TP-Link TL-SG2428P - Configuring Access Security

To Next Page

To Previous Page

Part 18

Configuring

Access Security

CHAPTERS

1. Access Security

2. Access Security Configurations

3. Appendix: Default Parameters

Main Page

Table of Contents2
About this Guide26
Intended Readers26
Conventions26
More Information27
Accessing the Switch28
Determine the Management Method29
Web Interface Access30
Login30
Save the Configuration File31
Disable the Web Server32
Configure the Switch's IP Address and Default Gateway33
Command Line Interface Access35
Console Login (Only for Switch with Console Port)35
Telnet Login37
SSH Login38
Disable Telnet Login42
Disable SSH Login43
Copy Running-Config Startup-Config43
Change the Switch's IP Address and Default Gateway44
Managing System45
System46
Overview46
Supported Features46
System Info Configurations48
Using the GUI48
Viewing the System Summary48
Configuring the Device Description51
Configuring the System Time52
Configuring the Daylight Saving Time53
Using the CLI54
Viewing the System Summary54
Configuring the Device Description55
Configuring the System Time56
Configuring the Daylight Saving Time59
User Management Configurations61
Using the GUI61
Creating Accounts61
Configuring Enable Password62
Using the CLI63
Creating Accounts63
Configuring Enable Password64
System Tools Configurations67
Using the GUI67
Configuring the Boot File67
Restoring the Configuration of the Switch69
Backing up the Configuration File69
Upgrading the Firmware70
Rebooting the Switch71
Reseting the Switch72
Using the CLI72
Configuring the Boot File72
Restoring the Configuration of the Switch74
Backing up the Configuration File74
Upgrading the Firmware75
Rebooting the Switch75
Reseting the Switch77
EEE Configuration78
Using the CLI78
Poe Configurations (Only for Certain Devices)80
Using the GUI81
Configuring the Poe Parameters Manually81
Configuring the Poe Parameters Using the Profile84
Using the CLI87
Configuring the Poe Parameters Manually87
Configuring the Poe Parameters Using the Profile89
SDM Template Configuration92
Using the GUI92
Using the CLI93
Time Range Configuration95
Using the GUI95
Adding Time Range Entries95
Configuring Holiday97
Using the CLI98
Adding Time Range Entries98
Configuring Holiday99
Example for Poe Configurations101
Network Requirements101
Configuring Scheme101
Using the GUI101
Using the CLI104
Appendix: Default Parameters106
Managing Physical Interfaces109
Physical Interface110
Overview110
Supported Features110
Basic Parameters Configurations111
Using the GUI111
Using the CLI112
Port Isolation Configurations115
Using the GUI115
Using the CLI116
Loopback Detection Configuration118
Using the GUI118
Using the CLI120
Configuration Examples122
Example for Port Isolation122
Network Requirements122
Configuration Scheme122
Using the GUI122
Using the CLI124
Example for Loopback Detection125
Network Requirements125
Configuration Scheme125
Using the GUI126
Using the CLI127
Appendix: Default Parameters128
Configuring LAG129
Lag130
Overview130
Supported Features130
LAG Configuration131
Using the GUI132
Configuring Load-Balancing Algorithm132
Configuring Static LAG or LACP133
Using the CLI135
Configuring Load-Balancing Algorithm135
Configuring Static LAG or LACP136
Configuration Examples140
Example for Static LAG140
Network Requirements140
Configuration Scheme140
Using the GUI140
Using the CLI141
Example for LACP142
Network Requirements142
Configuration Scheme142
Using the GUI143
Using the CLI144
Appendix: Default Parameters147
Managing MAC Address Table148
MAC Address Table149
Overview149
Supported Features149
MAC Address Configurations151
Using the GUI151
Adding Static MAC Address Entries151
