802.1X Client Software User Guide
Page 2
http://www.tp-link.com I is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are subject to make any derivative such as translation, transformation, or adaptation without notice. All rights reserved. Copyright © 2016 TP-Link Technologies Co., Ltd. No part of the specifications may be reproduced in any form or by any means or used to change without permission from TP-Link Technologies Co., Ltd. COPYRIGHT & TRADEMARKS Specifications are trademarks or registered trademarks of their respective holders.
http://www.tp-link.com I is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are subject to make any derivative such as translation, transformation, or adaptation without notice. All rights reserved. Copyright © 2016 TP-Link Technologies Co., Ltd. No part of the specifications may be reproduced in any form or by any means or used to change without permission from TP-Link Technologies Co., Ltd. COPYRIGHT & TRADEMARKS Specifications are trademarks or registered trademarks of their respective holders.
802.1X Client Software User Guide
Page 4
... System: The authenticator system is usually an 802.1X-supported network device, such as the authenticator system, please read this TP-Link switch. The server system is normally in LAN and is an entity that provides authentication service to access the LAN and authenticates... of three entities: Supplicant System (Client), Authenticator System and Authentication System. The 802.1X client software should be installed on the TP-Link switch prevents unauthorized clients from accessing the network. 802.1x operates in the Supplicant System. 2. Supported Platforms 32-bit ...
... System: The authenticator system is usually an 802.1X-supported network device, such as the authenticator system, please read this TP-Link switch. The server system is normally in LAN and is an entity that provides authentication service to access the LAN and authenticates... of three entities: Supplicant System (Client), Authenticator System and Authentication System. The 802.1X client software should be installed on the TP-Link switch prevents unauthorized clients from accessing the network. 802.1x operates in the Supplicant System. 2. Supported Platforms 32-bit ...
802.1X Client Software User Guide
Page 5
... to accomplish the installation. 2 Configuration 1. This software is in the same directory with this interface, please ensure that both the TP-Link switch and the authentication server supports the authentication methods in the Authentication Server. Follow the InstallSheild Wizard to perform EAP-TLS, EAP-...than 16 characters as Name and Password if your switch does not support advanced authentication. 2. Try to run the TP-Link 802.1X Client Figure 1-2 TP-Link 802.1X Client Enter the Name and the Password for EAP-MD5 or PAP authentication method specified in the following ...
... to accomplish the installation. 2 Configuration 1. This software is in the same directory with this interface, please ensure that both the TP-Link switch and the authentication server supports the authentication methods in the Authentication Server. Follow the InstallSheild Wizard to perform EAP-TLS, EAP-...than 16 characters as Name and Password if your switch does not support advanced authentication. 2. Try to run the TP-Link 802.1X Client Figure 1-2 TP-Link 802.1X Client Enter the Name and the Password for EAP-MD5 or PAP authentication method specified in the following ...
802.1X Client Software User Guide
Page 6
For PEAP, EAP/MSCHAPV2, EAP/MD5 and EAP/GTC can be selected. For EAP-TTLS, EAP/MSCHAPV2, EAP/MD5, EAP/GTC, MSCHAPV2, MSCHAP, CHAP and PAP can be selected. If Anonymous is established. Click to initiate the authentication. Tunnel: The authentication methods adopted for EAP-TTLS or PEAP after the TLS secure tunnel is selected, the clients will use anonymous as the identity to select the certificate. 3 Name/Password: Name and password for EAP-TLS authentication. Certificate Setting: A client certificate is needed for EAP-TTLS, PEAP or EAP-TLS (name required only) authentication ...
For PEAP, EAP/MSCHAPV2, EAP/MD5 and EAP/GTC can be selected. For EAP-TTLS, EAP/MSCHAPV2, EAP/MD5, EAP/GTC, MSCHAPV2, MSCHAP, CHAP and PAP can be selected. If Anonymous is established. Click to initiate the authentication. Tunnel: The authentication methods adopted for EAP-TTLS or PEAP after the TLS secure tunnel is selected, the clients will use anonymous as the identity to select the certificate. 3 Name/Password: Name and password for EAP-TLS authentication. Certificate Setting: A client certificate is needed for EAP-TTLS, PEAP or EAP-TLS (name required only) authentication ...
802.1X Client Software User Guide
Page 7
Click the Properties button on Figure B-12 to automatically start the connection again when it does not receive the handshake reply packets from DHCP server. After passing the authentication, the Client can access the network after getting the new IP address. The Client can be assigned the IP address by Unicast: When this option is selected, the notification of network disconnection will send the EAPOL Start packets to verify the server certificate. 3. Obtain an IP address automatically: Select this option if the Client automatically obtains the IP address from the switch within a ...
