TP-Link TL-SL5428E specification

Chapter	Introduction

Chapter 8 Multicast	This module is used to configure multicast function of the switch.
	Here mainly introduces:
	z IGMP Snooping:		Configure	global	parameters of IGMP
		Snooping function, port properties, VLAN and multicast VLAN.
	z Multicast IP: Configure multicast IP table.
	z	Multicast Filter: Configure multicast filter feature to restrict
		users ordering multicast programs.
	z Packet Statistics: View the multicast data traffic on each port of
		the switch, which facilitates you to monitor the IGMP messages
		in the network.

Chapter 9 QoS	This module is used to configure QoS function to provide different
	quality of service for various network applications and
	requirements. Here mainly introduces:
	z	DiffServ: Configure priorities, port priority, 802.1P priority and
		DSCP priority.
	z	Bandwidth Control: Configure rate limit feature to control the
		traffic rate on each port; configure storm control feature to filter
		broadcast, multicast and UL frame in the network.
	z	Voice VLAN: Configure voice VLAN to transmit voice data
		stream within the specified VLAN so as to ensure the
		transmission priority of voice data stream and voice quality.

Chapter 10 ACL	This module is used to configure match rules and process policies
	of packets to filter packets in order to control the access of the
	illegal users to the network. Here mainly introduces:
	z Time-Range: Configure the effective time for ACL rules.
	z ACL Config: ACL rules.
	z Policy Config: Configure operation policies.
	z Policy Binding: Bind the policy to a port/VLAN to take its effect
		on a specific port/VLAN.

Chapter 11 Network Security	This module is used to configure the multiple protection measures
	for the network security. Here mainly introduces:
	z IP-MAC Binding: Bind the IP address, MAC address, VLAN ID
		and the connected Port number of the Host together.
	z	ARP Inspection: Configure ARP inspection feature to prevent
		the network from ARP attacks.
	z IP Source Guard: Configure IP source guard feature to filter IP
		packets in the LAN.
	z	DoS Defend: Configure DoS defend feature to prevent DoS
		attack.
	z 802.1X: Configure		common	access	control mechanism for
		LAN ports to solve mainly authentication and security
		problems.

4

Image 12

TP-Link TL-SL5428E manual Switch, which facilitates you to monitor the Igmp messages