Modifying the Aging Time of Dynamic Address Entries153
Adding MAC Filtering Address Entries154
Viewing Address Table Entries154
Using the CLI155
Adding Static MAC Address Entries155
Modifying the Aging Time of Dynamic Address Entries156
Adding MAC Filtering Address Entries157
Appendix: Default Parameters159
Configuring 802.1Q VLAN160
Overview161
Q VLAN Configuration162
Using the GUI163
Configuring the VLAN163
Configuring Port Parameters for 802.1Q VLAN164
Using the CLI165
Creating a VLAN165
Adding the Port to the Specified VLAN166
Configuring the Port167
Configuration Example169
Network Requirements169
Configuration Scheme169
Network Topology170
Using the GUI170
Using the CLI173
Appendix: Default Parameters176
Configuring MAC VLAN177
Overview178
MAC VLAN Configuration179
Using the GUI179
Configuring 802.1Q VLAN179
Binding the MAC Address to the VLAN179
Enabling MAC VLAN for the Port180
Using the CLI181
Configuring 802.1Q VLAN181
Binding the MAC Address to the VLAN181
Enabling MAC VLAN for the Port182
Configuration Example183
Network Requirements183
Configuration Scheme183
Using the GUI184
Using the CLI189
Appendix: Default Parameters193
Configuring Protocol VLAN194
Overview195
Protocol VLAN Configuration196
Using the GUI196
Configuring 802.1Q VLAN196
Creating Protocol Template197
Configuring Protocol VLAN198
Using the CLI199
Configuring 802.1Q VLAN199
Creating a Protocol Template199
Configuring Protocol VLAN200
Configuration Example203
Network Requirements203
Configuration Scheme203
Using the GUI205
Using the CLI211
Appendix: Default Parameters215
Configuring GVRP216
Overview217
GVRP Configuration218
Using the GUI219
Using the CLI220
Configuration Example223
Network Requirements223
Configuration Scheme223
Using the GUI224
Using the CLI228
Appendix: Default Parameters232
Configuring Layer 2 Multicast233
Layer 2 Multicast234
Overview234
Supported Features236
IGMP Snooping Configuration237
Using the GUI237
Configuring IGMP Snooping Globally237
Configuring IGMP Snooping for Vlans238
Configuring IGMP Snooping for Ports242
Configuring Hosts to Statically Join a Group242
Using the CLI243
Configuring IGMP Snooping Globally243
Configuring IGMP Snooping for Vlans245
Configuring IGMP Snooping for Ports250
Configuring Hosts to Statically Join a Group251
MLD Snooping Configuration253
Using the GUI253
Configuring MLD Snooping Globally253
Configuring MLD Snooping for Vlans254
Configuring MLD Snooping for Ports257
Configuring Hosts to Statically Join a Group257
Using the CLI258
Configuring MLD Snooping Globally258
Configuring MLD Snooping for Vlans259
Configuring MLD Snooping for Ports264
Configuring Hosts to Statically Join a Group265
MVR Configuration267
Using the GUI267
Configuring 802.1Q Vlans267
Configuring MVR Globally268
Adding Multicast Groups to MVR269
Configuring MVR for the Port270
Optional) Adding Ports to MVR Groups Statically271
Using the CLI272
Configuring 802.1Q Vlans272
Configuring MVR Globally272
Configuring MVR for the Ports274
Multicast Filtering Configuration277
Using the GUI277
Creating the Multicast Profile277
Configure Multicast Filtering for Ports279
Using the CLI280
Creating the Multicast Profile280
Binding the Profile to Ports283
Viewing Multicast Snooping Information287
Using the GUI287
Viewing Ipv4 Multicast Table287
Viewing Ipv4 Multicast Statistics on each Port288
Viewing Ipv6 Multicast Table289
Viewing Ipv6 Multicast Statistics on each Port290
Using the CLI291
Viewing Ipv4 Multicast Snooping Information291
Viewing Ipv6 Multicast Snooping Configurations292
Configuration Examples293
Example for Configuring Basic IGMP Snooping293
Network Requirements293
Configuration Scheme293
Using the GUI294
Using the CLI296
Example for Configuring MVR298
Network Requirements298
