TP-LINK TL-SG3424P Specifications Page 1

TL-SG3424P JetStream L2 Managed PoE Switch Rev: 1.0.0 1910010614

Chapter 1 About this Guide This User Guide contains information for setup and management of TL-SG3424P JetStream L2 Managed PoE Switch. Please read

z For Instance 2 (VLAN 102, 104 and 106), the blue paths in the following figure are connected links; the gray paths are the blocked links. ¾ S

Chapter 8 Multicast ¾ Multicast Overview In the network, packets are sent in three modes: unicast, broadcast and multicast. In unicast, the source

1. Multicast IP Address: As specified by IANA (Internet Assigned Numbers Authority), Class D IP addresses are used as destination addresses of multic

¾ IGMP Snooping In the network, the hosts apply to the near Router for joining (leaving) a multicast group by sending IGMP (Internet Group Managemen

The host, running IGMPv1, does not send IGMP leave message when leaving a multicast group, as a result, the switch can not get the leave information

Figure 8-4 Basic Config The following entries are displayed on this screen: ¾ Global Config IGMP Snooping: Select Enable/Disable IGMP Snooping fun

Figure 8-5 Port Config The following entries are displayed on this screen: ¾ Port Config Port Select: Click the Select button to quick-select the

Figure 8-6 VLAN Config The following entries are displayed on this screen: ¾ VLAN Config VLAN ID: Enter the VLAN ID to enable IGMP Snooping for th

VLAN ID: Displays the VLAN ID. Router Port Time: Displays the router port time of the VLAN. Member Port Time: Displays the member port time of the

Figure 8-7 Multicast VLAN The following entries are displayed on this screen: ¾ Multicast VLAN Multicast VLAN: Select Enable/Disable Multicast VLA

Chapter Introduction Chapter 4 System This module is used to configure system properties of the switch. Here mainly introduces: z System Info: Con

Configuration procedure: Step Operation Description 1 Enable IGMP Snooping function Required. Enable IGMP Snooping globally on the switch and for t

¾ Configuration Procedure Step Operation Description 1 Create VLANs Create three VLANs with the VLAN ID 3, 4 and 5 respectively, and specify th

8.2.1 Multicast IP Table On this page you can view the multicast IP table on the switch. Choose the menu Multicast→Multicast IP→Multicast IP Tabl

Choose the menu Multicast→Multicast IP→Static Multicast IP to load the following page. Figure 8-9 Static Multicast IP Table The following entries ar

to restrict users ordering multicast programs via configuring multicast filter rules. When applying for a multicast group, the host will send IGMP

8.3.2 Port Filter On this page you can configure the multicast filter rules for port. Take the configuration on this page and the configuration on IP

Max Groups: Specify the maximum number of multicast groups to prevent some ports taking up too much bandwidth. LAG: Displays the LAG number which t

The following entries are displayed on this screen: ¾ Auto Refresh Auto Refresh: Select Enable/Disable auto refresh feature. Refresh Period: Enter

Chapter 9 QoS QoS (Quality of Service) functions to provide different quality of service for various network applications and requirements and optim

Figure 9-2 802.1Q frame As shown in the figure above, each 802.1Q Tag has a Pri field, comprising 3 bits. The 3-bit priority field is 802.1p prior

Chapter Introduction Chapter 9 QoS This module is used to configure QoS function to provide different quality of service for various network applic

Figure 9-4 SP-Mode 2. WRR-Mode: Weight Round Robin Mode. In this mode, packets in all the queues are sent in order based on the weight value for ea

The QoS module is mainly for traffic control and priority configuration, including three submenus: DiffServ, Bandwidth Control and Voice VLAN. 9.1 D

Step Operation Description 1 Select the port priority Required. On QoS→DiffServ→Port Priority page, configure the port priority. 2 Configure t

9.1.3 802.1P Priority On this page you can configure 802.1P priority. 802.1P gives the Pri field in 802.1Q tag a recommended definition. This field i

Figure 9-9 DSCP Priority The following entries are displayed on this screen: ¾ DSCP Priority Config DSCP Priority: Select Enable or Disable DSCP P

9.2 Bandwidth Control Bandwidth function, allowing you to control the traffic rate and broadcast flow on each port to ensure network in working orde