Contents

Rev 1910010529 Copyright & Trademarks Contents Gvrp TC Protect 101 11.4.1 11.4.2 Ntdp VII Package Contents About this Guide Intended ReadersConventions Overview of This Guide Path Switch, which facilitates you to monitor the Igmp messages Return to Contents Overview of the Switch Main FeaturesIntroduction Appearance Description Front Panel¾ LEDs Name Status Indication Rear Panel Login to the Switch LoginConfiguration Return to Contents System System InfoSystem Summary ¾ Port Status ¾ Port Info PortType Rate Device Description ¾ Bandwidth Utilization¾ Device Description ¾ Time Config System Time¾ Time Info System IP User Manage User Table User Config ¾ User Info Config Restore PasswordConfirm Password Retype the password User ID, Name, Access Level and status Operation Config Backup Firmware Upgrade¾ Config Backup System Reboot System Reset Access Security Access Control ¾ Access Control Config ¾ Session ConfigIP Address&Mask MAC Address SSL Config ¾ Access User Number SSH Config ¾ Global Config¾ Certificate Download ¾ Key Download Idle Timeout ProtocolMax Connect ¾ Configuration Procedure Key TypeDownload ¾ Network Requirements Application Example 2 for SSH Page Return to Contents Switching Port ConfigPort Port Select Port Mirror DescriptionSpeed and Duplex Flow Control ¾ Mirroring Port ¾ Mirrored PortIngress Egress Port Security ¾ Port Security Port Isolation Max Learned MACLearned Num ¾ Port Isolation Config Forward Portlist Select the port that to be forwarded to¾ Port Isolation List Forward Portlist Display the forwardlist LAG LAG Table Aggregate Arithmetic ¾ LAG TableGroup Number Member ¾ LAG Config Static LAG Lacp Config LAG will delete this LAG ¾ Lacp Config Admin KeySystem Priority Port Priority Traffic Monitor Traffic Summary¾ Auto Refresh Traffic Statistics MAC Address Type Configuration Way Aging out RelationshipBound Address and the port ¾ Search Option ¾ Address Table MAC Address Displays the MAC address learned by the switch Static AddressDisplays the corresponding Vlan ID of the MAC address ¾ Create Static Address Dynamic Address ¾ Static Address Table ¾ Aging Config ¾ Dynamic Address Table Filtering Address Bind ¾ Create Filtering Address ¾ Filtering Address Table Vlan Vlan implementation 802.1Q Vlan ¾ Link Types of ports Vlan Config ¾ Pvid ¾ Vlan Table Vlan ID SelectDescription ： Members Operation ： ¾ Vlan Config Enter the ID number of VlanIs valid or not ¾ Vlan Members ¾ Vlan Port Config Port Displays the port number Required. On the VLAN→802.1Q VLAN→Port Config page, set Required. On the VLAN→802.1Q VLAN→VLAN Config¾ Vlan of Port Vlan Description Optional. On the VLAN→802.1Q VLAN→VLAN Config MAC Vlan Port Enable ¾ MAC Vlan TableMAC Select Required. On the VLAN→MAC VLAN→Port Enable Protocol Vlan Protocol Vlan Protocol Template¾ Create Protocol Vlan ¾ Protocol Vlan Table ¾ Create Protocol Template ¾ Protocol Template Table Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→Port Config page, configure Required. On VLAN→802.1Q VLAN→VLAN Config page, create aApplication Example for MAC Vlan Operation Description ¾ Network Diagram ¾ Configuration Procedure Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Vlan page, create protocol Protocol type Value VPN Config Vlan Mapping¾ VPN Up-link Ports ¾ Vlan Mapping Config ¾ Vlan Mapping Table Required. On the VLAN→VLAN VPN→VPN Config Optional. On the VLAN→VLAN VPN→VPN ConfigRequired. On the VLAN→VLAN VPN→Port Enable Required. On the VLAN→VLAN VPN→VLAN Mapping Gvrp ¾ Garp ¾ Gvrp ¾ Port Config Select Port Status Registration Mode Configuration Procedure Private Vlan ¾ Features of Private Vlan ¾ The Elements of a Private Vlan¾ Private Vlan Implementation Pvid ¾ Packet forwarding in Private Vlan Pvlan ¾ Create Private Vlan ¾ Private Vlan TablePrimary Vlan Secondary Vlan Port Select the desired port for configuration Port Type Required. On the VLAN→Private VLAN→Port Configure¾ Private Vlan Port Table Required. On the VLAN→Private VLAN→PVLAN Application Example for Private Vlan Required. On the VLAN→802.1Q VLAN→VLAN Config page, click Spanning Tree ¾ STP Elements ¾ STP Timers ¾ Bpdu Comparing Principle in STP mode ¾ STP Generation Step Operation Tips： ¾ Rstp Elements¾ Mstp Elements ¾ Port States ¾ Port Roles STP Config STP Config Forward Delay VersionHello Time Max Age STP Summary Port Config STP Summary Priority ExtPathIntPath Edge Port Region Config Mstp InstancePort Role Port Status Instance Config ¾ Region Config Instance Port Config ¾ Instance TableInstance Clear Instance ID Path Cost STP Security Port Protect ¾ TC Protect ¾ Bpdu Protect¾ Bpdu Filter Loop Protect Root ProtectTC Protect Bpdu Protect TC Protect 11 TC Protect On Spanning Tree→STP Config→STP Config On Spanning Tree→STP Config→Port ConfigApplication Example for STP Function On Spanning Tree→MSTP Instance→Instance Bridge of Instance Configure Switch D ¾ Suggestion for Configuration Multicast ¾ Multicast Overview¾ Multicast Address ¾ Multicast Address Table Multicast IP Port Igmp Snooping ¾ Igmp Snooping¾ Igmp Snooping Process ¾ Igmp Messages Snooping Config ¾ Igmp Snooping Fundamentals ¾ Igmp Snooping Status Description Displays Igmp Snooping status Member Igmp Snooping Fast Leave Router Port Time Member Port TimeLeave Time Static Router Port Snooping→Snooping Config and Port Config Multicast→IGMP Snooping→VLAN ConfigMulticast Vlan Router Port ¾ Multicast Vlan On the Multicast→IGMP Snooping→Snooping Config Application Example for Multicast VlanVlan Multicast→IGMP Snooping→Multicast Vlan ¾ Configuration Procedure Step Operation Description Snooping→Port ConfigSnooping→Snooping Config Multicast IP Multicast IP Table Static Multicast IP ¾ Create Static Multicast ¾ Static Multicast IP Table Multicast