Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SG3424P manual Application Example for 802.1Q Vlan, ¾ Network Diagram

Models: TL-SG3424P

1 263

Download 263 pages 38.92 Kb

Page 77

Step	Operation	Description

2	Create VLAN.	Required. On the VLAN→802.1Q VLAN→VLAN Config
		page, click the Create button to create a VLAN. Enter the
		VLAN ID and the description for the VLAN. Meanwhile,
		specify its member ports.

3	Create Protocol Template.	Required. On the VLAN→Protocol VLAN→Protocol
		Template page, create the Protocol Template before
		configuring Protocol VLAN.

4	Create Protocol VLAN.	Required. On the VLAN→Protocol VLAN→Protocol
		VLAN page, select the protocol type and enter the VLAN ID
		to create a Protocol VLAN.

5	Modify/View VLAN.	Optional. On the VLAN→Protocol VLAN→Protocol VLAN
		page, click the Edit button to modify/view the information of
		the corresponding VLAN.

6	Delete VLAN.	Optional. On the VLAN→Protocol VLAN→Protocol VLAN
		page, select the desired entry to delete the corresponding
		VLAN by clicking the Delete button.

6.4 Application Example for 802.1Q VLAN

¾Network Requirements

zSwitch A is connecting to PC A and Server B;

zSwitch B is connecting to PC B and Server A;

zPC A and Server A is in the same VLAN;

zPC B and Server B is in the same VLAN;

zPCs in the two VLANs cannot communicate with each other.

¾Network Diagram

68

Image 77

TP-Link TL-SG3424P Application Example for 802.1Q Vlan, Required. On the VLAN→Protocol VLAN→Protocol, ¾ Network Diagram

