¾ Network Diagram ¾ Configuration Procedure | TP-Link TL-SL5428E

zNotebook A and Notebook B, special for meeting room, are of two different departments;

zThe two departments are in VLAN10 and VLAN20 respectively. The two notebooks can just access the server of their own departments, that is, Server A and Server B, in the two meeting rooms;

zThe MAC address of Notebook A is 00-19-56-8A-4C-71, Notebook B’s MAC address is 00-19-56-82-3B-70.

¾Network Diagram

¾Configuration Procedure

zConfigure Switch A

Step	Operation		Description

1	Configure	the	Required. On VLAN→802.1Q VLAN→Port Config page, configure the
	Link Type of the		link type of Port 11 and Port 12 as GENERAL and TRUNK respectively.
	ports

2	Create VLAN10		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 10, owning Port 11 and Port 12, and configure
			the egress rule of Port 11 as Untag.

3	Create VLAN20		Required. On VLAN→802.1Q VLAN→VLAN Config page, create a
			VLAN with its VLANID as 20, owning Port 11 and Port 12, and configure
			the egress rule of Port 11 as Untag.

4	Configure	MAC	On VLAN→MAC VLAN→MAC VLAN page, create MAC VLAN10 with
	VLAN 10		the MAC address as 00-19-56-8A-4C-71.

5	Configure	MAC	On VLAN→MAC VLAN→MAC VLAN page, create MAC VLAN10 with
	VLAN 20		the MAC address as 00-19-56-82-3B-70.

6	Port Enable		Required. On the VLAN→MAC VLAN→Port Enable page, select and
			enable Port 11 and Port 12 for MAC VLAN feature.

