TL-SG3216 V1 User Guide
Page 2
... in accordance with the limits for compliance could void the user's authority to part 15 of electric shock from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2011 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. CE Mark Warning This is a registered trademark of the specifications may be...to correct the interference at his own expense. No part of TP-LINK TECHNOLOGIES CO., LTD. http://www.tp-link.com FCC STATEMENT This equipment has been tested and found to comply with the instruction manual, may cause undesired operation. These limits are trademarks or registered ...
... in accordance with the limits for compliance could void the user's authority to part 15 of electric shock from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2011 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. CE Mark Warning This is a registered trademark of the specifications may be...to correct the interference at his own expense. No part of TP-LINK TECHNOLOGIES CO., LTD. http://www.tp-link.com FCC STATEMENT This equipment has been tested and found to comply with the instruction manual, may cause undesired operation. These limits are trademarks or registered ...
TL-SG3216 V1 User Guide
Page 6
... 10.4.3 VLAN Binding 132 10.5 Application Example for ACL 133 Chapter 11 Network Security ...136 11.1 IP-MAC Binding ...136 11.1.1 Binding Table 136 11.1.2 Manual Binding 137 11.1.3 ARP Scanning 139 11.1.4 DHCP Snooping 140 11.2 ARP Inspection ...146 11.2.1 ARP Detect ...150 11.2.2 ARP Defend 151 11.2.3 ARP Statistics...
... 10.4.3 VLAN Binding 132 10.5 Application Example for ACL 133 Chapter 11 Network Security ...136 11.1 IP-MAC Binding ...136 11.1.1 Binding Table 136 11.1.2 Manual Binding 137 11.1.3 ARP Scanning 139 11.1.4 DHCP Snooping 140 11.2 ARP Inspection ...146 11.2.1 ARP Detect ...150 11.2.2 ARP Defend 151 11.2.3 ARP Statistics...
TL-SG3216 V1 User Guide
Page 12
...: z System Monitor: Monitor the memory and CPU of the Switch. z Network Diagnose: Test if the destination is used to assemble the commonly used in this manual. Introduces how to the destination. z Log: View configuration parameters on the switch. Introduces how to load firmware of router hops from the switch to use...
...: z System Monitor: Monitor the memory and CPU of the Switch. z Network Diagnose: Test if the destination is used to assemble the commonly used in this manual. Introduces how to the destination. z Log: View configuration parameters on the switch. Introduces how to load firmware of router hops from the switch to use...
TL-SG3216 V1 User Guide
Page 20
... System→System Info→System Time to display the bandwidth utilization of sending packets on this port. 4.1.2 Device Description On this page you can manually set the system time, get GMT automatically if it has connected to load the following page. Tx: Select Tx to load the following entries are...
... System→System Info→System Time to display the bandwidth utilization of sending packets on this port. 4.1.2 Device Description On this page you can manually set the system time, get GMT automatically if it has connected to load the following page. Tx: Select Tx to load the following entries are...
TL-SG3216 V1 User Guide
Page 21
...: System Current Time Mode: Displays the current date and time of the switch. ¾ Time Config Manual: Get GMT: Synchronize with PC'S Clock: When this option is selected, you can set the date and time manually. Select the End Time of DST. z Primary/Secondary NTP Server: Enter the IP Address for the...
...: System Current Time Mode: Displays the current date and time of the switch. ¾ Time Config Manual: Get GMT: Synchronize with PC'S Clock: When this option is selected, you can set the date and time manually. Select the End Time of DST. z Primary/Secondary NTP Server: Enter the IP Address for the...
TL-SG3216 V1 User Guide
Page 22
... system time will replace the original IP address. The IP address obtained using this page you should enter IP Address, Subnet Mask and Default Gateway manually. Subnet Mask: Enter the subnet mask of the switch. Note: 1. You can change it has connected to the default when the switch is selected, you...
... system time will replace the original IP address. The IP address obtained using this page you should enter IP Address, Subnet Mask and Default Gateway manually. Subnet Mask: Enter the subnet mask of the switch. Note: 1. You can change it has connected to the default when the switch is selected, you...
TL-SG3216 V1 User Guide
Page 40
.... For the member ports in the group and to the LAG. It is to combine a number of the aging time and can only be deleted manually. Select the Learn Mode for Port Security configuration. The Port Security function is disabled when the 802.1X function is enabled. 5.2 LAG LAG... (Link Aggregation Group) is multi-optional. The further explains are following: z If the ports, which are enabled for the port. 2. If the LAG is selected, the ...
.... For the member ports in the group and to the LAG. It is to combine a number of the aging time and can only be deleted manually. Select the Learn Mode for Port Security configuration. The Port Security function is disabled when the 802.1X function is enabled. 5.2 LAG LAG... (Link Aggregation Group) is multi-optional. The further explains are following: z If the ports, which are enabled for the port. 2. If the LAG is selected, the ...
