TP-Link JetStream T1500-28PCT - Configuring Access Security

To Next Page

To Previous Page

Part 15

Configuring

Access Security

CHAPTERS

1. Access Security

2. Access Security Configurations

3. Appendix: Default Parameters

Downloaded from ManualsNet.com search engine

Main Page

Table of Contents2
About this Guide24
Intended Readers24
Conventions24
More Information25
Accessing the Switch26
Determine the Management Method27
Web Interface Access28
Login28
Save Config Function29
Disable the Web Server30
Change the Switch's IP Address and Default Gateway30
Command Line Interface Access32
Console Login (Only for Switch with Console Port)32
Telnet Login34
SSH Login35
Disable Telnet Login39
Disable SSH Login40
Copy Running-Config Startup-Config40
Change the Switch's IP Address and Default Gateway41
Managing System42
System43
Overview43
Supported Features43
System Info Configurations45
Using the GUI45
Viewing the System Summary45
Configuring the Device Description49
Configuring the System Time50
Configuring the Daylight Saving Time51
Configuring LED (Only for Certain Devices)52
Configuring the System IP53
Configuring the System Ipv654
Using the CLI56
Viewing the System Summary56
Configuring the Device Description57
Configuring the System Time59
Configuring the Daylight Saving Time61
Configuring LED (Only for Certain Devices)63
Configuring the System IP63
Configuring System Ipv6 Parameters64
User Management Configurations67
Using the GUI67
Creating Accounts67
Configuring Enable Password68
Using the CLI69
Creating Accounts69
Configuring Enable Password71
System Tools Configurations73
Using the GUI73
Configuring the Boot File73
Restoring the Configuration of the Switch75
Backing up the Configuration File75
Upgrading the Firmware76
Rebooting the Switch77
Reseting the Switch78
Using the CLI78
Configuring the Boot File78
Restoring the Configuration of the Switch80
Backing up the Configuration File80
Upgrading the Firmware81
Rebooting the Switch81
Reseting the Switch83
EEE Configuration84
Using the CLI84
Poe Configurations (Only for Certain Devices)86
Using the GUI87
Configuring the Poe Parameters Manually87
Configuring the Poe Parameters Using the Profile90
Using the CLI93
Configuring the Poe Parameters Manually93
Configuring the Poe Parameters Using the Profile95
SDM Template Configuration98
Using the GUI98
Using the CLI99
Time Range Configuration101
Using the GUI101
Adding Time Range Entries101
Configuring Holiday103
Using the CLI104
Adding Time Range Entries104
Configuring Holiday105
Example for Poe Configurations107
Network Requirements107
Configuring Scheme107
Using the GUI107
Using the CLI110
Appendix: Default Parameters111
Managing Physical Interfaces114
Physical Interface115
Overview115
Supported Features115
Basic Parameters Configurations116
Using the GUI116
Using the CLI117
Port Isolation Configurations120
Using the GUI120
Using the CLI121
Loopback Detection Configuration123
Using the GUI123
Using the CLI125
Configuration Examples127
Example for Port Isolation127
Network Requirements127
Configuration Scheme127
Using the GUI127
Using the CLI129
Example for Loopback Detection130
Network Requirements130
Configuration Scheme130
Using the GUI131
Using the CLI132
Appendix: Default Parameters133
Configuring LAG134
Lag135
Overview135
Supported Features135
LAG Configuration136
Using the GUI137
Configuring Load-Balancing Algorithm137
Configuring Static LAG or LACP138
Using the CLI140
Configuring Load-Balancing Algorithm140
Configuring Static LAG or LACP141
Configuration Example145
Network Requirements145
Configuration Scheme145
Using the GUI146
Using the CLI147
Appendix: Default Parameters149
Managing MAC Address Table150
MAC Address Table151
Overview151
Supported Features151
MAC Address Configurations152
Using the GUI152
Adding Static MAC Address Entries152
Modifying the Aging Time of Dynamic Address Entries154
Adding MAC Filtering Address Entries155
Viewing Address Table Entries155
Using the CLI156
Adding Static MAC Address Entries156