65

Image 73

TP-Link TL-SL5428E manual ¾ Network Diagram ¾ Configuration Procedure

Contents

Rev 1910010529 Copyright & Trademarks Contents Gvrp TC Protect 101 11.4.1 Ntdp 11.4.2 VII Package Contents Intended Readers About this GuideConventions Overview of This Guide Path Switch, which facilitates you to monitor the Igmp messages Return to Contents Main Features Overview of the SwitchIntroduction Front Panel Appearance Description¾ LEDs Name Status Indication Rear Panel Login Login to the SwitchConfiguration Return to Contents System Info SystemSystem Summary ¾ Port Status Port ¾ Port InfoType Rate ¾ Bandwidth Utilization Device Description¾ Device Description System Time ¾ Time Config¾ Time Info System IP User Table User Manage ¾ User Info User Config Password Config RestoreConfirm Password Retype the password User ID, Name, Access Level and status Operation Firmware Upgrade Config Backup¾ Config Backup System Reset System Reboot Access Control Access Security ¾ Session Config ¾ Access Control ConfigIP Address&Mask MAC Address ¾ Access User Number SSL Config ¾ Global Config SSH Config¾ Certificate Download ¾ Key Download Protocol Idle TimeoutMax Connect Key Type ¾ Configuration ProcedureDownload ¾ Network Requirements Application Example 2 for SSH Page Return to Contents Port Config SwitchingPort Port Select Description Port MirrorSpeed and Duplex Flow Control ¾ Mirrored Port ¾ Mirroring PortIngress Egress ¾ Port Security Port Security Max Learned MAC Port IsolationLearned Num Forward Portlist Select the port that to be forwarded to ¾ Port Isolation Config¾ Port Isolation List Forward Portlist Display the forwardlist LAG Table LAG ¾ LAG Table Aggregate ArithmeticGroup Number Member Static LAG ¾ LAG Config LAG will delete this LAG Lacp Config Admin Key ¾ Lacp ConfigSystem Priority Port Priority Traffic Summary Traffic Monitor¾ Auto Refresh Traffic Statistics MAC Address Relationship Type Configuration Way Aging outBound Address and the port ¾ Address Table ¾ Search Option Static Address MAC Address Displays the MAC address learned by the switchDisplays the corresponding Vlan ID of the MAC address ¾ Create Static Address ¾ Static Address Table Dynamic Address ¾ Dynamic Address Table ¾ Aging Config Bind Filtering Address ¾ Filtering Address Table ¾ Create Filtering Address Vlan implementation Vlan ¾ Link Types of ports 802.1Q Vlan ¾ Pvid Vlan Config Vlan ID Select ¾ Vlan TableDescription ： Members Operation ： Enter the ID number of Vlan ¾ Vlan ConfigIs valid or not ¾ Vlan Members Port Displays the port number ¾ Vlan Port Config Required. On the VLAN→802.1Q VLAN→VLAN Config Required. On the VLAN→802.1Q VLAN→Port Config page, set¾ Vlan of Port Vlan Description MAC Vlan Optional. On the VLAN→802.1Q VLAN→VLAN Config ¾ MAC Vlan Table Port EnableMAC Select Protocol Vlan Required. On the VLAN→MAC VLAN→Port Enable Protocol Template Protocol Vlan¾ Create Protocol Vlan ¾ Protocol Vlan Table ¾ Protocol Template Table ¾ Create Protocol Template Application Example for 802.1Q Vlan Required. On VLAN→802.1Q VLAN→VLAN Config page, create a Required. On VLAN→802.1Q VLAN→Port Config page, configureApplication Example for MAC Vlan Operation Description ¾ Network Diagram ¾ Configuration Procedure Application Example for Protocol Vlan Required. On VLAN→Protocol VLAN→Protocol Template Protocol type Value On VLAN→Protocol VLAN→Protocol Vlan page, create protocol Vlan Mapping VPN Config¾ VPN Up-link Ports ¾ Vlan Mapping Table ¾ Vlan Mapping Config Optional. On the VLAN→VLAN VPN→VPN Config Required. On the VLAN→VLAN VPN→VPN ConfigRequired. On the VLAN→VLAN VPN→Port Enable Required. On the VLAN→VLAN VPN→VLAN Mapping ¾ Garp Gvrp ¾ Gvrp Select Port Status Registration Mode ¾ Port Config Private Vlan Configuration Procedure ¾ The Elements of a Private Vlan ¾ Features of Private Vlan¾ Private Vlan Implementation Pvid ¾ Packet forwarding in Private Vlan Pvlan ¾ Private Vlan Table ¾ Create Private VlanPrimary Vlan Secondary