TL-SG3216 V1 User Guide
Page 42
Operation: Allows you can manually configure the LAG. Figure 5-7 Manually Config 35 The LACP feature is disabled for the detailed information of your selected LAG. Click the Detail button for the member ports of the LAG. Choose the menu Switching→LAG→Static LAG to get the information of the manually added Static LAG. Figure 5-6 Detail Information 5.2.2 Static LAG On this page, you to view or modify the information for each LAG. • Edit: Click to modify the settings of the LAG. • Detail: Click to load the following page.
Operation: Allows you can manually configure the LAG. Figure 5-7 Manually Config 35 The LACP feature is disabled for the detailed information of your selected LAG. Click the Detail button for the member ports of the LAG. Choose the menu Switching→LAG→Static LAG to get the information of the manually added Static LAG. Figure 5-6 Detail Information 5.2.2 Static LAG On this page, you to view or modify the information for each LAG. • Edit: Click to modify the settings of the LAG. • Detail: Click to load the following page.
TL-SG3216 V1 User Guide
Page 47
... port. Enter a port number and click the Select button to specify the refresh interval. Displays the number of collisions experienced by auto-learning or configured manually. Displays the number of the received packets (excluding error packets) that are not counted in seconds to view the traffic statistics of the packets received...
... port. Enter a port number and click the Select button to specify the refresh interval. Displays the number of collisions experienced by auto-learning or configured manually. Displays the number of the received packets (excluding error packets) that are not counted in seconds to view the traffic statistics of the packets received...
TL-SG3216 V1 User Guide
Page 48
... security. The types and the features of packets forwarding remarkably. Address Table configuring Table 5-1 Types and features of the Address Table. Filtering Manually No Yes - In the stable networks, the static MAC address entries can not be learned by the other ports in the same VLAN....Aging out Being kept after Relationship between the reboot bound MAC address and (if the configuration the port is saved) Static Manually No Yes Address Table configuring The bound MAC address can facilitate the switch to load the following page. 41 updated by auto-learning.
... security. The types and the features of packets forwarding remarkably. Address Table configuring Table 5-1 Types and features of the Address Table. Filtering Manually No Yes - In the stable networks, the static MAC address entries can not be learned by the other ports in the same VLAN....Aging out Being kept after Relationship between the reboot bound MAC address and (if the configuration the port is saved) Static Manually No Yes Address Table configuring The bound MAC address can facilitate the switch to load the following page. 41 updated by auto-learning.
TL-SG3216 V1 User Guide
Page 50
... to be bound. In the stable networks, the static MAC address entries can be displayed in the static learning mode will be added or removed manually, independent of packets forwarding without learning the address. The static MAC address learned by the switch. Figure 5-12 Static Address The following page. Displays the...
... to be bound. In the stable networks, the static MAC address entries can be displayed in the static learning mode will be added or removed manually, independent of packets forwarding without learning the address. The static MAC address learned by the switch. Figure 5-12 Static Address The following page. Displays the...
TL-SG3216 V1 User Guide
Page 53
... results decreases the performance of the switch. Click the Bind button to bind the MAC address of your selected entry to be added or removed manually, independent of the MAC address. It is recommended to keep the default value. 5.4.4 Filtering Address The filtering address is to forbid the undesired packets to...
... results decreases the performance of the switch. Click the Bind button to bind the MAC address of your selected entry to be added or removed manually, independent of the MAC address. It is recommended to keep the default value. 5.4.4 Filtering Address The filtering address is to forbid the undesired packets to...
TL-SG3216 V1 User Guide
Page 124
...voice ACCESS: Not supported. UNTAG voice ACCESS: Supported. If security mode is not enabled, the port forwards all the packets. 117 stream Manual Mode TAG voice ACCESS: Not supported. GENERAL:Supported. The default VLAN of IP phone to voice VLAN and determine the priority of ...12289;TRUNK、GENERAL: Not supported. The default VLAN of the access port in two modes: automatic mode and manual mode. Port Voice Mode VLAN Voice Stream Type Link type of the port should be voice VLAN. stream TRUNK: Supported. The default VLAN of the UNTAG packets ...
...voice ACCESS: Not supported. UNTAG voice ACCESS: Supported. If security mode is not enabled, the port forwards all the packets. 117 stream Manual Mode TAG voice ACCESS: Not supported. GENERAL:Supported. The default VLAN of IP phone to voice VLAN and determine the priority of ...12289;TRUNK、GENERAL: Not supported. The default VLAN of the access port in two modes: automatic mode and manual mode. Port Voice Mode VLAN Voice Stream Type Link type of the port should be voice VLAN. stream TRUNK: Supported. The default VLAN of the UNTAG packets ...
TL-SG3216 V1 User Guide
Page 127
.... z Enable: Only voice data are forwarded. The switch determines whether a received packet is a voice packet by checking whether the port receives voice data or not z Manual: In this screen: ¾ Create OUI OUI: Enter the OUI address of the port in voice VLAN. Mask: Enter the OUI address mask of the... by checking its OUI address. The switch analyzes the received packets and the packets recognized as voice packets are displayed on this mode, you can manually add a port to the OUI for identification. ¾ OUI Table 120 Displays the state of the voice device.