Contents

REV2.0.0 1910010781 TL-SG3424P JetStream L2 Managed PoE SwitchCopyright & Trademarks FCC Statement Safety Information Contents Gvrp VII Viii 177 220 Package Contents Intended Readers About this GuideConventions Overview of This GuideSystem Switching Vlan Spanning Tree Multicast QoS PoE ACL Network Security Snmp Return to Contents Introduction Overview of the SwitchMain Features ¾ LEDs Appearance DescriptionFront Panel Status Indication LEDRear Panel Configuration Login to the SwitchLogin Return to Contents System Info SystemSystem Summary ¾ Port StatusType PortSpeed Status¾ Device Description Device DescriptionSystem Time Daylight Saving Time Predefined Mode ¾ DST ConfigRecurring Mode Date ModeSystem IP ¾ IP ConfigUser Table User ConfigUser Management ¾ User Info User ID, Name, Access Level and status OperationUser Status ¾ User TableConfig Backup Config Restore¾ Config Restore System Tools¾ Config Backup Firmware UpgradeSystem Reboot Access SecuritySystem Reset Access Control¾ Session Config ¾ Access Control ConfigIP Address&Mask MAC Address¾ Access User Number SSL Config¾ Global Config SSH Config¾ Certificate Download ¾ Key DownloadMax Connect Idle TimeoutProtocol Key Type ¾ Configuration ProcedureDownload ¾ Network RequirementsApplication Example 2 for SSH Page Return to Contents Port Config SwitchingPort Port SelectDescription Port MirrorSpeed and Duplex Flow ControlMirroring GroupMode Mirrored Port¾ Mirrored Port Port SecurityIngress EgressLearned Num ¾ Port SecurityMax Learned MAC Port Isolation ¾ Port Isolation ConfigForward Portlist Display the forwardlist Loopback Detection¾ Port Isolation List Interval It’s 3 seconds Operation ModeLAG LAG Table LAG Table¾ LAG Table Static LAGGroup Number MemberMember Port Lacp Config¾ Lacp Config 10 Lacp ConfigTraffic Monitor Admin KeyTraffic Summary Port PriorityPackets Tx Packets RxOctets Rx Octets TxTraffic Statistics MAC Address Type Configuration Way Aging outBound Address and the portRelationship Address Table¾ Search Option Static Address¾ Address Table Displays the corresponding Vlan ID of the MAC address¾ Static Address Table ¾ Create Static AddressDynamic Address ¾ Dynamic Address Table ¾ Aging ConfigBind Filtering Address¾ Filtering Address Table ¾ Create Filtering AddressVlan ¾ Link Types of ports 802.1Q Vlan¾ Pvid ¾ Vlan Table Vlan ConfigVlan ID Select： Select：Enter the ID number of Vlan ¾ Vlan ConfigIs valid or not ¾ Vlan MembersPort Displays the port number ¾ Vlan Port Config¾ Vlan of Port Required. On the VLAN→802.1Q VLAN→Port Config page, setVlan Description Step Operation DescriptionOptional. On the VLAN→802.1Q VLAN→VLAN Config Required. On the VLAN→802.1Q VLAN→VLAN ConfigMAC Select Protocol Vlan¾ MAC Vlan Table ¾ Encapsulation Format of Ethernet Data 802.3 raw 802.2 LLC Snap Protocol Protocol Group Protocol Group TableVlan packets are processed in the following way ¾ Protocol Group Table¾ Protocol Group Member ¾ Protocol Group ConfigProtocol Template ¾ Protocol Template Table Required. On the VLAN→802.1Q VLAN→Port Config¾ Create Protocol Template Application Example for 802.1Q Vlan ¾ Network DiagramRequired. On the VLAN→Protocol VLAN→Protocol Optional. On the VLAN→Protocol VLAN→Protocol VlanRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Required. On VLAN→802.1Q VLAN→Port Config page, configureApplication Example for MAC Vlan Operation Description¾ Network Diagram ¾ Configuration Procedure Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Group page, create protocol Gvrp¾ Gvrp Gvrp Registration ModeConfiguration Procedure ¾ STP Elements Spanning Tree¾ STP Generation ¾ STP Timers¾ Bpdu Comparing Principle in STP mode Tips ： Step Operation¾ Mstp Elements ¾ Rstp Elements¾ Port Roles ¾ Port StatesSTP Config STP ConfigVersion Forward DelayHello Time Max AgeSTP Summary STP Summary Port ConfigExtPath PriorityIntPath Edge PortPort Status Region ConfigMstp Instance ¾ Region Config Instance Config¾ Instance Table Instance Port ConfigInstance ClearPort Role Instance IDPath Cost Port Protect STP Security¾ Bpdu Filter ¾ TC Protect¾ Bpdu Protect Root Protect Loop ProtectTC Protect Bpdu ProtectTC Protect Application Example for STP FunctionOn Spanning Tree→MSTP Instance→Instance On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Overview MulticastMulticast IP Port ¾ Multicast Address¾ Multicast Address Table ¾ Igmp Snooping Igmp Snooping¾ Igmp Snooping Process ¾ Igmp Messages¾ Igmp Snooping Fundamentals Snooping ConfigDescription Displays Igmp Snooping status Member ¾ Igmp Snooping StatusFast Leave Igmp SnoopingMember Port Time Router Port TimeLeave Time Static Router PortMulticast→IGMP Snooping→VLAN Config Snooping→Snooping Config and Port ConfigMulticast Vlan Multicast→IGMPVlan ¾ Multicast VlanMulticast→IGMP Snooping→Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigSnooping→Snooping Config Snooping→Port ConfigMulticast IP Multicast IP TableStatic Multicast IP IP-Range Multicast Filter¾ Create Static Multicast ¾ Static Multicast IP TableIP Range ID Port FilterStart Multicast IP End Multicast IPAction Mode ¾ Port Filter ConfigFilter Bound IP-Range IDMulticast→Multicast Filter→Port Filter Packet StatisticsMulticast→Multicast Filter→IP-Range ¾ Igmp Statistics ¾ QoS ¾ Priority ModeQoS ¾ Schedule Mode 117 DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to¾ Dscp Priority Config Required. On QoS→DiffServ→Schedule ModeDscp Priority Required. On QoS→DiffServ→Port PriorityRequired. On QoS→DiffServ→DSCP Priority 3 802.1P/CoS mapping¾ Priority Level ¾ Schedule Mode Config Schedule Mode¾ Priority and CoS-mapping Config Rate Limit Bandwidth ControlStorm Control ¾ Rate Limit ConfigIngress Rate Kbps Egress RateKbpsPort