TP-Link T1600G-18TSTL-SG2216 T1600G-18TSUN V1 Configuration Guide
TP-Link T1600G-18TSTL-SG2216 Manual
View all TP-Link T1600G-18TSTL-SG2216 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T1600G-18TSTL-SG2216 manual content summary:
- TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 1
Configuration Guide T1600G Series Switches T1600G-18TS T1600G-28TS (TL-SG2424) / T1600G-52TS (TL-SG2452) T1600G-28PS (TL-SG2424P) / T1600G-52PS (TL-SG2452P) 1910012255 REV2.1.1 Sept 2017 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 2
CONTENTS About This Guide Intended Readers...1 Conventions...1 More Information...2 Accessing the Switch Overview ...4 Switch's IP Address and Default Gateway...20 Managing System System...22 Overview...22 Supported Features...22 System Info Configurations...24 Using the GUI...24 Viewing the System - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 3
Setting the System Time...31 Setting the Daylight Saving Time...34 User Management Configurations...37 Using the GUI...37 Creating Admin Accounts...37 Creating Accounts of Other Types...38 Using the CLI...40 Creating Admin Accounts...40 Creating Accounts of Other Types...41 System Tools - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 4
...70 Using the GUI...70 Using the CLI...71 Appendix: Default Parameters...73 Managing Physical Interfaces Physical Interface...77 Overview...77 Supported Features...77 Basic Parameters Configurations...78 Using the GUI...78 Using the CLI...79 Port Mirror Configuration...82 Using the GUI...82 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 5
Configuration Scheme...102 Using the GUI...102 Using the CLI...103 Appendix: Default Parameters...105 Configuring LAG LAG...108 Overview...108 Supported Features...108 LAG Configuration...109 Using the GUI...110 Configuring Load-balancing Algorithm...110 Configuring Static LAG or LACP...111 Using - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 6
Using the GUI...133 Adding Static MAC Address Entries ...133 Modifying the Aging Time of Dynamic Address Entries 135 Adding MAC Filtering Address Entries...136 Viewing Address Table Entries...136 Using the CLI...137 Adding Static MAC Address Entries ...137 Modifying the Aging Time of Dynamic - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 7
Using the GUI...160 Using the CLI...162 Appendix: Default Parameters ...164 Configuring MAC VLAN Overview...166 MAC VLAN Configuration...167 Using the GUI...167 Configuring 802.1Q VLAN...167 Binding the MAC Address to the VLAN...168 Enabling MAC VLAN for the Port...168 Using the CLI...169 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 8
Using the CLI...194 Appendix: Default Parameters...198 Configuring Spanning Tree Spanning Tree...200 Overview...200 Basic Concepts...200 STP/RSTP Concepts...200 MSTP Concepts...204 STP Security...205 STP/RSTP Configurations...208 Using the GUI...208 Configuring STP/RSTP Parameters on Ports...208 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 9
the GUI...245 Using the CLI...256 Appendix: Default Parameters...263 Configuring Layer 2 Multicast Layer 2 Multicast...266 Overview...266 Supported Layer 2 Multicast Protocols...267 IGMP Snooping Configurations...268 Using the GUI...268 Configuring IGMP Snooping Globally...268 Enabling IGMP Snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 10
Creating Profile...277 Searching Profile...277 Editing IP Range of the Profile...278 Binding Profile and Member Ports...278 Binding Profile and Member Ports...279 Configuring Max Groups a Port Can Join 279 Viewing IGMP Statistics on Each Port...280 Configuring Auto Refresh...280 Viewing IGMP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 11
Configuring Query Interval, Max Response Time and General Query Source IP 300 Configuring Multicast Filtering...301 Creating Profile...301 Binding Profile to the Port...302 Enabling IGMP Accounting and Authentication...304 Enabling IGMP Authentication on the Port 304 Enabling IGMP Accounting - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 12
Configuring Max Groups a Port Can Join 318 Viewing MLD Statistics on Each Port...319 Configuring Auto Refresh...319 Viewing MLD Statistics...319 Configuring Static Member Port...320 Configuring Static Member Port...320 Viewing MLD Static Multicast Groups...320 Using the CLI...321 Enabling MLD - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 13
Using the CLI...342 Viewing IPv4 Multicast Snooping Configurations 342 Viewing IPv6 Multicast Snooping Configurations 343 Configuration Examples...345 Example for Configuring Basic IGMP Snooping...345 Network Requirements...345 Configuration Scheme...345 Using the GUI...346 Using the CLI...349 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 14
Network Requirements...400 Configuration Scheme...400 Using the GUI...400 Using the CLI...401 Appendix: Default Parameter...404 Configuring DHCP DHCP...406 Overview...406 Supported Features...406 DHCP Client Configuration...409 Using the GUI...409 Using the CLI...410 DHCP Relay Configuration...412 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 15
...428 Using the GUI...428 Viewing the ARP Entries...428 Adding Static ARP Entries Manually...429 Using the CLI...429 Configuring ARP Function...429 Configuring QoS QoS...434 Overview...434 Supported Features...434 DiffServ Configuration...435 Using the GUI...436 Configuring Priority Mode...436 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 16
the CLI...480 Appendix: Default Parameters...486 Configuring PoE PoE...488 Overview...488 Supported Features...488 PoE Power Management Configurations...489 Using the GUI...489 Configuring the PoE Parameters Manually...489 Configuring the PoE Parameters Using the Profile 491 Using the CLI...493 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 17
Configuring the PoE Parameters Manually...493 Configuring the PoE Parameters Using the Profile 495 Time- the CLI...506 Appendix: Default Parameters...508 Configuring ACL ACL...510 Overview...510 Supported Features...510 ACL Configurations...511 Using the GUI...511 Creating an ACL...511 Configuring - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 18
536 Appendix: Default Parameters...538 Configuring Network Security Network Security...540 Overview...540 Supported Features...540 IP-MAC Binding Configurations...545 Using the GUI...545 Binding Entries Manually...545 Binding Entries Dynamically...546 Viewing the Binding Entries...548 Using the CLI - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 19
Using the GUI...571 Configuring the RADIUS Server...571 Configuring 802.1X Globally...575 Configuring 802.1X on Ports...577 Using the CLI...578 Configuring the RADIUS Server...578 Configuring 802.1X Globally...580 Configuring 802.1X on Ports...582 AAA Configuration...585 Using the GUI...586 Globally - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 20
Using the GUI...617 Using the CLI...620 Appendix: Default Parameters...623 Configuring LLDP LLDP...628 Overview...628 Supported Features...628 LLDP Configurations...629 Using the GUI...629 Global Config...629 Port Config...631 Using the CLI...632 Global Config...632 Port Config...634 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 21
659 Network Topology...659 Using the GUI...660 Using the CLI...664 Appendix: Default Parameters...671 Configuring Maintenance Maintenance ...673 Overview...673 Supported Features...673 Monitoring the System...674 Using the GUI...674 Monitoring the CPU...674 Monitoring the Memory...675 Using the CLI - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 22
Configuring the Tracert Test...689 Example for Configuring Remote Log...690 Network Requirements...690 Configuration Scheme...690 Using the GUI ...690 Using the CLI ...691 Appendix: Default Parameters...692 Configuring SNMP & RMON SNMP Overview...694 SNMP Configurations...695 Using the GUI...696 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 23
Configuring History...725 Configuring Event...726 Configuring Alarm...728 Configuration Example ...730 Network Requirements...730 Configuration Scheme...730 Network Topology...731 Using the GUI...731 Using the CLI...736 Appendix: Default Parameters...742 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 24
of the switch may vary slightly depending on the model and software version you have. All screenshots, images, parameters and descriptions documented in this guide are used for demonstration only. The information in this document is subject to change without notice. Every effort has been made in the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 25
. More Information The latest software and documentations can be found at Download Center at http://www.tp-link.com/support. The Installation Guide (IG) can be found where you find this guide or inside the package of the switch. Specifications can be found on the product page at http://www.tp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 26
Part 1 Accessing the Switch CHAPTERS 1. Overview 2. Web Interface Access 3. Command Line Interface Access - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 27
, while web configuration is easier and more visual than the CLI configuration. You can choose the method according to their available applications and preference. Configuration Guide 4 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 28
1) Make sure that the route between the host PC and the switch is available. 2) Launch a web browser. The supported web browsers include, but are not limited to, the following types: IE 8.0, 9.0, 10.0, 11.0 Firefox 26 status and configure the switch on this interface. Configuration Guide 5 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 29
after the switch reboots, please use the Save Config function on the main interface to save the configurations in the start-up configuration file. Configuration Guide 6 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 30
access to the web interface. Go to System > Access Security > HTTP Config, disable the HTTP server and click Apply. Figure 2-5 Shut down HTTP server Configuration Guide 7 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 31
the IP Address field and click Apply. Make sure that the route between the host PC and the switch's new IP address is available. Configuration Guide 8 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 32
Hop Specify the destination as 0.0.0.0. Specify the subnet mask as 255.255.255.0. Configure your desired default gateway as the next hop's IP address. Configuration Guide 9 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 33
to verify the default gateway you configured. The entry marked in red box displays the valid default gateway. Figure 2-10 View the default gateway Configuration Guide 10 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 34
requires the host PC connecting to the switch's console port directly, while Telnet and SSH connection support both local and remote access. The following table shows the typical applications used in the CLI access logged in to the switch and you can use the CLI now. Configuration Guide 11 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 35
to Start > All Programs > Accessories > Communications > Hyper Terminal to open the Hyper Terminal and configure the above settings to log in to the switch. Configuration Guide 12 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 36
Accessing the Switch Command Line Interface Access 3.2 Telnet Login The switch supports Login Local Mode for authentication by default. Login Local Mode: Username and password are required, Later you can set a password for users who want to access the Privileged EXEC Mode. Configuration Guide 13 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 37
you can manage your switch with CLI commands through Telnet connection. 3.3 SSH Login SSH login supports the following two modes: Password Authentication Mode and Key Authentication Mode. You can choose one the Port field; select SSH as the Connection type. Click Open. Configuration Guide 14 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 38
a public/private key pair. In the following figure, an SSH-2 RSA key pair is generated, and the length of each key is 1024 bits. Configuration Guide 15 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 39
public key to a TFTP server; click Save private key to save the private key to the host PC. Figure 3-11 Save the Generated Keys Configuration Guide 16 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 40
Type 5) Go to Connection > SSH > Auth. Click Browse to download the private key file to PuTTY. Click Open to start the connection and negotiation. Configuration Guide 17 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 41
CLI interface. Using the GUI: Go to System > Access Security > Telnet Config, disable the Telnet function and click Apply. Figure 3-16 Disable Telnet login Configuration Guide 18 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 42
copy running-config startup-config to save the configurations in the start-up configuration file. Switch(config)#end Switch#copy running-config startup-config Configuration Guide 19 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 43
no default gateway. Switch#configure Switch(config)#ip route 0.0.0.0 255.255.255.0 192.168.0.100 1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 20 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 44
Part 2 Managing System CHAPTERS 1. System 2. System Info Configurations 3. User Management Configurations 4. System Tools Configurations 5. Access Security Configurations 6. SDM Template Configuration 7. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 45
It provides controls over the type of the access users and the access security. 1.2 Supported Features System Info The System Info is mainly used for the basic properties configuration. You protocol working in transport layer. It supports a security access via a web browser. Configuration Guide 22 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 46
security and powerful authentication. SDM Template The switch SDM (Switch Database Management) templates prioritize system resources to optimize support for certain features. SDM Template function provides three templates for users to allocate hardware resources for different usage. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 47
that the corresponding 1000Mbps port is at the speed of 10Mbps or 100Mbps. Indicates that the corresponding SFP port is not connected to a device. Configuration Guide 24 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 48
view the bandwidth utilization of receiving packets on this port. Tx Select Tx to view the bandwidth utilization of sending packets on this port. Configuration Guide 25 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 49
Time to load the following page. Figure 2-5 Setting the System Time In the Time Info section, view the current time information of the switch. Configuration Guide 26 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 50
the system time: 1) Choose one method to set the system time and specify the information. Manual Set the system time manually. Date: Specify the date of the system. Time: Specify the time of the system. Get Apply. Synchronize the system time of the switch with PC's clock. Configuration Guide 27 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 51
Daylight Saving Time of New Zealand. It is from 2: 00 a.m. on the Last Sunday in September to 3:00 a.m. on the First Sunday in April. Configuration Guide 28 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 52
information of the switch. Switch#show interface status Port Status Speed Duplex FlowCtrl Jumbo Active-Medium Gi1/0/1 LinkDown N/A N/A N/A Disable Copper Gi1/0/2 LinkDown N/A N/A N/A Disable Copper Configuration Guide 29 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 53
Information. contact-info: Enter the contact information. It should consist of no more than 32 characters. By default, it is "www.tp-link.com". Configuration Guide 30 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 54
startup-config 2.2.3 Setting the System Time Follow these steps and choose one method to set the system time: Step 1 configure Enter global configuration mode. Configuration Guide 31 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 55
Step 2 Use the following command to set the system time manually: system-time manual time Configure the system time manually. time: Specify the date and time manually in the format of MM/DD/YYYY-HH:MM:SS. The time-zone, which ranges from UTC-12:00 to UTC+13:00. Configuration Guide 32 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 56
server. backup-ntp-server: Specify the IP address of the backup NTP server. fetching-rate: Specify the interval fetching time from the NTP server. Configuration Guide 33 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 57
2.2.4 Setting the Daylight Saving Time Follow these steps and choose one method to set the Daylight Saving Time: Step 1 configure Enter global configuration mode. Configuration Guide 34 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 58
in date mode: system-time dst date { smonth } { sday } { stime } { syear } { emonth } { eday } { etime } { eyear } [ offset ] Specify the Daylight Saving Time in Date mode. Configuration Guide 35 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 59
:00:00 on Sep 1 2016 DST offset is 50 minutes DST configuration is one-off Switch(config)#end Switch#copy running-config startup-config Configuration Guide 36 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 60
and password. User Name Create a user name for users' login. It contains 16 characters at most, composed of digits, English letters and underscore only. Configuration Guide 37 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 61
of other types: 1) In the User Info section, select the access level from the drop-down list and specify the user name and password. Configuration Guide 38 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 62
to AAA Configuration in Configuring Network Security. The logged-in users can enter the Enable Password on this page to get the administrative privileges. Configuration Guide 39 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 63
to the configuration file MD5 encrypted. encrypted-password: Enter a MD5 encrypted password with fixed length, which you can copy from another switch's configuration file. Configuration Guide 40 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 64
to change the users' access level to Admin. Follow these steps to create an account of other type: Step 1 configure Enter global configuration mode. Configuration Guide 41 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 65
. After the encrypted password is configured, you should use the corresponding unencrypted password to reenter this mode. aaa enable Globally enable the AAA function. Configuration Guide 42 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 66
to AAA Configuration in Configuring Network Security . The logged-in users can enter the Enable Password on this page to get the administrative privileges. Configuration Guide 43 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 67
Switch(config)#show user account-list Index User-Name User-Type --------- 1 user1 Operator 2 admin Admin Switch(config)#end Switch#copy running-config startup-config Configuration Guide 44 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 68
File Follow these steps to configure the boot file: 1) In the Boot Table section, select one or more units and configure the relevant parameters. Configuration Guide 45 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 69
restore the configuration. Please wait without any operation. • After the configuration is restored successfully, the device will reboot to make the configuration change effective. Configuration Guide 46 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 70
effect the backup image. Firmware Version Displays the current firmware version of the system. Hardware Version Displays the current hardware version of the system. Configuration Guide 47 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 71
the configuration before the reboot. 4.1.6 Configuring the Reboot Schedule Note: T1600G-18TS does not support this feature. Choose the menu System > System Tools > Reboot Schedule to load the following Schedule Setting section, select one method and specify the parameters. Configuration Guide 48 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 72
to the default. 4.2 Using the CLI 4.2.1 Configuring the Boot File Follow these steps to configure the boot file: Step 1 configure Enter global configuration mode. Configuration Guide 49 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 73
the configuration file to the switch from TFTP server. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the configuration file to be downloaded. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 74
server. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the configuration file to be saved. The following example shows how to steps to upgrade the firmware: Step 1 enable Enter privileged mode. Configuration Guide 51 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 75
backup image. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the desired firmware file. Enter Y to continue then enter Y to the reboot schedule: Step 1 configure Enter global configuration mode. Configuration Guide 52 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 76
Reboot schedule at 2016-01-15 12:00 (in 17007 minutes) Save before reboot: Yes Switch(config)#end Switch#copy running-config startup-config Configuration Guide 53 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 77
Managing System System Tools Configurations 4.2.7 Reseting the Switch Follow these steps to reset the switch: Step 1 Step 2 enable Enter privileged mode. reset Reset the switch. Note: After the system is reset, configurations of the switch will be reset to the default. Configuration Guide 54 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 78
are allowed to access the switch. Port-based: Only the users connecting to the ports you set here are allowed to access the switch. Configuration Guide 55 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 79
display. Port Select one or more ports to configure. Only the users connected to these ports are allowed to access the switch. 2) Click Apply. Configuration Guide 56 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 80
is Operator, Power User or User. Note: For T1600G-18TS, the number of Operator, Power User and User can be set respectively. 4) Click Apply. Configuration Guide 57 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 81
. Table 5-1 Configuring the HTTPS Function 1) In the Global Config section, select Enable to enable HTTPS function and select the protocol the switch supports. Click Apply. HTTPS Select Enable to enable the HTTPS function. HTTPS function is based on the SSL or TLS protocol. It provides a secure - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 82
connection. TLS Version 1 Select Enable to make the switch support TLS Version 1 protocol. TLS is a transport protocol upgraded from SSL. It supports a different encryption algorithm from SSL, so TLS and SSL match each other, otherwise the HTTPS connection will not work. Configuration Guide 59 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 83
Enable to enable SSH version 2. Idle Timeout Specify the idle timeout time. The system will automatically release the connection when the time is up. Configuration Guide 60 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 84
the Encryption Algorithm section, select the encryption algorithm you want the switch to support and click Apply. 3) In Data Integrity Algorithm section, select the integrity algorithm you want configure the access control: Step 1 configure Enter global configuration mode. Configuration Guide 61 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 85
access control as IP-based. Set the IP address as 192.168.0.100,set the subnet mask as 255.255.255.0 and make the switch support snmp, telnet, http and https. Switch#configure Switch(config)#user access-control ip-based 192.168.0.100 255.255.255.0 snmp telnet http https Switch - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 86
example shows how to set the session timeout as 9, set the maximum admin number as 6, and set the maximum guest number as 5. Switch#configure Configuration Guide 63 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 87