Ingress Rate (Kbps): Configure the bandwidth for receiving packets on the port. You can select a rate from the dropdown list or select "Manual&

Figure 9-11 Storm Control The following entries are displayed on this screen: ¾ Storm Control Config Port Select: Click the Select button to quick

9.3 Voice VLAN Voice VLANs are configured specially for voice data stream. By configuring Voice VLANs and adding the ports with voice devices attach

Port Voice VLAN Mode Voice Stream Type Link type of the port and processing mode ACCESS: Not supported. TRUNK: Supported. The default VLAN of the p

Chapter Introduction Chapter 14 LLDP This module is used to configure LLDP function to provide information for SNMP applications to simplify troubl

Note: Don’t transmit voice stream together with other business packets in the voice VLAN except for some special requirements. The Voice VLAN functio

Figure 9-13 Port Config Note: To enable voice VLAN function for the LAG member port, please ensure its member state accords with its port mode. If a

Security Mode: Configure the security mode for forwarding packets. z Disable: All packets are forwarded. z Enable: Only voice data are forwarded.

Configuration Procedure of Voice VLAN: Step Operation Description 1 Configure the link type of the port Required. On VLAN→802.1Q VLAN→Port Config

Chapter 10 PoE PoE (Power over Ethernet) technology describes a system to transmit electrical power along with data to remote devices over standard

10.1.1 PoE Config On this page, you can configure the parameters to implement PoE function. Choose the menu PoE→PoE Config→PoE Config to load the fo

PoE Status: Select to disable/enable the PoE feature for the corresponding port. If set enable, the corresponding port can supply power to the linke

Profile Name: Enter the name of the profile. PoE Status: Select to the enable/disable PoE feature for the corresponding port. If set enable, the

¾ Time-Range Table Select: Select the desired entry to delete the corresponding time-range. Index: Displays the index of the time-range. Time-Rang

Start Time: Set the start time of the time-slice. End Time: Set the end time of the time-slice. ¾ Time-Slice Table Index: Displays the index of t

Chapter 2 Introduction Thanks for choosing the TL-SG3424P JetStream L2 Managed PoE Switch! 2.1 Overview of the Switch Designed for workgroups and d

End Date: Displays the end date of the holiday. Return to CONTENTS 132

Chapter 11 ACL ACL (Access Control List) is used to filter packets by configuring match rules and process policies of packets in order to control th

11.1.2 Time-Range Create On this page you can create time-ranges. Choose the menu ACL→Time-Range→Time-Range Create to load the following page. Figu

End Time: Displays the end time of the time-slice. Delete: Click the Delete button to delete the corresponding time-slice. 11.1.3 Holiday Config H

The ACL Config function can be implemented on ACL Summary, ACL Create, MAC ACL, Standard-IP ACL and Extend-IP ACL pages. 11.2.1 ACL Summary On this

Rule Order: User Config order is set to be match order in this ACL. 11.2.3 MAC ACL MAC ACLs analyze and process packets based on a series of match

11.2.4 Standard-IP ACL Standard-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source IP addresse

Figure11-8 Create Extend-IP Rule The following entries are displayed on this screen: ¾ Create Extend-IP ACL ACL ID: Select the desired Extend-IP A

Time-Range: Select the time-range for the rule to take effect. 11.3 Policy Config A Policy is used to control the data packets those match the co

Choose the menu ACL→Policy Config→Policy Create to load the following page. Figure 11-10 Create Policy The following entries are displayed on this s

+ Supports Telnet, CLI, SNMP v1/v2c/v3, RMON and web access. + Port Mirroring enables monitoring selected ingress/egress traffic. 2.3 Appearance D

S-Mirror: Select S-Mirror to mirror the data packets in the policy to the specific port. S-Condition: Select S-Condition to limit the transmission

¾ Policy Bind Table Select: Select the desired entry to delete the corresponding binding policy.Index: Displays the index of the binding policy. P

Figure11-14 Bind the policy to the VLAN The following entries are displayed on this screen: ¾ VLAN-Bind Config Policy Name: Select the name of

4. The R&D department and marketing department can not communicate with each other. ¾ Network Diagram ¾ Configuration Procedure Step Operat

3 Configure for requirement 2 and 4 On ACL→ACL Config→ACL Create page, create ACL 100. On ACL→ACL Config→Standard-IP ACL page, select ACL 100, creat