Click the Properties button on Figure B-12 to automatically start the connection again when it does not receive the handshake reply packets from DHCP server. After passing the authentication, the Client can access the network after getting the new IP address. The Client can be assigned the IP address by Unicast: When this option is selected, the notification of network disconnection will send the EAPOL Start packets to verify the server certificate. 3. Obtain an IP address automatically: Select this option if the Client automatically obtains the IP address from the switch within a ...
802.1X Client Software User Guide
Page 8
To continue, click Connect button after entering the Name and Password on the right corner of desktop, and then the following connection status screen will pop up. Then the following screen will appear to prompt that the Radius server is being searched. When passing the authentication, the following screen will appear. Figure 1-7 Successfully Authenticated 6. Double click the icon on Figure B-12. Figure 1-8 Connection Status 5 Figure 1-6 Authentication Dialog 5. 4.
To continue, click Connect button after entering the Name and Password on the right corner of desktop, and then the following connection status screen will pop up. Then the following screen will appear to prompt that the Radius server is being searched. When passing the authentication, the following screen will appear. Figure 1-7 Successfully Authenticated 6. Double click the icon on Figure B-12. Figure 1-8 Connection Status 5 Figure 1-6 Authentication Dialog 5. 4.
802.1X Client Software User Guide
Page 9
...: No. A1: It's because the supported DLL file is encrypted. 6 This TP-Link 802.1X Client Software is customized for installation, and run the client software again. Q3: Is it safe to download WinPcap 4.0.2 or the higher version for TP-Link switches. Q2: Is this error dialog box pop up when starting up the... TP-Link 802.1X Client Software? You are suggested to go to http://www.winpcap.org to set the password being...
...: No. A1: It's because the supported DLL file is encrypted. 6 This TP-Link 802.1X Client Software is customized for installation, and run the client software again. Q3: Is it safe to download WinPcap 4.0.2 or the higher version for TP-Link switches. Q2: Is this error dialog box pop up when starting up the... TP-Link 802.1X Client Software? You are suggested to go to http://www.winpcap.org to set the password being...
T2600G-28SQUN V1 User Guide
Page 1
User Guide T2600G Series Switches T2600G-28TS (TL-SG3424) / T2600G-52TS (TL-SG3452) T2600G-28MPS (TL-SG3424P) / T2600G-28SQ 1910012345 REV3.0.1 March 2018
User Guide T2600G Series Switches T2600G-28TS (TL-SG3424) / T2600G-52TS (TL-SG3452) T2600G-28MPS (TL-SG3424P) / T2600G-28SQ 1910012345 REV3.0.1 March 2018
T2600G-28SQUN V1 User Guide
Page 2
CONTENTS About This Guide Intended Readers...1 Conventions...1 More Information...2 Accessing the Switch Overview ...4 Web Interface Access...5 Login...5 Save the Configuration File...6 Disable the Web Server...7 Configure the Switch's IP Address and Default Gateway...7 Command Line Interface Access...10 Console Login (only for switch with console port)...10 Telnet Login...12 SSH Login...13 Disable Telnet login...17 Disable SSH login...18 Copy running-config startup-config...18 Change the Switch's IP Address and Default Gateway...19 Managing System System...21 Overview...21 Supported Features...
CONTENTS About This Guide Intended Readers...1 Conventions...1 More Information...2 Accessing the Switch Overview ...4 Web Interface Access...5 Login...5 Save the Configuration File...6 Disable the Web Server...7 Configure the Switch's IP Address and Default Gateway...7 Command Line Interface Access...10 Console Login (only for switch with console port)...10 Telnet Login...12 SSH Login...13 Disable Telnet login...17 Disable SSH login...18 Copy running-config startup-config...18 Change the Switch's IP Address and Default Gateway...19 Managing System System...21 Overview...21 Supported Features...
T2600G-28SQUN V1 User Guide
Page 3
Configuring the System Time...32 Configuring the Daylight Saving Time...34 User Management Configurations...37 Using the GUI...37 Creating Accounts...37 Configuring Enable Password...38 Using the CLI...39 Creating Accounts...39 Configuring Enable Password...41 System Tools Configurations...44 Using the GUI...44 Configuring the Boot File...44 Restoring the Configuration of the Switch...46 Backing up the Configuration File...46 Upgrading the Firmware...47 Configuring DHCP Auto Install...47 Rebooting the switch...49 Reseting the Switch...50 Using the CLI...50 Configuring the Boot File...50 ...
