TP-Link JetStream TL-SG3424P User Manual Download Page 149

Page: 149 / 263

Standard-IP ACL

and

Extend-IP ACL

pages.

11.2.1 ACL Summary

On this page, you can view the current ACLs configured in the switch.

Choose the menu

ACL

→

ACL Config

→

ACL Summary

to load the following page.

Figure 11-4 ACL Summary

The following entries are displayed on this screen:

Search Option

Select ACL:

Select the ACL you have created

ACL Type:

Displays the type of the ACL you select.

Rule Order:

Displays the rule order of the ACL you select.

Rule Table

Here you can view the information about the ACL rule you select.

11.2.2 ACL Create

On this page you can create ACLs.

Choose the menu

ACL

→

ACL Config

→

ACL Create

to load the following page.

Figure 11-5 ACL Create

The following entries are displayed on this screen:

Create ACL

ACL ID:

Enter ACL ID of the ACL you want to create.

Rule Order:

User Config order is set to be match order in this ACL.

140

Summary of Contents for JetStream TL-SG3424P

Page 1: ...TL SG3424P JetStream L2 Managed PoE Switch REV2 0 0 1910010781...

Page 2: ...a commercial environment This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to...

Page 3: ...ect the product or the power adapter from the power source z Don t disassemble the product or make repairs yourself You run the risk of electric shock and voiding the limited warranty If you need serv...

Page 4: ...10 3 2 Configuration 10 Chapter 4 System 12 4 1 System Info 12 4 1 1 System Summary 12 4 1 2 Device Description 14 4 1 3 System Time 14 4 1 4 Daylight Saving Time 15 4 1 5 System IP 17 4 2 User Manag...

Page 5: ...Dynamic Address 50 5 4 4 Filtering Address 52 Chapter 6 VLAN 54 6 1 802 1Q VLAN 55 6 1 1 VLAN Config 57 6 1 2 Port Config 59 6 2 MAC VLAN 61 6 3 Protocol VLAN 62 6 3 1 Protocol Group Table 65 6 3 2 P...

Page 6: ...P Table 108 8 2 2 Static Multicast IP 109 8 3 Multicast Filter 110 8 3 1 IP Range 110 8 3 2 Port Filter 111 8 4 Packet Statistics 113 Chapter 9 QoS 115 9 1 DiffServ 118 9 1 1 Port Priority 118 9 1 2 D...

Page 7: ...cy Config 144 11 3 1 Policy Summary 144 11 3 2 Policy Create 144 11 3 3 Action Create 145 11 4 Policy Binding 146 11 4 1 Binding Table 146 11 4 2 Port Binding 147 11 4 3 VLAN Binding 147 11 5 Applicat...

Page 8: ...1 Basic Config 199 14 1 1 Global Config 199 14 1 2 Port Config 200 14 2 Device Info 201 14 2 1 Local Info 201 14 2 2 Neighbor Info 202 14 3 Device Statistics 203 14 4 LLDP MED 204 14 4 1 Global Confi...

Page 9: ...16 2 1 Log Table 228 16 2 2 Local Log 229 16 2 3 Remote Log 229 16 2 4 Backup Log 230 16 3 Device Diagnostics 231 16 3 1 Cable Test 231 16 3 2 Loopback 232 16 4 Network Diagnostics 232 16 4 1 Ping 23...

Page 10: ...cord One console cable Two mounting brackets and other fittings Installation Guide Resource CD for TL SG3424P switch including This User Guide Other Helpful Information Note Make sure that the packag...

Page 11: ...e menu structure System System Info System Summary means the System Summary page under the System Info menu option that is located under the System menu Bold font indicates a button a toolbar icon men...

Page 12: ...t changing the 802 1Q VLAN configuration z Protocol VLAN Create VLANs in application layer to make some special data transmitted in the specified VLAN z GVRP GVRP allows the switch to automatically ad...

Page 13: ...rol the access of the illegal users to the network Here mainly introduces z Time Range Configure the effective time for ACL rules z ACL Config ACL rules z Policy Config Configure operation policies z...

Page 14: ...r function to establish and maintain cluster Chapter 16 Maintenance This module is used to assemble the commonly used system tools to manage the switch Here mainly introduces z System Monitor Monitor...

Page 15: ...e functions with excellent performance and is friendly to manage which can fully meet the need of the users demanding higher networking performance 2 2 Main Features Resiliency and Availability Link a...

Page 16: ...For 100M module please select 100MFD while select 1000MFD for gigabit module By default the Speed and Duplex mode of SFP port is 1000MFD Console Port Designed to connect with the serial port of a comp...

Page 17: ...he corresponding port When the PoE LED is on the port LED is indicating the power supply status LED Status Indication On The switch is powered on Off The switch is powered off or power supply is abnor...

Page 18: ...You can also ground the switch through the PE Protecting Earth cable of AC cord or with Ground Cable For detail information please refer to Installation Guide AC Power Socket Connect the female conne...

Page 19: ...IP address is 192 168 0 x x is any number from 2 to 254 Subnet Mask is 255 255 255 0 For the detailed instructions as to how to do this please refer to Appendix B 2 After a moment a login window will...

Page 20: ...tive before the switch is rebooted If you want to keep the configurations effective even the switch is rebooted please click Save Config You are suggested to click Save Config before cutting off the p...

Page 21: ...this page you can view the port connection status and the system information The port status diagram shows the working status of 24 10 100 1000Mbps RJ45 ports and 4 SFP ports of the switch Ports label...

Page 22: ...the type of the port Speed Displays the maximum transmission rate of the port Status Displays the connection status of the port Click a port to display the bandwidth utilization on this port The actua...

Page 23: ...entries are displayed on this screen Device Description Device Name Enter the name of the switch Device Location Enter the location of the switch System Contact Enter your contact information 4 1 3 S...

Page 24: ...ted to a NTP server z Time Zone Select your local time z Primary Secondary NTP Server Enter the IP Address for the NTP server z Update Rate Specify the rate fetching time from NTP server Synchronize w...

Page 25: ...y in March 01 00 Last Sunday in October 01 00 z New Zealand First Sunday in October 02 00 Last Sunday in March 03 00 Recurring Mode Specify the DST configuration in recurring mode This configuration i...