Chapter 12 Network Security Network Security module is to provide the multiple protection measures for the network security, including four submenus

The following entries are displayed on this screen: ¾ Search Option Source: Select a Source from the pull-down list and click the Search button to

Figure 12-2 Manual Binding The following entries are displayed on this screen: ¾ Manual Binding Option Host Name: Enter the Host Name. IP Address:

12.1.3 ARP Scanning ARP (Address Resolution Protocol) is used to analyze and map IP addresses to the corresponding MAC addresses so that packets can

Figure 12-4 ARP Scanning The following entries are displayed on this screen: ¾ Scanning Option Start IP Address: Specify the Start IP Address. E

On/Off The Switch works improperly. On A 1000 Mbps device is connected to the corresponding port, but no activity. Green Flashing Data is being tra

PC should be updated with a few configurations. DHCP（Dynamic Host Configuration Protocol, the network configuration protocol optimized and developed

Figure 12-6 Interaction between a DHCP client and a DHCP server （1） DHCP-DISCOVER Stage: The Client broadcasts the DHCP-DISCOVER packet to find the

Option 82 can contain 255 sub-options at most. If Option 82 is defined, at least a sub-option should be defined. This Switch supports two sub-options

Choose the menu Network Security→IP-MAC Binding→Binding Table to load the following page. Figure 12-8 DHCP Snooping Note: If you want to enable the

Global Flow Control: Select the value to specify the maximum amount of DHCPmessages that can be forwarded by the switch per second.The excessive mas

12.2 ARP Inspection According to the ARP Implementation Procedure stated in 12.1.3 ARP Scanning, it can be found that ARP protocol can facilitate the

Figure 12-10 ARP Attack – Cheating Gateway As the above figure shown, the attacker sends the fake ARP packets of Host A to the Gateway, and then the

Figure 12-11 ARP Attack – Cheating Terminal Hosts As the above figure shown, the attacker sends the fake ARP packets of Host A to Host B, and then H

Figure 12-12 Man-In-The-Middle Attack Suppose there are three Hosts in LAN connected with one another through a switch. Host A: IP address is 192.16

and the connected Port number of the Host together when the Host connects to the switch. Based on the predefined IP-MAC Binding entries, the ARP Insp

2.3.2 Rear Panel The rear panel of TL-SG3424P features a power socket and a Grounding Terminal (marked with). Figure 2-2 Rear Panel ¾ Grounding Ter

Configuration Procedure: Step Operation Description 1 Bind the IP address, MAC address, VLAN ID and the connected Port number of the Host togethe

Figure 12-14 ARP Defend The following entries are displayed on this screen: ¾ ARP Defend Port Select: Click the Select button to quick-select the

12.2.3 ARP Statistics ARP Statistics feature displays the number of the illegal ARP packets received on each port, which facilitates you to locate t

With DoS Defend function enabled, the switch can analyze the specific fields of the IP packets and distinguish the malicious DoS attack packets. Upon

Figure 12-16 DoS Defend The following entries are displayed on this screen: ¾ Configure DoS Defend: Enable/Disable DoS Defend function. ¾ Defend

802.1X adopts a client/server architecture with three entities: a supplicant system, an authenticator system, and an authentication server system, as

¾ 802.1X Authentication Procedure An 802.1X authentication can be initiated by supplicant system or authenticator system. When the authenticator sys

finds the corresponding password by matching the user name in its database, encrypts the password using a randomly-generated key, and sends the key t

by the authentication server, and the switch is responsible to encapsulate the authentication it to the RADIUS server. ensure that the supplicant sys

Figure 12-20 Global Config The following entries are displayed on this screen: ¾ Global Config 802.1X: Enable/Disable the 802.1X function. Authent

Chapter 3 Login to the Switch 3.1 Login 1) To access the configuration utility, open a web-browser and type in the default address http://192.168.0

Quiet Period: Specify a value for Quiet Period. Once the supplicant failed to the 802.1X Authentication, then the switch will not respond to the aut

Port: Displays the port number. Status: Select Enable/Disable the 802.1X authentication feature for the port. Guest VLAN: Select Enable/Disable th

¾ Authentication Config Primary IP: Enter the IP address of the authentication server. Secondary IP: Enter the IP address of the alternate authent