Modifying the Aging Time of Dynamic Address Entries157
Adding MAC Filtering Address Entries158
Appendix: Default Parameters160
Configuring 802.1Q VLAN161
Overview162
Q VLAN Configuration163
Using the GUI164
Configuring the VLAN164
Configuring the Port Parameters for 802.1Q VLAN165
Using the CLI166
Creating a VLAN166
Adding the Port to the Specified VLAN167
Configuring the Port168
Configuration Example170
Network Requirements170
Configuration Scheme170
Network Topology171
Using the GUI171
Using the CLI174
Appendix: Default Parameters177
Configuring MAC VLAN178
Overview179
MAC VLAN Configuration180
Using the GUI180
Configuring 802.1Q VLAN180
Binding the MAC Address to the VLAN180
Enabling MAC VLAN for the Port181
Using the CLI182
Configuring 802.1Q VLAN182
Binding the MAC Address to the VLAN182
Enabling MAC VLAN for the Port183
Configuration Example184
Network Requirements184
Configuration Scheme184
Using the GUI185
Using the CLI190
Appendix: Default Parameters194
Configuring Protocol VLAN195
Overview196
Protocol VLAN Configuration197
Using the GUI197
Configuring 802.1Q VLAN197
Creating Protocol Template198
Configuring Protocol VLAN199
Using the CLI200
Configuring 802.1Q VLAN200
Creating a Protocol Template200
Configuring Protocol VLAN201
Configuration Example204
Network Requirements204
Configuration Scheme204
Using the GUI206
Using the CLI211
Appendix: Default Parameters216
Configuring GVRP217
Overview218
GVRP Configuration219
Using the GUI220
Using the CLI221
Configuration Example224
Network Requirements224
Configuration Scheme224
Using the GUI225
Using the CLI229
Appendix: Default Parameters233
Configuring Layer 2 Multicast234
Layer 2 Multicast235
Overview235
Supported Features237
IGMP Snooping Configuration238
Using the GUI238
Configuring IGMP Snooping Globally238
Configuring IGMP Snooping for Vlans239
Configuring IGMP Snooping for Ports243
Configuring Hosts to Statically Join a Group243
Using the CLI244
Configuring IGMP Snooping Globally244
Configuring IGMP Snooping for Vlans246
Configuring IGMP Snooping for Ports251
Configuring Hosts to Statically Join a Group252
MLD Snooping Configuration254
Using the GUI254
Configuring MLD Snooping Globally254
Configuring MLD Snooping for Vlans255
Configuring MLD Snooping for Ports258
Configuring Hosts to Statically Join a Group259
Using the CLI259
Configuring MLD Snooping Globally259
Configuring MLD Snooping for Vlans260
Configuring MLD Snooping for Ports265
Configuring Hosts to Statically Join a Group266
MVR Configuration268
Using the GUI268
Configuring 802.1Q Vlans268
Configuring MVR Globally269
Adding Multicast Groups to MVR270
Configuring MVR for the Port271
Optional) Adding Ports to MVR Groups Statically272
Using the CLI273
Configuring 802.1Q Vlans273
Configuring MVR Globally273
Configuring MVR for the Ports275
Multicast Filtering Configuration278
Using the GUI278
Creating the Multicast Profile278
Configure Multicast Filtering for Ports280
Using the CLI281
Creating the Multicast Profile281
Binding the Profile to Ports284
Viewing Multicast Snooping Information288
Using the GUI288
Viewing Ipv4 Multicast Table288
Viewing Ipv4 Multicast Statistics on each Port289
Viewing Ipv6 Multicast Table290
Viewing Ipv6 Multicast Statistics on each Port291
Using the CLI292
Viewing Ipv4 Multicast Snooping Information292
Viewing Ipv6 Multicast Snooping Configurations292
Configuration Examples293
Example for Configuring Basic IGMP Snooping293
Network Requirements293
Configuration Scheme293
Using the GUI294
Using the CLI296
Example for Configuring MVR298
Network Requirements298
Network Topology298
Configuration Scheme299
Using the GUI299
Using the CLI302
Example for Configuring Unknown Multicast and Fast Leave305
Network Requirement305
Configuration Scheme306
Using the GUI306
Using the CLI308
Example for Configuring Multicast Filtering309
Network Requirements309
Configuration Scheme309
Network Topology310
Using the GUI310
Using the CLI314
Appendix: Default Parameters317