Page 26: ...splays MAC Address of the switch IP Address Mode Select the mode to obtain IP Address for the switch z Static IP When this option is selected you should enter IP Address Subnet Mask and Default Gatewa...

Page 27: ...efault IP address is 192 168 0 1 4 2 User Management User Management functions to configure the user name and password for users to log on to the Web management page with a certain access level so as...

Page 28: ...ssword for users login Confirm Password Retype the password User Table Select Select the desired entry to delete the corresponding user information It is multi optional The current user information ca...

Page 29: ...g Restore Restore Config Click the Restore Config button to restore the backup configuration file It will take effect after the switch automatically reboots Note 1 It will take a few minutes to restor...

Page 30: ...ware Upgrade The switch system can be upgraded via the Web management page To upgrade the system is to get more functions and better performance Go to http www tp link com to download the updated firm...

Page 31: ...witch is reset Choose the menu System System Tools System Reset to load the following page Figure 4 14 System Reset Note After the system is reset the switch will be reset to the default and all the s...

Page 32: ...this option to limit the ports for login IP Address Mask These fields can be available for configuration only when IP based mode is selected Only the users within the IP range you set here are allowe...

Page 33: ...to the correct users and servers 2 Encrypt the data transmission to prevent the data being intercepted 3 Maintain the integrality of the data to prevent the data being altered in the transmission Adop...

Page 34: ...ured connection using https please enter https into the URL field of the browser 4 It may take more time for https connection than that for http connection because https connection involves authentica...

Page 35: ...ssfully downloaded the certificate authentication will be preferred for SSH access to the switch Choose the menu System Access Security SSH Config to load the following page Figure 4 17 SSH Config The...

Page 36: ...d file will result in the SSH access to the switch via Password authentication Application Example 1 for SSH Network Requirements 1 Log on to the switch via password authentication using SSH and the S...

Page 37: ...ient software is recommended Configuration Procedure 1 Select the key type and key length and generate SSH key Note 1 The key length is in the range of 256 to 3072 bits 2 During the key generation ran...

Page 38: ...h download the public key file saved in the computer to the switch Note 1 1 The key type should accord with the type of the key file 2 2 The SSH key downloading cannot be interrupted 4 Download the pr...

Page 39: ...on to the interface of PuTTY and enter the IP address for login After successful authentication please enter the login user name If you log on to the switch without entering password it indicates tha...

Page 40: ...s disabled the packets on the port will be discarded Disabling the port which is vacant for a long time can reduce the power consumption effectively And you can enable the port when it is in need The...

Page 41: ...chronize the speed with its peer to avoid the packet loss caused by congestion LAG Displays the LAG number which the port belongs to Note 1 The switch cannot be managed through the disabled port Pleas...

Page 42: ...one Mirrored Port Displays the mirrored ports Operation Click Edit to configure the mirror group Click Edit to display the following figure Figure 5 3 Mirroring Port The following entries are displaye...

Page 43: ...ort and the MAC address of the connected device which is the base of the packet forwarding The capacity of MAC Address Table is fixed MAC Address Attack is the attack method that the attacker takes to...

Page 44: ...e for the port Dynamic When Dynamic mode is selected the learned MAC address will be deleted automatically after the aging time Static When Static mode is selected the learned MAC address will be out...

Page 45: ...Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forward portlist Choose the menu Swit...

Page 46: ...h can detect loops using loopback detection packets When a loop is detected the switch will display an alert or further block the corresponding port according to the port configuration Choose the menu...

Page 47: ...splay an alert Port based When a loop is detected display an alert and block the port Recovery Mode Select the mode how the blocked port recovers to normal status Auto Block status can be automaticall...

Page 48: ...00Mbps 2000Mbps 4 because the bandwidth of each member port is 2000Mbps counting the up linked speed of 1000Mbps and the down linked speed of 1000Mbps 2 The traffic load of the LAG will be balanced am...

Page 49: ...Number Displays the LAG number here Description Displays the description of LAG Member Displays the LAG member Operation Allows you to view or modify the information for each LAG z Edit Click to modi...

Page 50: ...er The switch can dynamically group similarly configured ports into a single logical link which will highly extend the bandwidth and flexibly balance the load With the LACP feature enabled the port wi...

Page 51: ...ing page Figure 5 10 LACP Config The following entries are displayed on this screen Global Config System Priority Specify the system priority for the switch The system priority and MAC address constit...

Page 52: ...ll be considered as the preferred one If the two port priorities are equal the port with smaller port number is preferred Status Enable Disable the LACP feature for your selected port LAG Displays the...

Page 53: ...lect the corresponding port based on the port number you entered Port Displays the port number Packets Rx Displays the number of packets received on the port The error packets are not counted in Packe...

Page 54: ...to Enable Disable refreshing the Traffic Summary automatically Refresh Rate Enter a value in seconds to specify the refresh interval Statistics Port Enter a port number and click the Select button to...

Page 55: ...23 bytes long PktsOver1023Octets Displays the number of the received packets including error packets that are over 1023 bytes Collisions Displays the number of collisions experienced by a port during...

Page 56: ...same VLAN Filtering Address Table Manually configuring No Yes Table 5 1 Types and features of Address Table This function includes four submenus Address Table Static Address Dynamic Address and Filter...

Page 57: ...ess learned by the switch VLAN ID Displays the corresponding VLAN ID of the MAC address Port Displays the corresponding Port number of the MAC address Type Displays the Type of the MAC address Aging S...

Page 58: ...entry in the Static Address Table z MAC Enter the MAC address of your desired entry z VLAN ID Enter the VLAN ID number of your desired entry z Port Enter the Port number of your desired entry Static...

Page 59: ...the Static Address Table cannot be added to the Filtering Address Table or bound to a port dynamically 4 This static MAC address bound function is not available if the 802 1X feature is enabled 5 4 3...

Page 60: ...arch Option Search Option Select a Search Option from the pull down list and click the Search button to find your desired entry in the Dynamic Address Table z MAC Enter the MAC address of your desired...

Page 61: ...ch may fill up the MAC address table This prevents the MAC address table from updating with network changes in time If the aging time is too short the switch may remove valid MAC address entries This...

Page 62: ...ry Filtering Address Table Select Select the entry to delete the corresponding filtering address It is multi optional MAC Address Displays the filtering MAC Address VLAN ID Displays the corresponding...