Chapter 13 SNMP ¾ SNMP Overview SNMP (Simple Network Management Protocol) has gained the most extensive application on the UDP/IP networks. SNMP pr

SNMP v1: SNMP v1 adopts Community Name authentication. The community name is used to define the relation between SNMP Management Station and SNMP Age

management station. The specified User Name and the Auth/Privacy Password are used for SNMP Management Station to access the SNMP Agent, functioning

Note: The amount of Engine ID characters must be even. 13.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the mana

13.1.3 SNMP Group On this page, you can configure SNMP Group to control the network access by providing the users in various groups with different m

Write View: Select the View to be the Write View. The management accessis writing only and changes can be made to the assignedSNMP View. The View de

Figure 13-6 SNMP User The following entries are displayed on this screen: ¾ User Config User Name: Enter the User Name here. User Type: Select th

Figure 3-3 Main Setup-Menu Note: Clicking Apply can only make the new configurations effective before the switch is rebooted. If you want to keep th

¾ User Table Select: Select the desired entry to delete the corresponding User. It is multi-optional. User Name: Displays the name of the User. Us

• read-only: Management right of the Community is restricted to read-only, and changes cannot be made to the corresponding View. • read-write: Mana

2 Create SNMP View. Required. On the SNMP→SNMP Config→SNMP View page, create SNMP View of the management agent. The default View Name is viewDef

Figure 13-8 Notification Config The following entries are displayed on this screen: ¾ Create Notification IP Address: Enter the IP Address of the

Select: Select the desired entry to delete the correspondingmanagement station. IP Address: Displays the IP Address of the management host. UDP P

The RMON Groups can be configured on the History Control, Event Config and Alarm Config pages. 13.3.1 History Control On this page, you can configur

Figure 13-10 Event Config The following entries are displayed on this screen: ¾ Event Table Select: Select the desired entry for configuration. In

Figure 13-11 Alarm Config The following entries are displayed on this screen: ¾ Alarm Table Select: Select the desired entry for configuration. In

Interval: Enter the alarm interval time in seconds. Owner: Enter the name of the device or user that defined the entry. Status: Select Enable/Disa

Chapter 14 LLDP LLDP (Link Layer Discovery Protocol) is a Layer 2 protocol that is used for network devices to advertise their own device informati

COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other

Chapter 4 System The System module is mainly for system configuration of the switch, including four submenus: System Info, User Manage, System Tools

z Tx&Rx: the port can both transmit and receive LLDPDUs. z Rx_Only: the port can receive LLDPDUs only. z Tx_Only: the port can transmit LLDPDU

0 End of LLDPDU Mark the end of the TLV sequence in LLDPDUs. Any information following an End Of LLDPDU TLV shall be ignored. Mandatory1 Chassis

Note: For detailed introduction of TLV, please refer to IEEE 802.1AB standard and ANSI/TIA-1057. In TP-LINK Switch, the following LLDP optional TLV

14.1 Basic Config LLDP is configured on the Global Config and Port Config pages. 14.1.1 Global Config On this page you can configure the LLDP parame

Fast Start Count: When the port's LLDP state transforms from Disable (or Rx_Only) to Tx&Rx (or Tx_Only), the fast start mechanism will be e

Details: Click Details to display the included TLVs and select the desired TLVs. 14.2 Device Info You can view the LLDP information of the local de

¾ Auto Refresh Auto Refresh: Enable/Disable the auto refresh function. Refresh Rate: Specify the auto refresh rate. ¾ Local Info Enter the desi

14.3 Device Statistics You can view the LLDP statistics of the local device through this feature. Choose the menu LLDP→Device Statistics→Statistic

Total Drops: Displays the number of neighbors dropped by local device. Total Ageouts: Displays the number of overtime neighbors in local device. ¾

Location Identification TLV The Location Identification TLV provides for advertisement of location identifier information to Communication Endpoint D

Indicates the SFP port is not connected to a device. Indicates the SFP port is at the speed of 1000Mbps. Indicates the SFP port is at the speed o

Choose the menu LLDP→LLDP-MED→Port Config to load the following page. Figure 14-7 LLDP-MED Port Configuration The following entries are displayed on

¾ Included TLVs Select TLVs to be included in outgoing LLDPDU. ¾ Location Identification Parameters Configure the Location Identification TLV&apos