http secure-protocol { [ ssl3 ] [ tls1 ] } Configure to make the switch support the corresponding protocol. By default, the switch supports SSLv3 and TLSv1. ssl3: Enable the SSL version 3 protocol. SSL is a transport DES-CBC for message encryption and SHA for message digest. Configuration Guide 64 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 88
BASE64 encoded. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. Step 9 show ip http secure-server Verify the global configuration of HTTPS. Step 10 end Return to server Switch(config)#ip http secure-protocol ssl3 tls1 Configuration Guide 65 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 89
configuration mode. ip ssh server Enable the SSH function. By default, it is disabled. ip ssh version { v1 | v2 } Configure to make the switch support the corresponding protocol. By default, the switch supports SSHv1 and SSHv3. v1 | v2: Select to enable the corresponding protocol. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 90
to 3072 bits. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. Step 8 show ip ssh Verify the global configuration of SSH. Step 9 end Return to privileged EXEC mode. Switch(config)#ip ssh server Switch(config)#ip ssh version v1 Configuration Guide 67 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 91
Data Integrity Algorithm: HMAC-SHA1: Disabled HMAC-MD5: Enabled Key Type: SSH-2 RSA/DSA Key File: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "dsa-key-20160711" Configuration Guide 68 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 92
, it is enabled. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Access Security Configurations Configuration Guide 69 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 93
SDM Template function is used to configure system resources in the switch to optimize support for specific features. The switch provides three templates, and the hardware resources allocation is Select the template of enterpriseV6. It allocates resources to IPv6 ACL rules. Configuration Guide 70 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 94
and MAC ACL rules. enterpriseV6: Select the template of enterpriseV4. It allocates resources to IPv6 ACL rules. Step 4 end Return to privileged EXEC mode. Configuration Guide 71 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 95
the running SDM preferences have been stored, but cannot take effect until reboot the switch. Switch(config)#end Switch#copy running-config startup-config Configuration Guide 72 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 96
Table 7-2 Default Settings of System Time Configuration Parameter Time Source System Time Default Setting Manual 2006-01-01 08:01:56 Sunday Table 7-3 Default Settings of Daylight Saving Time Image Backup Image Default Setting image1.bin image1.bin image2.bin Configuration Guide 73 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 97
-CBC AES192-CBC AES256-CBC Blowfish-CBC Cast128-CBC 3DES-CBC Default Setting Disabled Enabled Enabled 120 seconds 5 Enabled Enabled Enabled Enabled Enabled Enabled Configuration Guide 74 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 98
listed in the following table. Table 7-11 Default Settings of SDM Template Configuration Parameter Current Template ID Next Template ID Default Setting Default Default Configuration Guide 75 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 99
Part 3 Managing Physical Interfaces CHAPTERS 1. Physical Interface 2. Basic Parameters Configurations 3. Port Mirror Configuration 4. Port Security Configuration 5. Port Isolation Configurations 6. Loopback Detection Configuration 7. Configuration Examples - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 100
the switch. Logical interfaces are manually configured and do not physically exist, such interfaces. 1.2 Supported Features The switch supports the following features the copied packets to monitor network traffic and troubleshoot network problems. Port Security You can use this feature to Guide 77 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 101
physical ports. Click LAGS to configure LAGs. Type Displays the port type. Copper indicates an Ethernet port, and SFP or SFP+ indicates a fiber port. Configuration Guide 78 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 102
device. The default setting is Auto. This value is recommended if both ends of the line support auto-negotiation. Select the appropriate duplex mode for the port. There are three options: Half, Full range port-channel port-channelid-list } Enter interface configuration mode. Configuration Guide 79 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 103
the port, making the port autonegotiate speed and duplex with the neighboring port, and enabling the flow-control and jumbo feature on T1600G-52TS: Configuration Guide 80 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 104
State Speed Duplex FlowCtrl Jumbo Description Gi1/0/1 Enable Auto Auto Enable Enable router connection Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 81 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 105
The above page displays a mirror session, and no more session can be created. Click Edit to configure this mirror session on the following page. Configuration Guide 82 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 106
. Egress With this option enabled, the packets sent by the monitored port will be copied to the monitoring port. By default, it is disabled. Configuration Guide 83 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 107
#configure Switch(config)#monitor session 1 destination interface gigabitEthernet 1/0/10 Switch(config)#monitor session 1 source interface gigabitEthernet 1/0/1-3 both Switch(config)#show monitor session Monitor Session: 1 Configuration Guide 84 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 108
Managing Physical Interfaces Destination Port: Gi1/0/10 Source Ports(Ingress): Gi1/0/1-3 Source Ports(Egress): Gi1/0/1-3 Switch(config-if)#end Switch#copy running-config startup-config Port Mirror Configuration Configuration Guide 85 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 109
port will stop learning. The default value is 64. Learned Num Displays the number of MAC addresses that have been learned on the port. Configuration Guide 86 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 110
MAC addresses are out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. Permanent: The learned MAC port | range gigabitEthernet port-list } Enter interface configuration mode. Configuration Guide 87 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 111
learned MAC address is out of the influence of the aging time and can only be deleted manually. The learned entries will be saved even the switch is rebooted. status: Status of port security Status ---- --------- ----------- ------ ------ Gi1/0/1 30 0 permanent drop Configuration Guide 88 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 112
Managing Physical Interfaces Switch(config-if)#end Switch#copy running-config startup-config Port Security Configuration Configuration Guide 89 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 113
following page. Figure 5-1 Port Isolation List The above page displays the port isolation list. Click Edit to configure Port Isolation on the following page. Configuration Guide 90 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 114
4 show port isolation interface { fastEthernet port | gigabitEthernet port } Verify the Port Isolation configuration of the specified port. Step 5 end Return to privileged EXEC mode. Configuration Guide 91 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 115
(config-if)#show port isolation interface gigabitEthernet 1/0/5 Port LAG Forward-List ---- Gi1/0/5 N/A Gi1/0/1-3,Po4 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 92 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 116
Interval Set the interval of sending loopback detection packets. The valid values are from 1 to 1000 seconds and the default value is 30 seconds. Configuration Guide 93 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 117
to normal status after the automatic recovery time. It is the default setting. Manual: You need to manually release the blocked port/VLAN. Click the Recover button to release the corresponding port Enable the loopback detection feature globally. By default, it is disabled. Configuration Guide 94 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 118
, it is disabled. loopback-detection config process-mode { alert | port-based } recovery-mode { auto | manual } Set the process mode when a loopback is detected on the port. There are two modes: alert: When detection globally (keeping the default parameters): Switch#configure Configuration Guide 95 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 119
gigabitEthernet 1/0/3 Port Enable Process Mode Recovery Mode Loopback Block LAG ---- -------- ----- ---- Gi1/0/3 enable alert auto N/A N/A N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 96 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 120
hosts and a network analyzer are directly connected to the switch. For network security and troubleshooting, the network manager needs to use the network analyzer to monitor the data packets from to load the following page. It displays the information of the mirror session. Configuration Guide 97 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 121
and sent packets to be copied to the monitoring port. Then click Apply. Figure 7-4 Source Port Configuration 4) Click Save Config to save the settings. Configuration Guide 98 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 122
the MAC address or IP address of Host A is changed. Figure 7-5 Network Topology Switch Gi1/0/1 Gi1/0/2 Gi1/0/4 Gi1/0/3 Host A Host B Host C VLAN 10 Server Configuration Guide 99 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 123
on the above page to load the following page. Select port 1/0/1 as the isolated port, and select port 1/0/4 as the forwarding port. Click Apply. Configuration Guide 100 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 124
Verify the Configuration Switch#show port isolation interface Port LAG Forward-List ---- Gi1/0/1 N/A Gi1/0/4 Gi1/0/2 N/A Gi1/0/1-52,Po1-14 Gi1/0/3 N/A Gi1/0/1-52,Po1-14 ...... Configuration Guide 101 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 125
loopback detection on ports 1/0/1-3 and configure SNMP to receive the notifications. For detailed instructions about SNMP, refer to Configuring SNMP & RMON. Here we introduce how to configure detection and web refresh globally. Keep the default parameters and click Apply. Configuration Guide 102 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 126
(config)#loopback-detection recovery-time 90 2) Enable loopback detection on ports 1/0/1-3 and set the process mode and recovery mode. Switch(config)#interface range gigabitEthernet 1/0/1-3 Configuration Guide 103 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 127
Port Enable Process Mode Recovery Mode Loopback Block LAG ---- Gi1/0/1 enable port-based auto N/A N/A N/A Gi1/0/2 enable port-based auto N/A N/A N/A Gi1/0/3 enable port-based auto N/A N/A N/A ... Configuration Guide 104 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 128
Disable Loopback Detection Loopback Detection Status Disable Detection Interval 30 seconds Automatic Recovery Time 90 seconds Web Refresh Status Disable Web Refresh Interval 6 seconds Configuration Guide 105 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 129
Managing Physical Interfaces Parameter Port Status Operation mode Recovery mode Default Setting Disable Alert Auto Appendix: Default Parameters Configuration Guide 106 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 130
Part 4 Configuring LAG CHAPTERS 1. LAG 2. LAG Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 131
and configure the backup ports to enhance the connection reliability. 1.2 Supported Features You can configure LAG in two ways: static LAG and LACP (Link Aggregation Control Protocol). Static LAG The member ports are manually added to the LAG. LACP The switch uses LACP to implement dynamic link - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 132
evenly. If an active link fails, the other active links share the traffic evenly. One LACP LAG supports more than eight member ports, but at most eight of them can be active. Using LACP protocol, the switches member port of an LAG cannot be enabled with these functions. Configuration Guide 109 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 133
MAC addresses and IP addresses, and will be transferred on the same physical link. You can choose the other options as the loadbalancing algorithm. Configuration Guide 110 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 134
Port section, select the member ports for the LAG. It is multi-optional. 3) Click Apply. Note: Clearing all member ports will delete the LAG. Configuration Guide 111 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 135
other static LAGs cannot be set as an Admin Key. The valid value of the Admin Key is determined by the maximum number of LAG supported by your switch. For example, if your switch supports up to 14 LAGs, the valid value is from 1 to 14. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 136
the destination IP addresses of the packets. src-dst-ip: The computation is based on the source and destination IP addresses of the packets. Configuration Guide 113 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 137
-list } Enter interface configuration mode. Step 3 channel-group num mode on Add the port to a static LAG. num: The group number of the LAG. Configuration Guide 114 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 138
(config-if-range)#end Switch#copy running-config startup-config Configuring LACP Follow these steps to configure LACP: Step 1 configure Enter global configuration mode. Configuration Guide 115 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 139
LACP configuration of the local switch. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 116 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 140
/0/3 SA Down 32768 0x6 0 0x3 0x45 Gi1/0/4 SA Down 32768 0x6 0 0x4 0x45 Switch(config-if-range)#end Switch#copy running-config startup-config Configuration Guide 117 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 141
enabled to transmit data. Demonstrated with T1600G-52TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. Configuration Guide 118 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 142
LACP Config section, select ports 1/0/1-10, and respectively set the admin key, port priority, mode and status for each port as follows. Click Apply. Configuration Guide 119 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 143
(config)#interface range gigabitEthernet 1/0/1-8 Switch(config-if-range)#channel-group 1 mode active Switch(config-if-range)#lacp port-priority 0 Switch(config-if-range)#exit Configuration Guide 120 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 144
Gi1/0/1 SA Down 0 0x1 0 0x1 0x45 Gi1/0/2 SA Down 0 0x1 0 0x2 0x45 Gi1/0/3 SA Down 0 0x1 0 0x3 0x45 Gi1/0/4 SA Down 0 0x1 0 0x4 0x45 Configuration Guide 121 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 145
Configuring LAG Gi1/0/5 SA Down 0 Gi1/0/6 SA Down 0 Gi1/0/7 SA Down 0 Gi1/0/8 SA Down 0 Gi1/0/9 SA Down 1 Gi1/0/10 SA Down 2 Configuration Example 0x1 0 0x5 0x45 0x1 0 0x6 0x45 0x1 0 0x7 0x45 0x1 0 0x8 0x45 0x1 0 0x9 0x45 0x1 0 0xa 0x45 Configuration Guide 122 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 146
LAG Table Hash Algorithm LACP Config System Priority Admin Key Port Priority Mode Status Default Setting SRC MAC+DST MAC 32768 0 32768 Passive Disable Configuration Guide 123 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 147
Part 5 Monitoring Traffic CHAPTERS 1. Traffic Monitor 2. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 148
. 2) In the Traffic Summary section, click 1 to show the information of the physical ports, and click LAGS to show the information of the LAGs. Configuration Guide 125 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 149
Auto Refresh section, or click Refresh at the bottom of the page. Auto Refresh: With this option enabled, the switch refreshes the web timely. Configuration Guide 126 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 150
transmitted on the port. Error frames are not counted in. Collisions: Displays the number of collisions experienced by a half-duplex port during packet transmissions. Configuration Guide 127 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 151
of the received packets (including error packets) that are over 1023 bytes. Collisions: Displays the number of collisions experienced by a port during packet transmissions. Configuration Guide 128 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 152
Monitoring Traffic Appendix: Default Parameters 2 Appendix: Default Parameters Table 2-1 Traffic Statistics Monitoring Parameter Traffic Summary Auto Refresh Refresh Rate Traffic Statistics Auto Refresh Refresh Rate Default Setting Disable 10 seconds Disable 10 seconds Configuration Guide 129 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 153
Part 6 Managing MAC Address Table CHAPTERS 1. MAC Address Table 2. Address Configurations 3. Security Configurations 4. Example for Security Configurations 5. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 154
02 1 ...... 1 Dynamic 2 Config static Aging no-Aging 1.2 Supported Features The address table of the switch contains dynamic addresses, static manually added to configure the switch to automatically drop the packets with specific source or destination MAC addresses. Configuration Guide - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 155
the number of learned addresses has reached the limit, preventing the address table from being used up by broadcast packets of MAC address attacks. Configuration Guide 132 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 156
entries by manually specifying the desired MAC address or binding dynamic MAC address entries. Adding MAC Addresses Manually Choose the menu Switching > MAC Address > Static Address to load the following page. Figure 2-1 Adding MAC Addresses Manually Follow - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 157
as a filter- ing address, and vice versa. • Multicast or broadcast addresses cannot be set as static addresses. • Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. Configuration Guide 134 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 158
aging time is applicable to stable networks. We recommend that you keep the default value if you are unsure about settings in your case. Configuration Guide 135 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 159
set as filtering addresses . 2.1.4 Viewing Address Table Entries You can view entries in MAC address table to check your former operations and address information. Configuration Guide 136 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 160
address are received. port: Specify a port to which packets with the specific MAC address are forwarded. The port must belong to the specified VLAN. Configuration Guide 137 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 161
broadcast addresses cannot be set as static addresses. • Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. The following example shows how to add a static MAC address entry with MAC Step 1 configure Enter global configuration mode. Configuration Guide 138 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 162
:00:01. vid: Specify an existing VLAN in which packets with the specific MAC address are dropped. Step 3 end Return to privileged EXEC mode. Configuration Guide 139 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 163
:1e:4b:04:01:5d 10 filter no-aging Total MAC Addresses for this criterion: 1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 140 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 164
MAC Address Table Security Configurations 3 Security Configurations Note: T1600G-18TS does not support security configurations. With security configurations of the MAC address table, you can: to load the following page. Figure 3-1 Configuring MAC Notification Traps Configuration Guide 141 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 165
be generated and sent to the management host. 3) Configure SNMP and set a management host. For detailed SNMP configurations, please refer to Configuring SNMP & RMON. Configuration Guide 142 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 166
specified VLAN is exceeded. Disable 4) Click Create. The number limit on the VLAN is not valid, and the switch follows the original forwarding rules. Configuration Guide 143 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 167
to the management host. Step 7 Step 8 end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 144 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 168
Number of MAC Addresses in VLANs Follow these steps to limit the number of MAC addresses in VLANs: Step 1 configure Enter global configuration mode. Configuration Guide 145 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 169
mac address-table security vid 10 VlanId Max-learn Current-learn Status ------ 10 100 0 Drop Switch(config)#end Switch#copy running-config startup-config Configuration Guide 146 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 170
new users access the network. Demonstrated with T1600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 147 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 171
interval as 10 seconds, and click Apply. Then, enable new-mac-learned trap on port 1/0/2 and click Apply. Figure 4-3 Configuring New-MAC-learned Traps Configuration Guide 148 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 172
Notification on port 1/0/2. Switch#show mac address-table notification interface gigabitEthernet 1/0/2 Port LrnMode Change Exceed Max Limit New Mac Learned ---- Gi1/0/2 disable disable enable Configuration Guide 149 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 173
Exceed Max Learned Notification Disable New MAC Learned Notification Disable Table 5-4 Default Settings of MAC VLAN Security Parameter Default Setting MAC VLAN Security Disable Configuration Guide 150 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 174
Part 7 Configuring 802.1Q VLAN CHAPTERS 1. Overview 2. 802.1Q VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 175
need not be located in the same place. It eases the management of devices in the same work group but located in different places. Configuration Guide 152 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 176
menu VLAN > 802.1Q VLAN > Port Config to load the following page. Figure 2-1 Configuring the Port Select a port and configure its PVID. Click Apply. Configuration Guide 153 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 177
to add to the created VLAN based on the network topology. Untagged port The selected ports will forward untagged packets in the target VLAN. Configuration Guide 154 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 178
to create VLAN 2 and name it as RD : Switch#configure Switch(config)#vlan 2 Switch(config-vlan)#name RD Switch(config-vlan)#show vlan id 2 Configuration Guide 155 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 179
1/0/5 Switch(config-if)#switchport pvid 2 Switch(config-if)#show interface switchport gigabitEthernet 1/0/5 Port Gi1/0/5: PVID: 2 Member in LAG: N/A Link Type: General Member in VLAN: Configuration Guide 156 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 180
(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#switchport general allowed vlan 2 tagged Switch(config-if)#show interface switchport gigabitEthernet 1/0/5 Port Gi1/0/5: PVID: 2 Member in LAG: N/A Configuration Guide 157 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 181
Configuring 802.1Q VLAN Link Type: General Member in VLAN: Vlan Name Egress-rule ------- 1 System-VLAN Untagged 2 rd Tagged Switch(config-if)#end Switch#copy running-config startup-config 802.1Q VLAN Configuration Configuration Guide 158 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 182
department but not with computers in the other department. Terminal devices like computers usually do not support VLAN tags. Configure the switch ports connected to the computers as Untagged. Then add the ports to link as Tagged, and add the ports to both VLANs. Configuration Guide 159 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 183
VLAN 10 with the description of Department-A. Add port 1/0/2 as an untagged port and port 1/0/4 as a tagged port to VLAN 10. Then click Apply. Configuration Guide 160 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 184