Page 63: ...ackets are limited in a VLAN Hosts in the same VLAN communicate with one another via Ethernet whereas hosts in different VLANs communicate with one another through the Internet devices such as Router...

Page 64: ...3 bit field referring to 802 1p priority Refer to section QoS QoS profile for details 3 CFI CFI is a 1 bit field indicating whether the MAC address is encapsulated in the standard format in different...

Page 65: ...mines the default broadcast domain of the port i e when the port receives UL packets or broadcast packets the port will broadcast the packets in its default VLAN Different packets tagged or untagged w...

Page 66: ...VLAN Table VLAN ID Select Click the Select button to quick select the corresponding entry based on the VLAN ID number you entered Select Select the desired entry to delete the corresponding VLAN It is...

Page 67: ...k the Check button to check whether the VLAN ID you entered is valid or not VLAN Members Port Select Click the Select button to quick select the corresponding entry based on the port number you entere...

Page 68: ...e 802 1Q VLAN please acquaint yourself with all the devices connected to the switch in order to configure the ports properly Choose the menu VLAN 802 1Q VLAN Port Config to load the following page Fig...

Page 69: ...t belongs to PVID Enter the PVID number of the port LAG Displays the LAG to which the port belongs VLAN Click the Detail button to view the information of the VLAN to which the port belongs Click the...

Page 70: ...without changing the configuration of VLAN members The packet in MAC VLAN is processed in the following way 1 When receiving an untagged packet the switch matches the packet with the current MAC VLAN...

Page 71: ...N Config page click the Create button to create a VLAN Enter the VLAN ID and the description for the VLAN Meanwhile specify its member ports 3 Create MAC VLAN Required On the VLAN MAC VLAN page create...

Page 72: ...02 2 802 3 encapsulation contains the following three extended formats z 802 3 raw encapsulation Only the Length field is encapsulated after source MAC address field and destination MAC address field...

Page 73: ...acket belongs to The following table shows the common used encapsulation formats supported in network layer protocol and the protocol templates are for reference Meanwhile some protocol templates has...

Page 74: ...t its enabled port to be the member of corresponding 802 1Q VLAN so as to ensure the packets forwarded normally 6 3 1 Protocol Group Table On this page you can create Protocol VLAN and view the inform...

Page 75: ...he 802 1Q VLANs the ingress port belongs to Protocol Group Member Select your desired port for Protocol VLAN Group 6 3 3 Protocol Template The Protocol Template should be created before configuring th...

Page 76: ...t the desired entry It is multi optional ID Displays the index of the protocol template Protocol Name Displays the name of the protocol template Ether Type Displays the Ethernet protocol type field in...

Page 77: ...and enter the VLAN ID to create a Protocol VLAN 5 Modify View VLAN Optional On the VLAN Protocol VLAN Protocol VLAN page click the Edit button to modify view the information of the corresponding VLAN...

Page 78: ...ort 3 and Port 4 z Configure Switch B Step Operation Description 1 Configure the Link Type of the ports Required On VLAN 802 1Q VLAN Port Config page configure the link type of Port 7 Port 6 and Port...

Page 79: ...ts Required On VLAN 802 1Q VLAN Port Config page configure the link type of Port 11 and Port 12 as GENERAL and TRUNK respectively 2 Create VLAN10 Required On VLAN 802 1Q VLAN VLAN Config page create a...

Page 80: ...reate MAC VLAN10 with the MAC address as 00 19 56 82 3B 70 z Configure Switch C Step Operation Description 1 Configure the Link Type of the ports Required On VLAN 802 1Q VLAN Port Config page configur...

Page 81: ...n Description 1 Configure the Link Type of the ports Required On VLAN 802 1Q VLAN Port Config page configure the link type of Port 4 and Port 5 as ACCESS and configure the link type of Port 3 as GENER...

Page 82: ...rom the other entity or configuring some attributes statically the device also sends out a Join message in order to be registered by the other GARP entities Leave Message When a GARP entity expects ot...

Page 83: ...ers can be reached and so on The switch also propagates the local VLAN registration information to other switches so that all the switching devices in the same switched network can have the same VLAN...

Page 84: ...ort number you entered Select Select the desired port for configuration It is multi optional Port Displays the port number Status Enable Disable the GVRP feature for the port The port type should be s...

Page 85: ...tiseconds Leave Timer Once the Leave Timer is set the GARP port receiving a Leave message will start its Leave timer and deregister the attribute information if it does not receive a Join message agai...

Page 86: ...hrough the designated bridge The switch with the lowest bridge ID will be chosen as the designated bridge Root Path Cost Indicates the sum of the path cost of the root port and the path cost of all th...

Page 87: ...e network at once the temporal loop will occur if the port transits its state immediately Therefore STP adopts a state transit mechanism that is the new root port and the designated port begins to for...

Page 88: ...way Step Operation 1 For each switch except the one chosen as the root bridge in a network the port that receives the BPDU with the highest priority is chosen as the root port of the switch 2 Using th...

Page 89: ...andard not only enables spanning trees to converge rapidly but also enables packets of different VLANs to be forwarded along their respective paths so as to provide redundant links with a better load...

Page 90: ...his status the port can only receive BPDU packets z Disconnected In this status the port is not participating in the STP Port Roles In an MSTP the following roles exist z Root Port Indicates the port...

Page 91: ...ing trees on the switch can be implemented on STP Config and STP Summary pages 7 1 1 STP Config Before configuring spanning trees you should make clear the roles each switch plays in each spanning tre...

Page 92: ...default value is 32768 and should be exact divisor of 4096 Hello Time Enter a value from 1 to 10 in seconds to specify the interval to send BPDU packets It is used to test the links 2 Hello Time 1 Ma...

Page 93: ...lt in duplicated configuration being sent frequently which increases the network load of the switches and wastes network resources The default value is recommended 3 A too small max age parameter may...

Page 94: ...Figure 7 5 STP Summary 7 2 Port Config On this page you can configure the parameters of the ports for CIST Choose the menu Spanning Tree Port Config to load the following page 85...

Page 95: ...ing the root port The lower value has the higher priority IntPath IntPath Cost is used to choose the path and calculate the path costs of ports in an MST region It is an important criterion on determi...

Page 96: ...edge ports and enable the BPDU protection function as well This not only enables these ports to transit to forwarding state rapidly but also secures your network 2 All the links of ports in a LAG can...