Figure 14-8 LLDP-MED Local Information The following entries are displayed on this screen: ¾ Auto Refresh Auto Refresh: Enable/Disable the auto re

Figure 14-9 LLDP-MED Neighbor Information The following entries are displayed on this screen: ¾ Auto Refresh Auto Refresh: Enable/Disable the auto

Chapter 15 Cluster With the development of network technology, the network scale is getting larger and more network devices are required, which may

z The current switch you create cluster is specified as the commander switch. z The commander switch discovers and determines candidate switches by

Figure 15-2 Neighbor Information The following entries are displayed on this screen: ¾ Neighbor Search Option: Select the information the desired

Figure 15-3 NDP Summary The following entries are displayed on this screen: ¾ Global Config NDP: Displays the global NDP status (enabled or disabl

Detail： Click the Detail button to view the complete information collected for the port. 15.1.3 NDP Config On this page you can configure the NDP fu

Enable: Click the Enable button to enable NDP for the port you select. Disable: Click the Disable button to disable NDP for the port you select. No

Rx: Select Rx to display the bandwidth utilization of receiving packets on this port. Tx: Select Tx to display the bandwidth utilization of sending

Cluster Name: Displays the cluster name of this device. Role: Displays the role this device plays in the cluster. z Commander: Indicates the devic

Figure 15-7 NTDP Summary The following entries are displayed on this screen: ¾ Global Config NTDP: Displays the NTDP status (enabled or disabled)

15.2.3 NTDP Config On this page you can configure NTDP globally. Choose the menu Cluster→NTDP→NTDP Config to load the following page. Figure 15-8 N

NTDP Port Delay: Enter the time between the port forwarding NTDP request packets and its adjacent port forwarding NTDP request packets over. The def

z For a member switch, the following page is displayed: Figure 15-10 Cluster Summary for Member Switch The following entries are displayed on this

z For a candidate switch, the following page is displayed. Figure 15-12 Cluster Configuration for Candidate Switch The following entries are displa

Figure 15-14 Cluster Configuration for Individual Switch The following entries are displayed on this screen: ¾ Current Role Role: Displays the rol

Figure 15-15 Network diagram ¾ Configuration Procedure z Configure the member switch Step Operation Description 1 Enable NDP function on th

4 Configure the member switch On Cluster→Cluster→Member Config page, select the member switch and click the Manage button to log on to its Web m

Chapter 16 Maintenance Maintenance module, assembling the commonly used system tools to manage the switch, provides the convenient method to locate

Figure 4-5 System Time The following entries are displayed on this screen: ¾ Time Info Current System Date: Displays the current date and time of

Figure 16-1 CPU Monitor Click the Monitor button to enable the switch to monitor and display its CPU utilization rate every four seconds. 16.1.2 Me

Figure 16-2 Memory Monitor Click the Monitor button to enable the switch to monitor and display its Memory utilization rate every four seconds. 16.2

The Log function is implemented on the Log Table, Local Log, Remote Log and Backup Log pages. 16.2.1 Log Table The switch supports logs output to t

16.2.2 Local Log Local Log is the log information saved in switch. By default, all system logs are saved in log buffer and the logs with severities

Figure 16-5 Log Host The following entries are displayed on this screen: ¾ Log Host Index: Displays the index of the log host. The switch supports

The following entry is displayed on this screen: ¾ Backup Log Backup Log: Click the Backup Log button to save the log as a file to your computer.

Note: 1. The Length displayed here is the length of pair cable not that of the physical cable. 2. The test result is just for your reference. 16.3.

network malfunctions. Choose the menu Maintenance→Network Diagnose→Ping to load the following page. Figure 16-9 Ping The following entries are displ

Figure 16-10 Tracert The following entries are displayed on this screen: ¾ Tracert Config Destination IP: Enter the IP address of the destinatio

Appendix A: Specifications IEEE802.3 10Base-T Ethernet IEEE802.3u 100Base-TX/100Base-FX Fast Ethernet IEEE802.3ab 1000Base-T Gigabit Ethernet IEEE802

Note: When Get GMT is selected and the switch failed to get time from the configured time server, the switch will change to get time from the latest

Appendix B: Configuring the PCs In this section, we’ll introduce how to install and configure the TCP/IP correctly in Windows 2000. First make sure y

Figure B-2 5) The following TCP/IP Properties window will display and the IP Address tab is open on this window by default. 233

