TL-SG3210 V1 User Guide
Page 2
...is subject to radio communications. Any changes or modifications not expressly approved by any means or used in accordance with the instruction manual, may cause harmful interference to the following two conditions: 1) This device may not cause harmful interference. 2) This device ... COPYRIGHT & TRADEMARKS Specifications are subject to correct the interference at his own expense. These limits are trademarks or registered trademarks of TP-LINK TECHNOLOGIES CO., LTD. CE Mark Warning This is a registered trademark of their respective holders. Other brands and product names are ...
...is subject to radio communications. Any changes or modifications not expressly approved by any means or used in accordance with the instruction manual, may cause harmful interference to the following two conditions: 1) This device may not cause harmful interference. 2) This device ... COPYRIGHT & TRADEMARKS Specifications are subject to correct the interference at his own expense. These limits are trademarks or registered trademarks of TP-LINK TECHNOLOGIES CO., LTD. CE Mark Warning This is a registered trademark of their respective holders. Other brands and product names are ...
TL-SG3210 V1 User Guide
Page 6
... 10.4.3 VLAN Binding 133 10.5 Application Example for ACL 134 Chapter 11 Network Security ...137 11.1 IP-MAC Binding ...137 11.1.1 Binding Table 137 11.1.2 Manual Binding 138 11.1.3 ARP Scanning 140 11.1.4 DHCP Snooping 141 11.2 ARP Inspection ...147 11.2.1 ARP Detect ...151 11.2.2 ARP Defend 152 11.2.3 ARP Statistics...
... 10.4.3 VLAN Binding 133 10.5 Application Example for ACL 134 Chapter 11 Network Security ...137 11.1 IP-MAC Binding ...137 11.1.1 Binding Table 137 11.1.2 Manual Binding 138 11.1.3 ARP Scanning 140 11.1.4 DHCP Snooping 141 11.2 ARP Inspection ...147 11.2.1 ARP Detect ...151 11.2.2 ARP Defend 152 11.2.3 ARP Statistics...
TL-SG3210 V1 User Guide
Page 12
...: z System Monitor: Monitor the memory and CPU of the Switch. z Network Diagnose: Test if the destination is used to assemble the commonly used in this manual. Chapter Chapter 14 Maintenance Appendix A Specifications Appendix B Configure the PCs Appendix C System Maintenance via FTP Appendix D 802.1X Client Software Appendix E Glossary Introduction This module...
...: z System Monitor: Monitor the memory and CPU of the Switch. z Network Diagnose: Test if the destination is used to assemble the commonly used in this manual. Chapter Chapter 14 Maintenance Appendix A Specifications Appendix B Configure the PCs Appendix C System Maintenance via FTP Appendix D 802.1X Client Software Appendix E Glossary Introduction This module...
TL-SG3210 V1 User Guide
Page 20
Tx: Select Tx to display the bandwidth utilization of sending packets on this port. 4.1.2 Device Description On this page you can manually set the system time, get GMT automatically if it has connected to a NTP server or synchronize with PC's clock as the system time. Figure 4-4 Device ...
Tx: Select Tx to display the bandwidth utilization of sending packets on this port. 4.1.2 Device Description On this page you can manually set the system time, get GMT automatically if it has connected to a NTP server or synchronize with PC's clock as the system time. Figure 4-4 Device ...
TL-SG3210 V1 User Guide
Page 21
... Primary/Secondary NTP Server: Enter the IP Address for the NTP Server. When this option is selected, you can set the date and time manually. Current Time Source: Displays the current time source of the switch. When this screen: ¾ Time Info Current System Date: Displays the current... date and time of the switch. ¾ Time Config Manual: Get GMT: Synchronize with PC'S Clock: When this option is selected, the administrator PC's clock is selected, you can configure the time zone...
... Primary/Secondary NTP Server: Enter the IP Address for the NTP Server. When this option is selected, you can set the date and time manually. Current Time Source: Displays the current time source of the switch. When this screen: ¾ Time Info Current System Date: Displays the current... date and time of the switch. ¾ Time Config Manual: Get GMT: Synchronize with PC'S Clock: When this option is selected, the administrator PC's clock is selected, you can configure the time zone...
TL-SG3210 V1 User Guide
Page 22
... of management VLAN, the only VLAN through which you got time successfully or from which you should enter IP Address, Subnet Mask and Default Gateway manually. z DHCP: When this option is selected, the switch will change it appropriate to be the Management VLAN, you can log on the switch. z BOOTP: When...
... of management VLAN, the only VLAN through which you got time successfully or from which you should enter IP Address, Subnet Mask and Default Gateway manually. z DHCP: When this option is selected, the switch will change it appropriate to be the Management VLAN, you can log on the switch. z BOOTP: When...
TL-SG3210 V1 User Guide
Page 40
... enabled. 5.1.4 Port Isolation Port Isolation provides a method of the aging time and can only be deleted manually. The learned entries will be out of the influence of the aging time and can only be deleted manually. Choose the menu "Switching→Port→Port Isolation" to set its forward portlist. Figure 5-5 Port...