Page 97: ...on 7 3 2 Instance Config Instance Configuration a property of MST region is used to describe the VLAN to Instance mapping configuration You can assign VLAN to different instances appropriate to your n...

Page 98: ...ll be automatically mapped to the CIST VLAN Instance Mapping VLAN ID Enter the desired VLAN ID After modification here the new VLAN ID will be added to the corresponding instance ID and the previous V...

Page 99: ...ays the port number of the switch Priority Enter the priority of the port in the instance It is an important criterion on determining if the port connected to this port will be chosen as the root port...

Page 100: ...TP Security function can be implemented on Port Protect and TC Protect pages Port Protect function is to prevent the devices from any malicious attack against STP features 7 4 1 Port Protect On this p...

Page 101: ...he maximum number you set in the TC threshold field the switch will not performs the removing operation in the TC protect cycle Such a mechanism prevents the switch from frequently removing MAC addres...

Page 102: ...ulating STP because of link failures and network congestions Root Protect Root Protect is to prevent wrong network topology change caused by the role change of the current legal root bridge TC Protect...

Page 103: ...ult value is 20 TC Protect Cycle Enter a value from 1 to 10 to specify the TC Protect Cycle The default value is 5 7 5 Application Example for STP Function Network Requirements z Switch A B C D and E...

Page 104: ...ion 1 Configure ports On VLAN 802 1Q VLAN page configure the link type of the related ports as Trunk and add the ports to VLAN 101 VLAN 106 The detailed instructions can be found in the section 802 1Q...

Page 105: ...nstance 2 On Spanning Tree MSTP Instance Instance Config page configure the priority of Instance 2 to be 0 z Configure Switch D Step Operation Description 1 Configure ports On VLAN 802 1Q VLAN page co...

Page 106: ...estion for Configuration z Enable TC Protect function for all the ports of switches z Enable Root Protect function for all the ports of root bridges z Enable Loop Protect function for the non edge por...

Page 107: ...suitable for networks with sparsely users whereas broadcast is suitable for networks with densely distributed users When the number of users requiring this information is not certain unicast and broa...

Page 108: ...relationship is described as Figure 8 2 Figure 8 2 Mapping relationship between multicast IP address and multicast MAC address The high order 4 bits of the IP multicast address are 1110 identifying t...

Page 109: ...GMP report message from the host within a period of time IGMP Messages The switch running IGMP Snooping processes the IGMP messages of different types as follows 1 IGMP Query Message IGMP query messag...

Page 110: ...witch port connected to a multicast group member 2 Timers Router Port Time Within the time if the switch does not receive IGMP query message from the router port it will consider this port is not a ro...

Page 111: ...ticast Select the operation for the switch to process unknown multicast Forward or Discard IGMP Snooping Status Description Displays IGMP Snooping status Member Displays the member of the correspondin...

Page 112: ...port the switch will immediately remove this port from the multicast group upon receiving IGMP leave messages LAG Displays the LAG number which the port belongs to Note 1 Fast Leave on the port is eff...

Page 113: ...t will consider this port is not a member port any more Leave Time Specify the interval between the switch receiving a leave message from a host and the switch removing the host from the multicast gro...

Page 114: ...router will duplicate this multicast information and deliver each VLAN owning a receiver one copy This mode wastes a lot of bandwidth The problem above can be solved by configuring a multicast VLAN B...

Page 115: ...t receive multicast streams 2 The Multicast VLAN won t take effect unless you first complete the configuration for the corresponding VLAN owning the port on the 802 1Q VLAN page 3 The link type of the...

Page 116: ...ends multicast streams via the router and the streams are transmitted to user A and user B through the switch Router Its WAN port is connected to the multicast source its LAN port is connected to the...

Page 117: ...Snooping function for port 3 port4 and port 5 on Multicast IGMP Snooping Port Config page 4 Enable Multicast VLAN Enable Multicast VLAN configure the VLAN ID of a multicast VLAN as 3 and keep the othe...

Page 118: ...D Displays the VLAN ID of the multicast group Forward Port Displays the forward port of the multicast group Type Displays the type of the multicast IP Note If the configuration on VLAN Config page and...

Page 119: ...f the multicast group Forward Port Displays the forward port of the multicast group 8 3 Multicast Filter When IGMP Snooping is enabled you can specified the multicast IP range the ports can join so as...

Page 120: ...you entered Select Select the desired entry to delete or modify the corresponding IP range It is multi optional IP Range ID Displays IP range ID Start Multicast IP Displays start multicast IP of the...

Page 121: ...ticast IP is in the filtering IP range z Permit Only the multicast packets whose multicast IP is in the IP range will be processed z Deny Only the multicast packets whose multicast IP is not in the IP...

Page 122: ...lter page 8 4 Packet Statistics On this page you can view the multicast data traffic on each port of the switch which facilitates you to monitor the IGMP messages in the network Choose the menu Multic...

Page 123: ...ts the port received Report Packet V1 Displays the number of IGMPv1 report packets the port received Report Packet V2 Displays the number of IGMPv2 report packets the port received Report Packet V3 Di...

Page 124: ...ackets to different priority queues based on the priority modes This switch implements three priority modes based on port on 802 1P and on DSCP z Queue scheduling algorithm When the network is congest...

Page 125: ...ment page you can configure different DS field mapping to the corresponding priority levels Non IP datagram with 802 1Q tag are mapped to different priority levels based on 802 1P priority mode the un...

Page 126: ...The default weight value ratio of TC0 TC1 TC2 and TC3 is 1 2 4 8 Figure 9 5 WRR Mode 3 SP WRR Mode Strict Priority Weight Round Robin Mode In this mode this switch provides two scheduling groups SP g...

Page 127: ...ng algorithms The port priorities are labeled as CoS0 CoS1 CoS7 The DiffServ function can be implemented on Port Priority DSCP Priority 802 1P CoS mapping and Schedule Mode pages 9 1 1 Port Priority O...

Page 128: ...page you can configure DSCP priority DSCP DiffServ Code Point is a new definition to IP ToS field given by IEEE This field is used to divide IP datagram into 64 priorities When DSCP Priority is enabl...

Page 129: ...1P CoS mapping page configure the mapping relation between the 802 1P priority and TC 2 Select a schedule mode Required On QoS DiffServ Schedule Mode page select a schedule mode 9 1 3 802 1P CoS mapp...