and port 1/0/4 as a tagged port to VLAN 20. Then click Apply. Figure 3-3 Create VLAN 20 for Department B 3) Click Save Config to save the settings. Configuration Guide 161 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 185
)#end Switch_1#copy running-config startup-config Verify the Configurations Switch_1#show vlan VLAN Name Status Ports 1 Default VLAN active Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Configuration Guide 162 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 186
Configuring 802.1Q VLAN Configuration Example Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8, ... Gi1/0/49, Gi1/0/50, Gi1/0/51, Gi1/0/52 10 Department-A active Gi1/0/2, Gi1/0/4 20 Department-B active Gi1/0/3, Gi1/0/4 Configuration Guide 163 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 187
Configuring 802.1Q VLAN Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of 802.1Q VLAN are listed in the following table. Table 4-1 Default Settings of 802.1Q VLAN Parameter Default Setting VLAN ID 1 PVID 1 Egress rule Untagged Configuration Guide 164 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 188
Part 8 Configuring MAC VLAN CHAPTERS 1. Overview 2. MAC VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 189
re-configure the switch to access the original VLAN. Using MAC VLAN can free the user from such a problem. It divides VLANs based on the MAC addresses of terminal devices. In this way, terminal devices always belong to laptop can access only the server in the VLAN it joins. Configuration Guide 166 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 190
MAC VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 167 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 191
. 2.1.3 Enabling MAC VLAN for the Port By default, MAC VLAN is disabled on all ports. You need to enable MAC VLAN for your desired ports manually. Configuration Guide 168 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 192
identification, with up to 8 characters. show mac-vlan VLAN vid Verify the configuration of MAC VLAN. vid: Specify the MAC VLAN to be displayed. Configuration Guide 169 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 193
of MAC VLAN on each interface. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 170 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 194
-vlan Switch(config-if)#show mac-vlan interface Port STATUS Gi1/0/1 Enable Gi1/0/2 Disable ...... Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 171 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 195
based on the network topology. Note: For the ports connecting the laptops, set the link type as General, and set the egress rule as Configuration Guide 172 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 196
to load the following page. Create VLAN 20, and add port 1/0/1 as untagged port and port 1/0/2 as tagged ports to VLAN 20. Click Apply. Configuration Guide 173 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 197
4) Choose the menu VLAN > MAC VLAN > Port Enable to load the following page. Select port 1/0/1 and click Apply to enable MAC VLAN for it. Configuration Guide 174 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 198
to load the following page. Create VLAN 20, and add port 1/0/5 as untagged port and ports 1/0/2-3 as tagged ports to VLAN 20. Click Apply. Configuration Guide 175 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 199
both VLAN 10 and VLAN 20. Switch_1(config)#interface gigabitEthernet 1/0/2 Switch_1(config-if)#switchport general allowed vlan 10,20 tagged Switch_1(config-if)#exit Configuration Guide 176 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 200
(config-if)#exit 3) Set port 1/0/4 and port 1/0/5 as untagged ports, and respectively add them to VLAN 10 and VLAN 20. Switch_3(config)#interface gigabitEthernet 1/0/4 Configuration Guide 177 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 201
1 Default VLAN active 10 DeptA 20 DeptB active active Ports Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8 ...... Gi1/0/2, Gi1/0/3, Gi1/0/4 Gi1/0/2, Gi1/0/3, Gi1/0/5 Configuration Guide 178 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 202
in the following table. Table 4-1 Default Settings of MAC VLAN Parameter Default Setting MAC Address None Description None VLAN ID None Port Enable Disable Configuration Guide 179 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 203
Part 9 Configuring Protocol VLAN CHAPTERS 1. Overview 2. Protocol VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 204
protocols, network administrators can use protocol VLAN to manage the network based on specific applications and services of network users. The figure below shows a common application scenario of protocol VLAN. With Switch 2 Switch 1 IPv4 Hosts VLAN 10 IPv6 Hosts VLAN 20 Configuration Guide 181 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 205
protocol VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 182 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 206
the frame type of the new protocol template. For T1600G-18TS, the supported frame type is Ethernet II, and cannot be configured. Ether Type When specify the destination service access point with 2 hexadecimal numbers. SSAP When the frame type is LLC, specify the source service access point with - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 207
protocol VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 184 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 208
ranges from 0600 to FFFF. dsap_type: Specify the destination service access point with 2 hexadecimal numbers. ssap_type: Specify the source service access point with 2 hexadecimal numbers. show protocol-vlan Protocol Name Protocol Type 1 IP EthernetII ether-type 0800 Configuration Guide 185 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 209
group. entry-id: Protocol VLAN index. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 186 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 210
(config-if)#show protocol-vlan vlan Index Protocol-Name VID Member 1 IPv6 10 Gi1/0/2 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 187 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 211
packets, Switch 2 will forward them to the corresponding VLANs according to their protocol types. The overview of the configuration on Switch 2 is as follows: Configuration Guide 188 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 212
load the following page. Create VLAN 10, and add port 1/0/1 and port 1/0/3 as untagged ports to VLAN 10. Click Apply. Figure 3-2 Create VLAN 10 Configuration Guide 189 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 213
Configuring Protocol VLAN Configuration Example 2) Click Create to load the following page. Create VLAN 20, and add ports 1/0/2-3 as untagged ports to VLAN 20. Click Apply. Figure 3-3 Create VLAN 20 3) Click Save Config to save the settings. Configuration Guide 190 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 214
page. Create VLAN 10, and add port 1/0/1 as tagged port and port 1/0/2 as untagged port to VLAN 10. Click Apply. Figure 3-4 Create VLAN 10 Configuration Guide 191 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 215
the IPv6 protocol template. Tips: The IPv4 protocol template is already provided by the switch. You only need to create the IPv6 protocol template. Configuration Guide 192 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 216
port 1, and click Apply. Select the IPv6 protocol name, enter VLAN ID 20, select port 1, and click Apply. Figure 3-7 Configure the IPv4 Protocol Group Configuration Guide 193 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 217
)#vlan 10 Switch_1(config-vlan)#name IPv4 Switch_1(config-vlan)#exit Switch_1(config)#vlan 20 Switch_1(config-vlan)#name IPv6 Switch_1(config-vlan)#exit Configuration Guide 194 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 218
ports, and add them to VLAN 10 and VLAN 20 respectively. Switch_2(config)#interface gigabitEthernet 1/0/2 Switch_2(config-if)#switchport general allowed vlan 10 untagged Configuration Guide 195 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 219
(config-if)#protocol-vlan group 1 Switch_2(config-if)#protocol-vlan group 2 Switch_2(config-if)#exit Switch_2(config)#end Switch_2#copy running-config startup-config Configuration Guide 196 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 220
IPv6 active Gi1/0/1, Gi1/0/3 Verify protocol group configuration: Switch_2#show protocol-vlan vlan Index Protocol-Name VID 1 IP 10 2 IPv6 20 Member Gi1/0/1 Gi1/0/1 Configuration Guide 197 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 221
-type 0800 ARP Ethernet II ether-type 0806 RARP Ethernet II ether-type 8035 IPX SNAP ether-type 8137 AT SNAP ether-type 809B Configuration Guide 198 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 222
Part 10 Configuring Spanning Tree CHAPTERS 1. Spanning Tree 2. STP/RSTP Configurations 3. MSTP Configurations 4. STP Security Configurations 5. Configuration Example for MSTP 6. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 223
load balancing among VLANs. 1.2 Basic Concepts 1.2.1 STP/RSTP Concepts Based on the networking topology, this section will introduce some basic concepts in STP/ RSTP. Configuration Guide 200 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 224
ID is composed of a 2-byte priority and a 6-byte MAC address. The priority is allowed to be configured manually on the switch, and the switch with the lowest priority value will be elected as the root bridge. If BPDUs from another switch, it will become an alternate port. Configuration Guide 201 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 225
RSTP/MSTP, the port status includes: Discarding, Learning and Forwarding. The Discarding status is the grouping of STP's Blocking, Listening and Disabled, and the Configuration Guide 202 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 226
the port. The smaller the value, the higher link speed the port has. The path cost can be manually configured on each port. If not, the path cost values are automatically calculated according to the link speed root path cost increases as the BPDU propagates further. Configuration Guide 203 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 227
are independent of each other. As is shown in Figure 1-4, there are three instances in a region, and each instance has its own root bridge. Configuration Guide 204 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 228
used to prevent loops caused by link congestions or link failures. It is recommended to enable this function on root ports and alternate ports. Configuration Guide 205 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 229
to prevent the switch from frequently removing MAC address entries. It is recommended to enable this function on the ports of non-root switches. Configuration Guide 206 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 230
-BPDUs exceeds the maximum number you set in the TC threshold, the switch will not remove MAC address entries in the TC protect cycle. Configuration Guide 207 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 231
configure STP/RSTP parameters on ports: 1) In the Port Config section, configure STP/RSTP parameters on ports. UNIT Select the desired unit or LAGs. Configuration Guide 208 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 232
port, they can transit their states to forwarding directly. Three options are supported: Auto, Open(Force) and Close(Force). By default, it is Auto Open(Force): The port is manually identified as connected to a P2P link. Close(Force): The port is manually identified as not connected to Guide 209 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 233
to. 2.1.2 Configuring STP/RSTP Globally Choose the menu Spanning Tree > STP Config > STP Config to load the following page. Figure 2-2 Configuring STP/RSTP Globally Configuration Guide 210 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 234
tree function, choose the STP mode as STP/RSTP, and click Apply. Spanning-Tree Enable or disable spanning tree function globally on the switch. Configuration Guide 211 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 235
STP/RSTP Configurations The STP Summary section shows the summary information of spanning tree : Spanning Tree Displays the status of the spanning tree function. Configuration Guide 212 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 236
-list] [port-channel port-channel | range port-channel port-channel-list} Enter interface configuration mode. spanning-tree Enable spanning tree function for desired ports. Configuration Guide 213 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 237
gigabitEthernet 1/0/3 Switch(config-if)#spanning-tree Switch(config-if)#spanning-tree common-config port-priority 32 Switch(config-if)#show spanning-tree interface gigabitEthernet 1/0/3 Configuration Guide 214 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 238
STP/RSTP parameters of the switch. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 215 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 239
spanning tree function globally. Step 4 show spanning-tree active (Optional) View the active information of STP/RSTP. Step 5 end Return to privileged EXEC mode. Configuration Guide 216 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 240
) Rstp Desg Fwd Gi1/0/20 Enable 128 200000 200000 No Yes(auto) Rstp Desg Fwd Switch(config)#end Switch#copy running-config startup-config Configuration Guide 217 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 241
to configure parameters on ports in CIST: 1) In the Port Config section, configure the parameters on ports. UNIT Select the desired unit or LAGs. Configuration Guide 218 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 242
port, they can transit their states to forwarding directly. Three options are supported: Auto, Open(Force) and Close(Force). By default, it is Auto Open(Force): The port is manually identified as connected to a P2P link. Close(Force): The port is manually identified as not connected to Guide 219 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 243
the Region Name and Revision Level Choose the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Figure 3-2 Configuring the Region Configuration Guide 220 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 244
be deleted from the corresponding instance. 2) In the Instance Config section, configure the priority of the switch in the desired instance, and click Apply. Configuration Guide 221 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 245
the instance. Click the Clear All to clear up all VLANs from the instance. The cleared VLAN will be automatically mapped to the CIST. Configuration Guide 222 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 246
desired instance. 2) In the Instance Port Config section, configure port parameters in the desired instance. UNIT Select the desired unit or LAGs for configuration. Configuration Guide 223 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 247
packets. Disconnected: The port is enabled with spanning tree function but not connected to any device. Displays the LAG which the port belongs to. Configuration Guide 224 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 248
hops that occur in a specific region before the BPDU is discarded. The valid values are from 1 to 40, and the default value is 20. Configuration Guide 225 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 249
. STP: Specify the spanning tree mode as STP. RSTP: Specify the spanning tree mode as RSTP. MSTP: Specify the spanning tree mode as MSTP. Configuration Guide 226 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 250
path cost from the switch to the root bridge in CIST. Regional Root Bridge Displays the bridge ID of the root bridge in IST. Configuration Guide 227 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 251
] [port-channel port-channel | range port-channel port-channel-list } Enter interface configuration mode. spanning-tree Enable spanning tree function for the desired port. Configuration Guide 228 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 252
in the configuration file. This example shows how to enable spanning tree function for port 1/0/3 and configure the port priority as 32 : Switch#configure Configuration Guide 229 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 253
the desired instance. Step 3 spanning-tree mst configuration Enter MST configuration mode, as to configure the VLAN-Instance mapping, region name and revision level. Configuration Guide 230 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 254
R1 Switch(config-mst)#revision 100 Switch(config-mst)#instance 5 vlan 2-6 Switch(config-mst)#show spanning-tree mst configuration Region-Name : R1 Revision : 100 Configuration Guide 231 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 255
to view, ranging from 1 to 8. port: Specify the port number. lagid: Specify the ID of the LAG. Step 5 end Return to privileged EXEC mode. Configuration Guide 232 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 256
priority. CIST priority the priority of a switch in CIST. The switch with the highest priority will be elected as the root bridge in CIST. Configuration Guide 233 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 257
as 8 and the Max Hop as 25: Switch#configure Switch(config)#spanning-tree priority 36864 Switch(config-if)#spanning-tree timer forward-time 12 Configuration Guide 234 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 258
function globally : Switch#configure Switch(config)#spanning-tree mode mstp Switch(config)#spanning-tree Switch(config)#show spanning-tree active Spanning tree is enabled Configuration Guide 235 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 259
-0a-eb-13-12-ba Local bridge is the root bridge Designated Bridge Priority : 32768 Address : 00-0a-eb-13-12-ba Local Bridge Configuration Guide 236 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 260
Configuring Spanning Tree Priority : 32768 Address : 00-0a-eb-13-12-ba Interface Prio Cost Role Status Gi/0/16 128 200000 Altn Blk Gi/0/20 128 200000 Mstr Fwd Switch(config)#end Switch#copy running-config startup-config MSTP Configurations Configuration Guide 237 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 261
GUI 4.1.1 Configuring the STP Security Choose the menu Spanning Tree > STP Security > Port Protect to load the following page. Figure 4-1 Configuring the Port Protect Configuration Guide 238 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 262
sends out its own BPDUs, preventing the switch from being attacked by BPDUs. 4.1.2 Configuring the Threshold and Cycle of TC Protect T1600G-18TS does not support configuring the threshold and cycle of TC protect. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 263
it does not receive BPDUs. After the link restores to normal, the port will transit to its normal state, so loops can be prevented. Configuration Guide 240 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 264
-tree guard root Switch(config-if)#spanning-tree bpdufilter Switch(config-if)#spanning-tree bpduguard Switch(config-if)#show spanning-tree interface-security gigabitEthernet 1/0/3 Configuration Guide 241 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 265
the TC Protect function on port 1/0/3 with the TC threshold is 25 and the TC Protect Cycle is 8 (demonstrated with T1600G-52TS): Switch#configure Configuration Guide 242 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 266
BPDU-Guard Loop-Protect Root-Protect TC-Protect Gi1/0/3 Enable ---------Enable -----------Enable -----------Enable --------Enable Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 243 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 267
instances to ensure traffic can be transmitted along the respective instance. Here we configure two instances to meet the requirement, as is shown below: Configuration Guide 244 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 268
load the following page. Enable spanning tree function on port 1/0/1 and port 1/0/2. Here we leave the values of the other parameters as default settings. Configuration Guide 245 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 269
3) Choose the menu Spanning Tree > MSTP Instance > Instance Config to load the following page. Map VLAN101-VLAN103 to instance 1; map VLAN104-VLAN106 to instance 2. Configuration Guide 246 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 270
Configuring Spanning Tree Figure 5-5 Configuring the VLAN-Instance Mapping Configuration Example for MSTP 4) Choose the menu Spanning Tree > MSTP Instance > Instance Port Config to load the following page. Set the path cost of port 1/0/1 in instance 1 as 400000. Configuration Guide 247 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 271
> STP Config to load the following page. Enable MSTP function globally, here we leave the values of the other global parameters as default settings. Configuration Guide 248 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 272
the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Set the region name as 1 and the revision level as 100. Configuration Guide 249 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 273
> MSTP Instance > Instance Config to load the following page. Configure the priority of Switch B as 0 to set it as the root bridge in instance 1. Configuration Guide 250 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 274
the menu Spanning Tree > MSTP Instance > Instance Port Config to load the following page. Set the path cost of port 1/0/2 in instance 2 as 400000. Configuration Guide 251 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 275
> STP Config to load the following page. Enable MSTP function globally. Here we leave the values of the other global parameters as default settings. Configuration Guide 252 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 276
the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Set the region name as 1 and the revision level as 100. Configuration Guide 253 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 277
> MSTP Instance > Instance Config to load the following page. Configure the priority of Switch C as 0 to set it as the root bridge in instance 2. Configuration Guide 254 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 278
leave the values of the other global parameters as default settings. Figure 5-18 Configuring the MSTP Globally 6) Click Save Config to save the settings. Configuration Guide 255 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 279
spanning tree function on port 1/0/1 and port 1/0/2, and specify the path cost of port 1/0/2 in instance 2 as 400000. Switch#configure Switch(config)#interface gigabitEthernet 1/0/2 Configuration Guide 256 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 280
instance 2; configure the priority of Switch C in instance 2 as 0 to set it as the root bridge in instance 2: Switch(config)#spanning-tree mst configuration Configuration Guide 257 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 281
: 400000 Root Port : 1 Designated Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Local Bridge Priority : 32768 Address : 00-0a-eb-13-23-97 Configuration Guide 258 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 282
instance 1: Switch(config)#show spanning-tree mst instance 1 MST-Instance 1 Root Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Configuration Example for MSTP Configuration Guide 259 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 283
-0a-eb-13-12-ba Interface Prio Cost Role Status Gi1/0/1 128 200000 Altn Blk Gi1/0/2 128 200000 Root Fwd Configuration Example for MSTP Configuration Guide 260 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 284
-d8-9d-88-f7 Local bridge is the root bridge Designated Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Configuration Example for MSTP Configuration Guide 261 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 285
Configuring Spanning Tree Local Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Interface Prio Cost Role Status Gi1/0/1 128 200000 Desg Fwd Gi1/0/2 128 200000 Desg Fwd Configuration Example for MSTP Configuration Guide 262 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 286
-Path Cost Auto Edge Port Disable P2P Link Auto MCheck ------ Table 6-3 Default Settings of the MSTP Instance Parameter Default Setting Status Disable Priority 32768 Configuration Guide 263 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 287
Configuring Spanning Tree Parameter Port Priority Path Cost Default Setting 128 Auto Appendix: Default Parameters Configuration Guide 264 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 288
