp MessagesSnooping Config ¾ Igmp Snooping Fundamentals¾ Igmp Snooping Status Description Displays Igmp Snooping status MemberIgmp Snooping Fast LeaveRouter Port Time Member Port TimeLeave Time Static Router PortSnooping→Snooping Config and Port Config Multicast→IGMP Snooping→VLAN ConfigMulticast Vlan Displays the Vlan ID¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config VlanMulticast→IGMP Snooping→Multicast Vlan ¾ Configuration Procedure Step Operation Description Snooping→Port ConfigSnooping→Snooping Config Multicast IPMulticast IP Table Static Multicast IPMulticast Filter ¾ Create Static Multicast¾ Static Multicast IP Table IP-Range IP Range IDStart Multicast IP End Multicast IP¾ Port Filter Config Action ModePort Filter FilterPacket Statistics Ports taking up too much bandwidthDisplays the LAG number which the port belongs to Multicast→Multicast Filter→IP-Range¾ Igmp Statistics ¾ Priority Mode QoS¾ QoS ¾ Schedule Mode 802.1Q frameSP-Mode ¾ Port Priority Config DiffServPort Priority Schedule Mode Required. On QoS→DiffServ→Schedule Mode¾ Schedule Mode Config Required. On QoS→DiffServ→Port Priority3 802.1P Priority Dscp Priority¾ Priority Level ¾ Dscp Priority Config Required. On QoS→DiffServ→DSCP Priority¾ Rate Limit Config Bandwidth ControlRate Limit ¾ Storm Control Config Storm ControlVoice Vlan Broadcast RateBps Mulitcast Rate¾ Security Mode of Voice Vlan TAGGlobal Config Security Packet Type Processing ModeEnter the Vlan ID of the voice Vlan Select the desired port for voice Vlan configuration. It is OUI Config Configuration Procedure of Voice Vlan Displays the OUI address of the voice deviceACL Time-RangeTime-Range Summary IndexTime-Range Create ACL Config Holiday Config¾ Create Holiday ¾ Holiday TableACL Summary ACL Create¾ Rule Table ¾ Create ACLMAC ACL ¾ Create MAC ACLRule ID EtherTypeStandard-IP ACL Extend-IP ACL¾ Create Standard-IP ACL Time-Range¾ Create Extend-IP ACL IP ProtocolTCP Flag ： Policy Config Policy SummaryPolicy Create Action Create¾ Create Policy ¾ Create ActionPolicy Binding Binding TablePort Binding Vlan BindingDirection Displays the binding direction ¾ VLAN-Bind Config Application Example for ACLEnter the ID of the Vlan you want to bind ¾ VLAN-Bind TableOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC BindingManual Binding ¾ Manual Binding Option Enter the Vlan IDProtect Type Select the Protect Type for the entry ¾ Manual Binding TableARP Scanning Dhcp Snooping Start IP AddressEnd IP Address ScanNetwork diagram for DHCP-snooping implementation ¾ Dhcp Working Principle¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack¾ Dhcp Snooping Config ¾ Option 82 Config ¾ Port Config Port SelectCustomization Circuit ID Remote ID ARP Inspection ¾ Imitating Gateway¾ Cheating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ARP Detect ¾ ARP Detect¾ Trusted Port ARP Defend Required. On the Network Security→IP-MACNetwork Security→ARP ARP Statistics ¾ ARP DefendDefend SpeedDoS Defend ¾ Illegal ARP PacketDoS Attack Type Description ¾ Configure ¾ Architecture of 802.1X Authentication11.4 ¾ Defend Table¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure ¾ 802.1X Timer ¾ Guest Vlan Authentication Method 802.1XGuest Vlan Guest Vlan IDSupplicant Timeout Server TimeoutRetry Times Control Mode Radius ServerControl Type AuthorizedOn the Network Security→802.1X→Global Config Required. On the Network Security→802.1X→RadiusRequired. On the Network Security→802.1X→Port Snmp ¾ Snmp Overview¾ Snmp Management Frame ¾ Snmp Versions¾ Snmp Configuration Outline ¾ MIB IntroductionSnmp Config ¾ Local Engine¾ Remote Engine Snmp View MIB Object IDView Type View Name¾ Group Config Snmp GroupSnmp User ¾ Group TableAuth Mode Auth PasswordPrivacy Mode Privacy Password¾ Community Config AccessSnmp Community Required. On the SNMP→SNMP Config→Global Required. On the SNMP→SNMP Config→SNMPMIB View ¾ Community TableOn the SNMP→SNMP Config→SNMP NotificationTimeout UDP PortUser RetryRmon ¾ Rmon GroupRmon Group Function Event Config History Control¾ History Control Table Alarm Config ¾ Event TableVariable Sample TypeRising Threshold Rising Event179 Cluster ¾ Cluster Role13.1 NDP Neighbor Info¾ Introduction to Cluster NDP Summary ¾ Neighbor¾ Neighbor Info ¾ Port Status Displays the port number of the switch NDPNDP Config EnableDisable ¾ Global CofigNtdp Device TableDevice MAC Cluster NameNtdp Summary HopsNeighbor Info Collect TopologyNtdp Config Port Displays the port number of the switchNtdp Hop Delay Ntdp Port DelayNtdp Interval Time Ntdp HopsCluster Cluster Summary¾ Global ClusterCluster Config ¾ Global Config Cluster¾ Current Role ¾ Role ChangeApplication Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable194 Maintenance System MonitorCPU Monitor Memory Monitor 14.2 Log Log Table Local Log¾ Local Log Config Remote LogLog Buffer Log FileBackup Log ¾ Log HostHost IP Error Device DiagnoseCable Test PairSwitch is available Network DiagnoseLoopback Ping¾ Ping Config Tracert¾ Tracert Config 10 Tracert Following entries are displayed on this screenAppendix a Specifications Appendix B Configuring the PCs 207 Now Appendix C Load Software using FTP Hardware InstallationConfigure the Hyper Terminal 210 Download Firmware via bootUtil menu Figure C-5 Port SettingsTP-LINK upgrade You can only use the port 1 to upgrade Are you want to upgrade the firmwareY/N yTP-LINK start Start UserInstallation Guide Appendix D 802.1X Client Software215 216 Uninstall Software Figure D-7 InstallShield Wizard CompleteConfiguration Figure D-11 Uninstall Complete219 FAQ Figure D-16 Connection Status221 Appendix E Glossary Multicast Switching Group Attribute Registration Protocol GarpIeee 802.1D Ieee 802.1QPort Authentication Remote Authentication Dial-in User Service RadiusLink Aggregation Link Aggregation Control Protocol LacpSimple Network Management Protocol Snmp Simple Network Time Protocol SntpSpanning Tree Algorithm STA Telnet