Manuals / TP-Link / Computer Equipment / Switch

TP-Link TL-SL5428E manual ¾ Create Extend-IP ACL

Models: TL-SL5428E

1 259

Page 154

10.2.5 Extend-IP ACL

Extend-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source IP addresses, destination IP addresses, IP protocol and other information of this sort carried in the packets.

Choose the menu ACL→ACL Config→Extend-IP ACL to load the following page.

Figure10-8 Create Extend-IP Rule

The following entries are displayed on this screen:

¾Create Extend-IP ACL

ACL ID:	Select the desired Extend-IP ACL for configuration.
Rule ID:	Enter the rule ID.
Operation:	Select the operation for the switch to process packets which match the
	rules.
	z	Permit: Forward packets.
	z	Deny: Discard Packets.
Fragment:	Select if the rule will take effect on the fragment packets. When the
	fragment is selected, this rule will process all the fragments and the
	last piece of fragment will be always forwarded.
S-IP:	Enter the source IP address contained in the rule.
D-IP:	Enter the destination IP address contained in the rule.
		146

Page 154

Image 154

TP-Link TL-SL5428E manual ¾ Create Extend-IP ACL

Contents

Rev 1910010529 Copyright & Trademarks Contents Gvrp TC Protect 101 11.4.1 11.4.2 NtdpVII Package Contents Conventions About this GuideIntended Readers Overview of This GuidePath Switch, which facilitates you to monitor the Igmp messages Return to Contents Main Features Overview of the SwitchIntroduction Front Panel Appearance Description¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents System Summary SystemSystem Info ¾ Port StatusType ¾ Port InfoPort Rate¾ Bandwidth Utilization Device Description¾ Device Description System Time ¾ Time Config¾ Time Info System IP User Manage User TableUser Config ¾ User InfoConfirm Password Retype the password Config RestorePassword User ID, Name, Access Level and status OperationFirmware Upgrade Config Backup¾ Config Backup System Reboot System ResetAccess Security Access ControlIP Address&Mask ¾ Access Control Config¾ Session Config MAC AddressSSL Config ¾ Access User Number¾ Certificate Download SSH Config¾ Global Config ¾ Key DownloadProtocol Idle TimeoutMax Connect Download ¾ Configuration ProcedureKey Type ¾ Network RequirementsApplication Example 2 for SSH Page Return to Contents Port SwitchingPort Config Port SelectSpeed and Duplex Port MirrorDescription Flow ControlIngress ¾ Mirroring Port¾ Mirrored Port EgressPort Security ¾ Port SecurityMax Learned MAC Port IsolationLearned Num ¾ Port Isolation List ¾ Port Isolation ConfigForward Portlist Select the port that to be forwarded to Forward Portlist Display the forwardlistLAG LAG TableGroup Number Aggregate Arithmetic¾ LAG Table Member¾ LAG Config Static LAGLacp Config LAG will delete this LAGSystem Priority ¾ Lacp ConfigAdmin Key Port PriorityTraffic Summary Traffic Monitor¾ Auto Refresh Traffic Statistics MAC Address Bound Type Configuration Way Aging outRelationship Address and the port¾ Search Option ¾ Address TableDisplays the corresponding Vlan ID of the MAC address MAC Address Displays the MAC address learned by the switchStatic Address ¾ Create Static AddressDynamic Address ¾ Static Address Table¾ Aging Config ¾ Dynamic Address TableFiltering Address Bind¾ Create Filtering Address ¾ Filtering Address TableVlan Vlan implementation802.1Q Vlan ¾ Link Types of portsVlan Config ¾ PvidDescription ： ¾ Vlan TableVlan ID Select Members Operation ：Is valid or not ¾ Vlan ConfigEnter the ID number of Vlan ¾ Vlan Members¾ Vlan Port Config Port Displays the port number¾ Vlan of Port Required. On the VLAN→802.1Q VLAN→Port Config page, setRequired. On the VLAN→802.1Q VLAN→VLAN Config Vlan DescriptionOptional. On the VLAN→802.1Q VLAN→VLAN Config MAC Vlan¾ MAC Vlan Table Port EnableMAC Select Required. On the VLAN→MAC VLAN→Port Enable Protocol Vlan¾ Create Protocol Vlan Protocol VlanProtocol Template ¾ Protocol Vlan Table¾ Create Protocol Template ¾ Protocol Template TableApplication Example for 802.1Q Vlan Application Example for MAC Vlan Required. On VLAN→802.1Q VLAN→Port Config page, configureRequired. On VLAN→802.1Q VLAN→VLAN Config page, create a Operation Description¾ Network Diagram ¾ Configuration Procedure Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template