Filter IP-Range ¾ Port Filter Config Port Filter Packet Statistics Multicast→Multicast Filter→IP-RangeMulticast→Multicast Filter→Port Filter ¾ Igmp Statistics ¾ Priority Mode QoS¾ QoS ¾ Schedule Mode 802.1Q frame SP-Mode ¾ Port Priority Config DiffServPort Priority Displays the LAG number which the port belongs to Schedule Mode ¾ Schedule Mode Config ¾ 802.1P Priority Config 3 802.1P Priority¾ Priority Level Dscp Priority ¾ Dscp Priority Config It ranges from 0 toPriority Level Priority levels are labeled as TC0, TC1, TC2 and TC3 ¾ Rate Limit Config Bandwidth ControlRate Limit Storm Control Ingress Rate bpsEgress Ratebps ¾ Storm Control Config Broadcast RateBps Multicast Rate ¾ Port Voice Vlan Mode Voice VlanNumber OUI Address Vendor ¾ Security Mode of Voice Vlan Packet Type Processing Mode Global Config 12 Global Configuration Port Mode 13 Port Config OUI Config Required. On VLAN→802.1Q VLAN→Port Config Optional. On QoS→Voice VLAN→OUI Config page, youRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global Config ACL Time-RangeTime-Range Summary Index Time-Range Create ACL Config Holiday Config¾ Create Holiday ¾ Holiday Table ACL Summary ACL Create¾ Rule Table ¾ Create ACL MAC ACL ¾ Create MAC ACLRule ID EtherType Standard-IP ACL ¾ Create Standard-IP ACLFragment Mask Extend-IP ACL ¾ Create Extend-IP ACL Policy Config Policy Summary Policy Create Action CreateSelect Policy Desired policy, please click the Delete button 11 Action Create ¾ Create Action Policy Binding Binding TablePort Binding ¾ Policy Bind Table Vlan Binding Direction Displays the binding directionEnter the ID of the Vlan you want to bind Application Example for ACL ¾ VLAN-Bind Table On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC Binding Manual Binding ¾ Manual Binding Option Enter the Vlan IDProtect Type Select the Protect Type for the entry ¾ Manual Binding Table ARP Scanning Dhcp Snooping Start IP AddressEnd IP Address Scan Network diagram for DHCP-snooping implementation ¾ Dhcp Working Principle ¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack 163 ¾ Option 82 Config ¾ Port Config Port SelectDecline Threshold Decline Flow Control Customization Circuit ID Remote ID ARP Inspection ¾ Imitating Gateway¾ Cheating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ARP Detect ¾ ARP Detect¾ Trusted Port ARP Defend Required. On the Network Security→IP-MACNetwork Security→ARP ARP Statistics ¾ ARP DefendDefend Speed IP Source Guard ¾ Illegal ARP Packet ¾ IP Source Guard Config DoS Defend DoS Attack Type Description DoS Defend DoS Detect 11.5 Detect TimeDetect Attack Type ¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure 178 179 ¾ 802.1X Timer ¾ Guest Vlan Authentication Method 802.1XGuest Vlan Guest Vlan ID Supplicant Timeout Server TimeoutRetry Times Control Mode Radius ServerControl Type Authorized On the Network Security→802.1X→Global Config 802.1X Client SoftwareRequired. On the Network Security→802.1X→Radius Required. On the Network Security→802.1X→Port Snmp ¾ Snmp Overview¾ Snmp Management Frame ¾ Snmp Versions ¾ Snmp Configuration Outline ¾ MIB Introduction Snmp Config ¾ Local Engine¾ Remote Engine Snmp View MIB Object IDView Type View Name ¾ Group Config Snmp Group Snmp User ¾ Group Table Auth Mode Auth PasswordPrivacy Mode Privacy Password ¾ Community Config AccessSnmp Community Required. On the SNMP→SNMP Config→Global Required. On the SNMP→SNMP Config→SNMPMIB View ¾ Community Table On the SNMP→SNMP Config→SNMP Notification Timeout UDP PortUser Retry Rmon ¾ Rmon GroupRmon Group Function Event Config History Control¾ History Control Table Alarm Config ¾ Event Table Variable Sample TypeRising Threshold Rising Event 200 Cluster ¾ Cluster Role 13.1 NDP Neighbor Info¾ Introduction to Cluster NDP Summary ¾ Neighbor¾ Neighbor Info ¾ Port Status Displays the port number of the switch NDP NDP Config Detail ：Aging Time Port Displays the port number of the switch NtdpDevice Table Displays NDP status of the current port Ntdp Summary Ntdp Summary Ntdp Config Ntdp Interval TimeNtdp Hops Enable ClusterCluster Summary ¾ Global Config Cluster ¾ Cluster Config¾ Global Cluster ¾ Member Info Switch 11 Cluster Summary for Member Switch Cluster Config ¾ Current Role¾ Role Change 14 Cluster Configuration for Commander Switch Member Config 16 Cluster Configuration for Individual Switch Cluster Topology ¾ Create MemberDevice Name Member MAC 18 Collect Topology ¾ Graphic Show Application Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable 220 Maintenance System MonitorCPU Monitor Memory Monitor 14.2 Log Content Log TableTime Module ¾ Local Log Config Local LogRemote Log Log Buffer Backup Log ¾ Log HostHost IP ¾ Backup Log Device DiagnoseCable Test ¾ Cable Test Error Switch is availableLoopback Length ¾ Ping Config Network DiagnosePing Test ¾ Tracert Config Tracert System Maintenance via FTP Hardware InstallationConfigure the Hyper Terminal 232 Download Firmware via bootrom menu 5Port Settings TP-LINK ifconfig ip 172.31.70.22 mask 255.255.255.0 gateway TP-LINK upgrade You can only use the port 1 to upgrade TP-LINK start Start User Access Login Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component 238 Now Installation Guide Appendix C 802.1X Client Software 241 242 Uninstall Software Figure C-7 InstallShield Wizard Complete Configuration Figure C-10 Uninstall Complete 245 Figure C-15 Connection Status FAQ Appendix D Glossary Multicast Switching Group Attribute Registration Protocol GarpIeee 802.1D Ieee 802.1Q Port Authentication Remote Authentication Dial-in User Service RadiusLink Aggregation Link Aggregation Control Protocol Lacp Simple Network Management Protocol Snmp Simple Network Time Protocol SntpSpanning Tree Algorithm STA Telnet