Page 130: ...schedule mode for the switch When the network is congested the problem that many packets complete for resources must be solved usually in the way of queue scheduling The switch will control the forwa...

Page 131: ...in the WRR group will take up the bandwidth according to their ratio 1 2 4 Equ Mode Equal Mode In this mode all the queues occupy the bandwidth equally The weight value ratio of all the queues is 1 1...

Page 132: ...ed as the real Egress rate LAG Displays the LAG number which the port belongs to Note 1 If you enable ingress rate limit feature for the storm control enabled port storm control feature will be disabl...

Page 133: ...ded Select Disable to disable the storm control function for the port Multicast Rate bps Select the bandwidth for receiving multicast packets on the port The packet traffic exceeding the bandwidth wil...

Page 134: ...00 03 6B 00 00 00 Cisco phone 3 00 04 0D 00 00 00 Avaya phone 4 00 60 B9 00 00 00 Philips NEC phone 5 00 D0 1E 00 00 00 Pingtel phone 6 00 E0 75 00 00 00 Polycom phone 7 00 E0 BB 00 00 00 3com phone T...

Page 135: ...VLAN mode and voice stream processing mode Security Mode of Voice VLAN When voice VLAN is enabled for a port you can configure its security mode to filter data stream If security mode is enabled the...

Page 136: ...LAN Global Config to load the following page Figure 9 12 Global Configuration The following entries are displayed on this screen Global Config Voice VLAN Select Enable Disable Voice VLAN function VLAN...

Page 137: ...ort Config Port Select Click the Select button to quick select the corresponding port based on the port number you entered Select Select the desired port for voice VLAN configuration It is multi optio...

Page 138: ...t is a voice packet by checking its OUI address The switch analyzes the received packets If the packets recognized as voice packets the access port will be automatically added to the Voice VLAN Choose...

Page 139: ...On VLAN 802 1Q VLAN Port Config page click the Create button to create a VLAN 3 Add OUI address Optional On QoS Voice VLAN OUI Config page you can check whether the switch is supporting the OUI templa...

Page 140: ...bility In compliance with IEEE 802 3af and IEEE 802 3at global organizations can deploy PoE everywhere without concern for any local variance in AC power standards outlets plugs or reliability z Wide...

Page 141: ...PoE switch s real time remaining system power Port Config Port Select Click the Select button to quick select the corresponding entry based on the port number you entered Select Select the desired po...

Page 142: ...me current Voltage V Displays the port s real time voltage PD Class Displays the class the linked PD Powered Device belongs to Power Status Displays the port s real time power status 10 1 2 PoE Profil...

Page 143: ...e system time is not within the time range On this switch absolute time week time and holiday can be configured Configure an absolute time section in the form of the start date to the end date to make...

Page 144: ...played on this screen Create Time Range Name Enter the name of the time range for time identification Exclude Holiday Select Exclude Holiday and the port based on this time range may not supply power...

Page 145: ...gement Choose the menu PoE PoE Time Range PoE Holiday Create to load the following page Figure 10 5 Holiday Configuration The following entries are displayed on this screen Create Holiday Start Date S...

Page 146: ...ckets can be filtered by differentiating the time ranges On this switch absolute time week time and holiday can be configured Configure an absolute time section in the form of the start date to the en...

Page 147: ...The ACL rule based on this time range takes effect only when the system time is within the holiday Absolute Select Absolute to configure absolute time range The ACL rule based on this time range takes...

Page 148: ...the name of the holiday Holiday Table Select Select the desired entry to delete the corresponding holiday Index Displays the index of the holiday Holiday Name Displays the name of the holiday Start Da...

Page 149: ...ave created ACL Type Displays the type of the ACL you select Rule Order Displays the rule order of the ACL you select Rule Table Here you can view the information about the ACL rule you select 11 2 2...

Page 150: ...le ID Enter the rule ID Operation Select the operation for the switch to process packets which match the rules z Permit Forward packets z Deny Discard Packets S MAC Enter the source MAC address contai...

Page 151: ...he operation for the switch to process packets which match the rules z Permit Forward packets z Deny Discard Packets S IP Enter the source IP address contained in the rule D IP Enter the destination I...

Page 152: ...rule Mask Enter IP address mask If it is set to 1 it must strictly match the address IP Protocol Select IP protocol contained in the rule TCP Flag Configure TCP flag when TCP is selected from the pul...

Page 153: ...licy Summary The following entries are displayed on this screen Search Option Select Policy Select name of the desired policy for view If you want to delete the desired policy please click the Delete...

Page 154: ...orresponding actions for the policy Choose the menu ACL Policy Config Action Create to load the following page Figure 11 11 Action Create The following entries are displayed on this screen Create Acti...

Page 155: ...the local priority for the data packets those match the corresponding ACL 11 4 Policy Binding Policy Binding function can have the policy take its effect on a specific port VLAN The policy will take...

Page 156: ...policy to the port The following entries are displayed on this screen Port Bind Config Policy Name Select the name of the policy you want to bind Port Enter the number of the port you want to bind Por...

Page 157: ...configuration pages configure ACL rules to match packets 3 Configure Policy Required On ACL Policy Config configuration pages configure the policy to control the data packets those match the correspo...

Page 158: ...00 18 00 2 Configure for requirement 1 On ACL ACL Config ACL Create page create ACL 11 On ACL ACL Config MAC ACL page select ACL 11 create Rule 1 configure the operation as Permit configure the S MAC...

Page 159: ...255 0 configure the time range as work_time On ACL Policy Config Action Create page add ACL 100 to Policy limit1 On ACL Policy Binding Port Binding page select Policy limit1 to bind to port 3 4 Config...

Page 160: ...connected port number of the Hosts in the LAN via the ARP Scanning function and bind them conveniently You are only requested to enter the range of the IP address on the ARP Scanning page for the sca...

Page 161: ...isplays the MAC Address of the Host VLAN ID Displays the VLAN ID here Port Displays the number of port connected to the Host Protect Type Allows you to view and modify the Protect Type of the entry So...

Page 162: ...nding Table Select Select the desired entry to be deleted It is multi optional Host Name Displays the Host Name here IP Address Displays the IP Address of the Host MAC Address Displays the MAC Address...

