TP-Link T1600G-28PS Jetstream Smart Switches User Guide
TP-Link T1600G-28PS Manual
 |
View all TP-Link T1600G-28PS manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T1600G-28PS manual content summary:
- TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 1
User Guide Jetstream Smart Switches T1600G-52TS (TL-SG2452) / T1600G-52PS (TL-SG2452P) T1600G-18TS (TL-SG2216) / T1600G-28TS / TL-SG2428P 1910012764 REV4.3.0 March 2020 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 2
...13 Disable Telnet login...17 Disable SSH login...18 Copy running-config startup-config...18 Change the Switch's IP Address and Default Gateway...19 Managing System System...21 Overview...21 Supported Features...21 System Info Configurations...23 Using the GUI...23 Viewing the System Summary...23 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 3
File...49 Upgrading the Firmware...50 Rebooting the Switch...50 Reseting the Switch...52 EEE Configuration...53 Using the CLI...53 PoE Configurations (Only for Certain Devices)...55 Using the GUI...56 Configuring the PoE Parameters Manually...56 Configuring the PoE Parameters Using the Profile - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 4
Range Entries...73 Configuring Holiday...74 Example for PoE Configurations...76 Network Requirements...76 Configuring Scheme...76 Using the GUI...76 Using the CLI...79 Appendix: Default Parameters...81 Managing Physical Interfaces Physical Interface...85 Overview...85 Supported Features...85 Basic - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 5
117 Using the GUI...118 Using the CLI...119 Appendix: Default Parameters...122 Managing MAC Address Table MAC Address Table...124 Overview...124 Supported Features...124 MAC Address Configurations...126 Using the GUI...126 Adding Static MAC Address Entries ...126 Modifying the Aging Time of Dynamic - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 6
...145 Using the GUI...145 Using the CLI...148 Appendix: Default Parameters ...151 Configuring MAC VLAN Overview...153 MAC VLAN Configuration...154 Using the GUI...154 Configuring 802.1Q VLAN...154 Binding the MAC Address to the VLAN...154 Enabling MAC VLAN for the Port...155 Using the CLI...156 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 7
Appendix: Default Parameters...168 Configuring Protocol VLAN Overview...170 Protocol VLAN Configuration...171 Using the GUI...171 Configuring 802.1Q VLAN...171 Creating Protocol Template...172 Configuring Protocol VLAN...173 Using the CLI...174 Configuring 802.1Q VLAN...174 Creating a Protocol - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 8
Using the CLI...233 Configuring MLD Snooping Globally...233 Configuring MLD Snooping for VLANs...234 Configuring MLD Snooping for Ports...239 Configuring Hosts to Statically Join a Group...240 MVR Configuration...242 Using the GUI...242 Configuring 802.1Q VLANs...242 Configuring MVR Globally...243 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 9
the CLI...283 Example for Configuring Multicast Filtering...284 Network Requirements...284 Configuration Scheme...284 Network Topology...285 Using the GUI...285 Using the CLI...289 Appendix: Default Parameters ...292 Default Parameters for IGMP Snooping...292 Default Parameters for MLD Snooping - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 10
Tree Globally...334 STP Security Configurations...336 Using the GUI...336 Using the CLI...337 Configuring the STP Security...337 Configuration Example for MSTP...340 Network Requirements...340 Configuration Scheme...340 Using the GUI...341 Using the CLI...347 Appendix: Default Parameters...354 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 11
357 Overview...357 Supported Features...357 LLDP Configurations...358 Using the GUI...358 Configuring LLDP Globally...358 Configuring LLDP For the Port...360 Using the CLI...361 Global Config...361 Port Config...363 LLDP-MED Configurations...366 Using the GUI...366 Configuring LLDP Globally ...366 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 12
Scheme...412 Using the GUI...412 Using the CLI...413 Appendix: Default Parameters...415 Configuring Routing Overview...417 IPv4 Static Routing Configuration...418 Using the GUI...418 Using the CLI...419 IPv6 Static Routing Configuration...420 Using the GUI...420 Using the CLI...420 Viewing Routing - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 13
425 Using the GUI...425 Using the CLI...427 Configuring DHCP Service DHCP...431 Overview...431 Supported Features...431 DHCP Server Configuration...436 Using the GUI...436 Enabling DHCP Server...436 Configuring DHCP Server Pool...438 Configuring Manual Binding...439 Using the CLI...440 Enabling DHCP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 14
...492 Configuring the DHCP Server...495 Appendix: Default Parameters...497 Configuring ARP Overview...501 Supported Features...501 ARP Configurations...503 Using the GUI...503 Viewing the ARP Entries...503 Adding Static ARP Entries Manually...504 Configuring Gratuitous ARP...504 Configuring Proxy - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 15
ARP Entry...507 Configuring the Gratuitous ARP ...509 Configuring Proxy ARP ...511 Appendix: Default Parameters...514 Configuring QoS QoS...516 Overview...516 Supported Features...516 Class of Service Configuration...518 Using the GUI...519 Configuring Port Priority...519 Configuring 802.1p Priority - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 16
...575 Appendix: Default Parameters...580 Configuring Access Security Access Security...585 Overview...585 Supported Features...585 Access Security Configurations...586 Using the GUI...586 Configuring the Access Control Feature...586 Configuring the HTTP Function...589 Configuring the HTTPS Function - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 17
627 Using the GUI...628 Using the CLI...630 Appendix: Default Parameters...633 Configuring 802.1x Overview...636 802.1x Configuration...637 Using the GUI...637 Configuring the RADIUS Server...637 Configuring 802.1x Globally...640 Configuring 802.1x on Ports...641 View the Authenticator State...643 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 18
the CLI...662 Appendix: Default Parameters...665 Configuring ACL Overview...667 ACL Configuration...668 Using the GUI...668 Configuring Time Range ...668 Creating an ACL...668 Configuring ACL Rules...669 Configuring MAC ACL Rule...669 Configuring IP ACL Rule...673 Configuring Combined ACL Rule...676 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 19
Using the GUI...718 Using the CLI...723 Appendix: Default Parameters...725 Configuring IPv4 IMPB IPv4 IMPB...728 Overview...728 Supported Features...728 IP-MAC Binding Configuration...729 Using the GUI...729 Binding Entries Manually...729 Binding Entries via ARP Scanning...731 Binding Entries via - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 20
Using the GUI...754 Using the CLI...756 Appendix: Default Parameters...758 Configuring IPv6 IMPB IPv6 IMPB...761 Overview...761 Supported Features...761 IPv6-MAC Binding Configuration...763 Using the GUI...763 Binding Entries Manually...763 Binding Entries via ND Snooping...765 Binding Entries via - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 21
the GUI...787 Using the CLI...789 Appendix: Default Parameters...790 Configuring DHCP Filter DHCP Filter...793 Overview...793 Supported Features...793 DHCPv4 Filter Configuration...795 Using the GUI...795 Configuring the Basic DHCPv4 Filter Parameters 795 Configuring Legal DHCPv4 Servers...797 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 22
Scheme...810 Using the GUI...810 Using the CLI...812 Appendix: Default Parameters...814 Configuring DoS Defend Overview...816 DoS Defend Configuration...817 Using the GUI...817 Using the CLI...818 Appendix: Default Parameters...821 Monitoring the System Overview ...823 Monitoring the CPU ...824 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 23
Scheme...840 Using the GUI...840 Using the CLI...841 Appendix: Default Parameters...843 Configuring DLDP Overview ...845 DLDP Configuration...846 Using the GUI...846 Using the CLI...848 Appendix: Default Parameters...850 Configuring SNMP & RMON SNMP ...852 Overview...852 Basic Concepts...852 SNMP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 24
887 Using the CLI...889 Configuring Statistics...889 Configuring History...891 Configuring Event...892 Configuring Alarm...893 Configuration Example...896 Network Requirements...896 Configuration Scheme...897 Using the GUI...897 Using the CLI...902 Appendix: Default Parameters...908 Diagnosing the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 25
the GUI...915 Troubleshooting with Ping Testing...915 Troubleshooting with Tracert Testing...916 Using the CLI...917 Configuring the Ping Test...917 Configuring the Tracert Test...918 Appendix: Default Parameters...919 Configuring System Logs Overview...921 System Logs Configurations...922 Using the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 26
guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com. The information in this document is subject to change In this Guide, the following conventions are used: PoE budget calculations are based on laboratory testing. Actual PoE power budget - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 27
bandwidth. More Information ■■ The latest software and documentations can be found at Download Center at https://www.tp-link.com/support. ■■ The Installation Guide (IG) can be found where you find this guide or inside the package of the switch. ■■ Specifications can be found on the product page at - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 28
Part 1 Accessing the Switch CHAPTERS 1. Determine the Management Method 2. Web Interface Access 3. Command Line Interface Access - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 29
detailed instructions about the network topology in such situations and how to use an Omada Software Controller, Hardware Controller or Cloud-Based Controller, refer to the Omada SDN Controller User Guide. The guide can be found on the download center of our official website: https://www.tp-link.com - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 30
192.168.0.1. Figure 2-1 Enter the Switch's IP Address in the Browser 4) Enter the username and password (both admin by default) in the pop-up login window. Figure 2-2 Login Authentication Note: The first time you log in, change the password to better protect your network and devices. User Guide 5 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 31
running configuration file. The configurations will be lost when the switch reboots. If you need to keep the configurations after the switch reboots, please click main interface to save the configurations in the start-up configuration file. on the Figure 2-4 Save the Configuration User Guide 6 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 32
. Figure 2-5 Shut Down HTTP Server Go to SECURITY > Access Security > HTTPS Config, disable the HTTPS server and click Apply. Figure 2-6 Disbale the HTTPS Server User Guide 7 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 33
and specify its IP address, or configure the IP address of the VLAN which the access port belongs to. ■■ Change the IP Address By default, all the ports belong to VLAN 1 with the VLAN interface IP 192.168.0.1. The following example shows how to change the switch's default access IP address 192.168 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 34
gateway as the next hop's IP address. Distance Specify the distance as 1. 2) Click to save the settings. 3) Check the routing table to verify the default gateway you configured. The entry marked in red box displays the valid default gateway. Figure 2-10 View the Default Gateway User Guide 9 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 35
while Telnet and SSH connection support both local and remote access. program (such as the Hyper Terminal) on the PC and configure the terminal emulation program as follows: ■■ Baud Rate: and Password in the Hyper Terminal window. The default value for both of them is admin. Press Enter in the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 36
can use the CLI now. Figure 3-1 CLI Main Window Note: The first time you log in, change the password to better protect your network and devices. 4) Enter enable to enter the User EXEC Mode to further configure the switch. Figure 3-2 User EXEC Mode Note: In Windows XP, go to Start > All Programs - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 37
supports Login Local Mode for authentication by default. Login Local Mode: Username and password are required, which are both admin by default in, change the password to better protect your network and devices. 4) Type in enable command and you will enter Privileged EXEC Mode. By default no password - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 38
enable SSH on the terminal emulation program: Figure 3-7 Enable SSH Password Authentication Mode 1) Open PuTTY and go to the Session page. Enter the IP address of the switch in the Host Name field and keep the default value 22 in the Port field; select SSH as the Connection type. Click Open. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 39
to log in to the switch, and you can continue to configure the switch. Figure 3-9 Log In to the Switch Note: The first time you log in, change the password to better protect your network and devices. Key Authentication key pair is generated, and the length of each key is 1024 bits. User Guide 14 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 40
public key to a TFTP server; click Save private key to save the private key to the host PC. Figure 3-11 Save the Generated Keys User Guide 15 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 41
After the public key is downloaded, open PuTTY and go to the Session page. Enter the IP address of the switch and select SSH as the Connection type (keep the default value in the Port field). Figure 3-13 Configure the Host Name and Connection Type 5) Go to Connection > SSH > Auth. Click Browse to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 42
completed successfully. Figure 3-15 Log In to the Switch Note: The first time you log in, change the password to better protect your network and devices. 3.4 Disable Telnet login You can shut down the > Access Security > Telnet Config, disable the Telnet function and click Apply. User Guide 17 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 43
Figure 3-17 Shut down SSH server ■■ Using the CLI: Switch#configure Switch(config)#no ip ssh server 3.6 Copy running-config startup-config The switch's configuration files fall into two types: the running configuration file and the start-up configuration file. After you enter each command line, the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 44
to as the access port), you can configure the port as a routed port and specify its IP address, or configure the IP address of the VLAN which the access port belongs to. ■■ Change the IP Address By default, all the ports belong to VLAN 1 with the VLAN interface IP 192.168.0.1/24. In the following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 45
1. System 2. System Info Configurations 3. User Management Configurations 4. System Tools Configurations 5. EEE Configuration 6. PoE Configurations (Only for Certain Devices) 7. SDM Template Configuration 8. Time Range Configuration 9. Example for PoE Configurations 10. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 46