.... z Enable: Only voice data are forwarded. The switch determines whether a received packet is a voice packet by checking whether the port receives voice data or not z Manual: In this screen: ¾ Create OUI OUI: Enter the OUI address of the port in voice VLAN. Mask: Enter the OUI address mask of the... by checking its OUI address. The switch analyzes the received packets and the packets recognized as voice packets are displayed on this mode, you can manually add a port to the OUI for identification. ¾ OUI Table 120 Displays the state of the voice device.
TL-SG3216 V1 User Guide
Page 143
... function is to access the network. Figure 11-1 Binding Table 136 Chapter 11 Network Security Network Security module is implemented on the Binding Table, Manual Binding, ARP Scanning and DHCP Snooping pages. 11.1.1 Binding Table On this page, you can view the information of the Host together. Please... ID and the connected port number of the IP-MAC Binding entries. These three methods are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you can use DHCP Snooping functions ...
... function is to access the network. Figure 11-1 Binding Table 136 Chapter 11 Network Security Network Security module is implemented on the Binding Table, Manual Binding, ARP Scanning and DHCP Snooping pages. 11.1.1 Binding Table On this page, you can view the information of the Host together. Please... ID and the connected port number of the IP-MAC Binding entries. These three methods are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you can use DHCP Snooping functions ...
TL-SG3216 V1 User Guide
Page 144
... here. Note: 1 Among the entries with Critical collision level, the one with the highest Source priority will take effect. 11.1.2 Manual Binding You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the LAN. Collision: Displays the Collision status of...the Search button to view your desired entry in the Binding Table. • All: All the bound entries will be displayed. • Manual: Only the manually added entries will be displayed. • Scanning: Only the entries formed via ARP Scanning will be caused by the MSTP function. • ...
... here. Note: 1 Among the entries with Critical collision level, the one with the highest Source priority will take effect. 11.1.2 Manual Binding You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the LAN. Collision: Displays the Collision status of...the Search button to view your desired entry in the Binding Table. • All: All the bound entries will be displayed. • Manual: Only the manually added entries will be displayed. • Scanning: Only the entries formed via ARP Scanning will be caused by the MSTP function. • ...
TL-SG3216 V1 User Guide
Page 145
... of port connected to the Host. VLAN ID: Enter the VLAN ID. Protect Type: Select the Protect Type for the entry. ¾ Manual Binding Table Select: Select the desired entry to the Host. Port: Displays the number of the Host. IP Address: Enter the IP Address ...• Critical: Indicates that the collision may be deleted. Port: Select the number of the Host. Figure 11-2 Manual Binding The following entries are displayed on this screen: ¾ Manual Binding Option Host Name: Enter the Host Name. MAC Address: Enter the MAC Address of the entry. • ...
... of port connected to the Host. VLAN ID: Enter the VLAN ID. Protect Type: Select the Protect Type for the entry. ¾ Manual Binding Table Select: Select the desired entry to the Host. Port: Displays the number of the Host. IP Address: Enter the IP Address ...• Critical: Indicates that the collision may be deleted. Port: Select the number of the Host. Figure 11-2 Manual Binding The following entries are displayed on this screen: ¾ Manual Binding Option Host Name: Enter the Host Name. MAC Address: Enter the MAC Address of the entry. • ...
TL-SG3216 V1 User Guide
Page 148
... the Client, so as to the Server for DHCP-snooping implementation For different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP address to the specific Client (e.g.: WWW Server) via the "Client/Server" communication mode...
... the Client, so as to the Server for DHCP-snooping implementation For different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP address to the specific Client (e.g.: WWW Server) via the "Client/Server" communication mode...
TL-SG3216 V1 User Guide
Page 150
... of Option 82, different manufacturers define the sub-options of Option 82 to forward DHCP packets and thereby ensures that the illegal DHCP server is manually configured by the user by discarding the DHCP packets on the distrusted port, so as to induce the users to enhance the network security. 143...
... of Option 82, different manufacturers define the sub-options of Option 82 to forward DHCP packets and thereby ensures that the illegal DHCP server is manually configured by the user by discarding the DHCP packets on the distrusted port, so as to induce the users to enhance the network security. 143...
TL-SG3216 V1 User Guide
Page 158
...With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission speed of the Host together via Manual Binding, ARP the Host together. Required. On the Network Security→ARP Inspection→ARP Detect page, specify the trusted port. Figure ... the Required. Choose the menu Network Security→ARP Inspection→ARP Defend to avoid ARP Attack flood. The specific ports, such as up-linked port, routing port and LAG port, should be set as to load the following page. Required. On the IP-MAC Binding page, bind...
...With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission speed of the Host together via Manual Binding, ARP the Host together. Required. On the Network Security→ARP Inspection→ARP Detect page, specify the trusted port. Figure ... the Required. Choose the menu Network Security→ARP Inspection→ARP Defend to avoid ARP Attack flood. The specific ports, such as up-linked port, routing port and LAG port, should be set as to load the following page. Required. On the IP-MAC Binding page, bind...