Page 163: ...try related to the IP address of Host B exists If yes Host A will directly send the packets to Host B If the corresponding MAC address is not found in the ARP Table Host A will broadcast ARP request p...

Page 164: ...N ID Displays the VLAN ID here Port Displays the number of port connected to the Host Protect Type Displays the Protect Type of the entry Collision Displays the Collision status of the entry z Warning...

Page 165: ...gure 12 5 Network diagram for DHCP snooping implementation For different DHCP Clients DHCP Server provides three IP address assigning methods 4 Manually assign the IP address Allows the administrator...

Page 166: ...e DHCP ACK packet back to the Client Otherwise the Server will send the DHCP NAK packet to refuse assigning this IP address to the Client Option 82 The DHCP packets are classified into 8 types with th...

Page 167: ...mistake 2 Hacker exhausted the IP addresses of the normal DHCP server and then pretended to be a legal DHCP server to assign the IP addresses and the other parameters to Clients For example hacker us...

Page 168: ...d the following page Figure 12 8 DHCP Snooping Note If you want to enable the DHCP Snooping feature for the member port of LAG please ensure the parameters of all the member ports are the same The fol...

Page 169: ...itch defined one z Drop Indicates to discard the packets including the Option 82 field Customization Enable Disable the switch to define the Option 82 Circuit ID Enter the sub option Circuit ID for th...

Page 170: ...of a forged Gateway to Host and then the Host will automatically update the ARP table after receiving the ARP response packets which causes that the Host can not access the network normally The ARP A...

Page 171: ...N it will encapsulate this false destination MAC address for packets which results in a breakdown of the normal communication Cheating Terminal Hosts The attacker sends the false IP address to MAC add...

Page 172: ...e Middle Attack The attacker continuously sends the false ARP packets to the Hosts in LAN so as to make the Hosts maintain the wrong ARP table When the Hosts in LAN communicate with one another they w...

Page 173: ...p a normal appearing communication 5 The attacker continuously sends the false ARP packets to the Host A and Host B so as to make the Hosts always maintain the wrong ARP table In the view of Host A an...

Page 174: ...network from ARP attacks such as the Network Gateway Spoofing and Man In The Middle Attack etc Choose the menu Network Security ARP Inspection ARP Detect to load the following page Figure 12 13 ARP D...

Page 175: ...g bound entry 3 Specify the trusted port Required On the Network Security ARP Inspection ARP Detect page specify the trusted port The specific ports such as up linked port routing port and LAG port sh...

Page 176: ...ture for the port Speed Enter a value to specify the maximum amount of the received ARP packets per second Current Speed Displays the current speed of the received ARP packets Status Displays the stat...

Page 177: ...uto Refresh Auto Refresh Enable Disable the Auto Refresh feature Refresh Interval Specify the refresh interval to display the ARP Statistics Illegal ARP Packet Port Displays the port number Trusted Po...

Page 178: ...cket with its TCP index and all the control fields set to 0 During the TCP connection and data transmission the packets with all the control fields set to 0 are considered as the illegal packets SYN p...

Page 179: ...e network and block the unnecessary network services 3 Enhance the network security via the protection devices such as the hardware firewall 12 4 802 1X The 802 1X protocol was developed by IEEE802 LA...

Page 180: ...orization To ensure a stable authentication system an alternate authentication server can be specified If the main authentication server is in trouble the alternate authentication server can substitut...

Page 181: ...is mode normally requires the RADIUS server to support the two fields of EAP the EAP message field and the Message authenticator field This switch supports EAP MD5 authentication way for the EAP relay...

Page 182: ...te to allow the supplicant system access the network And then the switch will monitor the status of supplicant by sending hand shake packets periodically By default the switch will force the supplican...

Page 183: ...to a VLAN i e Guest VLAN Users belonging to the Guest VLAN can access the resources of the Guest VLAN without being authenticated But they need to be authenticated before accessing external resources...

Page 184: ...authentication server z PAP IEEE 802 1X authentication system uses extensible authentication protocol EAP to exchange information between the switch and the client The transmission of EAP packets is t...

Page 185: ...er before resending a request to the authentication server 12 4 2 Port Config On this page you can configure the 802 1X features for the ports based on the actual network Choose the menu Network Secur...

Page 186: ...lients connected to the port can access the network on the condition that any one of the clients has passed the 802 1X Authentication Authorized Displays the authentication status of the port LAG Disp...

Page 187: ...connected to the authentication server In addition the authentication parameters of the switch and the authentication server should be the same Configuration Procedure Step Operation Description 1 Co...

Page 188: ...gent is the server software operated on network devices with the responsibility of receiving and processing the request packets from SNMP Management Station In the meanwhile Agent will inform the SNMP...

Page 189: ...essages SNMP adopts the hierarchical architecture to identify the managed objects It is like a tree and each tree node represents a managed object as shown in the following figure Thus the object can...

Page 190: ...on please configure the SNMP function globally on this page Choose the menu SNMP SNMP Config Global Config to load the following page Figure 13 3 Global Config The following entries are displayed on t...

Page 191: ...n View Config View Name Give a name to the View for identification Each View can include several entries with the same name MIB Object ID Enter the Object Identifier OID for the entry of View View Typ...

Page 192: ...urity Model for the SNMP Group z v1 SNMPv1 is defined for the group In this model the Community Name is used for authentication SNMP v1 can be configured on the SNMP Community page directly z v2c SNMP...

Page 193: ...p It is multi optional Group Name Displays the Group Name here Security Model Displays the Security Model of the group Security Level Displays the Security Level of the group Read View Displays the Re...

Page 194: ...ity Level Security Model Select the Security Model for the User Security Level Select the Security Level for the SNMP v3 User Auth Mode Select the Authentication Mode for the SNMP v3 User z None No au...

Page 195: ...Modify button to apply Note The SNMP User and its Group should have the same Security Model and Security Level 13 1 5 SNMP Community SNMP v1 and SNMP v2c adopt community name authentication The commu...

Page 196: ...f the Community and then click the Modify button to apply Note The default MIB View of SNMP Community is viewDefault Configuration Procedure z If SNMPv3 is employed please take the following steps Ste...

Page 197: ...nage the device via the Read View Write View and Notify View defined in the SNMP Group 13 2 Notification With the Notification function enabled the switch can initiatively report to the management sta...