6) Select Use the following IP address. And the following items will be available. If the switch's IP address is 192.168.0.1, specify IP addres

Appendix C: Load Software Using FTP If there is something wrong with the firmware of the switch and the switch can not be launched, you can load the

Figure C-2 Open Hyper Terminal 2） The Connection Description Window will prompt shown as the following figure. Enter a name into the Name field and

Figure C-4Select the port to connect 4） Configure the port selected in the step above shown as the following figure. Configure Bits per second as 38

Figure C-6 bootUtil Menu As the prompt is displayed for a short time, you are suggested not to release the CTRL-B key until you enter into bootUtil

[TP-LINK] : start Start . . . . . . . . . .  * * * * * * * * * * * * * * * * * * * * * * User Access Login * * * * * * * * * * * * * * * * * * *

Appendix D: 802.1X Client Software In 802.1X mechanism, the supplicant Client should be equipped with the corresponding client software complied with

Figure D-3 Welcome to the InstallShield Wizard 4) To continue, choose the destination location for the installation files and click Next on the fol

Subnet Mask: Enter the subnet mask of the switch. Default Gateway: Enter the default gateway of the switch. Note: 1. Changing the IP address to a

Figure D-5 Install the Program 6) The InstallShield Wizard is installing TpSupplicant-V2.0 shown as the following screen. Please wait. Figure D-6

Figure D-7 InstallShield Wizard Complete Note: Please pay attention to the tips on the above screen. If you have not installed WinPcap 4.0.2 or the

Figure D-9 Preparing Setup 3) On the continued screen, click Yes to remove the application from your PC. Figure D-10 Uninstall the Application 4)

Figure D-12 TP-LINK 802.1X Client Enter the Name and the Password specified in the Authentication Server. The length of Name and Password should be

period. 3) To continue, click Connect button after entering the Name and Password on Figure D-12. Then the following screen will appear to prompt t

FAQ: Q1: Why does this error dialog box pop up when starting up the TP-LINK 802.1X Client Software? A1: It’s because the supported DLL file is missi

Appendix E: Glossary Access Control List (ACL) ACLs can limit network traffic and restrict access to certain users or devices by checking each packet

GMRP allows network devices to register end stations with multicast groups. GMRP requires that any participating network devices or end stations comp

Data Link layer in the ISO 7-Layer Data Communications Protocol. This is related directly to the hardware interface for network devices and passes on

switch. Simple Network Management Protocol (SNMP) The application protocol in the Internet suite of protocols which offers network management service

Figure 4-8 User Config The following entries are displayed on this screen: ¾ User Info User Name: Create a name for users’ login. Access Level:

4.3 System Tools The System Tools function, allowing you to manage the configuration file of the switch, can be implemented on Config Restore, Confi

Figure 4-10 Config Backup The following entries are displayed on this screen: ¾ Config Backup Backup Config: Click the Backup Config button to sav

3. To avoid damage, please don't turn off the device while upgrading. 4. After upgrading, the device will reboot automatically. 5. You are su

CONTENTS Package Contents ...1

Choose the menu System→Access Security→Access Control to load the following page. Figure 4-14 Access Control The following entries are displayed on

Session Timeout: If you do nothing with the Web management page within the timeout time, the system will log out automatically. If you want to recon

Figure 4-15 SSL Config The following entries are displayed on this screen: ¾ Global Config SSL: Select Enable/Disable the SSL function on the swi

information in a remote management being leaked. Comprising server and client, SSH has two versions, V1 and V2 which are not compatible with each oth

Key Type: Select the type of SSH Key to download. The switch supports three types: SSH-1 RSA, SSH-2 RSA and SSH-2 DSA. Key File: Select the desired

Application Example 2 for SSH: ¾ Network Requirements 1. Log on to the switch via password authentication using SSH and the SSH function is enable

3. On the Web management page of the switch, download the public key file saved in the computer to the switch. Note: 1. The key type should acco

5. After the public key and private key are downloaded, please log on to the interface of PuTTY and enter the IP address for login. After succes

Chapter 5 Switching Switching module is used to configure the basic functions of the switch, including four submenus: Port, LAG, Traffic Monitor and

Port: Displays the port number. Description: Give a description to the port for identification. Status: Allows you to Enable/Disable the port. Whe