Default Parameters for IGMP Snooping317
Default Parameters for MLD Snooping318
Default Parameters for MVR319
Default Parameters for Multicast Filtering319
Configuring Spanning Tree320
Spanning Tree321
Overview321
Basic Concepts321
STP/RSTP Concepts321
MSTP Concepts325
STP Security326
STP/RSTP Configurations329
Using the GUI329
Configuring STP/RSTP Parameters on Ports329
Configuring STP/RSTP Globally331
Verifying the STP/RSTP Configurations333
Using the CLI335
Configuring STP/RSTP Parameters on Ports335
Configuring Global STP/RSTP Parameters337
Enabling STP/RSTP Globally339
MSTP Configurations341
Using the GUI341
Configuring Parameters on Ports in CIST341
Configuring the MSTP Region344
Configuring MSTP Globally348
Verifying the MSTP Configurations350
Using the CLI351
Configuring Parameters on Ports in CIST351
Configuring the MSTP Region354
Configuring Global MSTP Parameters357
Enabling Spanning Tree Globally359
STP Security Configurations361
Using the GUI361
Using the CLI362
Configuring the STP Security362
Configuration Example for MSTP365
Network Requirements365
Configuration Scheme365
Using the GUI366
Using the CLI373
Appendix: Default Parameters380
Configuring LLDP382
Lldp383
Overview383
Supported Features383
LLDP Configurations384
Using the GUI384
Configuring LLDP Globally384
Configuring LLDP for the Port386
Using the CLI387
Global Config387
Port Config389
LLDP-MED Configurations392
Using the GUI392
Configuring LLDP Globally392
Configuring LLDP-MED Globally392
Configuring LLDP-MED for Ports393
Using the CLI395
Global Config395
Port Config396
Viewing LLDP Settings399
Using GUI399
Viewing LLDP Device Info399
Viewing LLDP Statistics403
Using CLI404
Viewing LLDP-MED Settings405
Using GUI405
Using CLI408
Configuration Example409
Network Requirements409
Network Topology409
Configuration Scheme409
Using the GUI409
Using CLI410
Appendix: Default Parameters417
Configuring DHCP Service418
Dhcp419
Overview419
Supported Features419
DHCP Relay Configuration423
Using the GUI423
Enabling DHCP Relay and Configuring Option 82423
Configuring DHCP VLAN Relay425
Using the CLI426
Enabling DHCP Relay426
(Optional) Configuring Option 82427
Configuring DHCP VLAN Relay429
DHCP L2 Relay Configuration431
Using the GUI431
Enabling DHCP L2 Relay431
Configuring Option 82 for Ports432
Using the CLI433
Enabling DHCP L2 Relay433
Configuring Option 82 for Ports434
Configuration Examples437
Example for DHCP VLAN Relay437
Network Requirements437
Configuration Scheme437
Using the GUI438
Using the CLI441
Example for Option 82 in DHCP Relay443
Network Requirements443
Configuration Scheme444
Configuring the DHCP Relay Switch445
Configuring the DHCP Server448
Example for DHCP L2 Relay449
Network Requirements449
Configuration Scheme450
Configuring the DHCP Relay Switch451
Configuring the DHCP Server453
Appendix: Default Parameters456
Configuring Qos458
Qos459
Overview459
Supported Features459
Class of Service Configuration461
Using the GUI462
Configuring Port Priority462
Configuring 802.1P Priority464
Configuring DSCP Priority466
Specifying the Scheduler Settings469
Using CLI470
Configuring Port Priority470
Configuring 802.1P Priority472
Configuring DSCP Priority475
Specifying the Scheduler Settings479
Bandwidth Control Configuration482
Using the GUI482
Configuring Rate Limit482
Configuring Storm Control483
Using the CLI484
Configuring Rate Limit484
Configuring Storm Control485
Voice VLAN Configuration488
Using the GUI488
Configuring OUI Addresses488
Configuring Voice VLAN Globally489
Adding Ports to Voice VLAN490
Using the CLI491
Auto Voip Configuration494
Using the GUI494
Using the CLI495
Configuration Examples499
Example for Class of Service499
Network Requirements499
Configuration Scheme499
Using the GUI500
Using the CLI502
Example for Voice VLAN504
Network Requirements504
Configuration Scheme505
Using the GUI505
Using the CLI509
Example for Auto Voip512
Network Requirements512
Configuration Scheme513
Using the GUI513
Using the CLI518
Appendix: Default Parameters523
