TL-SG3216 V1 User Guide
Page 4
...Table 41 5.4.2 Static Address 43 5.4.3 Dynamic Address 44 5.4.4 Filtering Address 46 Chapter 6 VLAN...48 6.1 802.1Q VLAN...49 6.1.1 VLAN Config ...51 6.1.2 Port Config ...53 6.2 MAC VLAN ...55 6.3 Protocol VLAN ...56 6.3.1 Protocol Group Table 59 6.3.2 Protocol Group 59 6.3.3 Protocol Template 60 6.4 ...Application Example for 802.1Q VLAN 61 6.5 Application Example for MAC VLAN 63 6.6 Application Example for Protocol VLAN 64 6.7 GVRP ...66 Chapter 7 Spanning Tree ...70 7.1 STP Config ...75 7.1.1 STP Config...
...Table 41 5.4.2 Static Address 43 5.4.3 Dynamic Address 44 5.4.4 Filtering Address 46 Chapter 6 VLAN...48 6.1 802.1Q VLAN...49 6.1.1 VLAN Config ...51 6.1.2 Port Config ...53 6.2 MAC VLAN ...55 6.3 Protocol VLAN ...56 6.3.1 Protocol Group Table 59 6.3.2 Protocol Group 59 6.3.3 Protocol Template 60 6.4 ...Application Example for 802.1Q VLAN 61 6.5 Application Example for MAC VLAN 63 6.6 Application Example for Protocol VLAN 64 6.7 GVRP ...66 Chapter 7 Spanning Tree ...70 7.1 STP Config ...75 7.1.1 STP Config...
TL-SG3216 V1 User Guide
Page 5
...Application Example for STP Function 86 Chapter 8 Multicast...90 8.1 IGMP Snooping ...92 8.1.1 Snooping Config 93 8.1.2 Port Config ...94 8.1.3 VLAN Config ...95 8.1.4 Multicast VLAN 97 8.2 Multicast IP ...100 8.2.1 Multicast IP Table 101 8.2.2 Static Multicast IP 101 8.3 Multicast Filter...102 8.3.1 IP-Range...103 ... 111 9.1.3 802.1P Priority 112 9.1.4 DSCP Priority 112 9.2 Bandwidth Control ...114 9.2.1 Rate Limit...114 9.2.2 Storm Control 115 9.3 Voice VLAN ...116 9.3.1 Global Config 118 9.3.2 Port Config ...119 9.3.3 OUI Config ...120 Chapter 10 ACL ...122 10.1 Time-Range ...122 10...
...Application Example for STP Function 86 Chapter 8 Multicast...90 8.1 IGMP Snooping ...92 8.1.1 Snooping Config 93 8.1.2 Port Config ...94 8.1.3 VLAN Config ...95 8.1.4 Multicast VLAN 97 8.2 Multicast IP ...100 8.2.1 Multicast IP Table 101 8.2.2 Static Multicast IP 101 8.3 Multicast Filter...102 8.3.1 IP-Range...103 ... 111 9.1.3 802.1P Priority 112 9.1.4 DSCP Priority 112 9.2 Bandwidth Control ...114 9.2.1 Rate Limit...114 9.2.2 Storm Control 115 9.3 Voice VLAN ...116 9.3.1 Global Config 118 9.3.2 Port Config ...119 9.3.3 OUI Config ...120 Chapter 10 ACL ...122 10.1 Time-Range ...122 10...
TL-SG3216 V1 User Guide
Page 6
... 10.3.1 Policy Summary 129 10.3.2 Policy Create 130 10.3.3 Action Create 130 10.4 Policy Binding ...131 10.4.1 Binding Table 131 10.4.2 Port Binding 132 10.4.3 VLAN Binding 132 10.5 Application Example for ACL 133 Chapter 11 Network Security ...136 11.1 IP-MAC Binding ...136 11.1.1 Binding Table 136 11.1.2 Manual Binding...