... enabled. 5.1.4 Port Isolation Port Isolation provides a method of the aging time and can only be deleted manually. The learned entries will be out of the influence of the aging time and can only be deleted manually. Choose the menu "Switching→Port→Port Isolation" to set its forward portlist. Figure 5-5 Port...
TL-SG3210 V1 User Guide
Page 43
Description: Give a description to load the following entries are displayed on this page, you can manually configure the LAG. The LACP feature is disabled for identification. 36 Figure 5-8 Manually Config The following page. Figure 5-7 Detail Information 5.2.2 Static LAG On this screen: ¾ LAG Config Group Number: Select a Group Number for the LAG. Choose the menu Switching→LAG→Static LAG to the LAG for the member ports of the manually added Static LAG.
Description: Give a description to load the following entries are displayed on this page, you can manually configure the LAG. The LACP feature is disabled for identification. 36 Figure 5-8 Manually Config The following page. Figure 5-7 Detail Information 5.2.2 Static LAG On this screen: ¾ LAG Config Group Number: Select a Group Number for the LAG. Choose the menu Switching→LAG→Static LAG to the LAG for the member ports of the manually added Static LAG.
TL-SG3210 V1 User Guide
Page 48
... counted in . The length of good multicast packets received or transmitted on the port. Displays the number of collisions experienced by auto-learning or configured manually. Most the entries are not counted in . The error frames are generated and updated by auto-learning. Displays the details of the switch is between...
... counted in . The length of good multicast packets received or transmitted on the port. Displays the number of collisions experienced by auto-learning or configured manually. Most the entries are not counted in . The error frames are generated and updated by auto-learning. Displays the details of the switch is between...
TL-SG3210 V1 User Guide
Page 49
Filtering Manually configuring No Yes - The address filtering feature allows the switch to filter the undesired packets and forbid its forwarding so as the following page. 42 ... following : Type Configuration Way Being kept after reboot Relationship between Aging out (if the configuration is the bound MAC saved) address and the port Static Manually configuring No Yes Address Table The bound MAC address can not be learned by the other ports in the same VLAN. Address Table Table 5-1 Types...
Filtering Manually configuring No Yes - The address filtering feature allows the switch to filter the undesired packets and forbid its forwarding so as the following page. 42 ... following : Type Configuration Way Being kept after reboot Relationship between Aging out (if the configuration is the bound MAC saved) address and the port Static Manually configuring No Yes Address Table The bound MAC address can not be learned by the other ports in the same VLAN. Address Table Table 5-1 Types...
TL-SG3210 V1 User Guide
Page 51
... the MAC address. In the stable networks, the static MAC address entries can be displayed in the static learning mode will be added or removed manually, independent of the aging time. Choose the menu Switching→MAC Address→Static Address to load the following entries are displayed on this screen...
... the MAC address. In the stable networks, the static MAC address entries can be displayed in the static learning mode will be added or removed manually, independent of the aging time. Choose the menu Switching→MAC Address→Static Address to load the following entries are displayed on this screen...
TL-SG3210 V1 User Guide
Page 54
... the switch to filter the packets which includes this MAC address as the source address or destination address, so as to be added or removed manually, independent of your selected entry to the corresponding port statically. If the aging time is too long, excessive invalid MAC address entries maintained by the...
... the switch to filter the packets which includes this MAC address as the source address or destination address, so as to be added or removed manually, independent of your selected entry to the corresponding port statically. If the aging time is too long, excessive invalid MAC address entries maintained by the...
TL-SG3210 V1 User Guide
Page 122
... each port via configuring the available bandwidth of each port to ensure network in working order, can select a rate from the dropdown list or select "Manual" to set Ingress rate, the system will automatically select integral multiple of the Switch. Select: Select the desired port for receiving packets on the port...
... each port via configuring the available bandwidth of each port to ensure network in working order, can select a rate from the dropdown list or select "Manual" to set Ingress rate, the system will automatically select integral multiple of the Switch. Select: Select the desired port for receiving packets on the port...
TL-SG3210 V1 User Guide
Page 123
... sending packets on this port. 2. If you are displayed on the port. Figure 9-11 Storm Control The following page. When selecting "Manual" to set Ingress/Egress rate, the system will automatically select integral multiple of the three kind packets exceeds the set Ingress/Egress rate, the... system will be automatically discarded to . You can select a rate from the dropdown list or select "Manual" to set bandwidth, the packets will automatically select 1024Kbps as the real Egress rate. For example, if you enter 1023Kbps, the system will...
... sending packets on this port. 2. If you are displayed on the port. Figure 9-11 Storm Control The following page. When selecting "Manual" to set Ingress/Egress rate, the system will automatically select integral multiple of the three kind packets exceeds the set Ingress/Egress rate, the... system will be automatically discarded to . You can select a rate from the dropdown list or select "Manual" to set bandwidth, the packets will automatically select 1024Kbps as the real Egress rate. For example, if you enter 1023Kbps, the system will...