Configuring Access Security527
Access Security528
Overview528
Supported Features528
Access Security Configurations529
Using the GUI529
Configuring the Access Control Feature529
Configuring the HTTP Function532
Configuring the HTTPS Function534
Configuring the SSH Feature537
Configuring the Telnet Function538
Using the CLI539
Configuring the Access Control Feature539
Configuring the HTTP Function540
Configuring the HTTPS Function542
Configuring the SSH Feature545
Configuring the Telnet Function547
Appendix: Default Parameters548
Configuring AAA550
Overview551
AAA Configuration552
Using the GUI553
Adding Servers553
Configuring Server Groups555
Configuring the Method List555
Configuring the AAA Application List557
Configuring Login Account and Enable Password557
Using the CLI558
Adding Servers558
Configuring Server Groups561
Configuring the Method List562
Configuring the AAA Application List563
Configuring Login Account and Enable Password566
Configuration Example569
Network Requirements569
Configuration Scheme569
Using the GUI570
Using the CLI572
Appendix: Default Parameters575
Configuring 802.1X577
Overview578
Configuration579
Using the GUI579
Configuring the RADIUS Server579
Configuring 802.1X Globally582
Configuring 802.1X on Ports583
View the Authenticator State585
Using the CLI586
Configuring the RADIUS Server586
Configuring 802.1X Globally588
Configuring 802.1X on Ports590
Viewing Authenticator State592
Configuration Example594
Network Requirements594
Configuration Scheme594
Network Topology594
Using the GUI595
Using the CLI597
Appendix: Default Parameters600
Configuring Port Security601
Overview602
Port Security Configuration603
Using the GUI603
Using the CLI604
Appendix: Default Parameters607
Configuring ACL608
Overview609
ACL Configuration610
Using the GUI610
Configuring Time Range610
Creating an ACL610
Configuring ACL Rules611
Configuring MAC ACL Rule611
Configuring IP ACL Rule615
Configuring Combined ACL Rule619
Configuring the Ipv6 ACL Rule624
Configuring ACL Binding628
Using the CLI629
Configuring Time Range629
Configuring ACL629
Configuring Policy638
Configuring ACL Binding640
Viewing ACL Counting641
Configuration Example for ACL642
Network Requirements642
Configuration Scheme642
Using the GUI643
Using the CLI649
Appendix: Default Parameters651
Configuring Ipv4 IMPB653
Ipv4 IMPB654
Overview654
Supported Features654
IP-MAC Binding Configuration655
Using the GUI655
Binding Entries Manually655
Binding Entries Via ARP Scanning656
Binding Entries Via DHCP Snooping658
Viewing the Binding Entries660
Using the CLI661
Binding Entries Manually661
Binding Entries Via DHCP Snooping663
Viewing Binding Entries664
ARP Detection Configuration665
Using the GUI665
Adding IP-MAC Binding Entries665
Enabling ARP Detection665
Configuring ARP Detection on Ports666
Viewing ARP Statistics667
Using the CLI668
Adding IP-MAC Binding Entries668
Enabling ARP Detection668
Configuring ARP Detection on Ports669
Viewing ARP Statistics671
Ipv4 Source Guard Configuration672
Using the GUI672
Adding IP-MAC Binding Entries672
Configuring Ipv4 Source Guard672
Using the CLI673
Adding IP-MAC Binding Entries673
Configuring Ipv4 Source Guard673
Configuration Examples675
Example for ARP Detection675
Network Requirements675
Configuration Scheme675
Using the GUI676
Using the CLI678
Example for IP Source Guard680
Network Requirements680
Configuration Scheme680
Using the GUI681
Using the CLI682
Appendix: Default Parameters684
Configuring Ipv6 IMPB686
Ipv6 IMPB687
Overview687
Supported Features687
Ipv6-MAC Binding Configuration689
Using the GUI689
Binding Entries Manually689
Binding Entries Via ND Snooping690
Binding Entries Via Dhcpv6 Snooping692
Viewing the Binding Entries693
Using the CLI694
Binding Entries Manually694
Binding Entries Via ND Snooping696
Binding Entries Via Dhcpv6 Snooping697
Viewing Binding Entries698
ND Detection Configuration699
Using the GUI699
Adding Ipv6-MAC Binding Entries699
Enabling ND Detection699
Configuring ND Detection on Ports700