the configurations, update the firmware, reset the switch, and reboot the switch. EEE EEE (Energy Efficient Ethernet) is used to save power consumption of the switch during periods of low data activity. You can simply enable this feature on ports to allow power reduction. PoE Note: Only T1600G-52PS - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 47
PoE standards. The standard process of PoE PoE IP phones and access points. According to whether PDs comply with IEEE standard, they can be classified into standard PDs and non-standard PDs. Only standard PDs can be powered via TP-Link PoE configure a time range. You can use the time range when - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 48
System Info Configurations 2 System Info Configurations With system information configurations, you can: ■■ View the System Summary ■■ Configure the Device Description ■■ Configure the System Time ■■ Configure the speed of 1000Mbps. Indicates the SFP port is at the speed of 100Mbps. User Guide 23 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 49
Managing System System Info Configurations You can move your cursor to a port to view the detailed information of the port. Figure 2-2 Port Information Port utilization of receiving packets on this port. TX Displays the bandwidth utilization of sending packets on this port. User Guide 24 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 50
Managing System System Info Configurations Viewing the System Information In the System Info Description page. Hardware Version Displays the hardware version of the switch. Firmware Version Displays the firmware version of the switch. Boot Loader Version Displays the boot loader version - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 51
System System Info Configurations MAC Address Displays the MAC address of the switch. configuration page. 2.1.2 Configuring the Device Description Choose the menu SYSTEM > System Info > Device Description to load the following page. Figure 2-5 Configuring the Device Description User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 52
information. 2) Click Apply. 2.1.3 Configuring the System Time Choose the menu the following page. Figure 2-6 Configuring the System Time In the configure the system time: 1) Choose one method to set the system time and specify the related parameters. Manual Set the system time manually - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 53
time zone. Primary Server: Enter the IP Address of the primary NTP server. Secondary Server: Enter the IP Address of the secondary NTP server. Once the load the following page. Figure 2-7 Configuring the Daylight Saving Time Follow these steps to configure Daylight Saving Time: 1) In User Guide 28 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 54
an absolute time range for the Daylight Saving Time of the switch. This configuration will be used only one time. Offset: Specify the time to set the Device Name, Device Location, System Contact, Hardware Version, Firmware Version, System Time, Run Time and so on. N/A Disable Copper User Guide 29 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 55
www.tp-link.com Hardware Version - T1600G-52TS 3.0 Software Version - 3.0.0 Build 20171129 Rel.38400(s) Bootloader Version - TP-LINK BOOTUTIL(v1.0.0) Mac Address - 00-0A-EB-13-23-A0 Serial Number System Time - 2017-12-12 10:10:37 Running Time - 1 day - 2 hour - 11 min - 30 sec 2.2.2 Configuring the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 56
www.tp-link.com ... Switch(config)#end Switch#copy running-config startup-config 2.2.3 Configuring the System Time Follow these steps to configure the system time: Note: The mode of Synchronize with PC's Clock does not support CLI command. Step 1 Step 2 configure Enter global configuration mode - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 57
Managing System System Info Configurations time: Specify the date and time manually in the format of MM/DD/YYYY-HH:MM:SS. The valid value of the year ranges Sapporo, Tokyo. UTC+09:30 -- TimeZone for Darwin, Adelaide. UTC+10:00 -- TimeZone for Canberra, Melbourne, Sydney, Brisbane. User Guide 32 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 58
Configurations Step 3 UTC+11:00 -- TimeZone for Solomon Is., New Caledonia, Vladivostok. UTC+12:00 -- TimeZone for Fiji, Magadan, Auckland, Welington. UTC+13:00 -- TimeZone for Nuku'alofa, Samoa. ntp-server: Specify the IP address config)#end Switch#copy running-config startup-config User Guide 33 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 59
these steps to configure the Daylight Saving Time: Step 1 Step 2 configure Enter global configuration mode. Use the following command to select a predefined Daylight Saving Time configuration: system-time :MM. offset: Enter the offset of Daylight Saving Time. The default value is 60. User Guide 34 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 60
Configurations of Daylight Saving Time. The default value is 60. show system Save the settings in the configuration file. The following example the offset as 50. Switch#configure Switch(config)#system-time dst configuration is one-off Switch(config)#end Switch#copy running-config startup-config User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 61
these types of users can use the Enable Password to change their access level to Admin. 3.1.1 Creating Accounts Choose the menu SYSTEM > User Management > User Config to load the following page. Figure 3-1 User Config Page By default, there is a default Admin account in the table. You can click to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 62
up. Follow these steps to create a new user account. 1) Configure the following parameters: Username Access Level Password Confirm Password 2) Click symbols. No spaces are allowed. Retype the password. 3.1.2 Configuring Enable Password Choose the menu SECURITY > AAA > Global Config to load - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 63
There is a default Admin account which cannot be deleted. The default username and change their access level to Admin. 3.2.1 Creating Accounts Follow these steps to create an account: Step 1 Step 2 configure Enter global configuration to the configuration file unencrypted. By default, the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 64
, but the password is saved to the configuration file MD5 encrypted. By default, the encryption type is 0. password: Enter configuration file. 3.2.2 Configuring Enable Password Follow these steps to create an account of other type: Step 1 configure Enter global configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 65
change the users' access level to Admin. By default, it is empty. 0: Specify the encryption type. 0 indicates that the password you entered is unencrypted, but the password is saved to the configuration file MD5 encrypted. By default as 123, and set the enable password as abc123. User Guide 40 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 66
Managing System User Management Configurations Switch#configure Switch(config)#user name user1 privilege operator password 123 Switch(config)#enable admin password --------- 1 user1 Operator 2 admin Admin Switch(config)#end Switch#copy running-config startup-config User Guide 41 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 67
the configuration file ■■ Upgrade the firmware ■■ Configure DHCP Auto Install ■■ Reboot the switch ■■ Reset the switch 4.1 Using the GUI 4.1.1 Configuring the Boot File Choose the menu SYSTEM > System Tools > Boot Config to load the following page. Figure 4-1 Configuring the Boot File User Guide 42 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 68
image should not be the same. Current Startup Config Displays the current startup configuration. Next Startup Config Specify the next startup configuration. When the switch is powered on, it will try to start up with image. Flash Version Displays the flash version of the image. User Guide 43 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 69
Tools > Backup Config to load the following page. Figure 4-3 Backing up the Configuration File In the Config Backup section, select one unit and click Export to export the configuration file. Note: It will take some time to export the configuration. Please wait without any operation. User Guide 44 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 70
is completed. Only after the switch is rebooted will the new firmware take effect. 3) Click Upgrade to upgrade the system. Note: •• It will take some time to upgrade the switch. Please wait without any operation. •• It is recommended to backup your configuration before upgrading. User Guide 45 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 71
methods to reboot the switch: manually reboot the switch and configure reboot schedule to automatically reboot the switch. Manually Rebooting the Switch Choose the menu you need to click to save current configuration or enable the option Save the current configuration before reboot. User Guide 46 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 72
the IP address of selected unit when resetting. 3) Click Reset. After reset, all configurations of the switch will be reset to the factory defaults. 4.2 Using the CLI 4.2.1 Configuring the Boot File Follow these steps to configure the boot file: Step 1 configure Enter global configuration mode - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 73
the configuration of the boot file. By default, config1.cfg is the startup configuration file and config2.cfg is the backup configuration file. config1 | config2: Select the configuration file to be configured. Config - config1.cfg Backup Config - config2.cfg Switch(config)#end User Guide 48 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 74
are supported. name: Specify the name of the configuration file to be saved. The following example shows how to backup the configuration file named file2 to TFTP server with IP address 192.168.0.100. Switch>enable Switch#copy startup-config tftp ip-address 192.168.0.100 filename file2 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 75
the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the desired firmware file. Enter Y to continue and then enter Y to reboot the switch with the backup image. The following example shows how to upgrade the firmware using the configuration file - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 76
reboot, in the format of DD/MM/YYYY. The date should be within 30 days. save_before_reboot: Save the configuration file before the switch reboots. If no date is specified, the switch will reboot according to the time : Yes Switch(config)#end Switch#copy running-config startup-config User Guide 51 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 77
will be reset to the factory defaults. except-ip: To maintain the IP address when resetting the switch, add this part to the command. Follow these steps to disable the reset function of console port or reset button: Step 1 Step 2 configure Enter global configuration mode. service reset-disable - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 78
configuration mode. Step 2 interface { fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | ten-gigabitEthernet port | range ten-gigabitEthernet port-list } Enter interface configuration mode. Step 3 eee Enable EEE on the port. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 79
to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to enable the EEE feature on port 1/0/1. Switch#config Gi1/0/2 Disable ... Switch(config-if)#end Switch#copy running-config startup-config User Guide 54 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 80
Devices) Note: Only T1600G-52PS and TL-SG2428P support PoE feature. With the PoE feature, you can: ■■ Configure the PoE parameters manually ■■ Configure the PoE parameters using the profile You can configure the PoE parameters one by one via configuring the PoE parameters manually. You can also set - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 81
Certain Devices) 6.1 Using the GUI 6.1.1 Configuring the PoE Parameters Manually Choose the menu SYSTEM > PoE > PoE Config to load the following page. Figure 6-1 Configuring PoE Parameters Manually Follow these steps to configure the basic PoE parameters: 1) In the PoE Config section, you can view - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 82
PoE switch can supply. 2) In the Port Config section, select the port you want to configure and specify the parameters. Click Apply. PoE Status Enable or disable the PoE W. Manual: You can enter a value manually. Power Limit Value (0.1-30.0 W) If you select Manual as Configuration. User Guide 57 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 83
priority or power limit manually. For how to create a profile, refer to Configuring the PoE Parameters Using the Profile. Displays the port's real-time power supply. Displays the port's real-time current. Displays the port's real-time voltage. Displays the class the linked PD belongs to. Displays - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 84
PoE profile: 1) In the Create PoE Profile section, specify the desired configurations of the profile. Profile Name Specify a name for the PoE profile. PoE Status Specify the PoE status for the PoE profile. PoE power that the port can supply is 30 W. Manual: Enter a value manually. User Guide 59 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 85
can supply. System Power Consumption (W) Displays the real-time system power consumption of the PoE switch. System Power Remain (W) Displays the real-time system remaining power of the PoE switch. In addition, you can click and configure the System Power Limit. Click Apply. User Guide 60 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 86
. By default, it is 384 W for T1600G-52PS and 250 W for TL-SG2428P. 2) In the Port Config section, select one or more ports and configure the following two parameters: Time Range and PoE Profile. Click Apply and the PoE parameters of the selected PoE Profile, such as PoE Status and PoE Priority - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 87
1 Step 2 Step 3 configure Enter global configuration mode. power inline consumption power-limit Specify the maximum power the PoE switch can supply globally. power-limit: Specify the maximum power the PoE switch can supply. For T1600G-52PS, it ranges from 1.0-384.0 W, and the default value is 384 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 88
list }] Verify the PoE configuration of the corresponding port. Verify the real-time PoE status of the corresponding port the settings in the configuration file. The following example #configure configuration interface gigabitEthernet 1/0/5 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 89
2 Step 3 Step 4 configure Enter global configuration mode. power inline consumption power-limit Specify the maximum power the PoE switch can supply globally. power-limit: Specify the maximum power the PoE switch can supply. For T1600G-52PS, it ranges from 1.0-384.0 W, and the default value is 384 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 90
PoE Configurations (Only for Certain Devices) Step 5 power inline profile name Bind a PoE profile to the desired port. If one profile is selected, you will not be able to modify PoE status, PoE priority or power limit manually. name: Specify the name of the PoE PoE configuration file configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 91
Devices) Switch(config-if)#power inline profile profile1 Switch(config-if)#show power inline configuration interface gigabitEthernet 1/0/6 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/6 Enable Middle Class2 No Limit profile1 Switch(config-if)#end Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 92