Part 11 Configuring Layer 2 Multicast CHAPTERS 1. Layer 2 Multicast 2. IGMP Snooping Configurations 3. Configuring MLD Snooping 4. Viewing Multicast Snooping Configurations 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 289
network resources and impacting information security. Multicast, however, solves all the problems caused by unicast and broadcast. With multicast, the source only need to Internet information provider can provide value-added services such as Online Live, IPTV, Distance Education Guide 266 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 290
Layer 2 switch Host A Receiver Host B Multicast packets Host C Receiver Host A Receiver 1.2 Supported Layer 2 Multicast Protocols Host B Host C Receiver Layer 2 Multicast protocol for IPv4: IGMP and users, to build and maintain Layer 2 multicast forwarding table. Configuration Guide 267 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 291
Unknown Multicast decides how to process the multicast data when its destination multicast address is not in the multicast forwarding table of the switch. Configuration Guide 268 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 292
Configuring Layer 2 Multicast IGMP Snooping Configurations For switches that support MLD Snooping, IGMP Snooping and MLD Snooping share the setting of Unknown Multicast, so you have to it from the multicast forwarding table. The valid values are from 60 to 600 seconds. Configuration Guide 269 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 293
be sent. The valid values are from 1 to 5. Verifying IGMP Snooping Status IGMP Snooping Status Table displays VLANs and ports with IGMP Snooping enabled. Configuration Guide 270 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 294
this multicast group. Follow these steps to configure fast leave. 1) Select the port to be configured and select Enable under the Fast Leave column. Configuration Guide 271 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 295
designate VLAN, and configure the aging time of the router ports and the member ports. VLAN ID Specify the VLAN to enable IGMP Snooping. Configuration Guide 272 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 296
send the data to all member ports of the VLAN. In this way, Multicast VLAN saves bandwidth and reduces network load of Layer 3 devices. Configuration Guide 273 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 297
router port table. The valid values are from 60 to 600 seconds. When the router port time is 0, the VLAN uses the global time. Configuration Guide 274 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 298
Specify the VLAN to be configured. Forbidden Router Ports 2) Click Apply. Select the ports to forbid them from being router ports in the VLAN. Configuration Guide 275 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 299
the IGMP Snooping Querier Table. Viewing Settings of IGMP Querier The IGMP Snooping Querier Table displays all the related settings of the IGMP querier. Configuration Guide 276 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 300
specific multicast groups. Searching Profile Enter the search condition in the Search Option field to search the profile in the IGMP Profile Info table. Configuration Guide 277 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 301
's filtering profile and the number of multicast groups a port can join. Choose the menu Multicast > IGMP Snooping > Profile Binding to load the following page. Configuration Guide 278 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 302
groups a port can join and overflow action. 1) Select a port to configure its Max Group and Overflow Action. Select Select the port to be configured. Configuration Guide 279 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 303
following page. Figure 2-9 View IGMP Statistics on the Port Configuring Auto Refresh Follow these steps to configure auto refresh. 1) Enable or disable Auto Refresh. Configuration Guide 280 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 304
The IGMP Statistics table displays all kinds of IGMP statistics of all the ports. 2.1.9 Enabling IGMP Accounting and Authentication T1600G-18TS does not support this feature. Choose the menu Multicast > IGMP Snooping > IGMP Authentication to load the following page. Figure 2-10 IGMP Accounting and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 305
a port as a static member port in the multicast group. Choose the menu Multicast > Multicast Table > Static IPv4 Multicast Table to load the following page. Configuration Guide 282 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 306
using Multicast IP, VLAN ID or Forward Port as the Search Option. Static Multicast IP Table displays details of all IGMP static multicast groups. Configuration Guide 283 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 307
file. The following example shows how to enable IGMP Snooping globally and enable IGMP Snooping on port 1/0/3: Switch#configure Switch(config)#ip igmp snooping Configuration Guide 284 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 308
. Step 4 show ip igmp snooping Show the basic IGMP snooping configuration. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 285 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 309
. Step 4 show ip igmp snooping Show the basic IGMP snooping configuration. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 286 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 310
Configuring Layer 2 Multicast IGMP Snooping Configurations For switches that support MLD Snooping, IGMP Snooping and MLD Snooping share the setting of Unknown Multicast, so you have to 600 seconds. mtime is the aging time of member ports, ranging from 60 to 600 seconds. Configuration Guide 287 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 311
fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | port-channel port-channel-id | range port-channe port-channel-list} Enter interface configuration mode Configuration Guide 288 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 312
configuration mode Step 3 ip igmp snooping max-groups maxgroup Enter the number of multicast groups the port can join. The range is 0 to 1000. Configuration Guide 289 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 313
/0/3 500 Drop Switch(config-if)#end Switch#copy running-config startup-config 2.2.5 Configuring IGMP Snooping Last Listener Query Step 1 configure Enter global configuration mode. Configuration Guide 290 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 314
Age Time :300 Global Report Suppression :Disable Global Authentication Accounting:Disable Enable Port: Enable VLAN: Switch(config)#end Switch#copy running-config startup-config Configuration Guide 291 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 315
Static Router Port:None Dynamic Router Port:None Forbidden Router Port:None Switch(config)#show ip igmp snooping vlan 3 Vlan Id: 3 Router Time:500 Configuration Guide 292 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 316
igmp snooping vlan 2 Vlan Id: 2 Router Time:0 Member Time:0 Static Router Port:Gi1/0/2 Dynamic Router Port:None Forbidden Router Port:None Switch(config)#end Configuration Guide 293 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 317
Time:0 Member Time:0 Static Router Port:None Dynamic Router Port:None Forbidden Router Port:Gi1/0/4-6 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 294 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 318
startup-config 2.2.7 Configuring IGMP Snooping Parameters in the Multicast VLAN Configuring Router Port Time and Member Port Time Step 1 configure Enter global configuration mode. Configuration Guide 295 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 319
:None Forbidden Router Port:None Switch(config)#end Switch#copy running-config startup-config Configuring Static Router Port Step 1 configure Enter global configuration mode. Configuration Guide 296 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 320
:None Forbidden Router Port:None Switch(config)#end Switch#copy running-config startup-config Configuring Forbidden Router Port Step 1 configure Enter global configuration mode. Configuration Guide 297 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 321
:None Forbidden Router Port:Gi1/0/6 Switch(config)#end Switch#copy running-config startup-config Configuring Replace Source IP Step 1 configure Enter global configuration mode. Configuration Guide 298 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 322
Router Port:None Switch(config)#end Switch#copy running-config startup-config 2.2.8 Configuring the Querier Enabling IGMP Querier Step 1 configure Enter global configuration mode. Configuration Guide 299 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 323
. ip-addr is the source IP address of the general query messages sent by the querier. It cannot be a multicast address or a broadcast address. Configuration Guide 300 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 324
2.2.9 Configuring Multicast Filtering Creating Profile Step 1 configure Enter global configuration mode. Step 2 ip igmp profile id Create a new profile and enter profile configuration mode. Configuration Guide 301 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 325
range 226.0.0.5 226.0.0.10 Switch(config)#end Switch#copy running-config startup-config Binding Profile to the Port Step 1 configure Enter global configuration mode. Configuration Guide 302 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 326
-if)#show ip igmp profile IGMP Profile 1 deny range 226.0.0.5 226.0.0.10 Binding Port(s) Gi1/0/2 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 303 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 327
Multicast IGMP Snooping Configurations 2.2.10 Enabling IGMP Accounting and Authentication T1600G-18TS does not support this feature. Enabling IGMP Authentication on the Port Step 1 configure Enter global effect only after AAA is enabled and RADIUS server is configured. Configuration Guide 304 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 328
configuration. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. IGMP Snooping Configurations Configuration Guide 305 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 329
Unknown Multicast decides how to process the multicast data when its destination multicast address is not in the multicast forwarding table of the switch. Configuration Guide 306 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 330
longer consider this port as a member port and delete it from the multicast forwarding table. The valid values are from 60 to 600 seconds. Configuration Guide 307 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 331
be sent. The valid values are from 1 to 5. Verifying MLD Snooping Status MLD Snooping Status Table displays VLANs and ports with MLD Snooping enabled. Configuration Guide 308 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 332
this multicast group. Follow these steps to configure fast leave. 1) Select the port to be configured and select Enable under the Fast Leave column. Configuration Guide 309 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 333
designate VLAN, and configure the aging time of the router ports and the member ports. VLAN ID Specify the VLAN to enable MLD Snooping. Configuration Guide 310 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 334
send the data to all member ports of the VLAN. In this way, Multicast VLAN saves bandwidth and reduces network load of Layer 3 devices. Configuration Guide 311 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 335
router port table. The valid values are from 60 to 600 seconds. When the router port time is 0, the VLAN uses the global time. Configuration Guide 312 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 336
Specify the VLAN to be configured. Forbidden Router Ports 2) Click Apply. Select the ports to forbid them from being router ports in the VLAN. Configuration Guide 313 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 337
the MLD Snooping Querier Table. Viewing Settings of MLD Querier The MLD Snooping Querier Table displays all the related settings of the MLD querier. Configuration Guide 314 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 338
specific multicast groups. Searching Profile Enter the search condition in the Search Option field to search the profile in the MLD Profile Info table. Configuration Guide 315 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 339
range and click Delete to delete an IP range. 3) Click Submit to save the settings; click Back to go back to the previous page. Configuration Guide 316 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 340
port. One port can only be bound to one profile. ClearBinding 2) Click Apply. Click to clear the binding between the profile and the port. Configuration Guide 317 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 341
will not join any new multicast groups. Replace: Replace the existing multicast group owning the lowest multicast MAC address with the new multicast group. Configuration Guide 318 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 342
valid values are from 3 to 300 seconds. Viewing MLD Statistics The MLD Statistics table displays all kinds of MLD statistics of all the ports. Configuration Guide 319 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 343
using Multicast IP, VLAN ID or Forward Port as the Search Option. Static Multicast IP Table displays details of all MLD static multicast groups. Configuration Guide 320 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 344
following example shows how to enable MLD Snooping globally and enable MLD Snooping Switch#configure Switch(config)#ipv6 mld snooping Switch(config)#interface gigabitEthernet 1/0/3 Configuration Guide 321 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 345
Save the settings in the configuration file. The following example shows how to enable Report Message Suppression: Switch#configure Switch(config)#ipv6 mld snooping Configuration Guide 322 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 346
the same time. The following example shows how to configure the switch to discard unknown multicast data: Switch#configure Switch(config)#ipv6 mld snooping Configuration Guide 323 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 347
the configuration file. The following example shows how to configure the global router port time and member port time as 200 seconds: Switch#configure Configuration Guide 324 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 348
of all the ports. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 325 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 349
-list ]] max-groups Show the IGMP group limitation on the specified port(s) or of all the ports. Step 6 end Return to privileged EXEC mode. Configuration Guide 326 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 350
Show the basic MLD snooping configuration. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 327 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 351
3 show ipv6 mld snooping vlan vlan-id Show the basic MLD snooping configuration in the specified VLAN. Step 4 end Return to privileged EXEC mode. Configuration Guide 328 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 352
[rport interface {gigabitEthernet port-list | portchannel port-channel-id}] port-list and port-channel-id are the static router ports in the specified VLAN. Configuration Guide 329 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 353
3 show ipv6 mld snooping vlan vlan-id Show the basic MLD snooping configuration in the specified VLAN. Step 4 end Return to privileged EXEC mode. Configuration Guide 330 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 354
in the specified VLAN. Step 3 show ipv6 mld snooping groups static Show the static MLD snooping configuration. Step 4 end Return to privileged EXEC mode. Configuration Guide 331 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 355
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 332 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 356
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 333 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 357
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 334 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 358
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 335 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 359
the MLD querier configuration. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 336 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 360
interval as 100 seconds, the max response time as 20 seconds, and the general query source IP as fe80::2ff:ffff:fe00:1: Switch#configure Configuration Guide 337 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 361
filtered. start-ip, end-ip are the start IP and end IP of the IP range respectively. Step 5 end Return to privileged EXEC mode. Configuration Guide 338 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 362
detailed MLD profile configuration. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 339 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 363
)#show ipv6 mld profile MLD Profile 1 deny range ff01::1234:5 ff01::1234:8 Binding Port(s) Gi1/0/2 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 340 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 364
ID of the VLAN that the multicast group is in. Forward Port All ports in the multicast group, including router ports and member ports. Configuration Guide 341 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 365
Snooping in the multicast VLAN. show ip igmp snooping groups vlan vlan-id multicast_addr Displays information of specific multicast group in the specific VLAN. Configuration Guide 342 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 366
Snooping in the multicast VLAN. show ipv6 mld snooping groups vlan vlan-id multicast_addr Displays information of specific multicast group in the specific VLAN. Configuration Guide 343 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 367
profile [id] Displays settings in all profiles or in the specific profile. clear ipv6 mld snooping statistics Clear all statistics of all MLD packets. Configuration Guide 344 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 368
Scheme Enable IGMP Snooping globally and on the port. Add the three member ports and the router port to a VLAN and configure their PVIDs. Configuration Guide 345 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 369
fields. Figure 5-2 Configure IGMP Snooping Globally 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Enable IGMP Snooping on port 1/0/1-4. Configuration Guide 346 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 370
> VLAN Config to load the following page. Create VLAN 10 and add Untagged port 1/0/1-3 and Tagged port 1/0/4 to VLAN 10. Figure 5-4 Configure Link Type Configuration Guide 347 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 371
. Enable IGMP Snooping in VLAN 10. Keep 0 as the Router Port Time and Member Port Time, which means the global settings will be used. Configuration Guide 348 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 372
VLAN 10 and set the link type as tagged. Switch(config)#interface range gigabitEthernet 1/0/1-3 Switch(config-if-range)#switchport general allowed vlan 10 untagged Configuration Guide 349 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 373
igmp snooping IGMP Snooping :Enable Unknown Multicast :Pass Last Query Times :2 Last Query Interval :1 Global Member Age Time :260 Global Router Age Time :300 Configuration Guide 350 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 374
, VLAN 20 and VLAN 30 respectively. Port 1/0/4 is connected to the multicast network in the upper layer network. These 4 ports are all Untagged ports. Configuration Guide 351 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 375
to load the following page. Enable IGMP Snooping globally, and keep the default values in the Router Port Time and Member Port Time fields. Configuration Guide 352 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 376
Configuring Layer 2 Multicast Figure 5-8 Configure IGMP Snooping Globally Configuration Examples 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Enable IGMP Snooping on port 1/0/1-4. Figure 5-9 Configure IGMP Snooping Globally Configuration Guide 353 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 377
> Port Config to load the following page. Configure the PVID of port 1/0/1 as 10, port 1/0/2 as 20, port 1/0/3 as 30 and port 1/0/4 as 40. Configuration Guide 354 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 378
Config to save the settings. 5.2.5 Using the CLI 1) Enable IGMP Snooping Globally. Switch#configure Switch(config)#ip igmp snooping 2) Enable IGMP Snooping on port 1/0/1-4. Configuration Guide 355 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 379
-config Verify the Configurations Switch(config)#show vlan brief VLAN Name Status 1 System-VLAN active Ports Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8, ...... Configuration Guide 356 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 380
Unknown Multicast and Fast Leave 5.3.1 Network Requirement A user experiences lag when he is changing channel on his IPTV. He wants solutions to this problem. As shown in the following network topology, port 1/0/4 on the switch is connected to the upper layer network, and port 1/0/2 is connected to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 381
data, which increases the network load and results in network congestion. The solution to this problem is using Unknown Multicast and Fast Leave. To avoid Host B from receiving irrelevant multicast . Enable IGMP Snooping globally and configure Unknown Multicast as Discard. Configuration Guide 358 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 382
menu Multicast > IGMP Snooping > Port Config to load the following page. Enable IGMP Snooping on port 1/0/2 and port 1/0/4 and enable Fast Leave on port 1/0/2. Configuration Guide 359 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 383
Configuring Layer 2 Multicast Figure 5-15 Configure IGMP Snooping Globally Configuration Examples 3) Choose the menu Multicast > IGMP Snooping > VLAN Config to load the following page. Enable IGMP Snooping in VLAN 10. Figure 5-16 Enable IGMP Snooping in the VLAN Configuration Guide 360 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 384
igmp snooping IGMP Snooping :Enable Unknown Multicast :Discard Last Query Times :2 Last Query Interval :1 Global Member Age Time :260 Global Router Age Time :300 Configuration Guide 361 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 385
network topology, Host B is connected to port 1/0/1, Host C is connected to port 1/0/2 and Host D is connected to port 1/0/3. They are all in VLAN 10. Configuration Guide 362 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 386
to load the following page. Enable IGMP Snooping globally, and keep the default values in the Router Port Time and Member Port Time fields. Configuration Guide 363 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 387
Configuring Layer 2 Multicast Figure 5-18 Configure IGMP Snooping Globally Configuration Examples 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Figure 5-19 Enable IGMP Snooping on the Port Configuration Guide 364 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 388
Configure Link Type 4) Choose the menu VLAN > 802.1Q VLAN > Port Config to load the following page. Configure the PVID of port 1/0/1-4 as 10. Configuration Guide 365 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 389
. Enable IGMP Snooping in VLAN 10. Keep 0 as the Router Port Time and Member Port Time, which means the global settings will be used. Configuration Guide 366 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 390
Permit as the Mode and click Create. Figure 5-23 Create Profile 1 b. Choose the menu Multicast > IGMP Snooping > Profile Config to load the following page. Configuration Guide 367 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 391
receive a. Choose the menu Multicast > IGMP Snooping > Profile Config to load the following page. Create Profile 2, select Deny as the Mode and click Create. Configuration Guide 368 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 392
> Profile Binding to load the following page. Select port 1/0/1, enter 2 in the Profile ID field and click Apply to bind Profile 2 to this port. Configuration Guide 369 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 393