... 10.3.1 Policy Summary 129 10.3.2 Policy Create 130 10.3.3 Action Create 130 10.4 Policy Binding ...131 10.4.1 Binding Table 131 10.4.2 Port Binding 132 10.4.3 VLAN Binding 132 10.5 Application Example for ACL 133 Chapter 11 Network Security ...136 11.1 IP-MAC Binding ...136 11.1.1 Binding Table 136 11.1.2 Manual Binding...
TL-SG3216 V1 User Guide
Page 10
...Instance: Configure MSTP instances. z System Tools: Manage the configuration file of ports. z LAG: Configure Link Aggregation Group. Here mainly introduces: z 802.1Q VLAN: Configure port-based VLAN. z Port Config: Configure CIST parameters of the switch. This module is used to configure system ... mainly introduces: z System Info: Configure the description, system time and network parameters of IGMP Snooping function, port properties, VLAN and multicast VLAN. Here mainly introduces: z STP Config: Configure and view the global settings of the switch. z Multicast Filter: Configure ...
...Instance: Configure MSTP instances. z System Tools: Manage the configuration file of ports. z LAG: Configure Link Aggregation Group. Here mainly introduces: z 802.1Q VLAN: Configure port-based VLAN. z Port Config: Configure CIST parameters of the switch. This module is used to configure system ... mainly introduces: z System Info: Configure the description, system time and network parameters of IGMP Snooping function, port properties, VLAN and multicast VLAN. Here mainly introduces: z STP Config: Configure and view the global settings of the switch. z Multicast Filter: Configure ...
TL-SG3216 V1 User Guide
Page 11
... the management station to get the information of the illegal users to establish and maintain cluster. 4 z Voice VLAN: Configure voice VLAN to transmit voice data stream within the specified VLAN so as to collect NDP information. z 802.1X: Configure common access control mechanism for ACL rules. z ACL... Config: ACL rules. Here mainly introduces: z IP-MAC Binding: Bind the IP address, MAC address, VLAN ID and the connected Port number of SNMP function. This module is used to configure cluster function to monitor and maintain the network devices. ...
... the management station to get the information of the illegal users to establish and maintain cluster. 4 z Voice VLAN: Configure voice VLAN to transmit voice data stream within the specified VLAN so as to collect NDP information. z 802.1X: Configure common access control mechanism for ACL rules. z ACL... Config: ACL rules. Here mainly introduces: z IP-MAC Binding: Bind the IP address, MAC address, VLAN ID and the connected Port number of SNMP function. This module is used to configure cluster function to monitor and maintain the network devices. ...
TL-SG3216 V1 User Guide
Page 13
... Dynamic ARP Inspection provide robust security strategy. Link aggregation (LACP) increases aggregated bandwidth, optimizing the transport of Service + Supports L2/L3 granular CoS with high security. Chapter 2 Introduction Thanks for choosing the TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch! 2.1 ....1x, RADIUS. + Dynamic ARP Inspection blocks ARP packets from TP-LINK provides wire-speed performance and full set of layer 2 management features. SNMP, RMON, WEB/CLI/Telnet Log-in multiple VLAN environments. + Multicast snooping automatically prevents flooding of IP multicast traffic...
... Dynamic ARP Inspection provide robust security strategy. Link aggregation (LACP) increases aggregated bandwidth, optimizing the transport of Service + Supports L2/L3 granular CoS with high security. Chapter 2 Introduction Thanks for choosing the TL-SG3216/TL-SG3424 JetStream L2 Lite Managed Switch! 2.1 ....1x, RADIUS. + Dynamic ARP Inspection blocks ARP packets from TP-LINK provides wire-speed performance and full set of layer 2 management features. SNMP, RMON, WEB/CLI/Telnet Log-in multiple VLAN environments. + Multicast snooping automatically prevents flooding of IP multicast traffic...
TL-SG3216 V1 User Guide
Page 39
... load the following entries are displayed on the port. When the MAC Address Table is the attack method that can take effect span the multiple VLANs. 5.1.3 Port Security MAC Address Table maintains the mapping relationship between the port and the MAC address of the connected device, which results in overload, lower...