Network Topology298
Configuration Scheme299
Using the GUI299
Using the CLI302
Example for Configuring Unknown Multicast and Fast Leave305
Network Requirement305
Configuration Scheme306
Using the GUI306
Using the CLI308
Example for Configuring Multicast Filtering309
Network Requirements309
Configuration Scheme309
Network Topology310
Using the GUI310
Using the CLI314
Appendix: Default Parameters317
Default Parameters for IGMP Snooping317
Default Parameters for MLD Snooping318
Default Parameters for MVR319
Default Parameters for Multicast Filtering319
Configuring Spanning Tree320
Spanning Tree321
Overview321
Basic Concepts321
STP/RSTP Concepts321
MSTP Concepts325
STP Security326
STP/RSTP Configurations329
Using the GUI329
Configuring STP/RSTP Parameters on Ports329
Configuring STP/RSTP Globally331
Verifying the STP/RSTP Configurations333
Using the CLI335
Configuring STP/RSTP Parameters on Ports335
Configuring Global STP/RSTP Parameters337
Enabling STP/RSTP Globally339
MSTP Configurations341
Using the GUI341
Configuring Parameters on Ports in CIST341
Configuring the MSTP Region344
Configuring MSTP Globally348
Verifying the MSTP Configurations350
Using the CLI351
Configuring Parameters on Ports in CIST351
Configuring the MSTP Region354
Configuring Global MSTP Parameters357
Enabling Spanning Tree Globally359
STP Security Configurations361
Using the GUI361
Using the CLI362
Configuring the STP Security362
Configuration Example for MSTP365
Network Requirements365
Configuration Scheme365
Using the GUI366
Using the CLI372
Appendix: Default Parameters379
Configuring LLDP381
Lldp382
Overview382
Supported Features382
LLDP Configurations383
Using the GUI383
Configuring LLDP Globally383
Configuring LLDP for the Port385
Using the CLI386
Global Config386
Port Config388
LLDP-MED Configurations391
Using the GUI391
Configuring LLDP Globally391
Configuring LLDP-MED Globally391
Configuring LLDP-MED for Ports392
Using the CLI394
Global Config394
Port Config395
Viewing LLDP Settings398
Using GUI398
Viewing LLDP Device Info398
Viewing LLDP Statistics402
Using CLI403
Viewing LLDP-MED Settings404
Using GUI404
Using CLI407
Configuration Example408
Configuration Example for LLDP408
Network Requirements408
Network Topology408
Configuration Scheme408
Using the GUI408
Using CLI409
Example for LLDP-MED415
Network Requirements415
Configuration Scheme415
Using the GUI415
Using CLI418
Appendix: Default Parameters421
Configuring Layer 3 Interfaces423
Overview423
Layer 3 Interface Configurations424
Using the GUI424
Creating an Layer 3 Interface424
Configuring Ipv4 Parameters of the Interface426
Configuring Ipv6 Parameters of the Interface427
Viewing Detail Information of the Interface430
Using the CLI431
Creating an Layer 3 Interface431
Configuring Ipv4 Parameters of the Interface433
Configuring Ipv6 Parameters of the Interface434
Configuration Example437
Network Requirement437
Configuration Scheme437
Using the GUI437
Using the CLI438
Appendix: Default Parameters440
Configuring Routing441
Overview442
Ipv4 Static Routing Configuration443
Using the GUI443
Using the CLI444
Ipv6 Static Routing Configuration445
Using the GUI445
Using the CLI445
Viewing Routing Table447
Using the GUI447
Viewing Ipv4 Routing Table447
Viewing Ipv6 Routing Table448
Using the CLI448
Viewing Ipv4 Routing Table448
Viewing Ipv6 Routing Table449
Example for Static Routing450
Network Requirements450
Configuration Scheme450
Using the GUI450
Using the CLI452
Configuring DHCP Service455
Dhcp456
Overview456
Supported Features456
DHCP Server Configuration461
Using the GUI461
Enabling DHCP Server461
Configuring DHCP Server Pool463
Configuring Manual Binding464
Using the CLI465
Enabling DHCP Server465