5.1.2 Port Mirror ...31 5.1.3 Port Security ..

Group: Displays the mirror group number. Mirroring: Displays the mirroring port number. Mode: Displays the mirror mode, the value can be "Ing

¾ Mirrored Port Port Select: Click the Select button to quick-select the corresponding port based on the port number you entered. Select: Select t

Figure 5-4 Port Security The following entries are displayed on this screen: ¾ Port Security Select: Select the desired port for Port Security con

Note: 1. The Port Security function is disabled for the LAG port member. Only the port is removed from the LAG, will the Port Security function be a

¾ Port Isolation List Port: Display the port number. Forward Portlist: Display the forwardlist. 5.2 LAG LAG (Link Aggregation Group) is to combin

Figure 5-6 LAG Table The following entries are displayed on this screen: ¾ Global Config Aggregate Arithmetic: Select the applied scope of Aggrega

Figure 5-7 Detail Information 5.2.2 Static LAG On this page, you can manually configure the LAG. The LACP feature is disabled for the member ports

Group Number: Select a Group Number for the LAG. Description: Give a description to the LAG for identification. ¾ LAG Table Member Port: Select

Figure 5-9 LACP Config The following entries are displayed on this screen: ¾ Global Config System Priority: Specify the system priority for the sw

of the port to be selected as the dynamic aggregation group member. The port with smaller Port Priority will be considered as the preferred one. If t

7.4 STP Security...86 7.4.1 Port Protec

Refresh Rate: Enter a value in seconds to specify the refresh interval. ¾ Traffic Summary Port Select: Click the Select button to quick-select the

The following entries are displayed on this screen: ¾ Auto Refresh Auto Refresh: Allows you to Enable/Disable refreshing the Traffic Summary automa

destination MAC address of the packets. Address Table contains the port-based MAC address information, which is the base for the switch to forward pa

Figure 5-12 Address Table The following entries are displayed on this screen: ¾ Search Option MAC Address: Enter the MAC address of your desired e

VLAN ID: Displays the corresponding VLAN ID of the MAC address. Port: Displays the corresponding Port number of the MAC address. Type: Displays th

button to find your desired entry in the Static Address Table. • MAC: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID num

Figure 5-14 Dynamic Address The following entries are displayed on this screen: ¾ Aging Config Auto Aging: Allows you to Enable/Disable the Auto A

Select: Select the entry to delete the dynamic address or to bind the MACaddress to the corresponding port statically. It is multi-optional. MAC Add

The following entries are displayed on this screen: ¾ Create Filtering Address MAC Address: Enter the MAC Address to be filtered. VLAN ID: Ent

Chapter 6 VLAN The traditional Ethernet is a data network communication technology based on CSMA/CD (Carrier Sense Multiple Access/Collision Detect)

10.2.3 PoE Holiday Config...131 Chapter 11 ACL ...

packets of different VLANs. The switch can analyze the received untagged packets on the port and match the packets with the MAC VLAN, Protocol VLAN a

（2） TRUNK: The TRUNK port can be added in multiple VLANs, and the egress rule of the port is TAG. The TRUNK port is generally used to connect the ca

IEEE 802.1Q VLAN function is implemented on the VLAN Config and Port Config pages. 6.1.1 VLAN Config On this page, you can view the current created 8

Figure 6-4 Create or Modify 802.1Q VLAN The following entries are displayed on this screen: ¾ VLAN Config VLAN ID: Enter the ID number of VLAN. De

Egress Rule: Select the Egress Rule for the VLAN port member. The default egress rule is UNTAG. • TAG: All packets forwarded by the port are tagged

Link Type: Select the Link Type from the pull-down list for the port. • ACCESS: The ACCESS port can be added in a single VLAN, and the egress rule

2 Create VLAN. Required. On the VLAN→802.1Q VLAN→VLAN Config page, click the Create button to create a VLAN. Enter the VLAN ID and the description

The following entries are displayed on this screen: ¾ VLAN Table MAC Address: Enter the MAC address. Description: Give a description to the MAC ad

automatically and thus the data of specific protocol can be automatically assigned to the corresponding VLAN for transmission. The network administra

¾ The Procedure for the Switch to Identify Packet Protocol ¾ The Implementation of Protocol VLAN This Switch can match packets through protocol te

13.1 SNMP Config...177 13.1.1 Global Confi

VLAN packets are processed in the following way: 1. When receiving an untagged packet, the switch matches the packet with the current Protocol VLAN.