... load the following entries are displayed on the port. When the MAC Address Table is the attack method that can take effect span the multiple VLANs. 5.1.3 Port Security MAC Address Table maintains the mapping relationship between the port and the MAC address of the connected device, which results in overload, lower...
TL-SG3216 V1 User Guide
Page 40
...the same. The further explains are following: z If the ports, which are enabled for the GVRP, 802.1Q VLAN, Voice VLAN, STP, QoS, DHCP Snooping and Port Configuration (Speed and Duplex, Flow Control), are in a LAG, their...8226; Permanent: When Permanent mode is disabled for the port. The basic configuration includes STP, QoS, GVRP, VLAN, port attributes, MAC Address Learning mode and other functions for Port Security configuration. Select the Learn Mode for the... when the 802.1X function is enabled. 5.2 LAG LAG (Link Aggregation Group) is multi-optional. Displays the port number.
...the same. The further explains are following: z If the ports, which are enabled for the GVRP, 802.1Q VLAN, Voice VLAN, STP, QoS, DHCP Snooping and Port Configuration (Speed and Duplex, Flow Control), are in a LAG, their...8226; Permanent: When Permanent mode is disabled for the port. The basic configuration includes STP, QoS, GVRP, VLAN, port attributes, MAC Address Learning mode and other functions for Port Security configuration. Select the Learn Mode for the... when the 802.1X function is enabled. 5.2 LAG LAG (Link Aggregation Group) is multi-optional. Displays the port number.
TL-SG3216 V1 User Guide
Page 48
... Static Address, Dynamic Address and Filtering Address. 5.4.1 Address Table On this page, you can be learned by the other ports in the same VLAN. The address filtering feature allows the switch to improve the network security. In the stable networks, the static MAC address entries can not be ...learned by auto-learning. Filtering Manually No Yes - updated by the other ports in the same VLAN. The types and the features of the MAC Address Table are listed as to filter the undesired packets and forbid its forwarding so as ...
... Static Address, Dynamic Address and Filtering Address. 5.4.1 Address Table On this page, you can be learned by the other ports in the same VLAN. The address filtering feature allows the switch to improve the network security. In the stable networks, the static MAC address entries can not be ...learned by auto-learning. Filtering Manually No Yes - updated by the other ports in the same VLAN. The types and the features of the MAC Address Table are listed as to filter the undesired packets and forbid its forwarding so as ...
TL-SG3216 V1 User Guide
Page 49
... Option MAC Address: Enter the MAC address of your desired entry. z Static: This option allows the address table to display the dynamic address entries only. VLAN ID: Enter the VLAN ID of your desired entry.
... Option MAC Address: Enter the MAC address of your desired entry. z Static: This option allows the address table to display the dynamic address entries only. VLAN ID: Enter the VLAN ID of your desired entry.
TL-SG3216 V1 User Guide
Page 50
Displays the corresponding VLAN ID of the MAC address. Displays the Aging status of the MAC address. 5.4.2 Static Address The static address table maintains the static address entries which ... the stable networks, the static MAC address entries can be bound. ¾ Search Option 43 VLAN ID: Enter the corresponding VLAN ID of the MAC address. Displays the corresponding Port number of the MAC address. MAC Address: VLAN ID: Port: Type: Aging Status: Displays the MAC address learned by the port with Port...
Displays the corresponding VLAN ID of the MAC address. Displays the Aging status of the MAC address. 5.4.2 Static Address The static address table maintains the static address entries which ... the stable networks, the static MAC address entries can be bound. ¾ Search Option 43 VLAN ID: Enter the corresponding VLAN ID of the MAC address. Displays the corresponding Port number of the MAC address. MAC Address: VLAN ID: Port: Type: Aging Status: Displays the MAC address learned by the port with Port...