Configuring DHCP Server Pool468
Configuring Manual Binding471
DHCP Relay Configuration474
Using the GUI474
Enabling DHCP Relay and Configuring Option 82474
Configuring DHCP Interface Relay476
Configuring DHCP VLAN Relay476
Using the CLI478
Enabling DHCP Relay478
(Optional) Configuring Option 82479
Configuring DHCP Interface Relay481
Configuring DHCP VLAN Relay482
DHCP L2 Relay Configuration485
Using the GUI485
Enabling DHCP L2 Relay485
Configuring Option 82 for Ports486
Using the CLI487
Enabling DHCP L2 Relay487
Configuring Option 82 for Ports488
Configuration Examples491
Example for DHCP Server491
Network Requirements491
Configuration Scheme491
Using the GUI491
Using the CLI493
Example for DHCP Interface Relay493
Network Requirements493
Configuration Scheme494
Using the GUI495
Using the CLI501
Example for DHCP VLAN Relay503
Network Requirements503
Configuration Scheme504
Using the GUI505
Using the CLI508
Example for Option 82 in DHCP Relay510
Network Requirements510
Configuration Scheme511
Configuring the DHCP Relay Switch512
Configuring the DHCP Server514
Example for DHCP L2 Relay516
Network Requirements516
Configuration Scheme516
Configuring the DHCP Relay Switch517
Configuring the DHCP Server520
Appendix: Default Parameters522
Configuring ARP525
Overview526
Supported Features526
ARP Configurations528
Using the GUI528
Viewing the ARP Entries528
Adding Static ARP Entries Manually529
Configuring Gratuitous ARP529
Configuring Proxy ARP530
Configuring Local Proxy ARP531
Using the CLI532
Configuring the ARP Entry532
Configuring the Gratuitous ARP534
Configuring Proxy ARP536
Appendix: Default Parameters539
Configuring Qos540
Qos541
Overview541
Supported Features541
Class of Service Configuration543
Using the GUI544
Configuring Port Priority544
Configuring 802.1P Priority546
Configuring DSCP Priority548
Specifying the Scheduler Settings551
Using CLI552
Configuring Port Priority552
Configuring 802.1P Priority554
Configuring DSCP Priority557
Specifying the Scheduler Settings561
Bandwidth Control Configuration564
Using the GUI564
Configuring Rate Limit564
Configuring Storm Control565
Using the CLI566
Configuring Rate Limit566
Configuring Storm Control567
Voice VLAN Configuration570
Using the GUI570
Configuring OUI Addresses570
Configuring Voice VLAN Globally571
Adding Ports to Voice VLAN572
Using the CLI573
Auto Voip Configuration576
Using the GUI576
Using the CLI577
Configuration Examples581
Example for Class of Service581
Network Requirements581
Configuration Scheme581
Using the GUI582
Using the CLI584
Example for Voice VLAN586
Network Requirements586
Configuration Scheme587
Using the GUI587
Using the CLI591
Example for Auto Voip594
Network Requirements594
Configuration Scheme595
Using the GUI595
Using the CLI600
Appendix: Default Parameters605
Configuring Access Security609
Access Security610
Overview610
Supported Features610
Access Security Configurations611
Using the GUI611
Configuring the Access Control Feature611
Configuring the HTTP Function614
Configuring the HTTPS Function616
Configuring the SSH Feature619
Configuring the Telnet Function620
Using the CLI621
Configuring the Access Control Feature621
Configuring the HTTP Function622
Configuring the HTTPS Function624
Configuring the SSH Feature627
Configuring the Telnet Function629
Appendix: Default Parameters630
Configuring AAA633
Overview634
AAA Configuration635
Using the GUI636
Adding Servers636
Configuring Server Groups638
Configuring the Method List639
Configuring the AAA Application List640
Configuring Login Account and Enable Password641
Using the CLI642
Adding Servers642
Configuring Server Groups644
Configuring the Method List645
Configuring the AAA Application List647