Figure 6-9 Create Protocol VLAN The following entries are displayed on this screen: ¾ Protocol Group Config Protocol: Select the defined protocol

Figure 6-10 Create and View Protocol Template The following entries are displayed on this screen: ¾ Create Protocol Template Protocol Name: Give a

2 Create VLAN. Required. On the VLAN→802.1Q VLAN→VLAN Config page, click the Create button to create a VLAN. Enter the VLAN ID and the description

¾ Configuration Procedure z Configure Switch A Step Operation Description 1 Configure the Link Type of the ports Required. On VLAN→802.1Q VLAN→Po

¾ Configuration Procedure z Configure Switch A Step Operation Description 1 Configure the Link Type of the ports Required. On VLAN→802.1Q VLAN→P

4 Configure MAC VLAN 10 On VLAN→MAC VLAN page, create MAC VLAN10 with the MAC address as 00-19-56-8A-4C-71. 5 Configure MAC VLAN 20 On VLAN→MAC V

2 Create VLAN10 Required. On VLAN→802.1Q VLAN→VLAN Config page, create a VLAN with its VLANID as 10, owning Port 12 and Port 13, and configure the eg

from the other entity or configuring some attributes statically, the device also sends out a Join message in order to be registered by the other GARP

• Normal: In this mode, a port can dynamically register/deregister a VLAN and propagate the dynamic/static VLAN information. • Fixed: In this mode,

Chapter 16 Maintenance ...221 16.1 System M

Port: Displays the port number. Status: Enable/Disable the GVRP feature for the port. The port type should be set to TRUNK before enabling the GVRP

Chapter 7 Spanning Tree STP (Spanning Tree Protocol), subject to IEEE 802.1D standard, is to disbranch a ring network in the Data Link layer in a lo

port of switch C. Figure 7-1 Basic STP diagram ¾ STP Timers Hello Time: Hello Time ranges from 1 to 10 seconds. It specifies the interval to se

z In the beginning In the beginning, each switch regards itself as the root, and generates a configuration BPDU for each port on it as a root, with

RSTP (Rapid Spanning Tree Protocol), evolved from the 802.1D STP standard, enable Ethernet ports to transit their states rapidly. The premises for th

Figure 7-2 Basic MSTP diagram ¾ MSTP MSTP divides a network into several MST regions. The CST is generated between these MST regions, and multiple

Figure 7-3 Port roles The Spanning Tree module is mainly for spanning tree configuration of the switch, including four submenus: STP Config, Port Co

The following entries are displayed on this screen: ¾ Global Config STP: Select Enable/Disable STP function globally on the switch. Version: Selec

4. If the TxHold Count parameter is too large, the number of MSTP packets being sent in each hello time may be increased with occupying too much net

Figure 7-6 Port Config The following entries are displayed on this screen: ¾ Port Config Port Select: Click the Select button to quick-select the

Package Contents The following items should be found in your box: ¾ One JetStream L2 Managed PoE Switch ¾ One power cord ¾ One console cable ¾ Tw

z Designated Port: Indicates the port that forwards packets to a downstream network segment or switch. z Master Port: Indicates the port that conne

Figure 7-7 Region Config The following entries are displayed on this screen: ¾ Region Config Region Name: Create a name for MST region identificat

The following entries are displayed on this screen: ¾ Instance Table Instance ID Select: Click the Select button to quick-select the corresponding

Figure 7-9 Instance Port Config The following entries are displayed on this screen: ¾ Port Config Instance ID: Select the desired instance ID for

Note: The port status of one port in different spanning tree instances can be different. Global configuration Procedure for Spanning Tree function:

A CIST and its secondary root bridges are usually located in the high-bandwidth core region. Wrong configuration or malicious attacks may result in c

Figure 7-10 Port Protect The following entries are displayed on this screen: ¾ Port Protect Port Select: Click the Select button to quick-select t

7.4.2 TC Protect When TC Protect is enabled for the port on Port Protect page, the TC threshold and TC protect cycle need to be configured on this pa

¾ Configuration Procedure z Configure Switch A: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link type

z Configure Switch C: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN page, configure the link type of the related ports as Trun