7-1 Configuring SDM Default: Select the template of default. It gives balance to the IP ACL rules and MAC ACL rules. EnterpriseV4: Select the template of enterpriseV4. It maximizes system resources for IP IP ACL Rules Displays the number of IP ACL Rules including - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 93
these steps to configure the SDM template: Step 1 configure Enter global configuration mode. Step 2 show sdm prefer { used | default | enterpriseV4 | effective after the switch is rebooted. default: Select the template of default. It gives balance to the IP ACL rules, MAC ACL rules and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 94
SDM Template Configuration Switch(config)#show sdm prefer enterpriseV4 "enterpriseV4" template: number of IP ACL Rules Changes to the running SDM preferences have been stored, but cannot take effect until reboot the switch. Switch(config)#end Switch#copy running-config startup-config User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 95
Configuration 8 Time Range Configuration To complete Time Range configuration, follow these steps: 1) Add time range entries. 2) Configure and click the following page. Figure 8-1 Configuring Time Range to load Follow these steps To configure Holiday, refer to Configuring Holiday. 2) In the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 96
Managing System Figure 8-2 Adding Period Time Time Range Configuration Configure the following parameters and click Create: Date Specify the start date and end date of this time range. Time your needs. The final period time is the sum of all the periods in the table. Click Create. User Guide 71 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 97
the menu SYSTEM > Time Range > Holiday Config and click following page. Figure 8-1 Configuring Holiday to load the Configure the following parameters and click Create to add a Holiday entry. Holiday Name Specify a name . The final Holiday time range is the sum of all the entries. User Guide 72 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 98
Step 1 Step 2 Step 3 Step 4 configure Enter global configuration mode. time-range name Create a time not be affected by holiday. To configure Holiday, refer to Configuring Holiday. absolute from start-date to end and Sunday. show time-range View the configuration of Time Range. end Return to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 99
System Time Range Configuration The following startup-config 8.2.2 Configuring Holiday Follow these steps to configure Holiday time range: Step 1 Step 2 configure Enter global configuration mode. holiday name holiday View the configuration of Holiday. end Return to privileged EXEC mode. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 100
Step 8 copy running-config startup-config Save the settings in the configuration file. The following example shows how to create a holiday entry and set the entry name as -End --------- 1 holiday1 07.01-09.01 Switch(config)#end Switch#copy running-config startup-config User Guide 75 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 101
the time. AP1 and AP2 provide the internet service and only work in the office time. Figure 9-1 Network Topology Switch A Gi1/0/1 Gi1/0/2 Gi1/0/4 Gi1/0/3 Camera1 Camera2 AP1 AP2 9.2 Configuring Scheme To implement this requirement, you can set a PoE time-range as the office time, for example - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 102
Managing System Figure 9-2 Creating Time Range Example for PoE Configurations 2) Click and the following window will pop up. Set Date, Time and Day of Week as the following figure shows. Click Create. Figure 9-3 Creating a Periodic - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 103
System Figure 9-4 Configuring Time Range Example for PoE Configurations 4) Choose the menu SYSTEM > PoE > PoE Config to load the following page. Select port 1/0/3 and set the Time Range as OfficeTime. Click Apply. Figure 9-5 Configure the Port 5) Click to save the settings. User Guide 78 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 104
: office-time (Active) holiday: exclude number of time slice: 1 01 - 01/01/2017 to 01/01/2018 - 08:00 to 18:00 on 1,2,3,4,5 Verify the configuration of the PoE basic parameters: Switch_A#show power inline configuration interface gigabitEthernet 1/0/3 User Guide 79 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 105
Managing System Example for PoE Configurations Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/3 Enable Low Class4 office-time None User Guide 80 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 106
of the switch. SHENZHEN www.tp-link.com Table 10-2 Default Settings of System Time Configuration Parameter Time Source Default Setting Manual Table 10-3 Default Settings of Daylight Saving Time Configuration Parameter DST status Default Setting Disabled Default settings of User Management are - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 107
the following table. Table 10-6 Default Settings of EEE Configuration Parameter Status Default Setting Disabled (For T1600G-52PS/TL-SG2428P) Default settings of PoE is listed in the following table. Table 10-7 Default Settings of PoE Configuration Parameter PoE Config System Power Limit Port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 108
Managing System Appendix: Default Parameters Default settings of Time Range are listed in the following table. Table 10-9 Default Settings of Time Range Configuration Parameter Holiday Default Setting Include User Guide 83 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 109
Part 3 Managing Physical Interfaces CHAPTERS 1. Physical Interface 2. Basic Parameters Configurations 3. Port Isolation Configurations 4. Loopback Detection Configuration 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 110
based on MAC address table. ■■ Layer 3 interfaces are used to forward IPv4 and IPv6 packets using static or dynamic routing protocols. You can use Layer 3 interfaces for IP routing and inter-VLAN routing. This chapter introduces the configurations for physical interfaces. 1.2 Supported Features The - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 111
of jumbo frames. By default, it is 1518 bytes. Generally, the MTU (Maximum Transmission Unit) size of a normal frame is 1518 bytes. If you want the switch supports to transmit frames of which the MTU size is greater than 1518 bytes, you can configure the MTU size manually here. 2) Select one or - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 112
ports. Step 1 configure Enter global configuration mode. Step 2 jumbo-size size Change the MTU (Maximum Transmission Unit) size to support jumbo frames. The default MTU size for frames received and sent on all ports is 1518 bytes. To transmit jumbo frames, you can manually configure MTU size of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 113
it will discard the received packets. By default, all ports are enabled. speed { 10 default, it is disabled. show interface configuration configuration file. The following example shows how to implement the basic configurations of port1/0/1, including setting a description for the port, configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 114
Switch(config-if)#speed auto Switch(config-if)#duplex auto Switch(config-if)#flow-control Switch(config-if)#show interface configuration gigabitEthernet 1/0/1 Port State Speed Duplex FlowCtrl Description Gi1/0/1 Enable Auto Auto Enable router connection Switch(config-if)#show jumbo - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 115
Managing Physical Interfaces 3 Port Isolation Configurations Port Isolation Configurations 3.1 Using the GUI Port Isolation is used to limit the data transmitted List The above page displays the port isolation list. Click the following page. to configure Port Isolation on User Guide 90 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 116
Click Apply. 3.2 Using the CLI Follow these steps to configure Port Isolation: Step 1 configure Enter global configuration mode. Step 2 interface { fastEthernet port | range fastEthernet port-channel-list |} Specify the port to be isolated and enter interface configuration mode. User Guide 91 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 117
gigabitEthernet port | tengigabitEthernet port | port-channel port-channel } Verify the Port Isolation configuration of the specified port. end Return to privileged EXEC mode. copy running-config startup- Gi1/0/1-3,Po4 Switch(config-if)#end Switch#copy running-config startup-config User Guide 92 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 118
> Switching > Port > Loopback Detection to load the following page. Figure 4-1 Configuring Loopback Detection Follow these steps to configure loopback detection: 1) In the Loopback Detection section, enable loopback detection and configure the global parameters. Then click Apply. User Guide 93 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 119
Port Based or VLAN-Based as the operation mode, you also need to configure the recovery mode for the blocked port: Auto: The blocked port will automatically be recovered to normal status after the automatic recovery time expires. It is the default setting. Manual: You need to manually release the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 120
port-channel-list |} Enter interface configuration mode. Step 6 loopback-detection Enable loopback detection for the port. By default, it is disabled. Step 7 loopback-detection config process-mode { alert | port-based | vlan-based } recoverymode { auto | manual } Set the process mode when - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 121
settings in the configuration file. The following example shows how to enable loopback detection globally (keep the default parameters): Switch#configure Switch(config)#loopback- enable alert auto N/A N/A N/A Switch(config-if)#end Switch#copy running-config startup-config User Guide 96 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 122
VLAN 10. Without changing the VLAN configuration, Host A is not allowed to communicate with the other hosts except the server, even if the MAC address or IP address of Host A is changed for port 1/0/4. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 123
to load the following page. Select port 1/0/1 as the port to be isolated, and select port 1/0/4 as the forwarding port. Click Apply. Figure 5-3 Port Isolation Configuration 3) Select port 1/0/4 as the port to be isolated, and select port 1/0/1 as the forwarding port. Click Apply. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 124
Click to save the settings. 5.1.4 Using the CLI Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#port isolation -if)#end Switch#copy running-config startup-config Verify the Configuration Switch#show port isolation interface Port LAG Forward-List ---- Gi1 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 125
to receive the trap notifications. For detailed instructions about SNMP, refer to Configuring SNMP & RMON. Here we introduce how to configure loopback detection and monitor the detection result on the management interface of the switch. Demonstrated with T1600G-52TS, the following sections provide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 126
refresh globally. Keep the other parameters as default values and click Apply. Figure 5-6 Global Configuration 3) In the Port Config section, normal status after the auto-recovery time. Click Apply. Figure 5-7 Port Configuration 4) Monitor the detection result on the above page. The Loop status - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 127
and configure the detection interval and recovery time. Switch#configure Switch( config startup-config Verify the Configuration Verify the global configuration: Switch#show loopback-detection : 90 s Verify the loopback detection configuration on ports: Switch#show loopback-detection interface - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 128
settings of Switching are listed in th following tables. Table 6-1 Configurations for Ports Parameter Default Setting Port Config Jumbo 1518 bytes Type Copper (For RJ45 Ports) Fiber (For SFP Interval 6 seconds Port Status Disabled Operation mode Alert Recovery mode Auto User Guide 103 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 129
Part 4 Configuring LAG CHAPTERS 1. LAG 2. LAG Configuration 3. Configuration Examples 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 130
bandwidth and providing backup ports to enhance the connection reliability. 1.2 Supported Features You can configure LAG in two ways: static LAG and LACP (Link Aggregation Control Protocol). Static LAG The member ports are manually added to the LAG. LACP The switch uses LACP to implement dynamic - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 131
VLAN, VLANVPN, GVRP, Voice VLAN, STP, QoS, DHCP Snooping and Flow Control, the member pot of an LAG follows the configuration of the LAG but not its own. The configurations of the port can take effect only after it leaves the LAG. ■■ The port enabled with Port Security, Port Mirror, MAC Address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 132
the destination IP addresses of the packets. SRC IP+DST IP: The computation is based on the source and destination IP addresses of the packets. Tips: ■■ Load-balancing algorithm is effective only for outgoing traffic. If the data stream is not well shared by each link, you can change the algorithm - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 133
addresses of the received packets. Figure 2-2 Hash Algorithm Configuration Hosts Switch A 2.1.2 Configuring ends of a link use the same LAG mode. ■■ Configuring Static LAG Choose configure the static LAG: 1) Select an LAG for configuration. Group ID Select an LAG for static LAG configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 134
to load the following page. Figure 2-4 LACP Config Follow these steps to configure LACP: 1) Specify the system priority for the switch and click Apply. smaller MAC address has the higher priority. 2) Select member ports for the LAG and configure the related parameters. Click Apply. User Guide 109 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 135
supported by your switch. For example, if your switch supports LACPDU (Link Aggregation default, it is disabled. 2.2 Using the CLI 2.2.1 Configuring Load-balancing Algorithm Follow these steps to configure the load-balancing algorithm: Step 1 configure Enter global configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 136
Destination MAC address IPv6: Source XOR Destination MAC address Switch(config)#end Switch#copy running-config startup-config 2.2.2 Configuring Static LAG or LACP You can choose only one LAG mode for a port: Static LAG or LACP. And make sure both ends of a link use the same LAG mode. User Guide 111 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 137
configure static LAG: Step 1 configure Enter global configuration list ] Enter interface configuration mode. Step 3 4 show etherchannel num summary Verify the configuration of the static LAG. num: The LAG: Switch#configure Switch(config)# be aggregated d - default port Group Port-channel - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 138
address has the higher priority. pri: System priority. The valid values are from 0 to 65535, and the default link default value is 32768. A smaller value means a higher port priority. Step 6 show lacp sys-id Verify the global system priority. Step 7 show lacp internal Verify the LACP configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 139