Page 198: ...level is used z authNoPriv Only the authentication security level is used z authPriv Both the authentication and the privacy security levels are used Type Select the type for the notifications z Trap...

Page 199: ...tire network so as to enable the network administrator to take the protection measures in time to avoid any network malfunction In addition RMON MIB records network statistics information of network p...

Page 200: ...screen History Control Table Select Select the desired entry for configuration Index Displays the index number of the entry Port Specify the port from which the history samples were taken Interval Spe...

Page 201: ...e which determines the act way of the network device in response to an event z None No processing z Log Logging the event z Notify Sending trap messages to the management station z Log Notify Logging...

Page 202: ...eshold Rising Threshold Enter the rising counter value that triggers the Rising Threshold alarm Rising Event Select the index of the corresponding event which will be triggered if the sampled value is...

Page 203: ...onding alarm entry Note When alarm variables exceed the Threshold on the same direction continuously for several times an alarm event will only be generated on the first time that is the Rising Alarm...

Page 204: ...rk layer protocols to learn about each other LLDP MED Link Layer Discovery Protocol for Media Endpoint Devices is an extension of LLDP intended for managing endpoint devices such as Voice over IP phon...

Page 205: ...ng in TxRx or Rx mode the device will check the validity of the received LLDPDUs and the attached TLVs save this neighbor information to the local device and then set the aging time of this informatio...

Page 206: ...interface number and OID Object Identifier The management IP address is specified by the user Optional 127 Organizationally Specific Allows different organizations such as IEEE 802 1 IEEE 802 3 IETF...

Page 207: ...bridge port to advertise the port s VLAN identifier PVID that will be associated with untagged or priority tagged frames Port And Protocol VLAN ID TLV The Port And Protocol VLAN ID TLV allows a bridge...

Page 208: ...for the local device to transmit LLDPDU to its neighbors The default value is 30 Hold Multiplier Enter a multiplier on the Transmit Interval It determines the actual TTL Time To Live value used in an...

Page 209: ...Config Port Config to load the following page Figure 14 2 LLDP Port Config The following entries are displayed on this screen LLDP Port Config Port Select Select the desired port to configure Admin St...

Page 210: ...the local device and its neighbors on the Local Info and Neighbor Info pages respectively 14 2 1 Local Info On this page you can see all ports configuration and system information Choose the menu LLD...

Page 211: ...Refresh Auto Refresh Enable Disable the auto refresh function Refresh Rate Specify the auto refresh rate Neighbor Info Port Select Click the Select button to quick select the corresponding port based...

Page 212: ...are displayed on this screen Auto Refresh Auto Refresh Enable Disable the auto refresh function Refresh Rate Specify the auto refresh rate Global Statistics Last Update Displays latest update time of...

Page 213: ...andard LLDP MED Device Type LLDP MED devices are comprised of two primary device types Network Connectivity Devices and Endpoint Devices Network Connectivity Device Refers to an LLDP MED Device that p...

Page 214: ...are Revision TLV Software Revision TLV Serial Number TLV Manufacturer Name TLV Model Name TLV and Asset ID TLV If support for any of the TLVs in the Inventory Management set is implemented then suppor...

Page 215: ...lect Select the desired port to configure LLDP MED Status Configure the port s LLDP MED status z Enable Enable the port s LLDP MED status and the port s Admin Status will be changed to Tx Rx z Disable...

Page 216: ...rvice ELIN identifier which is used during emergency call setup to a traditional CAMA or ISDN trunk based PSAP Civic Address The Civic address is defined to reuse the relevant sub fields of the DHCP o...

Page 217: ...to refresh function Refresh Rate Specify the auto refresh rate Local Info Enter the desired port number and click Select to display the information of the corresponding port 14 4 4 Neighbor Info On th...

Page 218: ...number connecting to the neighbor device Device Type Displays the device type of the neighbor Application Type Displays the application type of the neighbor Application Type indicates the primary fun...

Page 219: ...e commander of the cluster and the others are member switches The typical topology is as follows Figure 15 1 Cluster topology Cluster Role According to their functions and status in a cluster switches...

Page 220: ...y used for cluster management configuration including three submenus NDP NTDP and Cluster 15 1 NDP NDP Neighbor Discovery Protocol is used to get the information of the directly connected neighbor dev...

Page 221: ...Remote Port Displays the port number of the neighbor switch which is connected to the corresponding port Device Name Displays the name of the neighbor switch Device MAC Displays MAC address of the ne...

Page 222: ...Hello Time Displays the interval to send NDP packets Port Status Port Displays the port number of the switch NDP Displays the NDP status enabled or disabled for the current port Send NDP Packets Disp...

Page 223: ...re 15 4 NDP Config The following entries are displayed on this screen Global Config NDP Select Enable Disable NDP function globally Aging Time Enter the period for the neighbor switch to keep the NDP...

Page 224: ...kets and send out response packets at the same time which may result in network congestion and the commander switch overload To avoid the above problem two time parameters are designed to control the...

Page 225: ...cluster feature disabled Hops Displays the hop count from this device to the switch Neighbor Info Click the Detail button to view the complete information of this device and its neighbors Collect Top...

Page 226: ...e hop count the switch topology collects NTDP Hop Delay Displays the time between the switch receiving NTDP request packets and the switch forwarding NTDP request packets for the first time NTDP Port...

Page 227: ...fig NTDP Select Enable Disable NTDP for the switch globally NTDP Interval Time Enter the interval to collect topology information The default is 1 minute NTDP Hops Enter the hop count the switch topol...

Page 228: ...er automatically based on NDP and NTDP You can manually add the candidate switch to a cluster If the candidate switch is successfully added to the cluster it will get a private IP address assigned by...

Page 229: ...he commander switch z For an individual switch the following page is displayed Figure 15 11 Cluster Summary for Individual Switch The following entries are displayed on this screen Global Config Clust...

Page 230: ...role of the switch to be individual switch z For a member switch the following page is displayed Figure 15 13 Cluster Configuration for Member Switch The following entries are displayed on this screen...

Page 231: ...le for Cluster Function Network Requirements Three switches form cluster one commander switch Here take TP LINK TL SL5428E as an example and two member switches Here take TP LINK TL SG32424P as an exa...