Vlan Required. On the VLAN→Private VLAN→Port Configure Port Select the desired port for configuration Port Type¾ Private Vlan Port Table Required. On the VLAN→Private VLAN→PVLAN Application Example for Private Vlan Required. On the VLAN→802.1Q VLAN→VLAN Config page, click ¾ STP Elements Spanning Tree ¾ Bpdu Comparing Principle in STP mode ¾ STP Timers Step Operation ¾ STP Generation ¾ Rstp Elements Tips：¾ Mstp Elements ¾ Port Roles ¾ Port States STP Config STP Config Version Forward DelayHello Time Max Age STP Summary STP Summary Port Config ExtPath PriorityIntPath Edge Port Mstp Instance Region ConfigPort Role Port Status ¾ Region Config Instance Config ¾ Instance Table Instance Port ConfigInstance Clear Path Cost Instance ID Port Protect STP Security ¾ Bpdu Protect ¾ TC Protect¾ Bpdu Filter Root Protect Loop ProtectTC Protect Bpdu Protect 11 TC Protect TC Protect On Spanning Tree→STP Config→Port Config On Spanning Tree→STP Config→STP ConfigApplication Example for STP Function On Spanning Tree→MSTP Instance→Instance Bridge of Instance Configure Switch D ¾ Suggestion for Configuration ¾ Multicast Overview Multicast¾ Multicast Address Multicast IP Port ¾ Multicast Address Table ¾ Igmp Snooping Igmp Snooping¾ Igmp Snooping Process ¾ Igmp Messages ¾ Igmp Snooping Fundamentals Snooping Config Description Displays Igmp Snooping status Member ¾ Igmp Snooping Status Fast Leave Igmp Snooping Member Port Time Router Port TimeLeave Time Static Router Port Multicast→IGMP Snooping→VLAN Config Snooping→Snooping Config and Port ConfigMulticast Vlan Router Port ¾ Multicast Vlan Application Example for Multicast Vlan On the Multicast→IGMP Snooping→Snooping ConfigVlan Multicast→IGMP Snooping→Multicast Vlan Snooping→Port Config ¾ Configuration Procedure Step Operation DescriptionSnooping→Snooping Config Multicast IP Static Multicast IP Multicast IP Table ¾ Static Multicast IP Table ¾ Create Static Multicast IP-Range Multicast Filter Port Filter ¾ Port Filter Config Multicast→Multicast Filter→IP-Range Packet StatisticsMulticast→Multicast Filter→Port Filter ¾ Igmp Statistics QoS ¾ Priority Mode¾ QoS 802.1Q frame ¾ Schedule Mode SP-Mode DiffServ ¾ Port Priority ConfigPort Priority Displays the LAG number which the port belongs to ¾ Schedule Mode Config Schedule Mode 3 802.1P Priority ¾ 802.1P Priority Config¾ Priority Level Dscp Priority It ranges from 0 to ¾ Dscp Priority ConfigPriority Level Priority levels are labeled as TC0, TC1, TC2 and TC3 Bandwidth Control ¾ Rate Limit ConfigRate Limit Ingress Rate bps Storm ControlEgress Ratebps Broadcast Rate ¾ Storm Control ConfigBps Multicast Rate Voice Vlan ¾ Port Voice Vlan ModeNumber OUI Address Vendor Packet Type Processing Mode ¾ Security Mode of Voice Vlan 12 Global Configuration Global Config 13 Port Config Port Mode OUI Config Optional. On QoS→Voice VLAN→OUI Config page, you Required. On VLAN→802.1Q VLAN→Port ConfigRequired. On QoS→Voice VLAN→Port Config Required. On QoS→Voice VLAN→Global Config Time-Range ACLTime-Range Summary Index Time-Range Create Holiday Config ACL Config¾ Create Holiday ¾ Holiday Table ACL Create ACL Summary¾ Rule Table ¾ Create ACL ¾ Create MAC ACL MAC ACLRule ID EtherType ¾ Create Standard-IP ACL Standard-IP ACLFragment Mask ¾ Create Extend-IP ACL Extend-IP ACL Policy Summary Policy Config Action Create Policy CreateSelect Policy Desired policy, please click the Delete button ¾ Create Action 11 Action Create Binding Table Policy BindingPort Binding ¾ Policy Bind Table Direction Displays the binding direction Vlan BindingEnter the ID of the Vlan you want to bind ¾ VLAN-Bind Table Application Example for ACL On ACL→ACL Config→ACL Create page, create ACL On ACL→ACL Config→Standard-IP ACL page, select ACL IP-MAC Binding Network Security Manual Binding Enter the Vlan ID ¾ Manual Binding OptionProtect Type Select the Protect Type for the entry ¾ Manual Binding Table ARP Scanning Start IP Address Dhcp SnoopingEnd IP Address Scan ¾ Dhcp