and set the link type as untagged. Add port 1/0/4 to VLAN 10 and set the link type as tagged. Switch(config)#interface range gigabitEthernet 1/0/1-3 Configuration Guide 370 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 394
.0.0.2 Switch(config-igmp-profile)#exit 10) Bind Profile 2 to Port 1/0/1. Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip igmp filter 2 Switch(config-if)#exit Configuration Guide 371 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 395
)#show ip igmp profile IGMP Profile 1 permit range 225.0.0.1 225.0.0.1 Binding Port(s) Gi1/0/2-3 IGMP Profile 2 deny range 225.0.0.2 225.0.0.2 Binding Port(s) Gi1/0/1 Configuration Examples Configuration Guide 372 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 396
Disabled 0, use global settings. 0, use global settings. None 0, use global settings. 0, use global settings. 0.0.0.0, indicating no replacement. Disabled 60 seconds 10 seconds 192.168.0.1 Configuration Guide 373 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 397
300 seconds 260 seconds 1 second 2 Disabled Disabled Disabled 0, use global settings. 0, use global settings. None 0, use global settings. 0, use global settings. ::, indicating no replacement. Configuration Guide 374 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 398
Configuring Layer 2 Multicast Function IGMP Snooping Querier Parameter Enable or Not Query Interval Max Response Time General Query Source IP Appendix: Default Parameters Default Setting Disabled 60 seconds 10 seconds FE80::02FF:FFFF:FE00:0001 Configuration Guide 375 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 399
Part 12 Configuring Logical Interfaces CHAPTERS 1. Overview 2. Logical Interfaces Configurations 3. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 400
or rear panel of the switch. Logical interfaces are manually configured and do not physically exist, such as loopback interfaces logical interfaces. The supported types of logical interfaces are shown as below: Table 1-1 Supported Types of Logical as a Layer 3 interface. Configuration Guide 377 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 401
parameters for the interface according to your needs. Then click Create. Interface ID Select an interface type and enter the ID of the interface. Configuration Guide 378 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 402
assignment mode of the interface. None: No IP address will be assigned. Static: Assign an IP address manually. DHCP: Assign an IP address through DHCP . BOOTP: Assign an IP address through BOOTP. IP Address Select an interface type and enter the ID of the interface. Configuration Guide 379 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 403
assignment mode of the interface. None: No IP address will be assigned. Static: Assign an IP address manually. DHCP: Assign an IP address through DHCP . BOOTP: Assign an IP address through BOOTP. IP Address following page and configure the IPv6 parameters of the interface. Configuration Guide 380 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 404
of switch. 2) Configure the IPv6 link-local address of the interface manually or automatically in the Link-local Address Config section. Then click Apply link-local address configuration mode. Manual: With this option selected, you can assign a link-local address manually. Auto: With this option - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 405
: Indicates that the corresponding address is configured manually. Auto: Indicates that the corresponding address is created automatically using the RA message or obtained from the DHCPv6 Server. Preferred Lifetime Displays the preferred lifetime of the global address. Configuration Guide 382 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 406
3 interface. You can create a VLAN interface, a loopback interface, a routed port or a port-channel interface according to your needs. Step 1 configure Enter global configuration mode. Configuration Guide 383 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 407
a description of VLAN-2. Switch#configure Switch(config)#interface vlan 2 Switch(config-if)#description VLAN-2 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 384 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 408
from the DHCP Server. bootp: Specify the Layer 3 interface to obtain an IPv4 address from the BOOTP Server. Manually assign an IP Address for the interface: ip address { ip-addr } { mask } [ secondary ] Configure 255.255.255.0 Switch(config-if)#show ip interface brief Configuration Guide 385 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 409
one Layer 3 interface at a time. Configure the IPv6 link-local address for the specified interface: Manually configure the ipv6 link-local address for the specified interface: ipv6 address ipv6-addr link-local ipv6 address for the specified interface: ipv6 address autoconfig Configuration Guide 386 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 410
is enabled, the Layer 3 interface will try to obtain the IPv6 address from DHCPv6 server. Manually configure the interface's global IPv6 address: ipv6 address ipv6-addr ipv6-addr: The Global IPv6 address address(es): ff02::1:ff13:237b Joined group address(es): ff02::1 Configuration Guide 387 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 411
DAD attempts: 1 ND retrans timer is 1000 milliseconds ND reachable time is 30000 milliseconds Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 388 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 412
enabled by default. Config Mode Auto Enable global address auto Enable configuration via RA message Enable global address auto configuration via DHCPv6 Server Disable Configuration Guide 389 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 413
Part 13 Configuring Static Routing CHAPTERS 1. Overview 2. IPv4 Static Routing Configuration 3. IPv6 Static Routing Configuration 4. Viewing Routing Table 5. Example for Static Routing 6. Appendix: Default Parameter - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 414
form of routing that is configured manually by adding non-aging entries into a routing table. The manually-configured routing information guides the router in forwarding data packets even when the topology changes. The switch supports IPv4 static routing and IPv6 static routing. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 415
1 to 255 and the default value is 1. 2) In the IPv4 Static Route Table section, you can view and modify the IPv4 static routing entries. Configuration Guide 392 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 416
default C 192.168.0.0/24 is directly connected, Vlan1 S 192.168.2.0/24 [1/0] via 192.168.0.2, Vlan1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 393 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 417
has the shortest distance will be recorded in the IP routing table. The valid values are from 1 to 255 and the default value is 1. Configuration Guide 394 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 418
::1234 Switch(config)#show ipv6 route static Codes: C - connected, S - static * - candidate default C 3000::/64 is directly connected, Vlan1 S 3200::/64 [1/0] via 3100::1234, Vlan2 Configuration Guide 395 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 419
Configuring Static Routing Switch(config)#end Switch#copy running-config startup-config IPv6 Static Routing Configuration Configuration Guide 396 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 420
Viewing Routing Table You can view routing tables to learn about the network topology. The switch supports IPv4 routing table and IPv6 routing table. 4.1 Using the GUI 4.1.1 Viewing IPv4 Routing Table IP address. Interface Name Displays the gateway interface name. Configuration Guide 397 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 421
the specified type. If not specified, all types of route entries will be displayed. static: View the static routes. connected: View the connected routes. Configuration Guide 398 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 422
type. If not specified, all types of route entries will be displayed. static: View the static IPv6 routes. connected: View the connected IPv6 routes. Configuration Guide 399 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 423
Gi1/0/2 with the mode as static, the IP address as 10.1.10.1, the mask as 255.255.255.0 and the admin status as Enable. Configuration Guide 400 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 424
mode as static, the IP address as 10.1.1.1, the mask as 255.255.255.0 and the admin status as Enable. Create a routed port Gi1/0/2 Configuration Guide 401 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 425
.0/24 is directly connected, Vlan20 S 10.1.2.0/24 [1/0] via 10.1.10.2, Vlan20 Switch B Verify the static routing configuration: Switch_B#show ip route Codes: C - connected, S - static Configuration Guide 402 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 426
TTL=64 Ping statistics for 10.1.2.1: Packets: Sent = 4 , Received = 4 , Lost = 0 (0% loss) Approximate round trip times in milli-seconds: Minimum = 1ms , Maximum = 3ms , Average = 1ms Configuration Guide 403 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 427
Configuring Static Routing Appendix: Default Parameter 6 Appendix: Default Parameter Default setting of static routing is listed in the following table. Table 6-1 Configuring Static Routing Parameter Default Setting IPv6 Routing Disable Configuration Guide 404 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 428
Part 14 Configuring DHCP CHAPTERS 1. DHCP 2. DHCP Client Configuration 3. DHCP Relay Configuration 4. Configuration Examples 5. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 429
, which enhances the utilization of IP address. 1.2 Supported Features The supported DHCP features of the switch include DHCP Relay and server, thus increasing the costs of network construction. DHCP Relay solves this problem. The DHCP Relay device acts as a relay agent and forwards DHCP packets - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 430
Configuring DHCP DHCP The switch supports two kinds of DHCP Relay: DHCP Interface Relay and DHCP VLAN Relay. DHCP Interface Relay DHCP Interface Relay is to clients in different VLANs, you need to create a layer 3 interface for each VLAN to ensure the reachability. Configuration Guide 407 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 431
port or port channel interface is not associated with a particular VLAN. DHCP VLAN relay will not work on routed ports or port channel interfaces. Configuration Guide 408 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 432
for the interface through BOOTP. Admin Status Enable or disable the interface's Layer 3 capabilities. Interface Name 2) Click Create. (Optional) Specify a name for the interface. Configuration Guide 409 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 433
file. The following example shows how to configure port 1/0/5 as an Layer 3 interface, and to configure its IP address mode as DHCP: Switch#configure Configuration Guide 410 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 434
-Address Method Status Protocol Shutdown Gi1/0/5 192.168.0.100/24 DHCP up up no Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 411 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 435
In the Option 82 Configuration section, configure Option 82. DHCP Relay Enable or disable DHCP Relay. Option 82 Support Select whether to enable Option 82 or not. By default, it is disabled. Option 82 is used to enable Option 82 on the relay device closest to the client. Configuration Guide 412 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 436
. Select whether to enable Customization of Option 82 or not. When enabled, configure Option 82 information manually. Enter the customized circuit ID, which contains up to 64 characters. The circuit ID configurations of ID, and then enter the server address of the interface. Configuration Guide 413 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 437
server. 2) Click Create to specify the DHCP server for the interface. DHCP VLAN Relay Only T1600G-18TS supports this feature. Choose the menu Routing > DHCP Relay > DHCP VLAN Relay to load the following page. will not work on routed ports or port channel interfaces. Configuration Guide 414 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 438
1 Step 2 Step 3 Step 4 Step 5 configure Enter global configuration mode. service dhcp relay Enable DHCP Relay. show ip dhcp relay Verify the configuration of DHCP shows how to enable DHCP Relay: Switch#configure Switch(config)#service dhcp relay Switch(config)#show ip dhcp relay DHCP relay is - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 439
the process of Option 82 information as keep: Switch#configure Switch(config)#ip dhcp relay information Switch(config)#ip dhcp relay information policy keep Configuration Guide 416 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 440
for the Layer 3 interface. ip-addr: Enter the IP address of the DHCP server. show ip dhcp relay Verify the configuration of DHCP Relay. Configuration Guide 417 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 441
Helper address ---------- VLAN 66 192.168.1.7 Switch(config-if)#end Switch#copy running-config startup-config DHCP VLAN Relay Only T1600G-18TS supports this feature. Follow these steps to configure DHCP VLAN Relay: Step 1 configure Enter global configuration mode. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 442
Verify the configuration of DHCP Relay. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 419 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 443
helper address is configured on the following vlan: vlan Helper address ---------- VLAN 10 192.168.1.8 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 420 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 444
relay enables DHCP clients from different subnets to share one DHCP server. Make sure your DHCP server supports more than one DHCP address pool. The network topology is as the following figure shows. Computers in .2.0/24 and the other is on 192.168.3.0/24. Then create static Configuration Guide 421 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 445
Relay to load the following page. In the Add DHCP Server Address section, add the DHCP server address to VLAN 10 and VLAN 20. Configuration Guide 422 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 446
CLI Follow these steps to configure DHCP Interface Relay: 1) Enable DHCP Relay. Switch#configure Switch(config)#service dhcp relay 2) Specify the DHCP server for the interface VLAN 10. Switch(config)#interface vlan 10 Verify the Configurations Switch#show ip dhcp relay Configuration Guide 423 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 447
Configuring DHCP Configuration Examples DHCP relay is enabled ... DHCP relay helper address is configured on the following interfaces: Interface Helper address VLAN10 192.168.0.59 VLAN20 192.168.0.59 ... Configuration Guide 424 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 448
Settings of DHCP Relay Parameter Default Setting DHCP Relay DHCP Relay Disable Option 82 Support Disable Existed Option 82 field Keep Customization Disable Circuit ID None Remote ID None Setting of DHCP Client Parameter Default Setting DHCP Client Disable Configuration Guide 425 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 449
Part 15 Configuring ARP CHAPTERS 1. Overview 2. ARP Configurations - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 450
Configuring ARP Overview 1 Overview ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses. Taking an IP address as input, ARP learns the associated MAC address, and stores the IP-MAC address association in an ARP entry for rapid retrieval. Configuration Guide 427 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 451
Automatically learned and will be deleted after aging time. Static Entry: Added manually and will be remained unless modified or deleted manually. Choose the menu Routing > ARP > ARP Table to load the following : A dynamic ARP entry that will be deleted after aging time. Configuration Guide 428 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 452
Configuring ARP ARP Configurations 2.1.2 Adding Static ARP Entries Manually You can add desired static ARP entries by mannually specifying the IP addresses and MAC addresses. Choose the MAC address of the static ARP entry. type: Enter the ARP type. Configure it as 'arpa'. Configuration Guide 429 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 453
list of the Ethernet port that you want to configure. interface vlan vlan-id Enter interafce VLAN mode. vlan-id: Specify a vlan interface ID. Configuration Guide 430 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 454
the active ARP entries. ip: Specify the IP address of your desired ARP entry. mac: Specify the MAC address of your desired ARP entry. Configuration Guide 431 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 455
3 interface. port: Specify the number of the routed port. lagid: Specify the ID of the LAG. id: Specify the VLAN interface ID. ARP Configurations Configuration Guide 432 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 456
Part 16 Configuring QoS CHAPTERS 1. QoS 2. DiffServ Configuration 3. Bandwidth Control Configuration 4. Configuration Example 5. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 457
QoS (Quality of Service) technology, you can classify and prioritize network traffic to provide DiffServ (Differentiated Services) to certain types of traffic. 1.2 Supported Features You can the packets will be automatically discarded to avoid network broadcast storm. Configuration Guide 434 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 458
priority mode appropriate to your network requirements. Three modes are supported on the switch, 802.1P Priority, DSCP Priority and Port DSCP priority determines the priority of packets based on the ToS (Type of Service) field in their IP header. RFC2474 re-defines the ToS field in the Guide 435 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 459
2.1 Using the GUI 2.1.1 Configuring Priority Mode The instructions of the three priority modes are described respectively in For T1600G-18TS, the 802.1P priority feature is disabled by default. You can manually enable it. For other T1600G series switches, the 802.1P priority feature is enabled - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 460
levels. Select a TC queue that you want the Tag-id or CoS-id to be mapped to. The switch supports 8 TC queues, from TC0 for the lowest priority to TC 7 for the highest priority. Configuring DSCP Priority > DSCP Priority to load the following page. Figure 2-2 DSCP Mapping Configuration Guide 437 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 461
CoS-id-TC mapping relations before configuring port priority. For T1600G-18TS, the packets are directly mapped to TC queues in port priority mode. Configuration Guide 438 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 462
to control the forwarding sequence of different TC queues when congestion occurs. Choose the menu QoS > DiffServ > Schedule Mode to load the following page. Configuration Guide 439 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 463
-Mode is selected by default. 2) (Optional) Configure the weight value of the each TC queue if the schedule mode is WRR of SP+WRR. Configuration Guide 440 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 464
section. 2.2 Using CLI 2.2.1 Configuring Priority Mode The instructions of the three priority modes are described respectively in priority feature is disabled on T1600G-18TS by default. You can manually enable it with this command. On the other T1600G series switches 7. Configuration Guide 441 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 465
Step 1 configure Enter global configuration mode. Step 2 qos dscp Enable DSCP Priority. Step 3 show qos cos-map Check the CoS-id-TC mapping relations. Configuration Guide 442 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 466
Switch(config)#show qos cos-map Tag |0 |1 |2 |3 |4 |5 |6 |7 TC |TC1 |TC0 |TC0 |TC3 |TC4 |TC5 |TC6 |TC7 Switch(config)#qos queue dscp-map 10-14 0 Configuration Guide 443 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 467
to TC queues according to the CoS-id-TC mapping relations. cos-id: Configure the CoS-id value. The valid values are from 0 to 7. Configuration Guide 444 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 468
qos interface gigabitEthernet 1/0/1-3 Port CoS Value LAG ------------ Gi1/0/1 CoS 0 N/A Gi1/0/2 CoS 0 N/A Gi1/0/3 CoS 0 N/A Switch(config-if-range)#end Switch#copy running-config startup-config Configuration Guide 445 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 469
, while the value of TC7 is 0 and non-configurable. show qos queue mode Verify the schedule mode configurations. end Return to privileged EXEC mode. Configuration Guide 446 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 470
| Weight: TC0=4 TC1=7 TC2=10 TC3=13 TC4=16 TC6=22 TC7=25 TC5=19 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 447 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 471
send packets. Ingress Rate (11000000Kbps) Configure the upper rate limit for receiving packets on the port. The valid values are from 1 to 1000000 Kbps. Configuration Guide 448 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 472
packets per second. With PPS disabled, the upper rate limit of the broadcast, multicast and UL-frame cannot be specified in packets per second. Configuration Guide 449 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 473
receiving UL-Frames in the ULFrame field. The packet traffic exceeding the rate will be discarded. The switch supports the following three rate modes: kbps: Specify the upper rate limit in kilo-bits per second, which aggregation group which the port is in. 2) Click Apply. Configuration Guide 450 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 474
Configuring QoS Bandwidth Control Configuration Note: • T1600G-18TS does not support the PPS related features. • For ports in the same LAG, rate limit / storm control egressrate as 1024 Kbps for port 1/0/5: Switch#configure Switch(config)#interface gigabitEthernet 1/0/5 Configuration Guide 451 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 475
Ethernet port that you want to configure. lag-id |lag-list: The ID or the list of the LAG that you want to configure. Configuration Guide 452 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 476
configuration for all ports or LAGs. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 453 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 477
Configuring QoS Bandwidth Control Configuration Note: T1600G-18TS does not support the PPS related features. The following example shows how to configure the upper rate limit kbps 10240 kbps 0 kbps 0 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 454 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 478
priority. 2) Select SP schedule mode. Demonstrated with T1600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 455 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 479
, and set the priority for port 1/0/1 to CoS 0 (mapping to TC1) and priority for port 1/0/2 to CoS 1 (mapping to TC0). Figure 4-3 Configure Port Priority Configuration Guide 456 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 480
to TC0). Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#qos 0 Switch(config-if)#exit Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#qos 1 Configuration Guide 457 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 481
Value LAG --------- ------------ Gi1/0/1 0 N/A Gi1/0/2 1 N/A ... Configuration Example Verify the schedule mode. Switch(config)#show qos queue mode Scheduler Mode: SP | Weight: Unusable in sp mode Configuration Guide 458 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 482
. Packets from all ports are mapped to the same TC queue. For T1600G-18TS, it is disabled. You can manually enable it. See Table 5-2 for Tag-id/CoS-id-TC mapping relations. For other switches, it is enabled. 40~47 48~55 CoS-id CoS 0 CoS 1 CoS 2 CoS 3 CoS 4 CoS 5 CoS 6 Configuration Guide 459 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 483
TC1 TC2 TC3 TC4 TC5 TC6 TC7 Bandwidth Control Table 5-5 Bandwidth Control Parameter Rate Limit Storm Control Default Setting Disabled Disabled Appendix: Default Parameters Configuration Guide 460 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 484
Part 17 Configuring Voice VLAN CHAPTERS 1. Overview 2. Voice VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 485