Page 232: ...tion z Configure the commander switch Step Operation Description 1 Enable NDP function on the switch and for port 1 port 2 and port 3 On Cluster NDP NDP Config page enable NDP function 2 Enable NTDP f...

Page 233: ...t the member switch and click the Manage button to log on to its Web management page Or On Cluster Cluster Cluster Topology page double click the switch icon to view its detailed information click the...

Page 234: ...device are available 5 Network Diagnostics Test whether the destination device is reachable and detect the route hops from the switch to the destination device 16 1 System Monitor System Monitor funct...

Page 235: ...Click the Monitor button to enable the switch to monitor and display its CPU utilization rate every four seconds 16 1 2 Memory Monitor Choose the menu Maintenance System Monitor Memory Monitor to load...

Page 236: ...ork administrator to monitor network operation and diagnose malfunction The Logs of switch are classified into the following eight levels Severity Level Description emergencies 0 The system is unusabl...

Page 237: ...Log Log Table to load the following page Figure 16 3 Log Table The following entries are displayed on this screen Log Info Index Displays the index of the log information Time Displays the time when...

Page 238: ...Select the desired entry to configure the corresponding local log Log Buffer Indicates the RAM for saving system log The inforamtion in the log buffer is displayed on the Log Table page It will be los...

Page 239: ...rity level value will be sent to the corresponding log host Status Enable Disable the log host Note The Log Server software is not provided If necessary please download it on the Internet 16 2 4 Backu...

Page 240: ...ates you to locate and diagnose the trouble spot of the network Choose the menu Maintenance Device Diagnostics Cable Test to load the following page Figure 16 7 Cable Test The following entries are di...

Page 241: ...oopback The following entries are displayed on this screen Loopback Type Internal Select Internal to test whether the port is available External Select External to test whether the device connected to...

Page 242: ...ze Enter the size of the sending data during Ping testing The default value is recommended Interval Specify the interval to send ICMP request packets The default value is recommended 16 4 2 Tracert Tr...

Page 243: ...ries are displayed on this screen Tracert Config Destination IP Enter the IP address of the destination device Max Hop Specify the maximum number of the route hops the test data can pass through Retur...

Page 244: ...0Base T UTP STP of Cat 3 or above 100Base TX UTP STP of Cat 5 or above 100Base FX MMF or SMF SFP Module Optional 1000Base T 4 pair UTP 100m of Cat 5 Cat 5e Cat 6 or above Transmission Medium 1000Base...

Page 245: ...nual if necessary 1 On the Windows taskbar click the Start button and then click Control Panel 2 Click the Network and Internet Connections icon and then click on the Network Connections tab in the ap...

Page 246: ...dow by default Figure B 3 6 Select Use the following IP address And the following items will be available If the switch s IP address is 192 168 0 1 specify IP address as 192 168 0 x x is from 2 to 254...

Page 247: ...he IP network for files transfer 1 Hardware Installation Figure C 1 1 Connect FTP server to port 1 of the switch 2 Connect the Console port of the PC to the switch 3 Save the firmware of the switch in...

Page 248: ...nal 2 The Connection Description Window will prompt shown as the following figure Enter a name into the Name field and click OK Figure C 3 Connection Description 3 Select the port to connect in the fi...

Page 249: ...til menu To download firmware to the switch via FTP function you need to enter into the bootUtil menu of the switch and take the following steps 1 Connect the console port of the PC to the console por...

Page 250: ...an example IP address is 172 31 70 146 the user name and password for login to the FTP server are both 123 the name of the upgrade firmware is tl_sg3424p_up bin The detailed command is shown as the fo...

Page 251: ...TP LINK start Start User Access Login User Return to CONTENTS 242...

Page 252: ...t provided on the attached CD for the supplicant Client 1 Installation Guide 1 Insert the provided CD into your CD ROM drive Open the file folder and double click the icon to load the following figure...

Page 253: ...llowing screen Figure D 4 Choose Destination Location By default the installation files are saved on the Program Files folder of system disk Click the Change button to modify the destination location...

Page 254: ...tall the Program 6 The InstallShield Wizard is installing TpSupplicant V2 0 shown as the following screen Please wait Figure D 6 Setup Status 7 On the following screen click Finish to complete the ins...

Page 255: ...go to http www winpcap org to download the latest version of WinPcap for installation 2 Uninstall Software If you want to remove the TpSupplicant please take the following steps 1 On the Windows taskb...

Page 256: ...the application from your PC Figure D 10 Uninstall the Application 4 Click Finish to complete Figure D 11 Uninstall Complete 3 Configuration 1 After completing installation double click the icon to ru...

Page 257: ...lient will send the EAPOL Start packets to the switch via multicast and send the 802 1X authentication packets via unicast Obtain an IP address automatically Select this option if the Client automatic...

Page 258: ...rompt that the Radius server is being searched Figure D 14 Authentication Dialog 4 When passing the authentication the following screen will appear Figure D 15 Successfully Authenticated 5 Double clic...

Page 259: ...nPcap 4 0 2 or the higher version for installation and run the client software again Q2 Is this TP LINK 802 1X Client Software compliable with the switches of the other manufacturers A2 No This TP LIN...

Page 260: ...into IP addresses Dynamic Host Control Protocol DHCP Provides a framework for passing configuration information to hosts on a TCP IP network DHCP is based on the Bootstrap Protocol BOOTP adding the ca...

Page 261: ...sions for VLAN tagging IEEE 802 3x Defines Ethernet frame start stop requests and timers used for flow control on full duplex links Now incorporated in IEEE 802 3 2002 Internet Group Management Protoc...

Page 262: ...in a hierarchical master slave configuration in order to synchronize local clocks within the subnet and to national time standards via wire or radio Port Authentication See IEEE 802 1X Port Mirroring...

Page 263: ...etwork Telnet Defines a remote communication facility for interfacing to a terminal device over TCP IP Transmission Control Protocol Internet Protocol TCP IP Protocol suite that includes TCP as the pr...

Search results

Summary of Contents for JetStream TL-SG3424P

Reviews:

Related manuals for JetStream TL-SG3424P

Brands by name

Popular brands

TP-Link JetStream TL-SG3424P, User Manual

Search results

Summary of Contents for JetStream TL-SG3424P

Reviews:

Related manuals for JetStream TL-SG3424P

Brands by name

Popular brands