6, set the mode as LACP, and select the LACPDU sending mode as active: Switch#configure Switch(config)#interface range gigabitEthernet 1/0/1-4 Switch(config-if-range)#channel-group 6 mode active Switch( 0x45 Switch(config-if-range)#end Switch#copy running-config startup-config User Guide 114 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 140
is as follows: 1) Considering there are multiple devices on each end, configure the load-balancing algorithm as 'SRC MAC+DST MAC'. 2) Add ports 1/0/1-8 to a static LAG. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 141
Priority Configuration 3) Click to save the settings. 3.1.4 Using the CLI The configurations of switch Configure the load-balancing algorithm as "src-dst-mac". Switch#configure Switch#copy running-config startup-config Verify the Configuration Switch#show etherchannel 1 summary Flags: D - - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 142
Configuring LAG Configuration Examples R - layer3 S - layer2 f - failed to allocate aggregator u - unsuitable for bundling w - waiting to be aggregated d - default the bandwidth and redundancy of the link between the two switches. 3.2.2 Configuration Scheme LAG function can bundle multiple - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 143
with T1600G-52TS, the following sections provide configuration procedure in Using the GUI The configurations of Switch A and SRC MAC+DST MAC'. Figure 3-2 Global Configuration 2) Choose the menu L2 FEATURES > bigger than 0. Figure 3-3 System Priority Configuration 3) In the LACP Table section, - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 144
similar. The following introductions take Switch A as an example. 1) Configure the load-balancing algorithm as "src-dst-mac". Switch#configure Switch(config)#port-channel load-balance src-dst-mac 2) Specify the gigabitEthernet 1/0/9 Switch(config-if)#channel-group 1 mode active User Guide 119 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 145
Switch#copy running-config startup-config Verify the Configuration Verify the system priority: Switch#show lacp sys-id 0, 000a.eb13.2397 Verify the LACP configuration: Switch#show lacp internal Flags: S Gi1/0/7 SA Down 0 0x1 0 0x7 0x45 Gi1/0/8 SA Down 0 0x1 0 0x8 0x45 User Guide 120 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 146
Configuring LAG Gi1/0/9 SA Down 1 Gi1/0/10 SA Down 2 Configuration Examples 0x1 0 0x9 0x45 0x1 0 0xa 0x45 User Guide 121 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 147
Configuring LAG Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of Switching are listed in the following tables. Table 4-1 Default Settings of LAG Parameter LAG Table Hash Algorithm LACP Config System Priority Admin Key Port Priority Mode Status Default Setting SRC - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 148
Part 5 Managing MAC Address Table CHAPTERS 1. MAC Address Table 2. MAC Address Configurations 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 149
Address Table MAC Address VLAN ID Port Type Aging Status 00:00:00:00:00:01 1 1 Dynamic Aging 00:00:00:00:00:02 1 2 Static No-Aging ... 1.2 Supported Features The address table of the switch contains dynamic addresses, static addresses and filtering addresses. Address Configurations - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 150
Managing MAC Address Table MAC Address Table ■■ Filtering address Filtering addresses are manually added and determine the packets with specific source or destination MAC addresses that will should dropped by the switch. User Guide 125 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 151
Address Configurations With MAC address table, you can: ■■ Add static MAC address entries ■■ Change the MAC address aging time ■■ Add filtering address entries ■■ View address table entries 2.1 Using the GUI 2.1.1 Adding Static MAC Address Entries You can add static MAC address entries by manually - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 152
belong to the specified VLAN. After you have added the static MAC address, if the corresponding port number of the MAC address is not correct, or the connected port (or the device) has been changed, the switch cannot forward the packets correctly. Please reset the static address entry appropriately - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 153
same VLAN, once an address is configured as a static address, it cannot be set as a filtering address, and vice versa. •• Multicast or broadcast addresses cannot be set as static addresses. •• Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. 2.1.2 Modifying - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 154
dropped. 2) Click Create. Note: •• In the same VLAN, once an address is configured as a filtering address, it cannot be set as a static address, and vice versa. •• Multicast or broadcast addresses cannot be set as filtering addresses . 2.1.4 Viewing Address Table Entries You can view entries in - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 155
Follow these steps to add static MAC address entries: Step 1 configure Enter global configuration mode. Step 2 mac address-table static mac-addr vid vid interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } Bind the MAC address, VLAN and port together to add a static - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 156
same VLAN, once an address is configured as a static address, it cannot be set as a filtering address, and vice versa. •• Multicast or broadcast addresses cannot be set as static addresses. •• Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. The following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 157
is xx:xx:xx:xx:xx:xx, for example, 00:00:00:00:00:01. vid: Specify an existing VLAN in which packets with the specific MAC address will be dropped. Step 3 end Return to privileged EXEC mode. Step 4 copy running-config startup-config Save the settings in the configuration file. User Guide 132 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 158
Managing MAC Address Table MAC Address Configurations Note: •• In the same VLAN, once an address is configured as a filtering address, it cannot be set as a static address, and vice versa. •• Multicast or broadcast addresses cannot be set as filtering addresses . The following example shows how - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 159
in the MAC Address Table Parameter Default Setting Static Address Entries None Dynamic Address Entries Auto-learning Filtering Address Entries None Table 3-2 Default Settings of Dynamic Address Table Parameter Default Setting Auto Aging Enabled Aging Time 300 seconds User Guide 134 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 160
Part 6 Configuring 802.1Q VLAN CHAPTERS 1. Overview 2. 802.1Q VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 161
Configuring 802.1Q VLAN Overview 1 Overview VLAN (Virtual Local Area Network) is a network technique that solves broadcasting issues in local area networks. It is usually applied in the following occasions: ■■ To restrict broadcast domain: VLAN technique divides a big local area network into - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 162
Configuring 802.1Q VLAN 802.1Q VLAN Configuration 2 802.1Q VLAN Configuration To complete 802.1Q VLAN configuration, follow these steps: 1) Configure the VLAN, including creating a VLAN and adding the desired ports to the VLAN. 2) Configure port parameters for 802.1Q VLAN. User Guide 137 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 163
802.1Q VLAN 802.1Q VLAN Configuration 2.1 Using the GUI 2.1.1 Configuring the VLAN Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Figure 2-1 Configuring VLAN Follow these steps to configure VLAN: 1) Enter a VLAN ID and a description - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 164
VLAN. 2.1.2 Configuring Port Parameters for 802.1Q VLAN Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > Port Config to load the following page. Figure 2-2 Configuring the Port Select a port and configure the parameters. Click Apply. PVID Set the default VLAN packets only. User Guide 139 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 165
Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to create VLAN 2 and name it as RD : Switch#configure Switch(config)#vlan 2 Switch(config-vlan)#name RD Switch(config-vlan)#show vlan id 2 User Guide 140 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 166
VLAN Follow these steps to add the port to the specified VLAN: Step 1 Step 2 Step 3 Step 4 configure Enter global configuration configuration mode. switchport general allowed vlan vlan-list { tagged | untagged } Add ports to the specified VLAN. vlan-list: Specify the ID or ID list of the VLAN(s) - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 167
-channel port-channel-id | range port-channel port-channel-list} Enter interface configuration mode. Step 3 Step 4 Step 5 switchport pvid vlan-id Configure the PVID of the port(s). By default, it is 1. vlan-id: The default VLAN ID of the port with the values between 1 and 4094. switchport check - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 168
VLAN 802.1Q VLAN Configuration The following example shows how to configure the PVID of port 1/0/5 as 2, enable the ingress checking and set the acceptable frame type as all: Switch#configure LAG: N/A Link Type: General Member in VLAN: Vlan ---1 Name ----------System-VLAN Egress-rule - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 169
other department. ■■ Terminal devices like computers usually do not support VLAN tags. Add untagged ports to the corresponding VLANs and specify the PVID. ■■ The intermediate link between two switches carries traffic from two VLANs simultaneously. Add the tagged ports to both VLANs. User Guide 144 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 170
to port 1/0/8 on Switch 2. Figure 3-1 Network Topology VLAN 10 Host A1 Gi1/0/2 Switch 1 Gi1/0/3 Host A2 Gi1/0/8 Gi1/0/4 Gi1/0/6 Switch 2 Gi1/0/7 VLAN 20 Host B1 Host B2 Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 171
A Configuration Example 2) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 20 with the description of Department_B. Add port 1/0/3 as an untagged port and port 1/0/4 as a tagged port to VLAN 20. Click Create. User Guide 146 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 172
Configuring 802.1Q VLAN Figure 3-3 Creating VLAN 20 for Department B Configuration Example 3) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > Port Config to load the following page. Set the PVID of port 1/0/2 as 10 and click Apply. Set the PVID of port 1/0/3 as 20 and click Apply. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 173
as Department-A. Similarly, create VLAN 20 for Department B, and configure the description as Department-B. Switch_1#configure Switch_1(config)#vlan 10 Switch_1(config-vlan)#name Department-A Switch_1(config-vlan)#exit Switch_1(config)#vlan 20 Switch_1(config-vlan)#name Department-B Switch_1(config - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 174
Switch_1#copy running-config startup-config Verify the Configurations Verify the VLAN configuration: Switch_1#show vlan VLAN Name Status 1 System-VLAN active 10 Department-A 20 Department-B active Gi1/0/25, Gi1/0/26, Gi1/0/27, Gi1/0/28 Gi1/0/2, Gi1/0/4 Gi1/0/3, Gi1/0/4 User Guide 149 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 175
Primary Secondary Type Ports Configuration Example Verify the VLAN configuration: Switch_1(config)#show interface switchport Port LAG Type PVID Acceptable frame type General 20 All Enable Gi1/0/4 N/A General 1 All Enable Gi1/0/5 N/A General 1 All Enable ... User Guide 150 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 176
Configuring 802.1Q VLAN Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of 802.1Q VLAN are listed in the following table. Table 4-1 Default Settings of 802.1Q VLAN Parameter Default Setting VLAN ID 1 PVID 1 Ingress Checking Enabled Acceptable Frame Types - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 177
Part 7 Configuring MAC VLAN CHAPTERS 1. Overview 2. MAC VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 178
change to port 2 this time. If port 1 and port 2 belong to different VLANs, the user has to re-configure the switch to access the original VLAN. Using MAC VLAN can free the user from such a problem. It divides VLANs based on the MAC addresses Server A is in VLAN 10 while Server B is in VLAN 20. It is - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 179
VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. 2.1.2 Binding the MAC Address to the VLAN Choose the menu L2 FEATURES > VLAN > MAC VLAN and click following page. Figure 2-1 Creating MAC VLAN to load the User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 180
2) Click Create. Note: One MAC address can be bound to only one VLAN. 2.1.3 Enabling MAC VLAN for the Port By default, MAC VLAN is disabled on all ports. You need to enable MAC VLAN for your desired ports manually. Choose the menu L2 FEATURES > VLAN > MAC VLAN to load the following page. Figure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 181
56:8A:4C:71 to VLAN 10, with the address description as Dept.A. Switch#configure Switch(config)#mac-vlan mac-address 00:19:56:8a:4c:71 vlan 10 description Dept.A Switch(config)#show mac-vlan vlan 10 MAC-Addr Name VLAN-ID 00:19:56:8A:4C:71 Dept.A 10 Switch(config)#end User Guide 156 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 182
} Enter interface configuration mode. mac-vlan Enable MAC VLAN for the port. show mac-vlan interface Verify the configuration of MAC VLAN on each interface VLAN for port 1/0/1. Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#mac-vlan Switch(config-if)#show mac-vlan - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 183
-19-56-8A-4C-71 Meeting Room 2 Laptop B 00-19-56-82-3B-70 3.2 Configuration Scheme You can configure MAC VLAN to meet this requirement. On Switch 1 and Switch 2, bind the MAC addresses of the laptops to the corresponding VLANs respectively. In this way, each laptop can access only the server in the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 184
the egress rule as Tagged. 2) On Switch 1 and Switch 2, bind the MAC addresses of the laptops to their corresponding VLANs, and enable MAC VLAN for the ports. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 3.3 Using - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 185
Configuring MAC VLAN Figure 3-2 Creating VLAN 10 Configuration Example 2) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 20, and add untagged port 1/0/1 and tagged port 1/0/2 to VLAN 20. Click Create. User Guide 160 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 186
MAC VLAN Figure 3-3 Creating VLAN 20 Configuration Example 3) Choose the menu L2 FEATURES > VLAN > MAC VLAN and click to load the following page. Specify the corresponding parameters and click Create to bind the MAC address of Laptop A to VLAN 10 and bind the MAC address of Laptop B to VLAN 20 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 187
Configuration Example 5) Click to save the settings. ■■ Configurations for Switch 3 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 10, and add untagged port 1/0/4 and tagged ports 1/0/2-3 to VLAN 10. Click Create. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 188
Configuring MAC VLAN Figure 3-6 Creating VLAN 10 Configuration Example 2) Click Create to load the following page. Create VLAN 20, and add untagged port 1/0/5 and tagged ports 1/0/2-3 to VLAN 20. Click Create. User Guide 163 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 189
configurations of Switch 1 and Switch 2 are the same. The following introductions take Switch 1 as an example. 1) Create VLAN 10 for Department A and create VLAN 20 for Department B. Switch_1#configure Switch_1(config)#vlan 10 Switch_1(config-vlan)#name deptA Switch_1(config-vlan)#exit User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 190