Broadcast Rate bps ¾ Storm Control ConfigMulticast Rate BpsNumber OUI Address Vendor ¾ Port Voice Vlan ModeVoice Vlan Security Packet Type Processing Mode ¾ Security Mode of Voice Vlan12 Global Configuration Global Config13 Port Config Port ModeOUI Config Mask Required. On VLAN→802.1Q VLAN→Port Config page, clickPoE PoE Config¾ Composition ¾ AdvantagePoE Priority PoE ConfigPoE Status PoE Profile Time-Range Summary PoE Time-Range¾ PoE Profile Profile NamePoE Time-Range Create Index PoE Holiday ConfigEnd Time Delete¾ Time-Range Table ACLTime-Range Index Displays the index of the time-slice Start Time Time-Range CreateHoliday Holiday Config ACL ConfigACL Create ACL Summary¾ Rule Table ¾ Create ACLRule ID MAC ACLEtherType User Priority¾ Create Standard-IP ACL Standard-IP ACLExtend-IP ACL IP Protocol ¾ Create Extend-IP ACLTCP Flag ： IP ToSPolicy Create Policy ConfigPolicy Summary ¾ Create Action Action Create¾ Create Policy ¾ Policy Bind Table Policy BindingBinding Table Port Binding ¾ Port-Bind ConfigVlan Binding Direction Displays the binding directionApplication Example for ACL ¾ VLAN-Bind ConfigEnter the ID of the Vlan you want to bind ¾ VLAN-Bind TableOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL IP-MAC Binding Network SecurityManual Binding Enter the Vlan ID ¾ Manual Binding OptionProtect Type Select the Protect Type for the entry ¾ Manual Binding TableARP Scanning Start IP Address Dhcp SnoopingEnd IP Address Scan¾ Dhcp Working Principle Network diagram for DHCP-snooping implementation¾ Option ¾ Dhcp Cheating Attack Dhcp Cheating Attack Implementation Procedure¾ Dhcp Snooping Config Customization Circuit ID Remote ID ¾ Option 82 Config¾ Port Config Port Select ¾ Cheating Gateway ARP Inspection¾ Imitating Gateway ¾ Cheating Terminal Hosts 10 ARP Attack Cheating Gateway¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ Trusted Port ARP Detect¾ ARP Detect Network Security→ARP ARP DefendRequired. On the Network Security→IP-MAC Current Speed ¾ ARP DefendDefend ¾ Illegal ARP Packet DoS DefendARP Statistics DoS Attack Type Description ¾ Architecture of 802.1X Authentication ¾ Configure12.4 ¾ Defend Table¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure 19 PAP Authentication Procedure ¾ Guest Vlan ¾ 802.1X Timer802.1X Authentication MethodGuest Vlan Guest Vlan IDRetry Times Supplicant TimeoutServer Timeout ¾ Authentication Config Control ModeRadius Server Control TypeRequired. On the Network Security→802.1X→Port On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Radius ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions¾ MIB Introduction ¾ Snmp Configuration Outline¾ Remote Engine Snmp Config¾ Local Engine View Name Snmp ViewMIB Object ID View TypeSnmp Group ¾ Group ConfigSnmp User Auth Password Auth ModePrivacy Mode Privacy PasswordSnmp Community ¾ Community ConfigAccess Required. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalMIB View ¾ Community TableNotification On the SNMP→SNMP Config→SNMPUDP Port TimeoutUser Retry¾ Notification Table Rmon¾ Rmon Group Rmon Group Function¾ History Control Table Event ConfigHistory Control ¾ Event Table Alarm ConfigVariable Alarm TypeSample Type Rising Threshold194 ¾ Lldpdu Format LldpTLV type TLV Name Description Usage ¾ TLVOrganizationally Specific TLV Basic Management TLVPower Via MDI TLV Configuration/Status TLVPort Description TLV System Capabilities TLVLldp Basic ConfigLldp Port Config ¾ Lldp Port ConfigDetails Device InfoLocal Info ¾ Neighbor Info Neighbor Info¾ Local Info ¾ Global Statistics Device StatisticsTransmit Total ErrorsReceive Total Discards¾ LLDP-MED Parameters Config Extended Power-Via-MDI TLVLocation Identification TLV Inventory TLVLLDP-MED Port Configuration ¾ LLDP-MED Port Config¾ Location Identification Parameters ¾ Included TLVsEmergency Civic AddressLLDP-MED Local Information LLDP-MED Neighbor Information ¾ Cluster Role Cluster¾ Introduction to Cluster 15.1 NDP¾ Neighbor NDP SummaryAging Time Error NDP PacketsSend NDP Packets Receive NDP PacketsDetail ： NDP ConfigDisable EnableNtdp Device TableNtdp Summary Ntdp Summary Port Displays the port number of the switchNtdp Hop Delay Ntdp ConfigNtdp Interval Time Ntdp HopsCluster Summary Cluster¾ Global Cluster¾ Global Config Cluster Cluster Config¾ Role Change ¾ Current RoleApplication Example for Cluster Function 14 Cluster Configuration for Individual SwitchOn Cluster→NTDP→NTDP Config page, enable On Cluster→NDP→NDP Config page, enable NDPOn Cluster→Cluster→Cluster Topology On Cluster→Cluster→Member Config page, selectCPU Monitor MaintenanceSystem Monitor Memory Monitor 16.2 Log ¾ Log Info Log TableTime ModuleLocal Log ¾ Local Log ConfigRemote Log Log BufferHost IP Backup Log¾ Log Host Error Device DiagnosticsCable Test PairPing Network DiagnosticsLoopback Tracert ¾ Ping Config¾ Tracert Config Appendix a Specifications Figure B-2 Appendix B Configuring the PCsNow Configure the Hyper Terminal Appendix C Load Software Using FTPHardware Installation 239 Figure C-5 Port Settings Download Firmware via bootUtil menuAre you want to upgrade the firmwareY/N y TP-LINK upgrade You can only use the port 1 to upgradeUser TP-LINK start StartAppendix D 802.1X Client Software Installation Guide244 245 Figure D-7 InstallShield Wizard Complete Uninstall SoftwareFigure D-11 Uninstall Complete Configuration248 Figure D-16 Connection Status FAQ Appendix E Glossary Generic Multicast Registration Protocol Gmrp Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1DRemote Authentication Dial-in User Service Radius Port AuthenticationLayer Link AggregationSimple Network Management Protocol Snmp Secure Shell SSHSimple Network Time Protocol Sntp Spanning Tree Algorithm STA