TL-SG3216 V1 User Guide
Page 51
... entry. Here you can modify the port number to delete or modify the corresponding port number. Therefore, please ensure the entries in the same VLAN. Type: Displays the Type of the MAC address. If the corresponding port number of your desired entry. ¾ Static Address Table Select: ...entry appropriately. 2. The MAC address in the Static Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. • Port: Enter the Port number of the MAC address is multi-optional. Choose the menu Switching...
... entry. Here you can modify the port number to delete or modify the corresponding port number. Therefore, please ensure the entries in the same VLAN. Type: Displays the Type of the MAC address. If the corresponding port number of your desired entry. ¾ Static Address Table Select: ...entry appropriately. 2. The MAC address in the Static Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. • Port: Enter the Port number of the MAC address is multi-optional. Choose the menu Switching...
TL-SG3216 V1 User Guide
Page 52
...: Allows you to find your desired entry in the Dynamic Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. • Port: Enter the Port number of your desired entry. ¾ Dynamic Address Table 45 Aging Time: Enter...
...: Allows you to find your desired entry in the Dynamic Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. • Port: Enter the Port number of your desired entry. ¾ Dynamic Address Table 45 Aging Time: Enter...
TL-SG3216 V1 User Guide
Page 53
...to forbid the undesired packets to load the following page. This prevents the MAC address table from updating with network changes in the corresponding VLAN. The filtering address can be forwarded. This decreases the forwarding performance of the switch. The filtering MAC address entries act on all ... 5-14 Filtering Address 46 If the aging time is multi-optional. Displays the corresponding port number of the MAC address. Displays the corresponding VLAN ID of the MAC address. Click the Bind button to bind the MAC address of the aging time. Tips: Setting aging time properly ...
...to forbid the undesired packets to load the following page. This prevents the MAC address table from updating with network changes in the corresponding VLAN. The filtering address can be forwarded. This decreases the forwarding performance of the switch. The filtering MAC address entries act on all ... 5-14 Filtering Address 46 If the aging time is multi-optional. Displays the corresponding port number of the MAC address. Displays the corresponding VLAN ID of the MAC address. Click the Bind button to bind the MAC address of the aging time. Tips: Setting aging time properly ...
TL-SG3216 V1 User Guide
Page 54
...Address Table Select: Select the entry to delete the corresponding filtering address. Port: Here the symbol "__" indicates no specified port. VLAN ID: Enter the corresponding VLAN ID of the MAC address. ¾ Search Option Search Option: Select a Search Option from the pull-down list and click the ...: 1. The MAC address in the Filtering Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of the MAC address. MAC Address: Displays the filtering MAC Address. Return to CONTENTS 47 Aging Status: Displays the Aging Status...
...Address Table Select: Select the entry to delete the corresponding filtering address. Port: Here the symbol "__" indicates no specified port. VLAN ID: Enter the corresponding VLAN ID of the MAC address. ¾ Search Option Search Option: Select a Search Option from the pull-down list and click the ...: 1. The MAC address in the Filtering Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of the MAC address. MAC Address: Displays the filtering MAC Address. Return to CONTENTS 47 Aging Status: Displays the Aging Status...
TL-SG3216 V1 User Guide
Page 55
... data network communication technology based on CSMA/CD (Carrier Sense Multiple Access/Collision Detect) via Ethernet whereas hosts in different VLANs communicate with one another as Router, the Lay3 Switch and etc. Though connecting the LANs through the Internet devices such ...resources, causing potential serious security problems. A Virtual Local Area Network (VLAN) is developed for switches to different physical network segments. This switch supports three ways, namely, 802.1Q VLAN, MAC VLAN and Protocol VLAN, to a logical scheme rather than the physical layout. Through the traditional...
... data network communication technology based on CSMA/CD (Carrier Sense Multiple Access/Collision Detect) via Ethernet whereas hosts in different VLANs communicate with one another as Router, the Lay3 Switch and etc. Though connecting the LANs through the Internet devices such ...resources, causing potential serious security problems. A Virtual Local Area Network (VLAN) is developed for switches to different physical network segments. This switch supports three ways, namely, 802.1Q VLAN, MAC VLAN and Protocol VLAN, to a logical scheme rather than the physical layout. Through the traditional...