VLAN 10 and bind the MAC address of Laptop B to VLAN 20. Switch_1(config)#mac-vlan mac-address 00:19:56:8A:4C:71 vlan 10 description PCA Switch_1(config)#mac-vlan mac-address 00:19:56:82:3B:70 vlan 20 description PCB Switch_1(config)#end Switch_1#copy running-config startup-config ■■ Configurations - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 191
#copy running-config startup-config Verify the Configurations ■■ Switch 1 Switch_1#show mac-vlan all MAC Add Name VLAN-ID ---------- 00:19:56:8A:4C:71 PCA 10 00:19:56:82:3B:70 PCB 20 ■■ Switch 2 Switch_2#show mac-vlan all MAC Address Description VLAN 00:19:56:8A:4C:71 PCA - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 192
Configuring MAC VLAN Configuration Example VLAN -------1 10 20 Name Status Ports System-VLAN active Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8 ... DeptA active Gi1/0/2, Gi1/0/3, Gi1/0/4 DeptB active Gi1/0/2, Gi1/0/3, Gi1/0/5 User Guide 167 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 193
Configuring MAC VLAN Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of MAC VLAN are listed in the following table. Table 4-1 Default Settings of MAC VLAN Parameter Default Setting MAC Address None Description None VLAN ID None Port Enable Disabled User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 194
Part 8 Configuring Protocol VLAN CHAPTERS 1. Overview 2. Protocol VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 195
use different protocols, network administrators can use protocol VLAN to manage the network based on specific applications and services. The figure below shows a common application scenario of protocol VLAN. With protocol VLAN configured, Switch 2 can forward IPv4 and IPv6 packets from different - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 196
Configuration 2 Protocol VLAN Configuration To complete protocol VLAN configuration, follow these steps: 1) Configure 802.1Q VLAN. 2) Create protocol template. 3) Configure Protocol VLAN. Configuration Guidelines ■■ You can use the IP, ARP, RARP, and other protocol templates provided by TP-Link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 197
Configuring Protocol VLAN Protocol VLAN Configuration 2.1.2 Creating Protocol Template Choose the menu L2 FEATURES > VLAN > Protocol VLAN > Protocol Template to load the following page. Figure 2-1 Check the Protocol Template frame and is used to identify the data type of the frame. User Guide 172 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 198
steps to configure the protocol group: 1) In the Protocol Group Config section, specify the following parameters. Template Name Select the previously defined protocol template. VLAN ID/Name Enter the ID number or name of the 802.1Q VLAN that will be bound to the Protocol VLAN. User Guide 173 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 199
port of an LAG (Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations of the port can take effect only after it leaves the LAG. 2.2 Using the CLI 2.2.1 Configuring 802.1Q VLAN Before configuring protocol VLAN, create an 802.1Q VLAN and set the port type - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 200
shows how to create an IPv6 protocol template: Switch#configure Switch(config)#protocol-vlan template name IPv6 frame ether_2 ether-type 86dd Switch(config)#show protocol-vlan template Index Protocol Name Protocol Type 1 IP EthernetII ether-type 0800 2 ARP EthernetII ether-type 0806 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 201
. The following example shows how to bind the IPv6 protocol template to VLAN 10 and add port 1/0/2 to protocol VLAN: Switch#configure Switch(config)#show protocol-vlan template Index Protocol Name Protocol Type 1 IP EthernetII ether-type 0800 2 ARP EthernetII ether-type 0806 3 RARP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 202
Configuring Protocol VLAN Index Protocol-Name VID Priority Member 1 IPv6 10 5 Gi1/0/2 Switch(config-if)#end Switch#copy running-config startup-config Protocol VLAN Configuration User Guide 177 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 203
Configuration Scheme You can configure protocol VLAN on port 1/0/1 of Switch 2 to meet this requirement. When this port receives packets, Switch 2 will forward them to the corresponding VLANs according to their protocol types. The overview of the configuration on Switch 2 is as follows: User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 204
to the corresponding VLANs to form protocol groups, and add port 1/0/1 to the groups. For Switch 1, configure 802.1Q VLAN according to the network topology. Demonstrated with T1600G-28TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. User Guide 179 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 205
Example 3.3 Using the GUI ■■ Configurations for Switch 1 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 10, and add untagged port 1/0/1 and untagged port 1/0/3 to VLAN 10. Click Create. Figure 3-2 Create VLAN 10 User Guide 180 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 206
Configuring Protocol VLAN Configuration Example 2) Click to load the following page. Create VLAN 20, and add untagged ports 1/0/2-3 to VLAN 20. Click Create. Figure 3-3 Create VLAN 20 3) Click to save the settings. User Guide 181 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 207
VLAN Configuration Example ■■ Configurations for Switch 2 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 10, and add tagged port 1/0/1 and untagged port 1/0/2 to VLAN 10. Click Create. Figure 3-4 Create VLAN 10 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 208
Configuring Protocol VLAN Configuration Example 2) Click to load the following page. Create VLAN 20, and add tagged port 1/0/1 and untagged port 1/0/3 to VLAN 20. Click Create. Figure 3-5 Create VLAN 20 User Guide 183 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 209
. Click Apply. Figure 3-6 Port Configuration 4) Choose the menu L2 FEATURES > VLAN > Protocol VLAN > Protocol Template and click to load VLAN > Protocol VLAN > Protocol VLAN Group and click to load the following page. Select the IP protocol name (that is the IPv4 protocol template), enter VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 210
Configuring Protocol VLAN Figure 3-8 Configure the IPv4 Protocol Group Configuration Example Figure 3-9 Configure the IPv6 Protocol Group 6) Click to save the settings. User Guide 185 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 211
allowed vlan 10,20 untagged Switch_1(config-if)#end Switch_1#copy running-config startup-config ■■ Configurations for Switch 2 1) Create VLAN 10 and VLAN 20. Switch_2#configure Switch_2(config)#vlan 10 Switch_2(config-vlan)#name IPv4 Switch_2(config-vlan)#exit Switch_2(config)#vlan 20 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 212
EthernetII ether-type 8035 4 IPX SNAP ether-type 8137 5 AT SNAP ether-type 809b 6 IPv6 Ethernet II ether-type 86dd 4) Configure the protocol groups. Switch_2(config)#protocol-vlan vlan 10 priority 0 template 1 Switch_2(config)#protocol-vlan vlan 20 priority 0 template 6 User Guide 187 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 213
show vlan VLAN Name Status --------- 1 System-VLAN active 10 IPv4 20 IPv6 active active Ports Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4 ... Gi1/0/25, Gi1/0/26, Gi1/0/27, Gi1/0/28 Gi1/0/1, Gi1/0/3 Gi1/0/2, Gi1/0/3 ■■ Switch 2 Verify 802.1Q VLAN configuration: Switch_2#show vlan User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 214
Gi1/0/4 ... Gi1/0/25, Gi1/0/26, Gi1/0/27, Gi1/0/28 IPv4 active Gi1/0/1, Gi1/0/2 IPv6 active Gi1/0/1, Gi1/0/3 Verify protocol group configuration: Switch_2#show protocol-vlan vlan Index Protocol-Name VID 1 IP 10 2 IPv6 20 Priority -----0 0 Member ----------Gi1/0/1 Gi1/0/1 User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 215
Configuring Protocol VLAN Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of Protocol VLAN are listed in the following table. Table 4-1 Default Settings of Protocol VLAN Parameter Default Setting 1 2 Protocol Template Table 3 4 5 IP Ethernet II ether-type - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 216
Part 9 Configuring GVRP CHAPTERS 1. Overview 2. GVRP Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 217
Attribute Registration Protocol) application that allows registration and deregistration of VLAN attribute values and dynamic VLAN creation. Without GVRP operating, configuring the same VLAN on a network would require manual configuration on each device. As shown in Figure 1-1, Switch A, B and C are - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 218
on each port and configure the corresponding parameters. Configuration Guidelines To dynamically create a VLAN on all ports in a network link, you must configure the same static VLAN on both ends of the link. We call manually configured 802.1Q VLAN as static VLAN and VLAN created through GVRP as - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 219
the related parameters according to your needs. Port Select the desired port for GVRP configuration. It is multi-optional. Status Enable or disable GVRP on the port. By default, it is disabled. Registration Mode Select the GVRP registration mode for the port. Normal: In this mode, the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 220
centiseconds and should be an integral multiple of 5. The default value is 60 centiseconds. LAG Displays the LAG the port is in. 3) Click Apply. Note: •• The member port of an LAG follows the configuration of the LAG and not its own. The configurations of the port can take effect only after it - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 221
Configure the GVRP registration mode for the port. By default, it is normal. normal: In this mode, the port can dynamically register and deregister VLANs, and transmit both dynamic and static VLAN deregister VLANs, and can transmit only information of VLAN 1. default value is 1000 centiseconds. For - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 222
configuration of the LAG and not its own. The configurations of the port can take effect only after it leaves the LAG. •• The egress rule of the ports dynamically added to the VLAN configure the GVRP registration mode as fixed and keep the values of timers as default: Switch#configure Guide 197 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 223
network topology is complicated. Configuration of the same VLAN on different switches is B: VLAN 20 Switch 4 Dept. B: VLAN 20 3.2 Configuration Scheme To reduce manual configuration and VLANs and allow the port to transmit only the static VLAN registration information. ■■ To configure dynamic VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 224
Configuring GVRP Configuration Example Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 3.3 Using the GUI GVRP configurations for Switch 3 are the same as Switch 1, and Switch 4 are the same as Switch 2. Other - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 225
Keep the values of the timers as default. Click Apply. Figure 3-3 GVRP Configuration 3) Click to save the settings. ■■ Configurations for Switch 2 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 20 and add tagged port 1/0/1 to it - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 226
Create VLAN 20 Configuration Example 2) Choose the menu L2 FEATURES > VLAN > GVRP to load the following page. Enable GVRP globally, then click Apply. Select port 1/0/1, set Status as Enable, and set Registration Mode as Fixed. Keep the values of the timers as default. Click Apply. User Guide 201 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 227
settings. ■■ Configurations for Switch 5 1) Choose the menu L2 FEATURES > VLAN > GVRP to load the following page. Enable GVRP globally, then click Apply. Select ports 1/0/1-3, set Status as Enable, and keep the Registration Mode and the values of the timers as default. Click Apply. User Guide 202 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 228
1 1) Enable GVRP globally. Switch_1#configure Switch_1(config)#gvrp 2) Create VLAN 10. Switch_1(config)#vlan 10 Switch_1(config-vlan)#name Department_A Switch_1(config-vlan)#exit 3) Add tagged port 1/0/1 to VLAN 10. Enable GVRP on the port and set the registration mode as Fixed. User Guide 203 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 229
#copy running-config startup-config ■■ Configurations for Switch 2 1) Enable GVRP globally. Switch_2#configure Switch_2(config)#gvrp 2) Create VLAN 20. Switch_2(config)#vlan 20 Switch_2(config-vlan)#name Department_B Switch_2(config-vlan)#exit 3) Add tagged port 1/0/1 to VLAN 20. Enable GVRP on the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 230
Configuration ■■ Switch 1 Verify the global GVRP configuration: Switch_1#show gvrp global GVRP Global Status Enabled Configuration Example Verify GVRP configuration the global GVRP configuration: Switch_2#show gvrp global GVRP Global Status Enabled Verify GVRP configuration for port 1/0/1: - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 231
Normal ... 1000 ■■ Switch 5 Verify global GVRP configuration: GVRP Global Status Enabled 20 60 N/A Verify GVRP configuration for ports 1/0/1-3: Switch_5#show gvrp interface Port 60 N/A Gi1/0/3 Enabled Normal 1000 20 60 N/A Gi1/0/4 Disabled Normal 1000 20 60 N/A ... User Guide 206 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 232
Configuring GVRP Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of GVRP are listed in the following tables. Table 4-1 Default Settings of GVRP Parameter Global Config GVRP Port Config Status Registration Mode LeaveAll Timer Join Timer Leave Timer Default Setting - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 233
Part 10 Configuring Layer 2 Multicast CHAPTERS 1. Layer 2 Multicast 2. IGMP Snooping Configuration 3. MLD Snooping Configuration 4. MVR Configuration 5. Multicast Filtering Configuration 6. Viewing Multicast Snooping Information 7. Configuration Examples 8. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 234
Configuring Layer 2 Multicast 1 resources and impacting information security. Multicast, however, solves all the problems caused by unicast and broadcast. With multicast, the source only need Internet information provider can provide value-added services such as Online Live, IPTV, Distance Guide 209 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 235
Configuring Layer 2 Multicast Layer 2 Multicast Demonstrated as below: Figure 1-1 IGMP Snooping Multicast packets transmission without IGMP Snooping IGMP Querier Multicast the IGMP querier. Member Port A member port is a port on snooping switch that is connecting to the host. User Guide 210 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 236
Configuring Layer 2 Multicast Layer 2 Multicast 1.2 Supported Features Layer 2 Multicast protocol for IPv4: IGMP Snooping On the Layer 2 device, IGMP Snooping transmits data on demand on data link layer by analyzing IGMP packets between the IGMP querier and the users, to build and maintain Layer 2 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 237
statically join a group. Note: IGMP Snooping takes effect only when it is enabled globally, in the corresponding VLAN and port at the same time. 2.1 Using the GUI 2.1.1 Configuring IGMP Snooping Globally Choose the menu L2 FEATURES > Multicast > IGMP Snooping > Global Config to load the following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 238