Configuring Login Account and Enable Password650
Configuration Example652
Network Requirements652
Configuration Scheme652
Using the GUI653
Using the CLI655
Appendix: Default Parameters658
Configuring 802.1X660
Overview661
Configuration662
Using the GUI662
Configuring the RADIUS Server662
Configuring 802.1X Globally665
Configuring 802.1X on Ports666
View the Authenticator State668
Using the CLI669
Configuring the RADIUS Server669
Configuring 802.1X Globally671
Configuring 802.1X on Ports673
Viewing Authenticator State675
Configuration Example677
Network Requirements677
Configuration Scheme677
Network Topology677
Using the GUI678
Using the CLI680
Appendix: Default Parameters683
Configuring Port Security684
Overview685
Port Security Configuration686
Using the GUI686
Using the CLI687
Appendix: Default Parameters690
Configuring ACL691
Overview692
ACL Configuration693
Using the GUI693
Configuring Time Range693
Creating an ACL693
Configuring ACL Rules694
Configuring MAC ACL Rule694
Configuring IP ACL Rule698
Configuring Combined ACL Rule701
Configuring the Ipv6 ACL Rule706
Configuring ACL Binding711
Using the CLI713
Configuring Time Range713
Configuring ACL713
Configuring Policy721
Configuring ACL Binding723
Viewing ACL Counting724
Configuration Example for ACL725
Configuration Example for MAC ACL725
Network Requirements725
Configuration Scheme725
Using the GUI726
Using the CLI732
Configuration Example for IP ACL733
Network Requirements733
Configuration Scheme734
Using the GUI734
Using the CLI740
Configuration Example for Combined ACL742
Network Requirements742
Configuration Scheme742
Using the GUI743
Using the CLI748
Appendix: Default Parameters750
Ipv4 IMPB753
Overview753
Supported Features753
IP-MAC Binding Configuration754
Using the GUI754
Binding Entries Manually754
Binding Entries Via ARP Scanning756
Binding Entries Via DHCP Snooping757
Viewing the Binding Entries759
Using the CLI760
Binding Entries Manually760
Binding Entries Via DHCP Snooping762
Viewing Binding Entries763
ARP Detection Configuration764
Using the GUI764
Adding IP-MAC Binding Entries764
Enabling ARP Detection764
Configuring ARP Detection on Ports765
Viewing ARP Statistics766
Using the CLI767
Adding IP-MAC Binding Entries767
Enabling ARP Detection767
Configuring ARP Detection on Ports768
Viewing ARP Statistics770
Ipv4 Source Guard Configuration771
Using the GUI771
Adding IP-MAC Binding Entries771
Configuring Ipv4 Source Guard771
Using the CLI772
Adding IP-MAC Binding Entries772
Configuring Ipv4 Source Guard772
Configuration Examples774
Example for ARP Detection774
Network Requirements774
Configuration Scheme774
Using the GUI775
Using the CLI777
Example for IP Source Guard779
Network Requirements779
Configuration Scheme779
Using the GUI779
Using the CLI781
Appendix: Default Parameters783
Configuring Ipv6 IMPB785
Ipv6 IMPB786
Overview786
Supported Features786
Ipv6-MAC Binding Configuration788
Using the GUI788
Binding Entries Manually788
Binding Entries Via ND Snooping790
Binding Entries Via Dhcpv6 Snooping791
Viewing the Binding Entries793
Using the CLI794
Binding Entries Manually794
Binding Entries Via ND Snooping796
Binding Entries Via Dhcpv6 Snooping797
Viewing Binding Entries798
ND Detection Configuration799
Using the GUI799
Adding Ipv6-MAC Binding Entries799
Enabling ND Detection799
Configuring ND Detection on Ports800
Viewing ND Statistics800
Using the CLI801
Adding Ipv6-MAC Binding Entries801
Enabling ND Detection801
Configuring ND Detection on Ports802
Viewing ND Statistics803
Ipv6 Source Guard Configuration804
Using the GUI804
Adding Ipv6-MAC Binding Entries804
Configuring Ipv6 Source Guard804
Using the CLI805
Adding Ipv6-MAC Binding Entries805
Configuring Ipv6 Source Guard805