A voice VLAN can operate in two modes: manual mode and automatic mode. Manual mode: This mode is applicable when the switch port forwards voice traffic only. You manually add ports connecting IP phones to the voice VLAN Traffic on the Same Port Internet PC IP Phone Switch Configuration Guide 462 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 486
address of a packet complies with the OUI addresses in the switch, the switch identifies the packet as a voice packet and prioritizes it in transmission. Configuration Guide 463 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 487
Manual Suggested Link Type and PVID PVID cannot be the voice VLAN ID. Not supported. VLAN ID. Because the voice VLAN in automatic mode supports only tagged voice traffic, you need to make sure can also configure it to instruct the voice device to send tagged voice traffic. For details - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 488
an OUI address description for identification. The length is no more than 16 characters. 2) Click Create to add an OUI address to the table. Configuration Guide 465 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 489
IEEE 802.1p priority, and you can further configure its schedule mode if needed. For details about schedule mode, please refer to Configuring QoS. Configuration Guide 466 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 490
the Auto mode for the selected ports, make sure traffic from your voice device is tagged. Manual: You manually add the ports connecting voice devices to the voice VLAN. Member State Displays the current state of voice VLAN. 2) Set the security mode for selected ports. Configuration Guide 467 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 491
IEEE 802.1p priority, and you can further configure its schedule mode if needed. For details about schedule mode, please refer to Configuring QoS. Configuration Guide 468 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 492
the security mode is disabled. Step 10 switchport general allowed vlan vid { tagged | untagged } (For ports in manual voice VLAN mode) Add the specified ports to the voice VLAN. vid: Enter the voice VLAN ID to add switchport Verify the voice VLAN configuration of the ports. Configuration Guide 469 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 493
The following example shows how to set port 1/0/1 in manual voice VLAN mode. Configure the switch to forward voice traffic if)#switchport voice vlan mode manual Switch(config-if)#switchport voice Port Auto-mode Security State LAG Gi1/0/1 Manual Enabled Active N/A Gi1/0/2 Auto Disabled Inactive - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 494
ports. To separate voice traffic from data traffic, configure LLDP-MED to instruct IP Phones to send traffic with the voice VLAN tag. Voice traffic the voice VLAN tag. Set ports that are connected to IP phones in manual voice VLAN mode. Meanwhile, configure the voice VLAN to work in security Guide 471 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 495
page. Enable voice VLAN, enter 10 in the VLAN ID field and set aging time as 1440 minutes and priority as 6. Then click Apply. Configuration Guide 472 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 496
the menu QoS > Voice VLAN > Port Config to load the following page. Select port 1/0/1, choose auto mode and enable security mode. Select port 1/0/2 and choose manual mode. Click Apply. Figure 3-4 Configuring Voice VLAN Mode on Port 1/0/1 Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 497
Configuring Voice VLAN Figure 3-5 Configuring Voice VLAN Mode on Port 1/0/2 Configuration Example 4) Choose the menu VLAN > 802.1Q VLAN > VLAN Config and edit VLAN 10 to load the following page. Add port 1/0/2 to the voice VLAN. Configuration Guide 474 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 498
Globally 6) Choose the menu LLDP > LLDP-MED> Global Config to load the following page. Set fast start count as 4. Figure 3-8 Configuring LLDP-MED Globally Configuration Guide 475 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 499
the TLV information which will be carried in LLDP-MED frames and sent out by port 1/0/1. Select all TLVs, and configure location identification parameters. Configuration Guide 476 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 500
QoS > Voice VLAN > Global Config to load the following page. Enable voice VLAN, enter 10 in the VLAN ID field and set priority as 6. Configuration Guide 477 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 501
Voice VLAN Globally Configuration Example 3) Choose the menu QoS > Voice VLAN > Port Config to load the following page. Select ports 1/0/1-3, choose manual mode and enable security mode. Click Apply. Figure 3-13 Configuring Voice VLAN Mode on Ports 4) Choose the menu VLAN > 802.1Q VLAN - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 502
> VLAN Config and click Create to load the following page. Create VLAN 10 and add ports 1/0/1-3 as tagged ports to the VLAN. Click Apply. Configuration Guide 479 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 503
(config)#voice vlan priority 6 Switch_A(config)#voice vlan 10 3) Configure port 1/0/1 to automatic voice VLAN mode and enable security mode. Switch_A(config)#interface gigabitEthernet 1/0/1 Configuration Guide 480 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 504
a tagged port. Switch_A(config)#interface gigabitEthernet 1/0/2 Switch_A(config-if)#switchport voice vlan mode manual Switch_A(config-if)#switchport general allowed vlan 10 tagged Switch_A(config-if)#exit 5) Enable LLDP )#voice vlan priority 6 Switch_B(config)#voice vlan 10 Configuration Guide 481 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 505
Switch_B(config)#interface range gigabitEthernet 1/0/1-3 Switch_B(config-if-range)#switchport voice vlan mode manual Switch_B(config-if-range)#switchport voice vlan security Switch_B(config-if-range)#exit 4) Add vlan Voice VLAN status: Enabled VLAN ID: 10 Aging Time: 1440 Configuration Guide 482 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 506
mode Security State LAG Gi1/0/1 Auto Enabled Inactive N/A Gi1/0/2 Manual Disabled Active N/A Gi1/0/3 Auto Disabled Inactive N/A ...... Auto-mode Security State LAG Gi1/0/1 Manual Enabled Active N/A Gi1/0/2 Manual Enabled Active N/A Gi1/0/3 Manual Enabled Active N/A ...... Switch C - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 507
Configuring Voice VLAN VLAN ----10 Name Status Ports VoiceVlan active Gi1/0/1, Gi1/0/2, Gi1/0/ Configuration Example Configuration Guide 484 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 508
Configuring Voice VLAN Configuration Guide 485 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 509
-00-00-00 ff-ff-ff-00-00-00 Description Siemens Phone Cisco Phone Avaya Phone Philips Phone Pingtel Phone PolyCom Phone 3Com Phone Configuration Guide 486 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 510
Part 18 Configuring PoE CHAPTERS 1. PoE 2. PoE Power Management Configurations 3. Time-Range Function Configurations 4. Example for PoE Configurations 5. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 511
standard PDs and non-standard PDs. Only standard PDs can be powered via TP-Link PoE switches. 1.2 Supported Features PoE Power Management PoE Power Management is used for users to manage the power the PoE switch supplied time range to save energy according to your actual use. Configuration Guide 488 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 512
Configure the PoE parameters manually Configure the PoE one via configuring the PoE parameters manually. You can also set a profile 2.1.1 Configuring the PoE Parameters Manually Choose the menu PoE > PoE . Figure 2-1 Configuring PoE Parameters Manually Follow these steps to configure the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 513
port can supply is 15.4W. Class4: The maximum power that the port can supply is 30W. Manual: Enter a value manually. Time Range Select a time range, then the port will supply power only during the time range. For Power Status Displays the port's real-time power status. Configuration Guide 490 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 514
is 7W. Class3: The maximum power that the port can supply is 15.4W. Class4: The maximum power that the port can supply is 30W. Manual: Enter a value manually. Configuration Guide 491 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 515
Profile section for the desired port. If one profile is selected, you will not be able to modify PoE status, PoE priority or power limit manually. Power(w) Displays the port's real-time power supply. Current(mA) Displays the port's real-time current. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 516
time power status. 2.2 Using the CLI 2.2.1 Configuring the PoE Parameters Manually Follow these steps to configure the basic PoE parameters: Step 1 Step Class3 represents 15.4W and Class4 represents 30W, or you can enter a value manually. The value ranges from 1 to 300. It is in the unit of 0.1 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 517
)#show power inline configuration interface gigabitEthernet 1/0/5 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/5 Enable Middle Class3 No Limit None Configuration Guide 494 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 518
7W, Class3 represents 15.4W and Class4 represents 30W or you can enter a value manually. The value ranges from 1 to 300. It is in the unit of 0.1 watt able to modify PoE status, PoE priority or power limit manually. name: Specify the name of the PoE profile. If the name contains spaces, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 519
-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/6 Enable Middle Class2 No Limit profile1 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 496 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 520
a name for the time-range and select to include or exclude the holiday in the time-range. Name Specify a name for the time-range. Configuration Guide 497 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 521
Time Specify the end time of the periodic mode. Day of the Week Select day of the week for the periodic mode. 3) Click Apply. Configuration Guide 498 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 522
mode of the time-range function. Displays the state of the time-range function. View or edit the configuration of the time-range function. Configuration Guide 499 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 523
week in periodic mode, ranging from 1 to 7. It is in the format of 1,3-4. By default, it is 1-7. exit Exit Power Time-range Configuration Mode. Configuration Guide 500 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 524
of absolute time: 1 1 - 09/08/2016-00:00 to 09/10/2016-24:00 number of periodic time: 1 1 - 01:00 to 23:00 on 5 Configuration Guide 501 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 525
Switch(config)#show power holiday Index Holiday Name Start-End 1 holiday1 08.16-08.20 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 502 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 526
/31/2099-24:00 by default) number of periodic time: 1 1 - 08:30 to 18:00 on 1,2,3,4,5 Switch#end Switch#copy running-config startup-config Configuration Guide 503 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 527
for the security of the company and cannot be power off all the time. AP1 and AP2 provide Internet service and only work in the daytime. Figure 4-1 Network Topology Switch A Gi1/0/1 Gi1/0/2 Gi1/0/4 Gi1/0/3 Camera1 a time range that is from 08:30 to 18:00. Click Apply. Configuration Guide 504 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 528
Config > PoE Config to load the following page. Select port 1/0/3 and enable the PoE function. Set the Time Range as office time. Click Apply. Configuration Guide 505 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 529
1/0/3 Switch_A(config-if)#power inline supply enable Switch_A(config-if)#power inline time-range "office time" Switch_A(config-if)#exit Switch_A(config-if)#end Configuration Guide 506 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 530
)#show power inline configuration interface gigabitEthernet 1/0/3 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/3 Enable Low Class4 office time None Configuration Guide 507 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 531
/01/2000-24:00 Table 5-4 Default Settings of Holiday Config Parameter Holiday Name Start Date End Date Default Setting None 01/01 01/01 Configuration Guide 508 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 532
Part 19 Configuring ACL CHAPTERS 1. ACL 2. ACL Configurations 3. Configuration Example for ACL 4. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 533
the ACL rules. In this way, ACL ensures security and high service quality of networks. ACL helps to: Prevent various network attacks access to a network or to specific resources in your network. 1.2 Supported Features ACL Binding An ACL takes effect after it is directly bound Configuration Guide 510 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 534
destination IP addresses, IP protocols and so on for matching operations. IPv6 ACL: IPv6 ACL uses source and destination IPv6 address for matching operations. Configuration Guide 511 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 535
the MAC ACL rule: 1) Select an MAC ACL from the drop-down list, enter a Rule ID, and specify the operation for the matched packets. Configuration Guide 512 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 536
ID Specify the rule ID, which ranges from 0 to 1999. It should not be the same as any existing Standard-IP ACL Rule IDs. Configuration Guide 513 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 537
. Operation Select an operation to be performed when a packet matches the rule. Permit: To forward the matched packets. Deny: To discard the matched packets. Configuration Guide 514 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 538
. Rule ID Specify the rule ID, which ranges from 0 to 999. It should not be the same as any existing IPv6 ACL Rule IDs. Configuration Guide 515 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 539
view all the ACLs and their rules. You can also delete an ACL or an ACL rule, or change the matching order if needed. Configuration Guide 516 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 540
> Action Create to load the following page. Figure 2-8 Configuring the Action of the Policy Follow these steps to configure the action of the policy: Configuration Guide 517 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 541
bind the ACL to a Port: Select the ACL and the port, and click Apply. ACL ID Select an ACL from the drop-down list. Configuration Guide 518 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 542
the Policy to a Port Choose the menu ACL > Policy Binding > Port Binding to load the following page. Figure 2-11 Binding the Policy to a Port Configuration Guide 519 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 543
the ACL Binding You can view both port binding and VLAN binding entries in the table. You can also delete existing entries if needed. Configuration Guide 520 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 544
delete existing entries if needed. Choose the menu ACL > Policy Binding > Binding Table to load the following page. Figure 2-14 Verifying the Policy Binding Configuration Guide 521 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 545
number of the ACL. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 522 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 546
is entered. Step 4 show access-list [access-list-num] (Optional) View the current ACL configuration. access-list-num: The ID number of the ACL. Configuration Guide 523 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 547
-list create access-list-num Create an Extend-IP ACL access-list-num:Enter an ACL ID. The ID ranges from 1500 to 2499. Configuration Guide 524 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 548
1700 Rule 7 deny sip 192.168.2.100 smask 255.255.255.255 protocol 6 d-port 23 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 525 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 549
-list-num] (Optional) View the current ACL configuration. access-list-num: The ID number of the ACL. Step 5 end Return to privileged EXEC mode. Configuration Guide 526 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 550
name desired to show.. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 527 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 551
to which the policy will bind. acl-id: The ID number of the ACL. show access-list bind (Optional) View the configuration of binding. Configuration Guide 528 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 552
Policy to a port or a VLAN, then the received packets will be matched and operated based on the Policy. Step 1 configure Enter global configuration mode Configuration Guide 529 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 553
Direction Type 1 1 Gi1/0/2 Ingress Port 2 2 2 Ingress Vlan Index ACL ID Interface/VID Direction Type Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 530 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 554
Configuration Example for ACL 3.1 Network Requirements A company's server group can provide different types of services. It is required that: The Marketing department can only access the server group. This rule allows the Marketing department to access the server group. Configuration Guide 531 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 555
3) Configure a deny rule to match packets with source IP address 10.10.70.0. This rule blocks other network services. The switch matches the packets with the rules in order, starting with Rule 1. If a packet matches a 10.10.70.0/24 and destination IP address 10.10.80.0/24. Configuration Guide 532 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 556
to load the the following page. Configure rule 2 and rule 3 to permit packets with source IP 10.10.70.0 and destination port TCP 80 (http service port) and UDP 443 (HTTPS service port). Figure 3-4 Configuring Rule 2 Figure 3-5 Configuring Rule 3 Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 557
. Configure Rule 4 and Rule 5 to permit packets with source IP 10.10.70.0 and with destination port TCP 53 or UDP 53 (DNS service port). Figure 3-6 Configuring Rule 4 Figure 3-7 Configuring Rule 5 5) Choose the menu ACL > Policy Config > Policy Create to load the following page. Configure Rule 6 to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 558
Policy 8) Choose the menu ACL > Policy Binding > Port Binding to load the the following page. Bind Policy Market to port 1/0/1 to make it effective. Configuration Guide 535 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 559
Rule 3 to permit packets with source IP 10.10.70.0, and destination port TCP 80 (http service port) or TCP 443 (HTTPS service port). Switch(config)#access-list extended 1600 rule 2 permit sip 10.10.70.0 smask 255.255. Configure Rule 6 to deny packets with source IP 10.10.70.0. Configuration Guide 536 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 560
.0 Switch(config)#show access-list bind Index Policy Name Interface/VID Direction Type ----- 1 Market Gi1/0/1 Ingress Port Index Acl Id Interface/VID Direction Type Configuration Guide 537 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 561
-IP ACL: Parameter Operation IP Protocol For IPv6 ACL: Parameter Operation Default Setting Permit Default Setting Permit Default Setting Permit All Default Setting Permit Configuration Guide 538 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 562
Part 20 Configuring Network Security CHAPTERS 1 . Network Security 2 . IP-MAC Binding Configurations 3 . DHCP Snooping Configuration 4 . ARP Inspection Configurations 5 . DoS Defend Configuration 6 . 802.1X Configuration 7 . AAA Configuration 8 . Configuration Examples 9 . Appendix: Default - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 563
binding entries can be manually configured, or learned by ARP scanning or DHCP snooping. DHCP Snooping DHCP Snooping supports the basic DHCP security servers on the network, security problems and network interference will happen. DHCP Snooping resolves this problem. As the following figure Guide 540 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 564
DHCP server. Administrators can check the location of the DHCP client via option 82. The DHCP server supporting option 82 can also set the distribution policy of IP addresses and the other parameters, providing a ones so as to prevent the network from ARP cheating attacks. Configuration Guide 541 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 565
DoS attacks occupy the network bandwidth maliciously by sending numerous service requests to the hosts. It results in an abnormal service or breakdown of the network. With DoS Defend feature 1-2 802.1X Authentication Model Clients Switch Authenticator Authentication Server Configuration Guide 542 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 566
802.1X authentication to access the LAN. Authenticator An authenticator is usually a network device that supports 802.1X protocol. As the above figure shows, the switch is an authenticator. The authenticator acts trying to access the switch or get administrative privileges. Configuration Guide 543 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 567
Configuring Network Security Figure 1-3 Network Topology of AAA Network Security Users Switches RADIUS Server Configuration Guide 544 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 568
IP-MAC binding in two ways: Manual Binding Dynamical Binding (including ARP . 2.1 Using the GUI 2.1.1 Binding Entries Manually You can manually bind the IP address, MAC address, VLAN Binding > Manual Binding to load the following page. Figure 2-1 Manual Binding In the Manual Binding Option - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 569
switch can get the IP address, MAC address, VLAN ID and the connected port number of the host. You can bind these entries conveniently. Configuration Guide 546 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 570
be applied to any feature. ARP Detection: This entry will be applied to the ARP Detection feature. Source Displays the source of the entry. Configuration Guide 547 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 571
different entry types, from high to low, is Manually, ARP Scanning and DHCP Snooping. DHCP Snooping the connected port number of the host. For instructions on how to configure DHCP Snooping, refer to DHCP entries from all sources. Manual: Displays the manually bound entries. Scanning: Displays - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 572
highest priority will be valid. The priority of different entry types, from high to low, is Manually, ARP Scanning and DHCP Snooping. 2.2 Using the CLI Binding entries via ARP scanning is not supported by the CLI; Binding entries via DHCP Snooping is introduced in DHCP Snooping Configurations. The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 573
interface gigabitEthernet port { none | arp-detection } [ forced-source {arp-scanning | dhcp-snooping} ] Manually bind the host name, IP address, MAC address, VLAN ID and port number of the host, and Gi1/0/5 ARP-D Switch(config)#end Switch#copy running-config startup-config Configuration Guide 550 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 574
entries learned different sources, only the entry with the highest priority will be valid. The priority of different entry types, from high to low, is Manually, ARP Scanning and DHCP Snooping. Configuration Guide 551 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 575
page. Figure 3-1 Global Config Follow these steps to enable DHCP Snooping: 1) Globally enable DHCP Snooping. 2) Enable DHCP Snooping on a VLAN or range of VLANs. Configuration Guide 552 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 576
to set the port that is connected to the DHCP server as a trusted port. Select Disable to set the other ports as untrusted ports. Configuration Guide 553 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 577
can check the location of the DHCP client via option 82. The DHCP server supporting Option 82 can also set the distribution policy of IP addresses and other parameters, providing or more ports and configure the parameters. Option 82 Support Enable the Option 82 feature. Configuration Guide 554 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 578