or Discard. By default, it is Forward. Configuring IGMP Snooping for VLANs Before configuring IGMP Snooping for VLANs, set up the VLANs that the router ports and the member ports are in. For details, please refer to Configuring 802.1Q VLAN. The switch supports configuring IGMP Snooping on a per-VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 239
for VLAN IGMP Snooping Configuration Follow these steps to configure IGMP Snooping for a specific VLAN: 1) Enable IGMP Snooping for the VLAN, and configure the corresponding parameters. VLAN ID Displays the VLAN ID. IGMP Snooping Status Enable or disable IGMP Snooping for the VLAN. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 240
Layer 2 Multicast IGMP Snooping Configuration Fast Leave Report Suppression Member Port Aging Time Router Port Aging Time Enable or disable Fast Leave for the VLAN. IGMPv1 does not support Fast Leave. Without Fast Leave port as a router port and delete it from the router port list. User Guide 215 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 241
forwarding table. With IGMP Snooping Querier enabled, specify the source IP address of the general query messages sent by the switch. It should be a unicast address. Select one or more ports to be the static router ports in the VLAN. Static router ports do not age. Multicast streams and IGMP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 242
page. Figure 2-3 Configure IGMP Snooping for Ports Follow these steps to configure IGMP Snooping for ports does not support fast leave. Fast Leave can be enabled on a per-port basis or per-VLAN basis. When Configuring IGMP Snooping for VLANs. Displays the LAG the port belongs to. 2.1.4 Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 243
> IGMP Snooping > Static Group Config and click to load the following page. Figure 2-4 Configure Hosts to Statically Join a Group Follow these steps to configure hosts to statically join a group: 1) Specify the multicast IP address, VLAN ID. Select the ports to be the static member ports of the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 244
ip igmp snooping drop-unknown (Optional) Configure the way how the switch processes multicast streams that are sent to unknown multicast groups as Discard. By default global configuration mode. Step 5 ip igmp ip igmp snooping Show the basic IGMP Snooping configuration in the configuration file. The - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 245
startup-config 2.2.2 Configuring IGMP Snooping for VLANs Before configuring IGMP Snooping for VLANs, set up the VLANs that the router ports and the member ports are in. For details, please refer to Configuring 802.1Q VLAN. The switch supports configuring IGMP Snooping on a per-VLAN basis. After - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 246
being mistakenly removed from the multicast group when only some of them want to leave. ip igmp snooping vlan-config vlan-id-list report-suppression (Optional) Enable the Report Suppression for the VLANs. By default, it is disabled. When enabled, the switch will only forward the first IGMP report - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 247
Layer 2 Multicast IGMP Snooping Configuration Step 6 Step 7 Step 8 ip igmp snooping vlan-config vlan-id-list immediate-leave (Optional) Enable the Fast Leave for the VLANs. By default, it is disabled. IGMPv1 does not support fast leave. Without Fast Leave, after a receiver sends an IGMP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 248
default value is 60 seconds. ip-addr: Specify the source IP address of the general query messages sent by the switch. It should be a unicast address. By default default value is 1 second. Step 10 show ip igmp snooping vlan vlan-id Show the basic IGMP Snooping configuration in the specified VLAN. - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 249
query count as 3, and the general query source IP as 192.168.0.5: Switch#configure Switch(config)#ip igmp snooping vlan-config 1 querier Switch(config)#ip igmp snooping vlan-config 1 querier query-interval 100 Switch(config)#ip igmp snooping vlan-config 1 querier max-response-time 15 Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 250
interface configuration mode. Step 3 ip igmp snooping Enable IGMP Snooping for the port. By default, it is enabled. Step 4 Step 5 ip igmp port. For more details about Fast Leave, see 2.2.2 Configuring IGMP Snooping for VLANs. show ip igmp snooping interface [fastEthernet [ port-list ] | - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 251
global configuration mode. Step 2 ip igmp snooping vlan-config vlan-id-list static ip interface { fastEthernet port-list | gigabitEthernet port-list | ten-gigabitEthernet port-list| port-channel lag-list } vlan-id-list: Specify the ID or the ID list of the VLAN(s). ip: Specify the IP address of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 252
Configuring Layer 2 Multicast IGMP Snooping Configuration Switch(config)#show ip igmp snooping groups static Multicast-ip VLAN-id Addr-type Switch-port ----------- 239.1.2.3 2 static Gi1/0/1-3 Switch(config)#end Switch#copy running-config startup-config User Guide 227 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 253
is enabled globally, in the corresponding VLAN and port at the same time. 3.1 Using the GUI 3.1.1 Configuring MLD Snooping Globally Choose the menu L2 Configure the way in which the switch processes data that are sent to unknown multicast groups as Forward or Discard. By default . User Guide 228 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 254
2) Click Apply. 3.1.2 Configuring MLD Snooping for VLANs Before configuring MLD Snooping for VLANs, set up the VLANs that the router ports and the member ports are in. For details, please refer to Configuring 802.1Q VLAN. The switch supports configuring MLD Snooping on a per-VLAN basis. After MLD - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 255
out a configured number (Last Listener Query Count) of Multicast-Address-Specific Queries (MASQs) on that port with a configured interval ( multicast forwarding table. Specify the aging time of the router ports in the VLAN. Once the switch receives an MLD general query message from a port, Guide 230 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 256
Configuration Leave Time MLD Snooping Querier Query Interval Maximum Response Time Last Listener Query Interval Last Listener Query Count General Query Source IP Static Router Ports Forbidden Router Ports 2) Click Save. Specify the leave time for the VLAN it obtains the address of the multicast - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 257
following page. Figure 3-3 Configure MLD Snooping for Ports Follow these steps to configure MLD Snooping for ports: basis or per-VLAN basis. When enabled on a per-port basis, the Configuring MLD Snooping for VLANs. Displays the LAG the port belongs to. 3.1.4 Configuring Hosts - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 258
Configure Hosts to Statically Join a Group Follow these steps to configure hosts to statically join a group: 1) Specify the multicast IP address, VLAN group. Multicast IP Specify the IPv6 address of the multicast group that the hosts need to join. VLAN ID Specify the VLAN that the hosts - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 259
refer to Configuring 802.1Q VLAN. The switch supports configuring MLD Snooping on a per-VLAN basis. After MLD Snooping is enabled globally, you also need to enable MLD Snooping and configure the corresponding parameters for the VLANs that the router ports and the member ports are in. User Guide 234 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 260
Follow these steps to configure MLD Snooping for VLANs: Step 1 configure Enter global configuration mode. Step 2 ipv6 mld snooping vlan-config vlan-id-list mtime member-time Enable MLD Snooping for the specified VLANs, and specify the member port aging time for the VLANs. vlan-id-list: Specify - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 261
Configuration Step 5 Step 6 Step 7 Step 8 ipv6 mld snooping vlan-config vlan-id-list report-suppression (Optional) Enable Report Suppression for the VLANs. By default configured number (Last Listener Query Count) of Multicast-Address-Specific Queries (MASQs) on that port with a configured interval - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 262
Query Source IP. Use the command below in global configuration mode to configure the parameters: ipv6 mld snooping vlan-config vlan-id-list querier by the switch. ip-addr: Specify the source IP address of the general query messages sent by the switch. It should be a unicast address. num: Specify - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 263
querier for VLAN 1, and configure the IP as 2000::1:2345:6789:ABCD: Switch#configure Switch(config)#ipv6 mld snooping vlan-config 1 querier Switch(config)#ipv6 mld snooping vlan vlan-config 1 querier general-query source-ip 2000::1:2345:6789:ABCD Switch(config)#show ipv6 mld snooping vlan 1 Vlan - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 264
port-channel-list} Enter interface configuration mode. ipv6 mld snooping Enable MLD Snooping for the port. By default, it is enabled. ipv6 mld to the port. For more details about Fast Leave, see 3.2.2 Configuring MLD Snooping for VLANs. show ipv6 mld snooping interface [fastEthernet [ port-list ] | - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 265
Enter global configuration mode. ipv6 mld snooping vlan-config vlan-id-list static ip interface {fastEthernet port-list | gigabitEthernet port-list | ten-gigabitEthernet port-list | port-channel lag-list} vlan-id-list: Specify the ID or the ID list of the VLAN(s). ip: Specify the IP address of the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 266
Configuring Layer 2 Multicast MLD Snooping Configuration Multicast-ip VLAN-id Addr-type Switch-port ----------- ff80::1234:1 2 static Gi1/0/1-3 Switch(config)#end Switch#copy running-config startup-config User Guide 241 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 267
MVR for the ports. 5) (Optional) Statically add ports to MVR groups. Configuration Guidelines ■■ MVR does not support IGMPv3 messages. ■■ Do not configure MVR on private VLAN ports, otherwise MVR cannot take effect. ■■ MVR operates on the underlying mechanism of IGMP Snooping, but the two features - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 268
must be statically configured to transmit all the required multicast streams to the switch via the multicast VLAN. Dynamic: In configured on the switch. Current Multicast Groups 2) Click Apply. Displays the current number of multicast groups that have been configured on the switch. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 269
Configuration 4.1.3 Adding Multicast Groups to MVR You need to manually address. 2) Click Create. Then the added multicast groups will appear in the MVR group table, as the following figure shows: Figure 4-3 MVR Group Table MVR Group IP Displays the IP address of multicast group. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 270
2 Multicast MVR Configuration Status Member Displays the status of the MVR group. In compatible mode, all the MVR groups are added manually, so the status . Displays the member ports in this MVR group. 4.1.4 Configuring MVR for the Port Choose the menu L2 FEATURES > Multicast > MVR - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 271
, while in dynamic mode, you need to manually add them to the corresponding multicast groups. Receiver: Configure the ports that are connecting to the hosts as receiver ports. A receiver port can only belong to one VLAN, and cannot belong to the multicast VLAN. In both modes, the switch will add - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 272
CLI 4.2.1 Configuring 802.1Q VLANs Before configuring MVR, create an 802.1Q VLAN as the multicast VLAN. Add the all source ports to the multicast VLAN as tagged ports. Configure 802.1Q VLANs for are from 1 to100 tenths of a second, and the default value is 5 tenths of a second. User Guide 247 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 273
ip-addr: Specify the start IP address of the contiguous series of multicast groups. count: Specify the number of the multicast groups to be added to the MVR. The range is 1 to 511. show mvr Show the global MVR configuration configure Switch(config)#mvr mode compatible Switch(config)#mvr vlan Vlan - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 274
} Enter interface configuration mode. mvr Enable MVR for the port. mvr type { source | receiver } Configure the MVR port type as receiver or source. By default, the port to an MVR group. vlan-id: Enter the multicast VLAN ID. ip-addr: Specify the IP address of the multicast group. User Guide 249 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 275
to group 239.1.2.3 and enable MVR Fast Leave for these ports. The multicast VLAN is VLAN 2. Switch#configure Switch(config)#interface gigabitEthernet 1/0/7 Switch(config-if)#mvr Switch(config-if)#mvr type Source INACTIVE/InVLAN Disable Switch(config-if-range)#show mvr members User Guide 250 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 276
Configuring Layer 2 Multicast MVR Group IP status Members --------- 239.1.2.3 active Gi1/0/1-3, 1/0/7 Switch(config)#end Switch#copy running-config startup-config MVR Configuration User Guide 251 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 277
, follow these steps: 1) Create the IGMP profile or MLD profile. 2) Configure multicast groups a port can join and the overflow action. 5.1 Using the GUI 5.1.1 Creating the a multicast profile for IPv6, choose the menu L2 FEATURES > Multicast > Multicast Filtering > IPv6 Profile. User Guide 252 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 278
Layer 2 Multicast Figure 5-1 Create IPv4 Profile Multicast Filtering Configuration Follow these steps to create a profile. 1) In multicast groups. 2) In the IP-Range section, click to load the following page. Configure the start IP address and end IP address of the multicast groups to be - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 279
> Multicast Filtering > IPv4 Port Binding to load the following page. Note: For IPv6, choose the menu L2 FEATURES > Multicast > Multicast Filtering > IPv6 Port Binding. Figure 5-3 Configure Multicast Filtering for Ports User Guide 254 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 280
: Replace the existing multicast group that has the lowest multicast MAC address with the new multicast group. LAG Displays the LAG the port belongs 1 Step 2 configure Enter global configuration mode. ip igmp profile id Create a new profile and enter profile configuration mode. User Guide 255 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 281
ports from joining specific multicast groups. Step 4 Step 5 Step 6 Step 7 range start-ip end-ip Configure the range of multicast IP addresses to be filtered. start-ip / end-ip: Specify the start IP address and end IP address of the IP range. show ip igmp profile [id] Show the detailed IGMP profile - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 282
groups. Step 4 range start-ip end-ip Configure the range of multicast IP addresses to be filtered. start-ip / end-ip: Specify the start IP address and end IP address of the IP range. Step 5 show ipv6 mld ff01::1234:8 Switch(config)#end Switch#copy running-config startup-config User Guide 257 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 283
owning the lowest multicast MAC address with the new multicast group. show ip igmp profile [id] Show the detailed IGMP profile configurations. Step 7 Step 8 show ip igmp snooping interface [fastEthernet copy running-config startup-config Save the settings in the configuration file. User Guide 258 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 284