On VLAN→Protocol VLAN→Protocol Vlan page, create protocol Protocol type ValueVlan Mapping VPN Config¾ VPN Up-link Ports ¾ Vlan Mapping Config ¾ Vlan Mapping TableRequired. On the VLAN→VLAN VPN→Port Enable Required. On the VLAN→VLAN VPN→VPN ConfigOptional. On the VLAN→VLAN VPN→VPN Config Required. On the VLAN→VLAN VPN→VLAN MappingGvrp ¾ Garp¾ Gvrp ¾ Port Config Select Port Status Registration ModeConfiguration Procedure Private Vlan¾ The Elements of a Private Vlan ¾ Features of Private Vlan¾ Private Vlan Implementation Pvid ¾ Packet forwarding in Private Vlan Pvlan Primary Vlan ¾ Create Private Vlan¾ Private Vlan Table Secondary Vlan¾ Private Vlan Port Table Port Select the desired port for configuration Port TypeRequired. On the VLAN→Private VLAN→Port Configure Required. On the VLAN→Private VLAN→PVLANApplication Example for Private Vlan Required. On the VLAN→802.1Q VLAN→VLAN Config page, click Spanning Tree ¾ STP Elements¾ STP Timers ¾ Bpdu Comparing Principle in STP mode¾ STP Generation Step Operation¾ Rstp Elements Tips：¾ Mstp Elements ¾ Port States ¾ Port RolesSTP Config STP ConfigHello Time Forward DelayVersion Max AgeSTP Summary Port Config STP SummaryIntPath PriorityExtPath Edge PortPort Role Region ConfigMstp Instance Port StatusInstance Config ¾ Region ConfigInstance Instance Port Config¾ Instance Table ClearInstance ID Path CostSTP Security Port Protect¾ Bpdu Protect ¾ TC Protect¾ Bpdu Filter TC Protect Loop ProtectRoot Protect Bpdu ProtectTC Protect 11 TC ProtectApplication Example for STP Function On Spanning Tree→STP Config→STP ConfigOn Spanning Tree→STP Config→Port Config On Spanning Tree→MSTP Instance→InstanceBridge of Instance Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address ¾ Multicast Address Table Multicast IP Port¾ Igmp Snooping Process Igmp Snooping¾ Igmp Snooping ¾ Igmp MessagesSnooping Config ¾ Igmp Snooping Fundamentals¾ Igmp Snooping Status Description Displays Igmp Snooping status MemberIgmp Snooping Fast LeaveLeave Time Router Port TimeMember Port Time Static Router PortMulticast Vlan Snooping→Snooping Config and Port ConfigMulticast→IGMP Snooping→VLAN Config Router Port¾ Multicast Vlan Vlan On the Multicast→IGMP Snooping→Snooping ConfigApplication Example for Multicast Vlan Multicast→IGMP Snooping→Multicast VlanSnooping→Snooping Config ¾ Configuration Procedure Step Operation DescriptionSnooping→Port Config Multicast IPMulticast IP Table Static Multicast IP¾ Create Static Multicast ¾ Static Multicast IP TableMulticast Filter IP-Range¾ Port Filter Config Port FilterMulticast→Multicast Filter→IP-Range Packet StatisticsMulticast→Multicast Filter→Port Filter ¾ Igmp Statistics QoS ¾ Priority Mode¾ QoS ¾ Schedule Mode 802.1Q frameSP-Mode Port Priority ¾ Port Priority ConfigDiffServ Displays the LAG number which the port belongs toSchedule Mode ¾ Schedule Mode Config3 802.1P Priority ¾ 802.1P Priority Config¾ Priority Level Dscp Priority Priority Level ¾ Dscp Priority ConfigIt ranges from 0 to Priority levels are labeled as TC0, TC1, TC2 and TC3Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Bps ¾ Storm Control ConfigBroadcast Rate Multicast RateVoice Vlan ¾ Port Voice Vlan ModeNumber OUI Address Vendor ¾ Security Mode of Voice Vlan Packet Type Processing ModeGlobal Config 12 Global ConfigurationPort Mode 13 Port ConfigOUI Config Required. On QoS→Voice VLAN→Port Config Required. On VLAN→802.1Q VLAN→Port ConfigOptional. On QoS→Voice VLAN→OUI Config page, you Required. On QoS→Voice VLAN→Global ConfigTime-Range Summary ACLTime-Range IndexTime-Range Create ¾ Create Holiday ACL ConfigHoliday Config ¾ Holiday Table¾ Rule Table ACL SummaryACL Create ¾ Create ACLRule ID MAC ACL¾ Create MAC ACL EtherTypeFragment Standard-IP ACL¾ Create Standard-IP ACL MaskExtend-IP ACL ¾ Create Extend-IP ACLPolicy Config Policy SummarySelect Policy Policy CreateAction Create Desired policy, please click the Delete button11 Action Create ¾ Create ActionPort Binding Policy BindingBinding Table ¾ Policy Bind TableDirection Displays the binding direction Vlan BindingEnter the ID of the Vlan you want to bind Application Example for ACL ¾ VLAN-Bind TableOn ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL Network Security IP-MAC BindingManual Binding Protect