TL-SG3210 V1 User Guide
Page 125
... does not receive any voice packet on the switch ¾ Port Voice VLAN Mode A voice VLAN can operate in two modes: automatic mode and manual mode. The following table shows the detailed information. stream TRUNK: Supported. GENERAL:Supported. UNTAG voice ACCESS: Supported. 5 00-D0-1E-00-... VLAN should be UNTAG. 118 The default VLAN of the port can be TAG. GENERAL: Supported. Port Voice Mode VLAN Voice Stream Type Link type of the voice VLAN. The default VLAN of the port should be voice VLAN. UNTAG voice ACCESS、TRUNK、GENERAL: Not supported...
... does not receive any voice packet on the switch ¾ Port Voice VLAN Mode A voice VLAN can operate in two modes: automatic mode and manual mode. The following table shows the detailed information. stream TRUNK: Supported. GENERAL:Supported. UNTAG voice ACCESS: Supported. 5 00-D0-1E-00-... VLAN should be UNTAG. 118 The default VLAN of the port can be TAG. GENERAL: Supported. Port Voice Mode VLAN Voice Stream Type Link type of the voice VLAN. The default VLAN of the port should be voice VLAN. UNTAG voice ACCESS、TRUNK、GENERAL: Not supported...
TL-SG3210 V1 User Guide
Page 128
... number of the switch. The switch analyzes the received packets and the packets recognized as voice packets are displayed on the port number you can manually add a port to the voice VLAN or remove a port from the voice VLAN by checking its OUI address. z Auto: In this screen: 121 ...It is a voice packet by checking whether the port receives voice data or not z Manual: In this mode, you entered. Choose the menu QoS→Voice VLAN→OUI Config to load the following entries are transmitted in the current...
... number of the switch. The switch analyzes the received packets and the packets recognized as voice packets are displayed on the port number you can manually add a port to the voice VLAN or remove a port from the voice VLAN by checking its OUI address. z Auto: In this screen: 121 ...It is a voice packet by checking whether the port receives voice data or not z Manual: In this mode, you entered. Choose the menu QoS→Voice VLAN→OUI Config to load the following entries are transmitted in the current...
TL-SG3210 V1 User Guide
Page 144
Figure 11-1 Binding Table 137 Chapter 11 Network Security Network Security module is implemented on the Binding Table, Manual Binding, ARP Scanning and DHCP Snooping pages. 11.1.1 Binding Table On this page, you to access the network. The following page. The IP... Host for automatic binding. You are also considered as the sources of the Host together. These three sources (Manual, Scanning and Snooping) are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in descending order of priority....
Figure 11-1 Binding Table 137 Chapter 11 Network Security Network Security module is implemented on the Binding Table, Manual Binding, ARP Scanning and DHCP Snooping pages. 11.1.1 Binding Table On this page, you to access the network. The following page. The IP... Host for automatic binding. You are also considered as the sources of the Host together. These three sources (Manual, Scanning and Snooping) are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in descending order of priority....
TL-SG3210 V1 User Guide
Page 145
... entry in the condition that the entry has a collision with the other entries. Choose the menu Network Security→IP-MAC Binding→Manual Binding to view and modify the Protect Type of the Host. Note: 1 Among the entries with Critical collision level, the one with ... address, VLAN ID and the Port number together in the Binding Table. • All: All the bound entries will be displayed. • Manual: Only the manually added entries will be displayed. • Scanning: Only the entries formed via ARP Scanning will be displayed. • Snooping: Only the entries ...
... entry in the condition that the entry has a collision with the other entries. Choose the menu Network Security→IP-MAC Binding→Manual Binding to view and modify the Protect Type of the Host. Note: 1 Among the entries with Critical collision level, the one with ... address, VLAN ID and the Port number together in the Binding Table. • All: All the bound entries will be displayed. • Manual: Only the manually added entries will be displayed. • Scanning: Only the entries formed via ARP Scanning will be displayed. • Snooping: Only the entries ...
TL-SG3210 V1 User Guide
Page 146
... MAC Address of the Host. VLAN ID: Displays the VLAN ID here. Protect Type: Select the Protect Type for the entry. ¾ Manual Binding Table Select: Select the desired entry to be caused by the MSTP function. • Critical: Indicates that the collision may be deleted.... MAC Address: Displays the MAC Address of the Host. Figure 11-2 Manual Binding The following entries are displayed on this screen: ¾ Manual Binding Option Host Name: Enter the Host Name. IP Address: Enter the IP Address of port connected to the ...
... MAC Address of the Host. VLAN ID: Displays the VLAN ID here. Protect Type: Select the Protect Type for the entry. ¾ Manual Binding Table Select: Select the desired entry to be caused by the MSTP function. • Critical: Indicates that the collision may be deleted.... MAC Address: Displays the MAC Address of the Host. Figure 11-2 Manual Binding The following entries are displayed on this screen: ¾ Manual Binding Option Host Name: Enter the Host Name. IP Address: Enter the IP Address of port connected to the ...
TL-SG3210 V1 User Guide
Page 149
... IP address expired, the Client should apply for DHCP-snooping implementation For different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP address to the specific Client (e.g.: WWW Server) via the "Client/Server" communication mode...
... IP address expired, the Client should apply for DHCP-snooping implementation For different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP address to the specific Client (e.g.: WWW Server) via the "Client/Server" communication mode...