configure Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ip igmp snooping Switch(config-if)#ip igmp filter 1 Switch(config-if)#ip igmp snooping max-groups 50 Switch(config-if)#ip port-channel port-channel-list} Enter interface configuration mode. ipv6 mld filter profile-id Bind - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 285
the existing multicast group owning the lowest multicast MAC address with the new multicast group. show ipv6 mld profile [id] Show the detailed MLD profile configuration. show ipv6 mld snooping interface [fastEthernet [ -if)#show ipv6 mld profile MLD Profile 1 ... Binding Port(s) User Guide 260 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 286
Configuring Layer 2 Multicast Multicast Filtering Configuration Gi1/0/2 Switch(config-if)#show ipv6 mld snooping interface gigabitEthernet 1/0/2 max-groups Port Max-Groups Overflow-Action Gi1/0/2 50 Drops Switch(config)#end Switch#copy running-config startup-config User Guide 261 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 287
Configuring IP Displays the multicast source IP address. VLAN ID Displays the ID of the VLAN the multicast group belongs to. Source Displays the source of the multicast entry. IGMP Snooping: The multicast entry is learned by IGMP Snooping. MVR: The multicast entry is learned by MVR. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 288
Configuring Layer 2 Multicast Viewing Multicast Snooping Information Type Forward Ports Displays how the multicast entry is generated. Dynamic: The entry is dynamically learned. All the member ports are dynamically added to the multicast group. Static: The entry is manually . User Guide 263 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 289
Configuring Layer 2 IP-VLAN-Port entries: Multicast IP Displays the multicast source IP address. VLAN ID Displays the ID of the VLAN the multicast group belongs to. Source Displays the source of the multicast entry. MLD Snooping: The multicast entry is learned by MLD Snooping. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 290
Configuring Layer 2 Multicast Viewing Multicast Snooping Information Type Forward Port Displays how the multicast entry is generated. Dynamic: The entry is dynamically learned. All the member ports are dynamically added to the multicast group. Static: The entry is manually . User Guide 265 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 291
Configuring IPv4 Multicast Snooping Information show ip igmp snooping groups [ vlan vlan-id ] [count | dynamic specific multicast group in all VLANs or in the specific VLAN. count: Displays the number of the number of static multicast groups. show ip igmp snooping interface [ fastEthernet [ port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 292
Configurations show ipv6 mld snooping groups [vlan vlan-id ] [count | dynamic | dynamic count | static | static count ] Displays information of specific multicast group in all VLANs or in the specific VLAN . clear ipv6 mld snooping statistics Clear all statistics of all MLD packets. User Guide 267 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 293
Source Internet Querier Gi1/0/1 Gi1/0/4 Gi1/0/3 Gi1/0/2 Host B Receiver Host C Receiver VLAN 10 Host D Receiver 7.1.2 Configuration Scheme ■■ Add the three member ports and the router port to a VLAN and configure their PVIDs. ■■ Enable IGMP Snooping globally and in the VLAN. User Guide 268 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 294
■■ Enable IGMP Snooping on the ports. Demonstrated with T1600G-28TS, this section provides configuration procedures in two ways: using the GUI and using the CLI. 7.1.3 Using the GUI 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 295
globally. Configure the IGMP version as v3 so that the switch can process IGMP messages of all versions. Then click Apply. Figure 7-4 Configure IGMP Snooping Globally 4) In the IGMP VLAN Config section, click in VLAN 10 to load the following page. Enable IGMP Snooping for VLAN 10. User Guide 270 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 296
load the following page. Enable IGMP Snooping for ports 1/0/1-4. Figure 7-6 Enable IGMP Snooping for the Ports 6) Click to save the settings. 7.1.4 Using the CLI 1) Create VLAN 10. Switch#configure Switch(config)#vlan 10 Switch(config-vlan)#name vlan10 Switch(config-vlan)#exit User Guide 271 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 297
Layer 2 Multicast Configuration Examples 2) Add port 1/0/1-3 to VLAN 10 and set the link type as untagged. Add port 1/0/4 to VLAN 10 and set the link type as tagged. Switch(config)#interface range gigabitEthernet 1/0/1-3 Switch(config-if-range)#switchport general allowed vlan 10 untagged Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 298
VLAN: Switch(config)#show ip igmp snooping IGMP Snooping :Enable IGMP Version :V3 Header Validation :Disable Global Authentication Accounting :Disable Enable Port : Gi1/0/1-4 Enable VLAN:10 7.2 Example for Configuring port 1/0/3 belong to VLAN 10, VLAN 20 and VLAN 30 respectively. Port 1/0/4 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 299
Querier to transmit the streams of multicast group 225.1.1.1 to the switch via the multicast VLAN. Here we take the MVR dynamic mode as an example. Demonstrated with T1600G-28TS, this section provides configuration procedures in two ways: using the GUI and using the CLI. 7.2.4 Using the GUI 1) Add - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 300
2 Multicast Figure 7-8 VLAN Configurations for Port 1/0/1-3 Configuration Examples Figure 7-9 PVID for Port 1/0/1-3 2) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 40 and add port 1/0/4 to the VLAN as Tagged port. User Guide 275 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 301
the menu L2 FEATURES > Multicast > MVR > MVR Config to load the following page. Enable MVR globally, and configure the MVR mode as Dynamic, multicast VLAN ID as 40. Figure 7-11 Configure MVR Globally 4) Choose the menu L2 FEATURES > Multicast > MVR > MVR Group Config and click to load the following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 302
to VLAN 10, VLAN 20 and VLAN 30 as untagged ports respectively, and configure the PVID of port 1/0/1 as 10, port 1/0/2 as 20, port 1/0/3 as 30. Add port 1/0/4 to VLAN 40 as tagged port and configure the PVID as of port 1/0/4 as 40. Switch(config)#interface gigabitEthernet 1/0/1 User Guide 277 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 303
only belong to VLAN 10, VLAN 20 and VLAN 30 respectively. If not, delete them from the other VLANs. By default, all ports are in VLAN 1, so you need to delete them from VLAN 1. Switch(config)#show vlan brief VLAN Name Status Ports --------- 1 System-VLAN active Gi1/0/1, Gi1 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 304
)#end Switch#copy running-config startup-config Verify the Configurations Show the brief information of all VLANs: Switch(config)#show vlan brief VLAN Name Status Ports --------- 1 System-VLAN active Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, ... 10 VLAN10 active Gi1 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 305
(config)#show mvr members MVR Group IP Status Members 225.1.1.1 active Gi1/0/4 7.3 Example for Configuring Unknown Multicast and Fast Leave 7.3.1 Network Requirement A user experiences lag when he is changing channel on his IPTV. He wants solutions to this problem. As shown in the following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 306
Figure 7-14 Network Topology for Unknow Multicast and Fast Leave Configuration Examples Source Internet Querier Gi1/0/4 VLAN 10 Gi1/0/2 VLAN 10 Host B Receiver 7.3.2 Configuration Scheme After the channel is changed, the client (Host B) still receives irrelevant multicast data, the data - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 307
Globally Configuration Examples Note: IGMP Snooping and MLD Snooping share the setting of Unknown Multicast, so you have to enable MLD Snooping globally on the L2 FEATURES > Multicast > MLD Snooping > Global Config page at the same time. 3) In the IGMP VLAN Config section, click in VLAN 10 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 308
-if)#ip igmp snooping Switch(config-if)#ip igmp snooping immediate-leave Switch(config-if)#exit Switch(config)#interface gigabitEthernet 1/0/4 Switch(config-if)#ip igmp snooping Switch(config-if)#exit 4) Enable IGMP Snooping in VLAN 10. Switch(config)#ip igmp snooping vlan-config 10 User Guide 283 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 309
VLAN:10 Show settings of IGMP Snooping on port 1/0/2: Switch(config)#show ip igmp snooping interface gigabitEthernet 1/0/2 basic-config Port IGMP-Snooping Fast-Leave Gi1/0/2 enable enable 7.4 Example for Configuring profile and binding it to the corresponding member port. User Guide 284 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 310
10. Figure 7-18 Network Topology for Multicast Filtering Source Internet Querier VLAN 10 Gi1/0/1 Gi1/0/4 Gi1/0/3 Gi1/0/2 Host B Receiver Host C Receiver Host D Receiver Demonstrated with T1600G-28TS, this section provides configuration procedures in two ways: using the GUI and using the CLI - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 311
Configuring Layer 2 Multicast Figure 7-19 Enable IGMP Snooping Globally Configuration Examples 3) In the IGMP VLAN Config section, click in VLAN 10 to load the following page. Enable IGMP Snooping for VLAN 10. Figure 7-20 Enable IGMP Snooping for VLAN 10 User Guide 286 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 312
Layer 2 Multicast Configuration Examples 4) Choose the menu L2 FEATURES > Multicast > IGMP Snooping > Port Config to load mode as Permit, bind the profile to port 1/0/2-3, and specify the filtering multicast IP address as 225.0.0.1. Then click Back to return to the IPv4 Profile Table page. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 313
2 Multicast Figure 7-22 Configure Filtering Profile for Host C and Host D Configuration Examples 6) Click again to load the following page. Create Profile 2, specify the mode as Deny, bind the profile to port 1/0/1, and specify the filtering multicast IP address as 225.0.0.2. User Guide 288 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 314
settings. 7.4.5 Using the CLI 1) Create VLAN 10. Switch#configure Switch(config)#vlan 10 Switch(config-vlan)#name vlan10 Switch(config-vlan)#exit 2) Add port 1/0/1-3 to VLAN 10 and set the link type as untagged. Add port 1/0/4 to VLAN 10 and set the link type as tagged. Switch(config)#interface - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 315
)#ip igmp snooping vlan-config 10 6) Enable IGMP Snooping on port 1/0/1-4. Switch(config)#interface range gigabitEthernet 1/0/1-4 Switch(config-if-range)#ip igmp snooping Switch(config-if-range)#exit 7) Create Profile 1, configure the mode as permit, and add an IP range with both start IP and end IP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 316
:V3 ... Enable Port:Gi1/0/1-4 Enable VLAN:10 Show all profile bindings: Switch(config)#show ip igmp profile IGMP Profile 1 permit range 225.0.0.1 225.0.0.1 Binding Port(s) Gi1/0/2-3 IGMP Profile 2 deny range 225.0.0.2 225.0.0.2 Binding Port(s) Gi1/0/1 Configuration Examples User Guide 291 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 317
Configuring Layer 2 Multicast Appendix: Default Parameters 8 Appendix: Default Parameters 8.1 Default Parameters for IGMP Snooping Table 8-1 Default Settings in the VLAN IGMP Snooping Querier General Query Source IP Static Router Ports Static Multicast Group Entries Default Setting Disabled v3 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 318
Configuring Layer 2 Multicast Appendix: Default Parameters 8.2 Default Parameters for MLD Snooping Table 8-2 Default Parameters of MLD in the VLAN MLD Snooping Querier Query Interval Maximum Response Time Last Listener Query Interval Last Listener Query Count General Query Source IP Static - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 319
Configuring Layer 2 Multicast Appendix: Default Parameters 8.3 Default Parameters for MVR Table 8-3 Default Parameters of MVR Function Parameter MVR MVR Mode Global Settings of MVR Multicast VLAN ID Query Response Time Maximum Multicast Groups MVR Group Settings MVR Group Entries MVR - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 320
Part 11 Configuring Spanning Tree CHAPTERS 1. Spanning Tree 2. STP/RSTP Configurations 3. MSTP Configurations 4. STP Security Configurations 5. Configuration Example for MSTP 6. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 321
Configuring Spanning Tree 1 Spanning Tree Spanning Tree 1.1 Overview STP STP (Spanning Tree Protocol) is a layer 2 Protocol that prevents loops in the network. As is shown in Figure 1-1, STP helps to: ■■ Block specific ports of the switches to build a loop-free topology. ■■ Detect topology changes - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 322
to select the root bridge. It is composed of a 2-byte priority and a 6-byte MAC address. The priority is allowed to be configured manually on the switch, and the switch with the lowest priority value will be elected as the root from another switch, it will become an alternate port. User Guide 297 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 323
Configuring Spanning Tree Spanning Tree In RSTP/ the port receives and sends BPDUs. It also receives the other user packets to update its MAC address table, and forwards them. ■■ Disabled In this status, the port is not participating in the Blocking, Listening and Disabled, and the User Guide 298 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 324
It also receives the other user packets to update its MAC address table, but doesn't forward them. ■■ Forwarding In this manually configured on each port. If not, the path cost values are automatically calculated according to the link speed as shown below: Table 1-1 The Default Path Cost Value Link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 325
Configuring Spanning Tree Spanning Tree downstream switch. The value of the accumulated root path cost increases as the BPDU spreads the same following characteristics are considered as in the same region: ■■ Same region name ■■ Same revision level ■■ Same VLAN-Instance mapping User Guide 300 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 326
VLANs and instances. Multiple VLANs can be mapped to a same instance, but one VLAN can be mapped to only one instance. As Figure 1-4 shows, VLAN 3 is mapped to instance 1, VLAN 4 and VLAN 5 are mapped to instance 2, the other VLANs By default, all the VLANs are configurations or BPDU attacks. - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 327
Configuring Spanning Tree Spanning Tree »» Loop Protect Loop Protect function is used to prevent loops caused by link congestions or link failures. It is recommended to enable this function on root ports and alternate ports. If the switch cannot receive BPDUs because of link congestions or link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 328
entries. It is recommended to enable this function on the ports of non-root switches. A switch removes MAC address entries upon receiving TC-BPDUs (the packets used to announce changes in the network topology). If a user maliciously sends a large number of TC-BPDUs to a switch in a short period - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 329
tree. ■■ To avoid any possible network flapping caused by STP/RSTP parameter changes, it is recommended to enable STP/RSTP function globally after configuring the relevant parameters. 2.1 Using the GUI 2.1.1 Configuring STP/RSTP Parameters on Ports Choose the menu L2 FEATURES > Spanning Tree - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 330