Configuration Examples807
Example for ND Detection807
Network Requirements807
Configuration Scheme807
Using the GUI808
Using the CLI810
Example for Ipv6 Source Guard811
Network Requirements811
Configuration Scheme812
Using the GUI812
Using the CLI814
Appendix: Default Parameters815
Configuring DHCP Filter817
DHCP Filter818
Overview818
Supported Features818
Dhcpv4 Filter Configuration820
Using the GUI820
Configuring the Basic Dhcpv4 Filter Parameters820
Configuring Legal Dhcpv4 Servers822
Using the CLI822
Configuring the Basic Dhcpv4 Filter Parameters822
Configuring Legal Dhcpv4 Servers824
Dhcpv6 Filter Configuration826
Using the GUI826
Configuring the Basic Dhcpv6 Filter Parameters826
Configuring Legal Dhcpv6 Servers827
Using the CLI828
Configuring the Basic Dhcpv6 Filter Parameters828
Configuring Legal Dhcpv6 Servers829
Configuration Examples831
Example for Dhcpv4 Filter831
Network Requirements831
Configuration Scheme831
Using the GUI832
Using the CLI833
Example for Dhcpv6 Filter834
Network Requirements834
Configuration Scheme835
Using the GUI835
Using the CLI837
Appendix: Default Parameters839
Configuring Dos Defend840
Overview841
Dos Defend Configuration842
Using the GUI842
Using the CLI843
Appendix: Default Parameters846
Monitoring the System847
Overview848
Monitoring the CPU849
Using the GUI849
Using the CLI849
Monitoring the Memory851
Using the GUI851
Using the CLI851
Monitoring Traffic853
Traffic Monitor854
Using the GUI854
Using the CLI858
Appendix: Default Parameters859
Mirroring Traffic860
Mirroring861
Using the GUI861
Using the CLI863
Configuration Examples865
Network Requirements865
Configuration Scheme865
Using the GUI865
Using the CLI866
Appendix: Default Parameters868
Configuring DLDP869
Overview870
DLDP Configuration871
Using the GUI871
Using the CLI873
Appendix: Default Parameters875
Configuring SNMP & RMON876
Snmp877
Overview877
Basic Concepts877
SNMP Configurations881
Using the GUI881
Enabling SNMP881
Creating an SNMP View882
Creating SNMP Communities (for SNMP V1/V2C)883
Creating an SNMP Group (for SNMP V3)884
Creating SNMP Users (for SNMP V3)885
Using the CLI886
Enabling SNMP886
Creating an SNMP View888
Creating SNMP Communities (for SNMP V1/V2C)889
Creating an SNMP Group (for Snmpv3)890
Creating SNMP Users (for Snmpv3)892
Notification Configurations894
Using the GUI894
Configuring the Information of NMS Hosts894
Enabling SNMP Traps896
Using the CLI898
Configuring the NMS Host898
Enabling SNMP Traps900
Rmon908
RMON Configurations909
Using the GUI909
Configuring the Statistics Group909
Configuring History Group910
Configuring Event Group911
Configuring Alarm Group912
Using the CLI914
Configuring Statistics914
Configuring History916
Configuring Event917
Configuring Alarm918
Configuration Example921
Network Requirements921
Configuration Scheme922
Using the GUI922
Using the CLI927
Appendix: Default Parameters933
Diagnosing the Device & Network937
Diagnosing the Device938
Using the GUI938
Using the CLI939
Diagnosing the Network940
Using the GUI940
Troubleshooting with Ping Testing940
Troubleshooting with Tracert Testing941
Using the CLI942
Configuring the Ping Test942
Configuring the Tracert Test943
Appendix: Default Parameters944
Overview946
System Logs Configurations947
Using the GUI948
Configuring the Local Logs948
Configuring the Remote Logs948
Backing up the Logs949
Viewing the Log Table950
Using the CLI951
Configuring the Local Logs951
Configuring the Remote Logs952
Configuration Example954
Network Requirements954
Configuration Scheme954
Using the GUI954
Using the CLI955
Appendix: Default Parameters956

TP-Link TL-SG2428P - Configuring Access Security

Table of Contents

Other manuals for TP-Link TL-SG2428P

Related product manuals