Configuring the System Time...32 Configuring the Daylight Saving Time...34 User Management Configurations...37 Using the GUI...37 Creating Accounts...37 Configuring Enable Password...38 Using the CLI...39 Creating Accounts...39 Configuring Enable Password...41 System Tools Configurations...44 Using the GUI...44 Configuring the Boot File...44 Restoring the Configuration of the Switch...46 Backing up the Configuration File...46 Upgrading the Firmware...47 Configuring DHCP Auto Install...47 Rebooting the switch...49 Reseting the Switch...50 Using the CLI...50 Configuring the Boot File...50 ...
T2600G-28SQUN V1 User Guide
Page 4
Time Range Configuration...74 Using the GUI...74 Adding Time Range Entries...74 Configuring Holiday...76 Using the CLI...77 Adding Time Range Entries...77 Configuring Holiday...78 Example for PoE Configurations...80 Network Requirements...80 Configuring Scheme...80 Using the GUI...80 Using the CLI...83 Appendix: Default Parameters...85 Managing Physical Interfaces Physical Interface...89 Overview...89 Supported Features...89 Basic Parameters Configurations...90 Using the GUI...90 Using the CLI...91 Port Isolation Configurations...94 Using the GUI...94 Using the CLI...95 Loopback Detection ...
Time Range Configuration...74 Using the GUI...74 Adding Time Range Entries...74 Configuring Holiday...76 Using the CLI...77 Adding Time Range Entries...77 Configuring Holiday...78 Example for PoE Configurations...80 Network Requirements...80 Configuring Scheme...80 Using the GUI...80 Using the CLI...83 Appendix: Default Parameters...85 Managing Physical Interfaces Physical Interface...89 Overview...89 Supported Features...89 Basic Parameters Configurations...90 Using the GUI...90 Using the CLI...91 Port Isolation Configurations...94 Using the GUI...94 Using the CLI...95 Loopback Detection ...
T2600G-28SQUN V1 User Guide
Page 5
Using the CLI...106 Appendix: Default Parameters...107 Configuring LAG LAG...109 Overview...109 Supported Features...109 LAG Configuration...110 Using the GUI...111 Configuring Load-balancing Algorithm...111 Configuring Static LAG or LACP...112 Using the CLI...114 Configuring Load-balancing Algorithm...114 Configuring Static LAG or LACP...115 Configuration Example...119 Network Requirements...119 Configuration Scheme...119 Using the GUI...120 Using the CLI...121 Appendix: Default Parameters...123 Configuring DDM Overview...125 DDM Configuration...126 Using the GUI...126 Configuring DDM ...
Using the CLI...106 Appendix: Default Parameters...107 Configuring LAG LAG...109 Overview...109 Supported Features...109 LAG Configuration...110 Using the GUI...111 Configuring Load-balancing Algorithm...111 Configuring Static LAG or LACP...112 Using the CLI...114 Configuring Load-balancing Algorithm...114 Configuring Static LAG or LACP...115 Configuration Example...119 Network Requirements...119 Configuration Scheme...119 Using the GUI...120 Using the CLI...121 Appendix: Default Parameters...123 Configuring DDM Overview...125 DDM Configuration...126 Using the GUI...126 Configuring DDM ...
T2600G-28SQUN V1 User Guide
Page 6
Managing MAC Address Table MAC Address Table...144 Overview...144 Supported Features...144 Address Configurations...146 Using the GUI...146 Adding Static MAC Address Entries ...146 Modifying the Aging Time of Dynamic Address Entries 148 Adding MAC Filtering Address Entries...149 Viewing Address Table Entries...149 Using the CLI...150 Adding Static MAC Address Entries ...150 Modifying the Aging Time of Dynamic Address Entries 151 Adding MAC Filtering Address Entries...152 Security Configurations...154 Using the GUI...154 Configuring MAC Notification Traps...154 Limiting the Number of MAC ...
Managing MAC Address Table MAC Address Table...144 Overview...144 Supported Features...144 Address Configurations...146 Using the GUI...146 Adding Static MAC Address Entries ...146 Modifying the Aging Time of Dynamic Address Entries 148 Adding MAC Filtering Address Entries...149 Viewing Address Table Entries...149 Using the CLI...150 Adding Static MAC Address Entries ...150 Modifying the Aging Time of Dynamic Address Entries 151 Adding MAC Filtering Address Entries...152 Security Configurations...154 Using the GUI...154 Configuring MAC Notification Traps...154 Limiting the Number of MAC ...