Working Principle Network diagram for DHCP-snooping implementation ¾ Option ¾ Dhcp Cheating Attack Dhcp Cheating Attack Implementation Procedure 163 ¾ Port Config Port Select ¾ Option 82 ConfigDecline Threshold Decline Flow Control Customization Circuit ID Remote ID ¾ Imitating Gateway ARP Inspection¾ Cheating Gateway ¾ Cheating Terminal Hosts 10 ARP Attack Cheating Gateway ¾ Man-In-The-Middle Attack ¾ ARP Flooding Attack ¾ ARP Detect ARP Detect¾ Trusted Port Required. On the Network Security→IP-MAC ARP DefendNetwork Security→ARP ¾ ARP Defend ARP StatisticsDefend Speed ¾ Illegal ARP Packet IP Source Guard DoS Defend ¾ IP Source Guard Config DoS Attack Type Description DoS Detect DoS Defend Detect Time 11.5Detect Attack Type ¾ 802.1X Authentication Procedure ¾ The Mechanism of an 802.1X Authentication System 178 179 ¾ Guest Vlan ¾ 802.1X Timer 802.1X Authentication MethodGuest Vlan Guest Vlan ID Server Timeout Supplicant TimeoutRetry Times Radius Server Control ModeControl Type Authorized 802.1X Client Software On the Network Security→802.1X→Global ConfigRequired. On the Network Security→802.1X→Radius Required. On the Network Security→802.1X→Port ¾ Snmp Overview Snmp¾ Snmp Management Frame ¾ Snmp Versions ¾ MIB Introduction ¾ Snmp Configuration Outline ¾ Local Engine Snmp Config¾ Remote Engine MIB Object ID Snmp ViewView Type View Name Snmp Group ¾ Group Config ¾ Group Table Snmp User Auth Password Auth ModePrivacy Mode Privacy Password Access ¾ Community ConfigSnmp Community Required. On the SNMP→SNMP Config→SNMP Required. On the SNMP→SNMP Config→GlobalMIB View ¾ Community Table Notification On the SNMP→SNMP Config→SNMP UDP Port TimeoutUser Retry ¾ Rmon Group RmonRmon Group Function History Control Event Config¾ History Control Table ¾ Event Table Alarm Config Sample Type VariableRising Threshold Rising Event 200 ¾ Cluster Role Cluster Neighbor Info 13.1 NDP¾ Introduction to Cluster ¾ Neighbor NDP Summary¾ Neighbor Info NDP ¾ Port Status Displays the port number of the switch Detail ： NDP ConfigAging Time Ntdp Port Displays the port number of the switchDevice Table Displays NDP status of the current port Ntdp Summary Ntdp Summary Ntdp Interval Time Ntdp ConfigNtdp Hops Cluster EnableCluster Summary ¾ Cluster Config ¾ Global Config Cluster¾ Global Cluster ¾ Member Info 11 Cluster Summary for Member Switch Switch ¾ Current Role Cluster Config¾ Role Change 14 Cluster Configuration for Commander Switch 16 Cluster Configuration for Individual Switch Member Config ¾ Create Member Cluster TopologyDevice Name Member MAC ¾ Graphic Show 18 Collect Topology Application Example for Cluster Function On Cluster→NTDP→NTDP Config page, enable On Cluster→NDP→NDP Config page, enable NDP 220 System Monitor MaintenanceCPU Monitor Memory Monitor 14.2 Log Log Table ContentTime Module Local Log ¾ Local Log ConfigRemote Log Log Buffer ¾ Log Host Backup LogHost IP Device Diagnose ¾ Backup LogCable Test ¾ Cable Test Switch is available ErrorLoopback Length Network Diagnose ¾ Ping ConfigPing Test Tracert ¾ Tracert Config Hardware Installation System Maintenance via FTPConfigure the Hyper Terminal 232 5Port Settings Download Firmware via bootrom menu TP-LINK upgrade You can only use the port 1 to upgrade TP-LINK ifconfig ip 172.31.70.22 mask 255.255.255.0 gateway TP-LINK start Start User Access Login Appendix a Specifications Configure TCP/IP component Appendix B Configuring the PCs 238 Now Appendix C 802.1X Client Software Installation Guide 241 242 Figure C-7 InstallShield Wizard Complete Uninstall Software Figure C-10 Uninstall Complete Configuration 245 Figure C-15 Connection Status FAQ Appendix D Glossary Group Attribute Registration Protocol Garp Multicast SwitchingIeee 802.1D Ieee 802.1Q Remote Authentication Dial-in User Service Radius Port AuthenticationLink Aggregation Link Aggregation Control Protocol Lacp Simple Network Time Protocol Sntp Simple Network Management Protocol SnmpSpanning Tree Algorithm STA Telnet