TL-SG3216 V1 User Guide
Page 56
...the received untagged packets on the port and match the packets with VLAN tag whose VLAN ID is matched, the switch will be removed from the current VLAN automatically. 49 The link types of port including the following figure, a VLAN tag contains four fields, including TPID (Tag Protocol Identifier), Priority...switch works at the data link layer in OSI model and it in the corresponding VLAN. 6.1 802.1Q VLAN VLAN tags in the range of the port is VLAN-tagged. When the switch receives an un-VLAN-tagged packet, it will encapsulate a VLAN tag with the default VLAN ID of the inbound port...
...the received untagged packets on the port and match the packets with VLAN tag whose VLAN ID is matched, the switch will be removed from the current VLAN automatically. 49 The link types of port including the following figure, a VLAN tag contains four fields, including TPID (Tag Protocol Identifier), Priority...switch works at the data link layer in OSI model and it in the corresponding VLAN. 6.1 802.1Q VLAN VLAN tags in the range of the port is VLAN-tagged. When the switch receives an un-VLAN-tagged packet, it will encapsulate a VLAN tag with the default VLAN ID of the inbound port...
TL-SG3216 V1 User Guide
Page 57
... in different ways, after being received by the port, the packet will be received. the PVID of packet is an important parameter with its current VLAN tag. If the VID of the ingress port, to connect the cascaded network devices for it will be dropped. Table 6-1 Relationship between Port Types and.... If the egress rule of port is UNTAG, the packet will broadcast the packets in multiple VLANs, and the egress rule of the port is allowed by ports of different link types, which the port belongs, is not the same as the PVID of its received port and forward the packets. The...
... in different ways, after being received by the port, the packet will be received. the PVID of packet is an important parameter with its current VLAN tag. If the VID of the ingress port, to connect the cascaded network devices for it will be dropped. Table 6-1 Relationship between Port Types and.... If the egress rule of port is UNTAG, the packet will broadcast the packets in multiple VLANs, and the egress rule of the port is allowed by ports of different link types, which the port belongs, is not the same as the PVID of its received port and forward the packets. The...
TL-SG3216 V1 User Guide
Page 58
... Click Create button to quick-select the corresponding entry based on the VLAN Config and Port Config pages. 6.1.1 VLAN Config On this screen: ¾ VLAN Table VLAN ID Select: Click the Select button to create a new VLAN. 51 Select: Select the desired entry to load the following ..., you can only be modified or deleted. Displays the port members in VLAN1. Figure 6-3 VLAN Table To ensure the normal communication of the factory switch, the default VLAN of VLAN. Displays the user-defined description of all ports is set to modify the settings of switch ...
... Click Create button to quick-select the corresponding entry based on the VLAN Config and Port Config pages. 6.1.1 VLAN Config On this screen: ¾ VLAN Table VLAN ID Select: Click the Select button to create a new VLAN. 51 Select: Select the desired entry to load the following ..., you can only be modified or deleted. Displays the port members in VLAN1. Figure 6-3 VLAN Table To ensure the normal communication of the factory switch, the default VLAN of VLAN. Displays the user-defined description of all ports is set to modify the settings of switch ...
TL-SG3216 V1 User Guide
Page 59
... Displays the port number. Displays the Link Type of VLAN. Give a description to quick-select the corresponding entry based on the port number you entered is valid or not. ¾ VLAN Members Port Select: Select: Port: Link Type: Click the Select button to the VLAN for identification. It's multi-optional. ...It can be a member of VLAN or leave it blank. Select the desired port to be reset on ...
... Displays the port number. Displays the Link Type of VLAN. Give a description to quick-select the corresponding entry based on the port number you entered is valid or not. ¾ VLAN Members Port Select: Select: Port: Link Type: Click the Select button to the VLAN for identification. It's multi-optional. ...It can be a member of VLAN or leave it blank. Select the desired port to be reset on ...