Type Select the Protect Type for the entry ¾ Manual Binding OptionEnter the Vlan ID ¾ Manual Binding TableARP Scanning End IP Address Dhcp SnoopingStart IP Address ScanNetwork diagram for DHCP-snooping implementation ¾ Dhcp Working Principle¾ Option Dhcp Cheating Attack Implementation Procedure ¾ Dhcp Cheating Attack163 Decline Threshold Decline Flow Control ¾ Option 82 Config¾ Port Config Port Select Customization Circuit ID Remote ID¾ Imitating Gateway ARP Inspection¾ Cheating Gateway 10 ARP Attack Cheating Gateway ¾ Cheating Terminal Hosts¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ ARP Detect ARP Detect¾ Trusted Port Required. On the Network Security→IP-MAC ARP DefendNetwork Security→ARP Defend ARP Statistics¾ ARP Defend SpeedIP Source Guard ¾ Illegal ARP Packet¾ IP Source Guard Config DoS DefendDoS Attack Type Description DoS Defend DoS DetectDetect 11.5Detect Time Attack Type¾ The Mechanism of an 802.1X Authentication System ¾ 802.1X Authentication Procedure178 179 ¾ 802.1X Timer ¾ Guest VlanGuest Vlan Authentication Method802.1X Guest Vlan IDServer Timeout Supplicant TimeoutRetry Times Control Type Control ModeRadius Server AuthorizedRequired. On the Network Security→802.1X→Radius On the Network Security→802.1X→Global Config802.1X Client Software Required. On the Network Security→802.1X→Port¾ Snmp Management Frame Snmp¾ Snmp Overview ¾ Snmp Versions¾ Snmp Configuration Outline ¾ MIB Introduction¾ Local Engine Snmp Config¾ Remote Engine View Type Snmp ViewMIB Object ID View Name¾ Group Config Snmp GroupSnmp User ¾ Group TablePrivacy Mode Auth ModeAuth Password Privacy PasswordAccess ¾ Community ConfigSnmp Community MIB View Required. On the SNMP→SNMP Config→GlobalRequired. On the SNMP→SNMP Config→SNMP ¾ Community TableOn the SNMP→SNMP Config→SNMP NotificationUser TimeoutUDP Port Retry¾ Rmon Group RmonRmon Group Function History Control Event Config¾ History Control Table Alarm Config ¾ Event TableRising Threshold VariableSample Type Rising Event200 Cluster ¾ Cluster RoleNeighbor Info 13.1 NDP¾ Introduction to Cluster ¾ Neighbor NDP Summary¾ Neighbor Info ¾ Port Status Displays the port number of the switch NDPDetail ： NDP ConfigAging Time Device Table Port Displays the port number of the switchNtdp Displays NDP status of the current portNtdp Summary Ntdp Summary Ntdp Interval Time Ntdp ConfigNtdp Hops Cluster EnableCluster Summary ¾ Global Cluster ¾ Global Config Cluster¾ Cluster Config ¾ Member InfoSwitch 11 Cluster Summary for Member Switch¾ Current Role Cluster Config¾ Role Change 14 Cluster Configuration for Commander Switch Member Config 16 Cluster Configuration for Individual SwitchDevice Name Cluster Topology¾ Create Member Member MAC18 Collect Topology ¾ Graphic ShowApplication Example for Cluster Function On Cluster→NDP→NDP Config page, enable NDP On Cluster→NTDP→NTDP Config page, enable220 System Monitor MaintenanceCPU Monitor Memory Monitor 14.2 Log Time ContentLog Table ModuleRemote Log ¾ Local Log ConfigLocal Log Log Buffer¾ Log Host Backup LogHost IP Cable Test ¾ Backup LogDevice Diagnose ¾ Cable TestLoopback ErrorSwitch is available LengthPing ¾ Ping ConfigNetwork Diagnose Test¾ Tracert Config TracertHardware Installation System Maintenance via FTPConfigure the Hyper Terminal 232 Download Firmware via bootrom menu 5Port SettingsTP-LINK ifconfig ip 172.31.70.22 mask 255.255.255.0 gateway TP-LINK upgrade You can only use the port 1 to upgradeTP-LINK start Start User Access Login Appendix a Specifications Appendix B Configuring the PCs Configure TCP/IP component238 Now Installation Guide Appendix C 802.1X Client Software241 242 Uninstall Software Figure C-7 InstallShield Wizard CompleteConfiguration Figure C-10 Uninstall Complete245 Figure C-15 Connection Status FAQ Appendix D Glossary Ieee 802.1D Multicast SwitchingGroup Attribute Registration Protocol Garp Ieee 802.1QLink Aggregation Port AuthenticationRemote Authentication Dial-in User Service Radius Link Aggregation Control Protocol LacpSpanning Tree Algorithm STA Simple Network Management Protocol SnmpSimple Network Time Protocol Sntp Telnet

10.2.5 Extend-IP ACL

Figure10-8 Create Extend-IP Rule

The following entries are displayed on this screen:

¾Create Extend-IP ACL

ACL ID:

Rule ID:

Fragment: