TP-LINK TL-SG2008 Specifications Page 1

TL-SG2008 8-Port Gigabit Smart Switch REV1.0.0 1910010984

3 Chapter Introduction Chapter 4 System This module is used to configure system properties of the switch. Here mainly introduces: z System Info: C

93 2. 802.1P Priority Figure 9-2 802.1Q frame As shown in the figure above, each 802.1Q Tag has a Pri field, comprising 3 bits. The 3-bit priorit

94 Figure 9-4 SP-Mode 2. WRR-Mode: Weight Round Robin Mode. In this mode, packets in all the queues are sent in order based on the weight value for

95 The QoS module is mainly for traffic control and priority configuration, including two submenus: DiffServ and Bandwidth Control. 9.1 DiffServ Thi

96 Configuration Procedure: Step Operation Description 1 Select the port priority Required. On QoS→DiffServ→Port Priority page, configure the p

97 Configuration Procedure: Step Operation Description 1 Log on to the 802.1P/CoS Mapping page 2 Enable 802.1P priority function Required. By de

98 ¾ Priority Level DSCP: Indicates the priority determined by the DS region of IP datagram. It ranges from 0 to 63. Priority Level: Indicates t

99 SP+WRR-Mode: Strict-Priority + Weight Round Robin Mode. In this mode, this switch provides two scheduling groups, SP group and WRR group. Queues

100 Select: Select the desired port for Rate configuration. It is multi-optional.Port: Displays the port number of the switch. Ingress Rate (bps):

101 The following entries are displayed on this screen: ¾ Storm Control Config Port Select: Click the Select button to quick-select the correspondin

102 Number OUI Address Vendor 2 00-03-6b-00-00-00 Cisco phone 3 00-04-0d-00-00-00 Avaya phone 4 00-60-b9-00-00-00 Philips/NEC phone 5 00-d0-1e-00

4 Chapter Introduction Chapter 9 QoS This module is used to configure QoS function to provide different quality of service for various network appl

103 ¾ Security Mode of Voice VLAN When voice VLAN is enabled for a port, you can configure its security mode to filter data stream. If security mo

104 VLAN ID: Enter the VLAN ID of the voice VLAN. Aging Time: Specifies the living time of the member port in auto mode after the OUI address is ag

105 Security Mode: Configure the security mode for forwarding packets. z Disable: All packets are forwarded. z Enable: Only voice data are forward

106 Configuration Procedure of Voice VLAN: Step Operation Description 1 Configure the link type of the port Required. On VLAN→802.1Q VLAN→VLAN C

107 Chapter 10 ACL 10.1 ACL Config An ACL may contain a number of rules, and each rule specifies a different package range. Packets are matched in m

108 Figure 10-2 ACL Create The following entries are displayed on this screen: ¾ Create ACL ACL ID: Enter ACL ID of the ACL you want to create. Ru

109 MASK: Enter MAC address mask. If it is set to 1, it must strictly match the address. 10.1.4 Standard-IP ACL Standard-IP ACLs analyze and proces

110 Figure 10-5 Create Extend-IP Rule The following entries are displayed on this screen: ¾ Create Extend-IP ACL ACL ID: Select the desired Extend

111 Choose the menu ACL→Policy Config→Policy Summary to load the following page. Figure 10-6 Policy Summary The following entries are displayed on t

112 Figure 10-8 Action Create The following entries are displayed on this screen: ¾ Create Action Select Policy: Select the name of the policy. Se

5 Chapter 2 Introduction Thanks for choosing the TL-SG2008 8-Port Gigabit Smart Switch! 2.1 Overview of the Switch Designed for workgroups and depa

113 Interface: Displays the port number or VLAN ID bound to the policy. Direction: Displays the binding direction. 10.3.2 Port Binding On this pag

114 The following entries are displayed on this screen: ¾ VLAN-Bind Config Policy Name: Select the name of the policy you want to bind. VLAN ID

115 ¾ Network Diagram ¾ Configuration Procedure Step Operation Description 1 Configure for requirement 1 On ACL→ACL Config→ACL Create page, cre

116 Step Operation Description 3 Configure for requirement 3 and 4 On ACL→ACL Config→ACL Create page, create ACL 101. On ACL→ACL Config→Standard-

117 Chapter 11 SNMP ¾ SNMP Overview SNMP (Simple Network Management Protocol) has gained the most extensive application on the UDP/IP networks. SNM

118 SNMP v1: SNMP v1 adopts Community Name authentication. The community name is used to define the relation between SNMP Management Station and SNMP

119 management station. The specified User Name and the Auth/Privacy Password are used for SNMP Management Station to access the SNMP Agent, function

120 11.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the managed objects of the switch, and the MIB (Management

121 Figure 11-5 SNMP Group The following entries are displayed on this screen: ¾ Group Config Group Name: Enter the SNMP Group name. The Group Nam

122 Notify View: Select the View to be the Notify View. The management stationcan receive trap messages of the assigned SNMP view generatedby the sw

6 The following parts are located on the front panel of the switch: ¾ Reset: Press this button for five seconds or above to reset the software setti

123 ¾ User Config User Name: Enter the User Name here. User Type: Select the type for the User. • Local User: Indicates that the user is connecte

124 11.1.5 SNMP Community SNMP v1 and SNMP v2c adopt community name authentication. The community name can limit access to the SNMP agent from SNMP

125 Configuration Procedure: z If SNMPv3 is employed, please take the following steps: Step Operation Description 1 Enable SNMP function globally.

126 11.2 Notification With the Notification function enabled, the switch can initiatively report to the management station about the important events

127 Type: Select the type for the notifications. • Trap: Indicates traps are sent. • Inform: Indicates informs are sent. The Inform type has a hig

128 RMON Group Function History Group After a history group is configured, the switch collects and records network statistics information periodica

129 11.3.2 Event Config On this page, you can configure the RMON events. Choose the menu SNMP→RMON→Event Config to load the following page. Figure

130 Figure 11-11 Alarm Config The following entries are displayed on this screen: ¾ Alarm Table Select: Select the desired entry for configuration

131 Owner: Enter the name of the device or user that defined the entry. Status: Select Enable/Disable the corresponding alarm entry. Note: When ala

132 Chapter 12 Maintenance Maintenance module, assembling the commonly used system tools to manage the switch, provides the convenient method to loc

7 Chapter 3 Login to the Switch 3.1 Login 1) To access the configuration utility, open a web-browser and type in the default address http://192.168

133 Click the Monitor button to enable the switch to monitor and display its CPU utilization rate every four seconds. 12.1.2 Memory Monitor Choose t

134 Severity Level Description debugging 7 Debug-level messages Table 12-1 Log Level The Log function is implemented on the Log Table, Local Log, R

135 Severity: Displays the severity level of the log information. You can select a severity level to display the log information whose severity leve

136 12.2.3 Remote Log Remote log feature enables the switch to send system logs to the Log Server. Log Server is to centralize the system logs from

137 Figure 12-6 Backup Log The following entry is displayed on this screen: ¾ Backup Log Backup Log: Click the Backup Log button to save the log

138 Length: If the connection status is normal, here displays the length range ofthe cable. Error: If the connection status is close, open or imped

139 12.4.1 Ping Ping test function, testing the connectivity between the switch and one node of the network, facilitates you to test the network con

140 Figure 12-10 Tracert The following entries are displayed on this screen: ¾ Tracert Config Destination IP: Enter the IP address of the desti

141 Appendix A: Specifications IEEE802.3 10Base-T Ethernet IEEE802.3u 100Base-TX/100Base-FX Fast Ethernet IEEE802.3ab 1000Base-T Gigabit Ethernet IEE

142 Appendix B: Configuring the PCs In this section, we’ll introduce how to install and configure the TCP/IP correctly in Windows 2000. First make su

8 Figure 3-3 Main Setup-Menu Note: Clicking Apply can only make the new configurations effective before the switch is rebooted. If you want to keep

143 5) The following TCP/IP Properties window will display and the IP Address tab is open on this window by default. Figure B-3 6) Select Use the fo

144 Appendix C: Glossary Boot Protocol (BOOTP) BOOTP is used to provide bootup information for network devices, including IP address information, the

145 IGMP Snooping Listening to IGMP Query and IGMP Report packets transferred between IP Multicast routers and IP Multicast host groups to identify I

146 in standard SNMP, and can set alarms on a variety of traffic conditions, including specific error types. Rapid Spanning Tree Protocol (RSTP) RSTP

9 Chapter 4 System The System module is mainly for system configuration of the switch, including four submenus: System Info, User Management, System

10 Figure 4-2 Port Information ¾ Port Info Port: Displays the port number of the switch. Type: Displays the type of the port. Rate: Displays the

11 Figure 4-4 Device Description The following entries are displayed on this screen: ¾ Device Description Device Name: Enter the name of the switc

12 ¾ Time Config Manual: When this option is selected, you can set the date and time manually. Get Time from NTP Server: When this option is select

I COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Othe

13 Predefined Mode: Select a predefined DST configuration. z USA: Second Sunday in March, 02:00 ~ First Sunday in November, 02:00. z Australia: Fi

14 ¾ IP Config MAC Address: Displays MAC Address of the switch. IP Address Mode: Select the mode to obtain IP Address for the switch. z Static IP

15 Figure 4-8 User Table 4.2.2 User Config On this page you can configure the access level of the user to log on to the Web management page. The swi

16 Confirm Password: Retype the password. Password Display Mode: z Simple: Select a simple password display mode. z Cipher: Select a cipher pass

17 Note: 1. It will take a few minutes to restore the configuration. Please wait without any operation. 2. To avoid any damage, please don’t power

18 Figure 4-12 Firmware Upgrade Note: 1. Don’t interrupt the upgrade. 2. Please select the proper software version matching with your hardware to

19 Figure 4-14 System Reset Note: After the system is reset, the switch will be reset to the default and all the settings will be cleared. 4.4 Acce

20 ¾ Access Control Config Control Mode: Select the control mode for users to log on to the Web management page. z Disable：Disable the access cont

21 default the switch has a certificate (self-signed certificate) and a corresponding private key. The Certificate/Key Download function enables the

22 4. It may take more time for https connection than that for http connection, because https connection involves authentication, encryption and dec

II Safety Information z When product has power button, the power button is one of the way to shut off the product; When there is no power button

23 Idle Timeout: Specify the idle timeout time. The system will automatically release the connection when the time is up. The default time is 120 se

24 2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password, and then you can continue to config

25 Note: 1. The key length is in the range of 256 to 3072 bits. 2. During the key generation, randomly moving the mouse quickly can accelerate t

26 3. On the Web management page of the switch, download the public key file saved in the computer to the switch. Note: 1. The key type should a

27 After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the k

28 Chapter 5 Switching Switching module is used to configure the basic functions of the switch, including four submenus: Port, LAG, Traffic Monitor

29 Duplex mode with the switch. When “Auto” is selected, theSpeed and Duplex mode will be determined by auto-negotiation.For the SFP port, this switc

30 Click Edit to display the following figure. Figure 5-3 Port Mirror Config The following entries are displayed on this screen: ¾ Mirror Group N

31 Note: 1. The LAG member can not be selected as the mirrored port or mirroring port. 2. A port can not be set as the mirrored port and the mirror

32 Max Learned MAC: Specify the maximum number of MAC addresses that can be learned on the port. Learned Num: Displays the number of MAC addresses

III CONTENTS Package Contents...

33 ¾ Port Isolation Config Port: Select the port number to set its forwardlist. Forward Portlist: Select the port that to be forwarded to. ¾ Port

34 Automatic Recovery Time : Time after which the blocked port would automatically recover to normal status. It can be set as integral times of detec

35 If the LAG is needed, you are suggested to configure the LAG function here before configuring the other functions for the member ports. Tips: 1.

36 Group Number: Displays the LAG number here. Description: Displays the description of LAG. Member: Displays the LAG member. Operation: Allows y

37 ¾ LAG Config Group Number: Select a Group Number for the LAG. Description: Displays the description of the LAG. ¾ Member Port Member Port:

38 Figure 5-10 LACP Config The following entries are displayed on this screen: ¾ Global Config System Priority: Specify the system priority for th

39 LAG: Displays the LAG number which the port belongs to. 5.3 Traffic Monitor The Traffic Monitor function, monitoring the traffic of each port, i

40 Octets Rx: Displays the number of octets received on the port. The error octetsare counted in. Octets Tx: Displays the number of octets transm

41 Broadcast: Displays the number of good broadcast packets received or transmitted on the port. The error frames are not counted in. Multicast: Di

42 Type Configuration Way Aging out Being kept after reboot (if the configuration is saved) Relationship between the bound MAC address and the port D

IV 5.1.1 Port Config ...28 5.1.2 Port Mirror...

43 z Filtering: This option allows the address table to display the filtering address entries only. ¾ Address Table MAC Address: Displays the MAC

44 ¾ Search Option Search Option: Select a Search Option from the pull-down list and click the Searchbutton to find your desired entry in the Stati

45 Figure 5-15 Dynamic Address The following entries are displayed on this screen: ¾ Aging Config Auto Aging: Allows you to Enable/Disable the Aut

46 Tips: Setting aging time properly helps implement effective MAC address aging. The aging time that is too long or too short results decreases the

47 ¾ Filtering Address Table Select: Select the entry to delete the corresponding filtering address. It ismulti-optional. MAC Address: Displays th

48 Figure 5-17 Network diagram of DHCP For different DHCP clients, DHCP server provides three IP address assigning methods: (1) Manually assign the

49 packet and broadcast the DHCP-REQUEST packet which includes the assigned IP address of the DHCP-OFFER packet. （4） DHCP-ACK Stage: Since the

50 Figure 5-20 DHCP Filtering The following entries are displayed on this screen: ¾ DHCP Filtering DHCP Filtering: Enable/Disable the DHCP Filterin

51 Chapter 6 VLAN The traditional Ethernet is a data network communication technology based on CSMA/CD (Carrier Sense Multiple Access/Collision Dete

52 6.1 802.1Q VLAN VLAN tags in the packets are necessary for the switch to identify packets of different VLANs. The switch works at the data link l

V 8.1.1 Snooping Config ...79 8.1.2 Port Config...

53 ingress port belongs to, this packet will be dropped. When the VLAN-tagged packets are forwarded by the Tagged port, its VLAN tag will not be chan

54 Figure 6-3 VLAN Table To ensure the normal communication of the factory switch, the default VLAN of all ports is set to VLAN1. VLAN1 cannot be mo

55 Untagged: The port will be an untagged member of the specific VLAN if you select it. Tagged: The port will be an tagged member of the spec

56 ¾ Configuration Procedure z Configure Switch A Step Operation Description 1 Configure the Link Type of the ports Required. On VLAN→802.1Q VLAN

57 Chapter 7 Spanning Tree STP (Spanning Tree Protocol), subject to IEEE 802.1D standard, is to disbranch a ring network in the Data Link layer in a

58 Figure 7-1 Basic STP diagram ¾ STP Timers Hello Time: Hello Time ranges from 1 to 10 seconds. It specifies the interval to send BPDU packets.

59 z Comparing BPDUs Each switch sends out configuration BPDUs and receives a configuration BPDU on one of its ports from another switch. The foll

60 RSTP (Rapid Spanning Tree Protocol), evolved from the 802.1D STP standard, enable Ethernet ports to transit their states rapidly. The premises for

61 Figure 7-2 Basic MSTP diagram ¾ MSTP MSTP divides a network into several MST regions. The CST is generated between these MST regions, and multi

62 Figure 7-3 Port roles The Spanning Tree module is mainly for spanning tree configuration of the switch, including four submenus: STP Config, Port

VI 10.3.2 Port Binding ... 113 10.3.3 VLAN Binding.

63 The following entries are displayed on this screen: ¾ Global Config STP: Select Enable/Disable STP function globally on the switch. Version: Se

64 7.1.2 STP Summary On this page you can view the related parameters for Spanning Tree function. Choose the menu Spanning Tree→STP Config→STP Summar

65 The following entries are displayed on this screen: ¾ Port Config Port Select: Click the Select button to quick-select the corresponding port ba

66 z Disconnected: In this status the port is not participating in the STP. LAG: Displays the LAG number which the port belongs to. Note: 1. Confi

67 Figure 7-8 Instance Config The following entries are displayed on this screen: ¾ Instance Table Instance ID Select: Click the Select button to

68 Instance ID: Enter the corresponding instance ID. 7.3.3 Instance Port Config A port can play different roles in different spanning tree instance.

69 Note: The port status of one port in different spanning tree instances can be different. Global configuration Procedure for Spanning Tree function

70 ¾ Root Protect A CIST and its secondary root bridges are usually located in the high-bandwidth core region. Wrong configuration or malicious atta

71 Figure 7-10 Port Protect The following entries are displayed on this screen: ¾ Port Protect Port Select: Click the Select button to quick-selec

72 Figure 7-11 TC Protect The following entries are displayed on this screen: ¾ TC Protect TC Threshold: Enter a number from 1 to 100. It is the m

1 Package Contents The following items should be found in your box: ¾ One TL-SG2008 8-Port Gigabit Smart Switch ¾ One power adapter ¾ Four rubber c

73 ¾ Configuration Procedure z Configure Switch A: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link t

74 z Configure Switch C: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link type of the related ports as T

75 ¾ The topology diagram of the two instances after the topology is stable z For Instance 1 (VLAN101, 103 and 105), the red paths in the followi

76 Chapter 8 Multicast ¾ Multicast Overview In the network, packets are sent in three modes: unicast, broadcast and multicast. In unicast, the sour

77 ¾ Multicast Address 1. Multicast IP Address: As specified by IANA (Internet Assigned Numbers Authority), Class D IP addresses are used as destina

78 should be a group port list, so the switch will duplicate this multicast data and deliver each port one copy. The general format of the multicast

79 in the VLAN as well as analyze the message to get the address of the multicast group the host applies for joining. The receiving port will be proc

80 Figure 8-4 Basic Config The following entries are displayed on this screen: ¾ Global Config IGMP Snooping: Select Enable/Disable IGMP Snooping

81 The following entries are displayed on this screen: ¾ Port Config Port Select: Click the Select button to quick-select the corresponding port ba

82 ¾ VLAN Config VLAN ID: Enter the VLAN ID to enable IGMP Snooping for the desired VLAN. Router Port Time: Specify the aging time of the router p

2 Chapter 1 About this Guide This User Guide contains information for setup and management of TL-SG2008 8-Port Gigabit Smart Switch. Please read thi

83 VLAN owning a receiver one copy. This mode wastes a lot of bandwidth. The problem above can be solved by configuring a multicast VLAN. By adding s

84 2. The Multicast VLAN won't take effect unless you first complete the configuration for the corresponding VLAN owning the port on the 802.1Q

85 ¾ Network Diagram ¾ Configuration Procedure Step Operation Description 1 Create VLANs Create three VLANs with the VLAN ID 3, 4 and 5 respec

86 Choose the menu Multicast→Multicast IP→Multicast IP Table to load the following page. Figure 8-8 Multicast IP Table The following entries are dis

87 Figure 8-9 Static Multicast IP Table The following entries are displayed on this screen: ¾ Create Static Multicast Multicast IP: Enter static m

88 port. If the port can be added to the multicast group, it will be added to the multicast address table; if the port can not be added to the multic

89 Choose the menu Multicast→Multicast Filter→Port Filter to load the following page. Figure 8-11 Port Filter The following entries are displayed on

90 Configuration Procedure: Step Operation Description 1 Configure IP-Range Required. Configure IP-Range to be filtered on Multicast→Multicast Fil

91 Report Packet (V1): Displays the number of IGMPv1 report packets the port received.Report Packet (V2): Displays the number of IGMPv2 report pack

92 Chapter 9 QoS QoS (Quality of Service) functions to provide different quality of service for various network applications and requirements and op