with each other. Enter the customized circuit ID, which contains up to 64 characters. Select Enable to manually define the remote ID field, which is a sub-option of Option 82. The remote ID configurations of show ip dhcp snooping Verify global configuration of DHCP Snooping. Configuration Guide 555 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 579
packet if the two fields are different. This prevents the IP address resource on the DHCP server from being exhausted by forged MAC addresses. Configuration Guide 556 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 580
1/0/1 Interface Trusted MAC-Verify Limit-Rate Dec-rate LAG Gi1/0/1 Enable Enable 10 20 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 557 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 581
Administrators can check the location of the DHCP client via option 82. The DHCP server supporting Option 82 can also set the distribution policy of IP addresses and other parameters, providing more -channel port-channel-id } Verify the Option 82 configuration of the port. Configuration Guide 558 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 582
82 Status Operation Strategy Circuit ID Remote ID LAG Gi1/0/7 Enable Replace VLAN20 Host1 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 559 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 583
function will be inactive. The specific ports, such as up-link ports and routing ports are suggested to be set as trusted. 3) Click Apply. Configuration Guide 560 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 584
of receiving the ARP packets has exceeded the specified value, and the port will drop the received ARP packets in the next 300 seconds. Configuration Guide 561 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 585
Auto Refresh section, you can enable the auto refresh feature and specify the refresh interval, and thus the web page will be automatically refreshed. Configuration Guide 562 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 586
the settings in the configuration file. The following example shows how to globally enable ARP Detection and configure port 1/0/1 as a trusted port. Switch#configure Configuration Guide 563 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 587
pps (packets/second), and the default value is 15. Step 5 show ip arp inspection interface (Optional) View the configurations and status of the ports. Configuration Guide 564 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 588
,290s N/A Gi1/0/2 Enabled 15 N/A Normal N/A ...... Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip arp recover Switch(config-if)#show ip arp inspection interface gigabitEthernet 1/0/1 Configuration Guide 565 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 589
View the ARP statistics on each port, including whether the port is trusted port and the number of received ARP packets on the port. Configuration Guide 566 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 590
all the control fields set to 0. During the TCP connection and data transmission, the packets with all control fields set to 0 are considered illegal. Configuration Guide 567 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 591
CLI Follow these steps to configure DoS Defend: Step 1 configure Enter global configuration mode. Step 2 ip dos-prevent Globally enable the DoS defend feature. Configuration Guide 568 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 592
of overflowing the input buffers of the destination host and causing the host to crash. show ip dos-prevent Verify the Dos Defend configuration. Configuration Guide 569 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 593
(config)#show ip dos-prevent Type Status --------- ------ Land Attack Enabled Scan SYNFIN Disabled Xmascan Disabled ...... Switch(config)#end Switch#copy running-config startup-config Configuration Guide 570 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 594
Config to load the following page. Figure 6-1 Enable AAA Function In the Global Config section, enable AAA function on the switch and click Apply. Configuration Guide 571 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 595
authentication and accounting. If multiple radius servers are available, you are suggested to add them to different server groups respectively for authentication and accounting. Configuration Guide 572 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 596
to be added to the group from the Server IP drop-down list . Then click Add to add this server to the server group. Configuration Guide 573 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 597
. 2) In the Accounting Dot1x Method List section, select an existing RADIUS server group for accounting from the Pri1 drop-down list and click Apply. Configuration Guide 574 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 598
-Link 802.1X Client and the switch. Please disable Handshake feature if you are using other client softwares instead of TPLink 802.1X Client. Configuration Guide 575 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 599
default time is 3 seconds. If the switch does not receive any reply from the client within the specified time, it will resend the request. Configuration Guide 576 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 600
clients can access the LAN without authentication. Authorized Displays whether the port is authorized or not. LAG Displays the LAG the port belongs to. Configuration Guide 577 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 601
. Step 4 aaa group radius group-name Create a radius server group. radius: Specify the group type as radius. group-name: Specify a name for the group. Configuration Guide 578 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 602
address of the RADIUS server is 192.168.0.100; the shared key is 123456; the authentication port is 1812; the accounting port is 1813. Configuration Guide 579 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 603
Switch#copy running-config startup-config 6.2.2 Configuring 802.1X Globally Follow these steps to configure 802.1X globally: Step 1 configure Enter global configuration mode. Configuration Guide 580 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 604
client to send the authentication packet. It ranges from 1 to 9 and the default is 3. show dot1x global (Optional) Verify global configurations of 802.1X. Configuration Guide 581 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 605
Switch#copy running-config startup-config 6.2.3 Configuring 802.1X on Ports Follow these steps to configure the port: Step 1 configure Enter global configuration mode. Configuration Guide 582 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 606
how to enable 802.1X authentication on port 1/0/2, configure the control type as port-based, and configure the control mode as auto: Switch#configure Configuration Guide 583 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 607
1/0/2 Port State GuestVLAN PortControl PortMethod Authorized LAG ---- ----- --------- -------- -------- Gi1/0/2 enabled disabled auto port-based unauthorized N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 584 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 608
are provided: Login method list for users of all types to access the switch, and Enable method list for guests to get administrative privileges. Configuration Guide 585 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 609
Configuring Network Security AAA Configuration AAA Application List The switch supports the following access applications: Telnet, SSH and HTTP. You can select the configured AAA > RADIUS Conifg to load the following page. Figure 7-2 RADIUS Server Configuration Configuration Guide 586 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 610
TACACS+ secure protocol. Timeout Specify the time interval that the switch waits for the server to reply before resending. The default setting is 5 seconds. Configuration Guide 587 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 611
type for the group. The following options are provided: RADIUS and TACACS+. 2) Select the newly added group, and click edit in the Operation column. Configuration Guide 588 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 612
Add Server to Group 7.1.4 Configuring the Method List A method list describes the authentication methods and their sequence to authenticate the users. The switch supports Login Method List for users of all types to gain access to the switch, and Enable Method List for guests to get administrative - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 613
/server groups for authentication. Other user-defined server groups: Use the user-defined server groups for authentication. 2) Click Add to add the new method. Configuration Guide 590 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 614
> AAA > Global Config to load the following page. Figure 7-9 Configure Enable Password Specify the Enable password in the Enable Admin section, and click Apply. Configuration Guide 591 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 615
EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to globally enable AAA: Configuration Guide 592 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 616
can copy from the configuration file of another switch. The key or encrypted-key you configure here will be displayed in the encrypted form. Configuration Guide 593 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 617
#copy running-config startup-config Adding TACACS+ Server Follow these steps to add TACACS+ server on the switch: Step 1 configure Enter global configuration mode. Configuration Guide 594 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 618
(config)#show tacacs-server Server Ip Port Timeout Shared key 192.168.0.20 49 8 123456 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 595 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 619
)#server 192.168.0.10 Switch(aaa-group)#server 192.168.0.20 Switch(aaa-group)#show aaa group RADIUS1 192.168.0.10 192.168.0.20 Configuration Guide 596 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 620
List A method list describes the authentication methods and their sequence to authenticate the users. The switch supports Login Method List for users of all types to gain access to the switch, and Enable login Login1 radius local Switch(config)#show aaa authentication login Configuration Guide 597 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 621
. Step 3 login authentication { method-list } Apply the Login method list for the application Telnet. method-list: Specify the name of the Login method list. Configuration Guide 598 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 622
apply the Login and Enable method lists for the application SSH: Step 1 configure Enter global configuration mode. Step 2 line ssh Enter line configuration mode. Configuration Guide 599 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 623
-line)#end Switch#copy running-config startup-config HTTP Follow these steps to apply the Login and Enable method lists for the application HTTP: Configuration Guide 600 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 624
Account and Enable Password The login account and Enable password can be configured locally on the switch or centrally on the RADIUS/TACACS+ server(s). Configuration Guide 601 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 625
name should be set as $enable$, and the Enable password is customizable. All the users trying to get administrative privileges share this Enable password. Configuration Guide 602 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 626
share this Enable password. Tips: The logged-in guests can get administrative privileges by using the command enable-admin and providing the Enable password. Configuration Guide 603 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 627
port and other ports as untrusted ports. So that the illegal DHCP server on any other port cannot assign IP addresses for the clients. Configuration Guide 604 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 628
binding entries for User 1 and User 2 will be automatically learned via DHCP Snooping, and you need to manually bind the entry for User 3. 3) Enable ARP Detection on Switch A to prevent ARP cheating attacks. port and ports 1/0/1-port1/0/3 as untrusted ports, and click Apply. Configuration Guide 605 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 629
3) Choose the menu Network Security > IP-MAC Binding > Manual Binding to load the following page. Enter the host name, IP as the protect type, and select port 1/0/3 on the panel. Click Bind. Figure 8-4 Manual Binding 4) Choose the menu Network Security > IP-MAC Binding > Binding Table to load - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 630
8-6 ARP Detect 6) Choose the menu Network Security > ARP Inspection > ARP Defend to load the following page. Enable ARP Defend for ports 1/0/1-3 and click Apply. Configuration Guide 607 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 631
(config)#interface gigabitEthernet 1/0/4 Switch_A(config-if)#ip dhcp snooping trust Switch_A(config-if)#exit 3) Manually bind the entry for User 3. Switch_A(config)#ip source binding User3 192.168.0.33 88:a9 gigabitEthernet 1/0/4 Switch_A(config-if)#ip arp inspection trust Configuration Guide 608 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 632
:d9:33:56:78:a3 1 1 3 User3 192.168.0.33 88:a9:d4:54:fd:c3 1 Port ACL Col. ---- --- -- Gi1/0/1 ARP-D Gi1/0/2 ARP-D Gi1/0/3 ARP-D Configuration Guide 609 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 633
, configure the control mode as auto, and set the control type as MAC based. Enable 802.1X authentication on the ports connected to clients. Configuration Guide 610 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 634
. Figure 8-9 Enable AAA Function 2) Choose the menu Network Security > AAA > RADIUS Config to load the following page. Configure the parameters of the RADIUS server. Configuration Guide 611 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 635
the Authentication Dot1x Method List section, select radius1 as the radius server group for authentication, and click Apply. Figure 8-13 Configure Authentication RADIUS Server Configuration Guide 612 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 636
.1X authentication, set the Control Mode as auto and set the Control Type as MAC Based; For port 1/0/2 and port 1/0/3, disable 802.1X authentication. Configuration Guide 613 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 637
feature and configure relevant parameters. Switch_A#configure Switch_A(config)#dot1x system-auth-control Switch_A(config)#dot1x auth-method eap Switch_A(config)#dot1x quiet-period Configuration Guide 614 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 638
ID: N/A 802.1X Accounting State: Disabled Quiet-period State: Enabled Quiet-period Timer: 10 sec. Max Retry-times For RADIUS Packet: 3 Supplicant Timeout: 3 sec. Configuration Guide 615 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 639
are deployed in the network to provide a safer authenticate method for the administrators trying to log in or get administrative privileges. If RADIUS Server 1 Configuration Guide 616 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 640
Network Security > AAA > Global Config to load the following page. In the Global Config section, enable AAA and click Apply. Figure 8-17 Global Config Configuration Guide 617 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 641
Add New Server Group section, specify the group name as RADIUS1 and the server type as RADIUS. Click Add to create the server group. Configuration Guide 618 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 642
Login, and select the Pri1 as RADIUS1. Click Add to set the method list for the Login authentication. Figure 8-22 Configure Login Method List Configuration Guide 619 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 643
RADIUS1 and add the two RADIUS servers to the server group. Switch(config)#aaa group radius RADIUS1 Switch(aaa-group)#server 192.168.0.10 Configuration Guide 620 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 644
group RADIUS1: Switch#show aaa group RADIUS1 192.168.0.10 192.168.0.20 Verify the configuration of the method lists: Switch#show aaa authentication Configuration Guide 621 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 645
: Switch#show aaa global AAA global status: Enable Module Login List Enable List Telnet Method-Login Method-Enable Ssh default default Http default default Configuration Guide 622 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 646
tables. Table 9-1 IP-MAC Binding Parameter Default Setting Protect Type For Manual Binding: None For ARP Scanning: None For DHCP Snooping: All Disable Decline Protect Disable Option 82 Config Option 82 Support Disable Operation Strategy Keep Circuit ID Customization Disable Circuit - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 647
Guest VLAN Accounting Quiet Feature Quiet Feature Quiet Period Retry Times Default Setting Disable EAP Enable Disable Disable Disable 10 seconds 3 Appendix: Default Parameters Configuration Guide 624 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 648
Port Retransmit Timeout TACACS+ Config Server IP Timeout Shared Key Defualt Setting Disable None None 1812 1813 2 5 seconds None 5 seconds None Appendix: Default Parameters Configuration Guide 625 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 649
telnet Login List: default Enable List: default Login List: default ssh Enable List: default Login List: default http Enable List: default Appendix: Default Parameters Configuration Guide 626 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 650
Part 21 Configuring LLDP CHAPTERS 1. LLDP 2. LLDP Configurations 3. LLDP-MED Configurations 4. Viewing LLDP Settings 5. Viewing LLDP-MED Settings 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 651
know about the network topology, examine the network connectivity and troubleshoot the network faults. LLDP-MED (Media Endpoint Discovery) is for auto-configuration to minimize the configuration effort. 1.2 Supported Features The switch supports LLDP and LLDP-MED. LLDP allows the local Guide 628 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 652
feature for the interface. 2.1 Using the GUI 2.1.1 Global Config Choose the LLDP > Basic Config > Global Config to load the following page. Figure 2-1 Global Config Configuration Guide 629 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 653
quickly discovered by its neighbors. After the specified number of LLDP packets are sent, the Transmit Interval will be restored to the specified value. Configuration Guide 630 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 654
to inform the NMS when the local information changes. 2) Select the TLVs (Type/Length/Value) included in the LLDP packets according to your needs. Configuration Guide 631 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 655
IEEE 802 LAN station. SC: Used to advertise the supported functions and whether or not these functions are enabled. SD these settings are the result of auto-negotiation during link initiation or of manual set override action. FS: Used to advertise the maximum frame size Configuration Guide 632 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 656
)#lldp hold-multiplier 4 Switch(config)#lldp timer tx-interval 30 tx-delay 2 reinit-delay 3 notify-interval 5 fastcount 3 Switch(config)#show lldp LLDP Status: Enabled Configuration Guide 633 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 657
include all TLVs. lldp management-address { ip-address } Optional. Specify the port's management IP address. The NMS uses management addresses to identify the devices. Configuration Guide 634 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 658
Yes System-Capability Yes System-Description Yes System-Name Yes Management-Address Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Configuration Guide 635 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 659
Configuring LLDP Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes Switch(config-if)#end Switch#copy running-config startup-config LLDP Configurations Configuration Guide 636 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 660
feature, you also need configure the Voice VLAN feature. Refer to Configuring Voice VLAN for detailed instructions. 3.1 Using the GUI 3.1.1 Global Config Choose the LLDP > LLDP-MED> Global Config to load and Endpoint Device. The switch is a Network Connectivity device. Configuration Guide 637 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 661
outgoing LLDP packets. If Location Identification is selected, you need configure the Emergency Number or select Civic Address to configure the details. Click Apply. Configuration Guide 638 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 662
TLV, Model Name TLV and Asset ID TLV. Configure the emergency number to call CAMA or PSAP. The number should contain 10-25 characters. Configuration Guide 639 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 663
count as 4: Switch#configure Switch(config)#lldp Switch(config)#lldp med-fast-count 4 Switch(config)#show lldp LLDP Status: Enabled Tx Interval: 30 seconds Configuration Guide 640 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 664
address in the IETF defined address format. show lldp interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } Display LLDP configuration of the corresponding port. Configuration Guide 641 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 665
Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes Configuration Guide 642 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 666
Configuring LLDP LLDP-MED Status: Enabled TLV Status --- ------ Network Policy Yes Location Identification Yes Extended Power Via MDI Yes Inventory Management Yes Switch(config)#end Switch#copy running-config startup-config LLDP-MED Configurations Configuration Guide 643 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 667
4.1.1 Viewing LLDP Device Info Viewing the Local Info Choose the menu LLDP > Device Info > Local Info to load the following page. Figure 4-1 Local Info Configuration Guide 644 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 668
system name of the local device. System Description Displays the system description of the local device. System Capabilities Supported Displays the supported capabilities of the local system. System Capabilities Enabled Displays the primary functions of the local device. Management Address - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 669
the port ID of the neighbor device which is connected to the local port. Information Click to view the details of the neighbor device. Configuration Guide 646 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 670
latest number of neighbors that have aged out on the local device. 3) In the Neighbors Statistics section, view the statistics of the corresponding port. Configuration Guide 647 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 671
. Viewing LLDP Statistics show lldp traffic interface { fastEthernet port | gigabitEthernet port | tengigabitEthernet port } View the statistics of the corresponding port on the local device. Configuration Guide 648 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 672
the LLDP-MED settings. Local Interface Displays the local port ID. Device Type Displays the local device type defined by LLDP-MED.LLDP-MED. Configuration Guide 649 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 673
Configuring LLDP Viewing LLDP-MED Settings Application Type Displays the supported applications of the local device. Unknown Policy Flag Displays the unknown location settings included in settings. Device Type Displays the LLDP-MED device type of the neighbor device. Configuration Guide 650 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 674
connected to the port. Viewing LLDP Statistics show lldp traffic interface { fastEthernet port | gigabitEthernet port | tengigabitEthernet port } View the statistics of the corresponding port. Configuration Guide 651 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 675
the company network to know about the link situation and network topology so that he can troubleshoot the potential network faults in advance. 6.1.2 Network Topology Exampled with the following situation: Port Gi1 parameters. Here we take the default settings as an example. Configuration Guide 652 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 676
. Figure 6-3 LLDP Port Config 6.1.5 Using CLI 1) Enable LLDP globally and configure the corresponding parameters. Switch_A#configure Switch_A(config)#lldp Switch_A(config)#lldp hold-multiplier 4 Configuration Guide 653 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 677