Viewing ND Statistics700
Using the CLI701
Adding Ipv6-MAC Binding Entries701
Enabling ND Detection701
Configuring ND Detection on Ports702
Viewing ND Statistics703
Ipv6 Source Guard Configuration704
Using the GUI704
Adding Ipv6-MAC Binding Entries704
Configuring Ipv6 Source Guard704
Using the CLI705
Adding Ipv6-MAC Binding Entries705
Configuring Ipv6 Source Guard705
Configuration Examples707
Example for ND Detection707
Network Requirements707
Configuration Scheme707
Using the GUI708
Using the CLI710
Example for Ipv6 Source Guard711
Network Requirements711
Configuration Scheme712
Using the GUI712
Using the CLI714
Appendix: Default Parameters715
Configuring DHCP Filter717
DHCP Filter718
Overview718
Supported Features718
Dhcpv4 Filter Configuration720
Using the GUI720
Configuring the Basic Dhcpv4 Filter Parameters720
Configuring Legal Dhcpv4 Servers721
Using the CLI722
Configuring the Basic Dhcpv4 Filter Parameters722
Configuring Legal Dhcpv4 Servers724
Dhcpv6 Filter Configuration726
Using the GUI726
Configuring the Basic Dhcpv6 Filter Parameters726
Configuring Legal Dhcpv6 Servers727
Using the CLI728
Configuring the Basic Dhcpv6 Filter Parameters728
Configuring Legal Dhcpv6 Servers729
Configuration Examples731
Example for Dhcpv4 Filter731
Network Requirements731
Configuration Scheme731
Using the GUI732
Using the CLI733
Example for Dhcpv6 Filter734
Network Requirements734
Configuration Scheme735
Using the GUI735
Using the CLI737
Appendix: Default Parameters739
Configuring Dos Defend740
Overview741
Dos Defend Configuration742
Using the GUI742
Using the CLI743
Appendix: Default Parameters746
Monitoring the System747
Overview748
Monitoring the CPU749
Using the GUI749
Using the CLI749
Monitoring the Memory751
Using the GUI751
Using the CLI751
Monitoring Traffic753
Traffic Monitor754
Using the GUI754
Using the CLI758
Appendix: Default Parameters759
Mirroring Traffic760
Mirroring761
Using the GUI761
Using the CLI763
Configuration Examples765
Network Requirements765
Configuration Scheme765
Using the GUI765
Using the CLI766
Appendix: Default Parameters768
Configuring DLDP769
Overview770
DLDP Configuration771
Using the GUI771
Using the CLI773
Appendix: Default Parameters775
Configuring SNMP & RMON776
Snmp777
Overview777
Basic Concepts777
SNMP Configurations781
Using the GUI781
Enabling SNMP781
Creating an SNMP View782
Creating SNMP Communities (for SNMP V1/V2C)783
Creating an SNMP Group (for SNMP V3)784
Creating SNMP Users (for SNMP V3)785
Using the CLI786
Enabling SNMP786
Creating an SNMP View788
Creating SNMP Communities (for SNMP V1/V2C)789
Creating an SNMP Group (for Snmpv3)790
Creating SNMP Users (for Snmpv3)792
Notification Configurations794
Using the GUI794
Configuring the Information of NMS Hosts794
Enabling SNMP Traps796
Using the CLI798
Configuring the NMS Host798
Enabling SNMP Traps800
Rmon807
RMON Configurations808
Using the GUI808
Configuring the Statistics Group808
Configuring History Group809
Configuring Event Group810
Configuring Alarm Group811
Using the CLI813
Configuring Statistics813
Configuring History815
Configuring Event816
Configuring Alarm817
Configuration Example820
Network Requirements820
Configuration Scheme821
Using the GUI821
Using the CLI826
Appendix: Default Parameters832
Diagnosing the Device & Network836
Diagnosing the Device837
Using the GUI837
Using the CLI838
Diagnosing the Network839
Using the GUI839
Troubleshooting with Ping Testing839
Troubleshooting with Tracert Testing840
Using the CLI841
Configuring the Ping Test841
Configuring the Tracert Test842
Appendix: Default Parameters843
Configuring System Logs844
Overview845
System Logs Configurations846
Using the GUI847
Configuring the Local Logs847
Configuring the Remote Logs847
Backing up the Logs848
Viewing the Log Table849
Using the CLI850
Configuring the Local Logs850
Configuring the Remote Logs851

TP-Link JetStream T1500-28PCT - Configuring Access Security

Table of Contents

Other manuals for TP-Link JetStream T1500-28PCT

Related product manuals