T2600G-28SQUN V1 User Guide
Page 7
Adding the Port to the Specified VLAN...170 Configuration Example...172 Network Requirements...172 Configuration Scheme...172 Network Topology...173 Using the GUI...173 Using the CLI...176 Appendix: Default Parameters ...179 Configuring MAC VLAN Overview...181 MAC VLAN Configuration...182 Using the GUI...182 Configuring 802.1Q VLAN...182 Binding the MAC Address to the VLAN...182 Enabling MAC VLAN for the Port...183 Using the CLI...184 Configuring 802.1Q VLAN...184 Enabling MAC VLAN for the Port...185 Configuration Example ...186 Network Requirements...186 Configuration Scheme...186 Using the ...
Adding the Port to the Specified VLAN...170 Configuration Example...172 Network Requirements...172 Configuration Scheme...172 Network Topology...173 Using the GUI...173 Using the CLI...176 Appendix: Default Parameters ...179 Configuring MAC VLAN Overview...181 MAC VLAN Configuration...182 Using the GUI...182 Configuring 802.1Q VLAN...182 Binding the MAC Address to the VLAN...182 Enabling MAC VLAN for the Port...183 Using the CLI...184 Configuring 802.1Q VLAN...184 Enabling MAC VLAN for the Port...185 Configuration Example ...186 Network Requirements...186 Configuration Scheme...186 Using the ...
T2600G-28SQUN V1 User Guide
Page 8
Configuration Example ...206 Network Requirements...206 Configuration Scheme...206 Using the GUI...208 Using the CLI...214 Appendix: Default Parameters...218 Configuring VLAN-VPN VLAN-VPN...220 Overview...220 Supported Features...221 Basic VLAN-VPN Configuration...222 Using the GUI...222 Configuring 802.1Q VLAN...222 Configuring Basic VLAN-VPN...223 Using the CLI...224 Configuring 802.1Q VLAN...224 Configuring Basic VLAN-VPN...224 Flexible VLAN-VPN Configuration...227 Using the GUI...227 Using the CLI...228 Configuration Example...230 Network Requirements...230 Configuration Scheme...230 Using...
Configuration Example ...206 Network Requirements...206 Configuration Scheme...206 Using the GUI...208 Using the CLI...214 Appendix: Default Parameters...218 Configuring VLAN-VPN VLAN-VPN...220 Overview...220 Supported Features...221 Basic VLAN-VPN Configuration...222 Using the GUI...222 Configuring 802.1Q VLAN...222 Configuring Basic VLAN-VPN...223 Using the CLI...224 Configuring 802.1Q VLAN...224 Configuring Basic VLAN-VPN...224 Flexible VLAN-VPN Configuration...227 Using the GUI...227 Using the CLI...228 Configuration Example...230 Network Requirements...230 Configuration Scheme...230 Using...
T2600G-28SQUN V1 User Guide
Page 9
... Private VLAN Overview...257 Private VLAN Configurations...259 Using the GUI...259 Using the CLI...260 Creating Private VLAN...260 Configuring the Up-link Port...262 Configuring the Down-link Port...264 Configuration Example...266 Network Requirements...266 Configuration Scheme...266 Network Topology...266 Using the GUI...267 Using the CLI...271...
... Private VLAN Overview...257 Private VLAN Configurations...259 Using the GUI...259 Using the CLI...260 Creating Private VLAN...260 Configuring the Up-link Port...262 Configuring the Down-link Port...264 Configuration Example...266 Network Requirements...266 Configuration Scheme...266 Network Topology...266 Using the GUI...267 Using the CLI...271...
T2600G-28SQUN V1 User Guide
Page 10
Using the GUI...299 Configuring MLD Snooping Globally...299 Configuring MLD Snooping for VLANs...300 Configuring MLD Snooping for Ports...303 Configuring Hosts to Statically Join a Group...303 Using the CLI...304 Configuring MLD Snooping Globally...304 Configuring MLD Snooping for VLANs...305 Configuring MLD Snooping for Ports...310 Configuring Hosts to Statically Join a Group...311 MVR Configuration...313 Using the GUI...313 Configuring 802.1Q VLANs...313 Configuring MVR Globally...314 Adding Multicast Groups to MVR...315 Configuring MVR for the Port...316 (Optional) Adding Ports to MVR ...