Start Repeat Count: 4 View LLDP settings on each port Switch_A#show lldp interface gigabitEthernet 1/0/1 LLDP interface config: gigabitEthernet 1/0/1: Admin Status: TxRx SNMP Trap: Enabled Configuration Guide 654 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 678
1/0/1: Chassis type: MAC address Chassis ID: 00:0A:EB:13:23:97 Port ID type: Interface name Port ID: GigabitEthernet1/0/1 Port description: GigabitEthernet1/0/1 Interface Configuration Guide 655 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 679
supported: 0 Port and protocol VLAN supported: Yes Port and protocol supported: Yes Auto-negotiation enabled: Yes OperMau: speed(1000)/duplex(Full) Link aggregation supported : Yes Link aggregation enabled: No Aggregation port ID: 0 Power port class: PD PSE power supported - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 680
: MAC address Chassis ID: 00:0A:EB:13:18:2D Port ID type: Interface name Port ID: GigabitEthernet1/0/2 Port description: GigabitEthernet1/0/2 Interface TTL: 120 Configuration Guide 657 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 681
: Yes Auto-negotiation enabled: Yes OperMau: speed(1000)/duplex(Full) Link aggregation supported: Yes Link aggregation enabled: No Aggregation port ID: 0 Power port class: PSE PSE power supported: Yes PSE power enabled: Yes PSE pairs control ability: No Configuration Guide 658 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 682
cannot be the same as the VLAN ID of the Voice VLAN. Refer to Configuring Voice VLAN for detailed instructions. 6.2.3 Network Topology Exampled with the configuration of one IP phone: One end of the IP phone is procedures in two ways: using the GUI and using the CLI. Configuration Guide 659 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 683
. Figure 6-6 Configuring Voice VLAN Globally Choose the menu QoS > Voice VLAN > Port Config, set the Voice VLAN mode on Gi1/0/1 and Gi1/0/2 as Auto and Manual respectively. Configuration Guide 660 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 684
Configuring LLDP Figure 6-7 Configuring Voice VLAN Mode on Port 1/0/1 Configuration Example Figure 6-8 Configuring Voice VLAN Mode on Port 1/0/2 Configuration Guide 661 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 685
6-11 LLDP-MED Global Config 5) Choose th menu LLDP > LLDP-MED > Policy Config to load the following page. Select port 1/0/1 and enable LLDP-MED. Configuration Guide 662 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 686
packets. Figure 6-13 LLDP-MED Port Config-Detail In the Location Identification Parameters section, configure the detailed address of the IP phone. Click Apply. Configuration Guide 663 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 687
. Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#switchport voice vlan mode auto Switch_A(config-if)#exit 3) Configure the Voice VLAN mode on port Gi1/0/2 as Manual and add port Gi1/0/2 to Voice VLAN. Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 688
Switch_A(config)#interface gigabitEthernet 1/0/2 Switch_A(config-if)#switchport voice vlan mode manual Switch_A(config-if)#switchport general allowed vlan 10 tagged Switch_A(config-if)# on each port: Switch_A#show lldp interface gigabitEthernet 1/0/1 LLDP interface config: Configuration Guide 665 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 689
information: Switch_A#show lldp local-information interface gigabitEthernet 1/0/1 LLDP local Information: gigabitEthernet 1/0/1: Chassis type: MAC address Chassis ID: 00:0A:EB:13:23:97 Configuration Guide 666 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 690
: Yes Auto-negotiation enabled: Yes OperMau: speed(100)/duplex(Full) Link aggregation supported: Yes Link aggregation enabled: Yes Aggregation port ID: 1 Power port class: PD PSE power supported: No PSE power enabled: No PSE pairs control ability: No Configuration Guide 667 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 691
-28TS 2.0 Firmware Revision: Reserved Software Revision: 1.0.1 Build 20151216 Rel.65850(s) Serial Number: Reserved Manufacturer Name: TP-Link Model Name: T1600G-28TS 2.0 Asset ID: unknown Configuration Guide 668 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 692
IP Phone 7931G,V4, term default System capabilities supported: Bridge Telephone System capabilities enabled: Bridge Telephone Management PPVID): Port and protocol VLAN supported: Port and protocol VLAN enabled: Protocol identity: Auto-negotiation supported: Yes Auto-negotiation enabled: - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 693
Configuring LLDP Configuration Example PSE power supported: PSE power enabled: PSE pairs control ability: Maximum frame size: LLDP-MED Capabilities: Device Type: Application Device Unknown Unknown 7.0w 4 tnp31.3-2-0-11.bin term31.default FCH1537A2JV Cisco Systems, Inc. Configuration Guide 670 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 694
Disable All Default LLDP-MED Settings Table 7-3 Default LLDP-MED Settings Parameter Fast Start Count LLDP-MED Status Included TLVs Default Setting 4 Disable All Configuration Guide 671 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 695
Part 22 Configuring Maintenance CHAPTERS 1. Maintenance 2. Monitoring the System 3. System Log Configurations 4. Diagnosing the Device 5. Diagnosing the Network 6. Example for Configuring Remote Log 7. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 696
module assembles various system tools for network troubleshooting. 1.2 Supported Features The maintenance module includes system monitor, test the cable connection status, cable length and error length for troubleshooting. Network Diagnose The network diagnose function includes Ping test and Tracert - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 697
the switch fails to respond to management requests. In similar situations, you can monitor the system to verify a CPU or memory utilization problem. 2.1 Using the GUI 2.1.1 Monitoring the CPU Choose the menu Maintenance > System Monitor > CPU Monitor to load the following page. Figure 2-1 Monitoring - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 698
the following page. Figure 2-2 Monitoing the Memory Click Monitor to enable the switch to monitor and display its memory utilization rate every four seconds. Configuration Guide 675 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 699
the last 5 seconds, 1minute and 5minutes. The following example shows how to monitor the memory: Switch#show memory-utilization Unit | Current Memory Utilization 1 | 74% Configuration Guide 676 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 700
or password is entered. Error protocol packets are detected. The shutdown command is applied to a port. The display command is used. General operational information. Configuration Guide 677 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 701
log buffer immediately, and synchronized to the log file every 24 hours. If necessary, you can modify the log synchronization frequency using the CLI. Configuration Guide 678 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 702
Click Backup Log to save the system log as a file on your computer. If the switch system breaks down, you can check the file for troubleshooting. Configuration Guide 679 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 703
same or smaller. 3.2 Using the CLI 3.2.1 Configuring the Local Log Follow these steps to configure the local log: Step 1 configure Enter global configuration mode. Configuration Guide 680 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 704
: Switch#configure Switch(config)#logging buffer Switch(config)#logging buffer level 5 Switch(config)#logging file flash Switch(config)#logging file flash frequency periodic 10 Configuration Guide 681 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 705
operation status of other devices through the log host. idx: Enter the index of the log host. The switch supports 4 log hosts at most. host-ip: Specify the IP address for the log host. level: Enter the running-config startup-config Save the settings in the configuration file. Configuration Guide 682 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 706
)# show logging loghost Index Host-IP Severity Status 1 0.0.0.0 6 disable 2 192.168.0.148 5 enable 3 0.0.0.0 6 disable 4 0.0.0.0 6 disable Switch(config)#end Switch#copy running-config startup-config Configuration Guide 683 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 707
connection status is normal, here displays the length range of the cable. The value makes sense only when the cable is longer than 30m. Configuration Guide 684 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 708
status is short, close or crosstalk, here displays the length from the port to the trouble spot. The value makes sense only when the cable is longer than 30m. 4.2 Using (+/- 10m) --- Pair-B Normal 2 (+/- 10m) --- Pair-C Normal 0 (+/- 10m) --- Pair-D Normal 2 (+/- 10m) --- Configuration Guide 685 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 709
destination device for Ping test, set Ping times, data size and interval according to your needs, and then click Ping to start the test. Configuration Guide 686 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 710
address of the destination node for Ping test. Both IPv4 and IPv6 are supported. Enter the amount of times to send test data for Ping test. We IP Enter the IP address of the destination device. Both IPv4 and IPv6 are supported. Max Hop Specify the maximum number of the route hops the test data can - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 711
ping test. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. -n count: Specify the amount of times to loss) Approximate round trip times in milli-seconds: Minimum = 0ms , Maximum = 0ms , Average = 0ms Configuration Guide 688 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 712
of the destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. maxHops: Specify the maximum number of the route hops ms 1 ms 2 ms 192.168.1.1 2 2 ms 2 ms 2 ms 192.168.0.100 Trace complete. Configuration Guide 689 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 713
6.1 Network Requirements The company network manager needs to monitor network of department A for troubleshooting. Figure 6-1 Network Topology Department A Switch IP: 1.1.0.2/16 PC IP: 1.1.0.1/16 address, and the severity as level_5; click Apply. Figure 6-2 Remote Log Host Configuration Guide 690 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 714
-config startup-config Verify the Configurations Switch# show logging loghost Index Host-IP Severity Status 1 1.1.0.1 5 enable 2 0.0.0.0 6 disable 3 0.0.0.0 6 disable 4 0.0.0.0 6 disable Example for Configuring Remote Log Configuration Guide 691 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 715
4 Data Size 64 bytes Interval 1000 milliseconds Table 7-4 Default Settings of Tracert Config Parameter Default Setting Destination IP 192.168.0.100 Max Hop 4 hops Configuration Guide 692 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 716
Part 23 Configuring SNMP & RMON CHAPTERS 1. SNMP Overview 2. SNMP Configurations 3. Notification Configurations 4. RMON Overview 5. RMON Configurations 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 717
troubleshoot according to notifications sent by those devices in a timely manner. The device supports three SNMP versions: SNMPv1, SNMPv2c and SNMPv3.Table 1-1 lists features supported good security (such as VPNs), but with busy services in which the traffic congestion may occur. You can Guide 694 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 718
2 SNMP Configurations To complete the SNMP configuration, choose an SNMP version according to network requirements and supportability of the NMS software, and then follow these steps: Choose SNMPv3 1) Enable SNMP. 2) Read/Write View is the same for the user and the group. Configuration Guide 695 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 719
) manages MIB (Management Information Base) variables based on the SNMP view. Choose the menu SNMP > SNMP Config > SNMP View to load the following page. Configuration Guide 696 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 720
: The NMS cannot view or manage the function indicated by the object. 2.1.3 Creating an SNMP Group Create an SNMP group and configure related parameters. Configuration Guide 697 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 721
mode and a privacy mode are applied to check and encrypt packets. 2) Set the read, write and notify view of the SNMP Group. Click Create. Configuration Guide 698 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 722
the group that the user belongs to. Users with the same Group Name, Security Model and Security Level will be in the same group. Configuration Guide 699 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 723
encryption. 3) Click Create. 2.1.5 Creating SNMP Communities If you want to use SNMPv1 or SNMPv2c as the security model, you can create SNMP communities directly. Configuration Guide 700 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 724
accessed by the community. The default is viewDefault. 2.2 Using the CLI 2.2.1 Enabling SNMP Step 1 Step 2 configure Enter global configuration mode. snmp-server Enabling SNMP. Configuration Guide 701 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 725
version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 0 Get-request PDUs Configuration Guide 702 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 726
the view cannot be managed by the NMS. Step 3 show snmp-server view Displays the view table. Step 4 end Return to Privileged EXEC Mode. Configuration Guide 703 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 727
views. Meanwhile, set the authentication and privacy modes to secure the communication between the NMS and managed devices. Step 1 configure Enter global configuration mode. Configuration Guide 704 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 728
-Mode Sec-Lev Read-View Write-View Notify-View 1 nms-monitor v3 authPriv View View Switch(config)#end Switch#copy running-config startup-config Configuration Guide 705 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 729
user on the switch. Name the user as admin, and set the user as a remote user, SNMPv3 as the security mode, authPriv as the Configuration Guide 706 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 730
set an SNMP community. Name the community as the nms-monitor, and allow the NMS to view and modify parameters of View: Switch#configure Configuration Guide 707 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 731
(config)#show snmp-server community Index Name Type MIB-View 1 nms-monitor read-write View Switch(config)#end Switch#copy running-config startup-config Configuration Guide 708 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 732
162. For communication security, we recommend that you change the port number under the condition that communications on other UDP ports are not affected. Configuration Guide 709 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 733
. Set the length of time that the switch waits for a response from the NMS after sending an inform message; the default is 100 seconds. Configuration Guide 710 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 734
a response from the NMS within the timeout interval. show snmp-server host Displays the information of the host. end Return to privileged EXEC mode. Configuration Guide 711 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 735
traps snmp [ linkup | linkdown | warmstart | coldstart | auth-failure ] Configure parameters of basic traps supported on the switch. linkup: When a port status changes from linkdown to linkup, the switch sends a request fails in authentication. The trap is enabled by default. Configuration Guide 712 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 736
traps snmp linkup Switch(config)#end Switch#copy running-config startup-config (Optional) Enabling the SNMP Extended trap Step 1 configure Enter global configuration mode. Configuration Guide 713 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 737
| loopback-detection | storm-control | spanning-tree | memory } Configure parameters of extended traps supported on the switch. bandwidth-control: The trap is used to monitor whether the bandwidth has reached Switch(config)#end Switch#copy running-config startup-config Configuration Guide 714 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 738
warning threshold. rx_power: Enable DDM Rx Power trap. It is sent when the DDM Rx power value exceeds the alarm threshold or warning threshold. Configuration Guide 715 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 739
security dhcp-snoop Switch(config)#end Switch#copy running-config startup-config (Optional) Enabling the Link-status Trap Step 1 configure Enter global configuration mode. Configuration Guide 716 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 740
: Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#snmp-server traps link-status Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 717 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 741
MIB because of the limited device resources. Generally, the NMS can only get information of the following four groups: statistics, history, event and alarm. Configuration Guide 718 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 742
SNMP Notification before RMON configurations. 5.1 Using the GUI 5.1.1 Configuring Statistics Choose the menu SNMP > RMON > Statistics to load the following page. Figure 5-1 Statistics Config Configuration Guide 719 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 743
1/0/1 format to be monitored. To change the port, please enable the entry first. 2) Set the sample interval and the maximum buckets of history entries. Configuration Guide 720 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 744
. The name should be what you have set in SNMP previously. By default, it is public. 2) Set the description and type of the event. Configuration Guide 721 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 745
to be monitored, and associate the entry with a statistics entry. Index Displays the index of alarm entries. There are 12 alarm entries all together. Configuration Guide 722 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 746
default is 100. Falling Event Specify the index of the event that will be triggered when the sampled value is below the preset threshold. Configuration Guide 723 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 747
. index: Enter the index of statistics entries that you want to view. The ranges are from 1 to 65535. end Return to privileged EXEC mode. Configuration Guide 724 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 748
the number of records exceeds the limit, the earliest record will be overwritten. The values are from 10 to 130; the default is 50. Configuration Guide 725 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 749
Owner State 1 Gi1/0/1 100 50 monitor Enable Switch(config)#end Switch#copy running-config startup-config 5.2.3 Configuring Event Step 1 configure Enter global configuration mode. Configuration Guide 726 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 750
)#show rmon event Index User Description Type Owner State ----- 1 admin rising-notify Notify monitor Enable Switch(config)#end Switch#copy running-config startup-config Configuration Guide 727 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 751
characters. The default name is monitor. interval: Set the sampling interval. The value ranges from 10 to 3600 seconds; the default is 1800 seconds. Configuration Guide 728 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 752
Type: Absolute RHold-REvent: 3000-1 FHold-FEvent: 2000-2 Alarm startup: All Interval: 10 Owner: monitor Switch(config)#end Switch#copy running-config startup-config Configuration Guide 729 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 753
rising threshold and falling threshold, and bind the rising event to the notify event entry, and the falling event to the log event entry. Configuration Guide 730 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 754
SNMP 1) Choose SNMP > SNMP Config > Global Config to load the following page. Enable SNMP, and set the Remote Engine ID as 123456789a. Click Apply. Configuration Guide 731 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 755
with the name of nms-monitor, choose SNMPv3 and enable authentication and privacy, and add View to Read View and Notify View. Click Create. Configuration Guide 732 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 756
of the SNMP User. Choose the type as Inform, and set the retry times as 3, with the timeout period as 100 seconds. Click Create. Configuration Guide 733 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 757
entries and bind them to ports 1/0/1 and 1/0/2 respectively. Set the owner of the entries as monitor and the status as valid. Figure 6-7 Configuring Entry 1 Configuration Guide 734 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 758
enable. For entry 2, set the SNMP user name as admin, type as Log, description as "falling log", owner as monitor, and status as enable. Configuration Guide 735 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 759
settings. 6.5 Using the CLI Configuring Rate Limit on ports Configure the rate limit on required ports. For detailed configuration, please refer to Configuring QoS. Configuration Guide 736 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 760
as 100 seconds, max buckets as 50, and the owner as monitor. Switch(config)#rmon history 1 interface gigabitEthernet 1/0/1 interval 100 owner monitor buckets 50 Configuration Guide 737 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 761
name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 0 Get-request PDUs 0 Get-next PDUs 0 Set-request PDUs 0 SNMP packets output Configuration Guide 738 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 762
Sec-Lev Read-View Write-View Notify-View 1 nms-monitor v3 authPriv View View Verify SNMP user configurations: Switch(config)#show snmp-server user Configuration Guide 739 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 763
configurations: Switch(config)#show rmon event Index User Description Type -------- 1 admin rising-notify Notify 2 admin falling-log Log Owner ---------monitor monitor State ---------Enable Enable Configuration Guide 740 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 764
: 2-Enabled Statistics index: 2 Alarm variable: BPkt Sample Type: Absolute RHold-REvent: 3000-1 FHold-FEvent: 2000-2 Alarm startup: All Interval: 10 Owner: monitor Configuration Example Configuration Guide 741 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 765
Security Model Security Level Read View Write View Notify View Default Setting None v1 noAuthNoPriv viewDefault None None MIB Object ID 1 1.3.6.1.6.3.15 1.3.6.1.6.3.16 1.3.6.1.6.3.18 Configuration Guide 742 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 766
None 162 None IPv4 v1 noAuthNoPriv Trap None in trap mode; 3 times in Inform mode. None in trap mode; 100 seconds in Inform mode. Configuration Guide 743 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 767
Falling Threshold Falling Event Alarm Type Interval Owner Default Setting RecBytes None Absolute 100 None 100 None All 1800 seconds monitor Appendix: Default Parameters Configuration Guide 744 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 768
Configuring SNMP & RMON Parameter Status Default Setting Disable Appendix: Default Parameters Configuration Guide 745 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 769
. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 770
. Don't disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you ne ed service, please contact us. Avoid water and wet locations. CE DOC TP-Link hereby declares that the device is in compliance with the essential requirements - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 Configuration Guide - Page 771
Explanation of the symbols on the product label Symbol Explanation AC voltage Indoor use only RECYCLING This product bears the selective sorting symbol for Waste electrical and electronic equipment (WEEE). This means that this product must be handled pursuant to European directive 2012/19/EU in
Configuration Guide
T1600G Series Switches
T1600G-18TS
T1600G-28TS (TL-SG2424) / T1600G-52TS (TL-SG2452)
T1600G-28PS (TL-SG2424P) / T1600G-52PS (TL-SG2452P)
1910012255
REV2.1.1
Sept 2017