Using the GUI...299 Configuring MLD Snooping Globally...299 Configuring MLD Snooping for VLANs...300 Configuring MLD Snooping for Ports...303 Configuring Hosts to Statically Join a Group...303 Using the CLI...304 Configuring MLD Snooping Globally...304 Configuring MLD Snooping for VLANs...305 Configuring MLD Snooping for Ports...310 Configuring Hosts to Statically Join a Group...311 MVR Configuration...313 Using the GUI...313 Configuring 802.1Q VLANs...313 Configuring MVR Globally...314 Adding Multicast Groups to MVR...315 Configuring MVR for the Port...316 (Optional) Adding Ports to MVR ...
T2600G-28SQUN V1 User Guide
Page 11
Example for Configuring Basic IGMP Snooping...338 Network Requirements...338 Configuration Scheme...338 Using the GUI...339 Using the CLI...341 Example for Configuring MVR...343 Network Requirements...343 Network Topology...343 Configuration Scheme...344 Using the GUI...344 Using the CLI...347 Example for Configuring Unknown Multicast and Fast Leave 350 Network Requirement...350 Configuration Scheme...351 Using the GUI...351 Using the CLI...353 Example for Configuring Multicast Filtering...354 Network Requirements...354 Configuration Scheme...354 Network Topology...355 Using the GUI...355 ...
Example for Configuring Basic IGMP Snooping...338 Network Requirements...338 Configuration Scheme...338 Using the GUI...339 Using the CLI...341 Example for Configuring MVR...343 Network Requirements...343 Network Topology...343 Configuration Scheme...344 Using the GUI...344 Using the CLI...347 Example for Configuring Unknown Multicast and Fast Leave 350 Network Requirement...350 Configuration Scheme...351 Using the GUI...351 Using the CLI...353 Example for Configuring Multicast Filtering...354 Network Requirements...354 Configuration Scheme...354 Network Topology...355 Using the GUI...355 ...
T2600G-28SQUN V1 User Guide
Page 12
Configuring STP/RSTP Parameters on Ports...374 Configuring STP/RSTP Globally...376 Verifying the STP/RSTP Configurations...378 Using the CLI...380 Configuring STP/RSTP Parameters on Ports...380 Configuring Global STP/RSTP Parameters...382 Enabling STP/RSTP Globally...384 MSTP Configurations...386 Using the GUI...386 Configuring Parameters on Ports in CIST...386 Configuring the MSTP Region...389 Configuring MSTP Globally...393 Verifying the MSTP Configurations...395 Using the CLI...396 Configuring Parameters on Ports in CIST...396 Configuring the MSTP Region ...398 Configuring Global MSTP ...
Configuring STP/RSTP Parameters on Ports...374 Configuring STP/RSTP Globally...376 Verifying the STP/RSTP Configurations...378 Using the CLI...380 Configuring STP/RSTP Parameters on Ports...380 Configuring Global STP/RSTP Parameters...382 Enabling STP/RSTP Globally...384 MSTP Configurations...386 Using the GUI...386 Configuring Parameters on Ports in CIST...386 Configuring the MSTP Region...389 Configuring MSTP Globally...393 Verifying the MSTP Configurations...395 Using the CLI...396 Configuring Parameters on Ports in CIST...396 Configuring the MSTP Region ...398 Configuring Global MSTP ...
T2600G-28SQUN V1 User Guide
Page 13
Using the CLI...431 Global Config...431 Port Config...433 LLDP-MED Configurations...436 Using the GUI...436 Configuring LLDP Globally ...436 Configuring LLDP-MED Globally...436 Configuring LLDP-MED for Ports...437 Using the CLI...439 Global Config...439 Port Config...440 Viewing LLDP Settings...443 Using GUI...443 Viewing LLDP Device Info...443 Viewing LLDP Statistics...446 Using CLI...447 Viewing LLDP-MED Settings...448 Using GUI...448 Using CLI...450 Configuration Example...451 Network Requirements...451 Network Topology...451 Configuration Scheme...451 Using the GUI...451 Using CLI...452 ...
Using the CLI...431 Global Config...431 Port Config...433 LLDP-MED Configurations...436 Using the GUI...436 Configuring LLDP Globally ...436 Configuring LLDP-MED Globally...436 Configuring LLDP-MED for Ports...437 Using the CLI...439 Global Config...439 Port Config...440 Viewing LLDP Settings...443 Using GUI...443 Viewing LLDP Device Info...443 Viewing LLDP Statistics...446 Using CLI...447 Viewing LLDP-MED Settings...448 Using GUI...448 Using CLI...450 Configuration Example...451 Network Requirements...451 Network Topology...451 Configuration Scheme...451 Using the GUI...451 Using CLI...452 ...