default setting is Auto, which means the port calculates the internal path cost automatically according to the port's link speed. This parameter is only used in MSTP and you need not to configure port as an edge port. When the topology is changed, the edge port can transit its state from blocking to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 331
RSTP Configurations MCheck the port is disconnected from the STP-enabled device. The MCheck configuration can take effect only once, after that the MCheck status of device. Displays the LAG the port belongs to. 2.1.2 Configuring STP/RSTP Globally Choose the menu L2 FEATURES > Spanning Tree > - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 332
the interval between BPDUs' sending. The default value is 2.The root bridge sends configuration BPDUs at an interval of Hello Time. It works with the MAX Age to test the link failures and maintain the spanning tree. number of BPDU that can be sent in a second. The default value is 5. User Guide 307 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 333
Configurations Max Hops Specify the maximum BPDU counts that can be forwarded in a MST region. The default a parameter configured in MSTP. You need not configure it if on the switch. By default, it's STP. STP Configurations Verify the STP/RSTP information of your switch after all the configurations - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 334
Spanning Tree Figure 2-3 Verifying the STP/RSTP Configurations STP/RSTP Configurations The STP Summary section shows the summary information of spanning tree : Spanning Tree Displays the status of the of IST. It is not displayed when you choose the spanning tree mode as STP/RSTP. User Guide 309 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 335
Displays how many times the topology has changed. 2.2 Using the CLI 2.2.1 Configuring STP/RSTP Parameters on Ports Follow these steps to configure STP/RSTP parameters on ports: Step 1 Step 2 Step 3 configure Enter global configuration mode. interface {fastEthernet port | range fastEthernet port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 336
to set the port as an edge port. By default, it is disabled. When the topology is changed, the edge port can transit its state from blocking automatically checks if the port is connected to a P2P link, then sets the status as Open or Closed. Open is used in the configuration file. User Guide 311 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 337
example shows how to enable spanning tree function on port 1/0/3 and configure the port priority as 32 : Switch#configure Switch(config)#interface gigabitEthernet 1/0/3 Switch(config-if)#spanning-tree Switch( with the higher priority will be elected as the root bridge in CIST. User Guide 312 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 338
maxage]} (Optional) Configure the Forward Delay, the default value default value is 2. The root bridge sends configuration BPDUs at an interval of Hello Time. It works with the MAX Age to test the link pps, and the default value is 5. show configuration configure the priority of the switch as - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 339
Configurations Switch#configure to configure the configure Enter global configuration mode. spanning-tree mode { stp | rstp } Configure configuration file. This example shows how to enable spanning tree function, configure the spanning tree mode as RSTP and verify the configurations: Switch#configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 340
Configurations Switch(config)#show spanning-tree active Spanning tree is enabled Spanning-tree's mode: RSTP (802.1w Rapid Spanning Tree Protocol) Latest topology change time: 2006-01-02 10:04:02 Root Bridge Priority : 32768 Address end Switch#copy running-config startup-config User Guide 315 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 341
a spanning tree. ■■ To avoid any possible network flapping caused by MSTP parameter changes, it is recommended to enable MSTP function globally after configuring the relevant parameter. 3.1 Using the GUI 3.1.1 Configuring Parameters on Ports in CIST Choose the menu L2 FEATURES > Spanning Tree > Port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 342
default setting is Auto, which means the port calculates the internal path cost automatically according to the port's link speed. This parameter is only used in MSTP and you need not to configure port as an edge port. When the topology is changed, the edge port can transit its state from blocking to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 343
are supported: Auto, Open(Force) and Closed(Force). By default, it is Auto. Auto: The switch automatically checks if the port is connected to a P2P link, the port is disconnected from the STP-enabled device. The MCheck configuration can take effect only once, after that the MCheck status of Guide 318 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 344
3.1.2 Configuring the MSTP Region Configure the region name, revision level, VLAN-Instance to load the following page. Figure 3-2 Configuring the Region Follow these steps to create an Name Configure the name for an MST region using up to 32 characters. By default, it is the MAC address of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 345
enter the instance ID, Priority and corresponding VLAN ID. Figure 3-4 Configuring the Instance Instance ID Priority VLAN ID 2) Click Create. Enter the corresponding corresponding instance. Enter the VLAN ID to map the VLAN to the desired instance or unbind the VLAN-instance mapping. User Guide 320 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 346
want to configure. 2) Configure port parameters in the desired instance. UNIT Select the desired unit or LAGs for configuration. Priority to 2000000. The default setting is Auto, which means the port calculates the external path cost automatically according to the port's link speed. The port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 347
Tree Port Role Port Status LAG MSTP Configurations Displays the role that the port plays in the desired instance. Root Port: Indicates that the port is the root port the spanning tree function enabled but is not connected to any device. Displays the LAG which the port belongs to. User Guide 322 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 348
root bridge in CIST. Hello Time Specify the interval between BPDUs' sending. The default value is 2. The root bridge sends configuration BPDUs at an interval of Hello Time. It works with the MAX Age to test the link failures and maintain the spanning tree. Max Age Specify the maximum time that - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 349
Configurations Forward Delay Tx Hold Count Max Hops Specify the interval between the port state transition from listening to learning. The default Max Hops is a parameter configured in MSTP. You need not configure it if the spanning as STP/RSTP on the switch. By default, it's STP. STP: Specify the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 350
Tree > STP Config > STP Summary to load the following page. Figure 3-7 Verifying the MSTP Configurations The STP Summary section shows the summary information of CIST: Spanning Tree Displays the status of the is the root path cost from the switch to the root bridge in CIST. User Guide 325 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 351
changed. 3.2 Using the CLI 3.2.1 Configuring Parameters on Ports in CIST Follow these steps to configure the parameters of the port in CIST: Step 1 Step 2 configure Enter global configuration -channel-id | range port-channel port-channel-list} Enter interface configuration mode. User Guide 326 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 352
| close }] Configure the parameters on default default, it is disabled. When the topology is changed link to which the ports are connected. During the regeneration of the spanning tree, if the port of P2P link link, then link. Close is used to set the port as the one that is not connected to a P2P link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 353
how to enable spanning tree function for port 1/0/3 and configure the port priority as 32 : Switch#configure Switch(config)#interface gigabitEthernet 1/0/3 Switch(config-if)#spanning-tree Switch 144 200 N/A LnkDwn Switch(config-if)#end Switch#copy running-config startup-config User Guide 328 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 354
elected as the root bridge in the corresponding instance. Step 3 spanning-tree mst configuration Enter MST configuration mode, as to configure the VLAN-Instance mapping, region name and revision level. Step 4 name name Configure the region name of the region. name: Specify the region name, used - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 355
is R1, the revision level is 100 and VLAN 2-VLAN 6 are mapped to instance 5: Switch#configure Switch(config)#spanning-tree mst configuration Switch(config-mst)#name R1 Switch(config-mst)# -channel-id | range port-channel port-channel-list} Enter interface configuration mode. User Guide 330 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 356
2000000. The default setting is Auto, which means the port calculates the external path cost automatically according to the port's link speed. The port with the lowest root path cost will be elected as the root port of the switch. Step 4 show spanning-tree mst { configuration [ digest ] | instance - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 357
between BPDUs' sending. The valid values are from 1 to 10 in seconds, and the default value is 2. The root bridge sends configuration BPDUs at an interval of Hello Time. It works with the MAX Age to test the link failures and maintain the spanning tree. max-age: Specify the value of Max Age - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 358
discarded. The valid values are from 1 to 40 in hop, and the default value is 20. Step 6 show spanning-tree bridge (Optional) View the global 8 copy running-config startup-config Save the settings in the configuration file. Note: To prevent frequent network flapping, make sure that User Guide 333 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 359
tree function globally: Step 1 configure Enter global configuration mode. Step 2 spanning-tree mode mstp Configure the spanning tree mode as Spanning Tree Protocol) Latest topology change time: 2006-01-04 10:47:42 MST-Instance 0 (CIST) Root Bridge Priority : 32768 Address : 00-0a-eb-13-23 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 360
Configurations Priority : 32768 Address : 00-0a-eb-13-23-97 Regional Root Bridge Priority : 36864 Address : 00-0a-eb-13-12-ba Local bridge is the regional root bridge Local Bridge Priority : 36864 Address : 32768 Address : 00-0a-eb-13-12-ba Local Bridge Priority : 32768 Address : 00- - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 361
unit or LAGs for configuration. Loop Protect Enable or disable Loop Protect. It is recommended to enable this function on root ports and alternate ports. When there are link congestions or link failures in the network, to a blocking state after it does not receive BPDUs in time. User Guide 336 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 362
the root bridge. Switches with faulty configurations may produce a higher-priority BPDUs than is used to prevent the switch from frequently changing the MAC address table. With TC Guard function enabled, when CLI 4.2.1 Configuring the STP Security Follow these steps to configure the Root protect - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 363
and alternate ports. When there are link congestions or link failures in the network, the switch root bridge. Switches with faulty configurations may produce a higher-priority BPDUs used to prevent the switch from frequently changing the MAC address table. With TC Guard function enabled, Guide 338 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 364
Tree STP Security Configurations Step 8 spanning-tree bpduflood (Optional) Enable BPDU Forward. This function only takes effect when the spanning tree function is disabled globally. By default, it is enabled Enable Switch(config-if)#end Switch#copy running-config startup-config User Guide 339 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 365
management. Here we take the MSTP configuration as an example. 5.1 Network Requirements As shown in figure 5-1, the network consists of three switches. Traffic in VLAN 101-VLAN 106 is transmitted in this network. The link speed between the switches is 100Mb/s (the default path cost of the port is - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 366
VLAN 101 - VLAN 103 to instance 1 and VLAN 104 - VLAN 106 to instance 2. 4) Configure the priority of Switch B as 0 to set it as the root bridge in instance 1; configure of Switch B to be greater than the default path cost (200000). After this configuration, port 1/0/2 of Switch A in instance 1 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 367
of the Switch Configuration Example for MSTP 2) Choose the menu L2 FEATURES > Spanning Tree > STP Config > Port Config to load the following page. Enable spanning tree function on port 1/0/1 and port 1/0/2. Here we leave the values of the other parameters as default settings. Click Apply - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 368
instance 2 and set the priority as 32768. Click Create. Figure 5-6 Configuring the VLAN-Instance Mapping 5) Choose the menu L2 FEATURES > Spanning Tree > MSTP the designated port. Figure 5-7 Configure the Path Cost of Port 1/0/1 In Instance 1 6) Click to save the settings. User Guide 343 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 369
Config to load the following page. Enable MSTP function globally, here we leave the values of the other global parameters as default settings. Click Apply. Figure 5-8 Configure the Global MSTP Parameters of the Switch 2) Choose the menu L2 FEATURES > Spanning Tree > STP Config > Port Config to load - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 370
instance 2 and set the priority as 32768. Click Create. Figure 5-11 Configuring the VLAN-Instance Mapping 5) Choose the menu L2 FEATURES > Spanning Tree > MSTP Instance designated port. Figure 5-12 Configure the Path Cost of Port 1/0/2 in Instance 2 6) Click to save the settings. User Guide 345 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 371
to load the following page. Enable MSTP function globally, here we leave the values of the other global parameters as default settings. Click Apply. Figure 5-13 Configure the Global MSTP Parameters of the Switch 2) Choose the menu L2 FEATURES > Spanning Tree > STP Config > Port Config to load - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 372
as 0. Click Create. Figure 5-16 Configuring the VLAN-Instance Mapping 5) Click to save the settings. 5.4 Using the CLI ■■ Configurations for Switch A 1) Configure the spanning tree mode as MSTP, then gigabitEthernet 1/0/2 Switch(config-if)#spanning-tree Switch(config-if)#exit User Guide 347 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 373
configure the priority of Switch B in instance 1 as 0 to set it as the root bridge in instance 1: Switch(config)#spanning-tree mst configuration Switch(config-mst)#name 1 Switch(config-mst)#revision 100 Switch(config-mst)#instance 1 vlan 101-103 Switch(config-mst)#instance 2 vlan 104-106 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 374
to set it as the root bridge in instance 2: Switch(config)#spanning-tree mst configuration Switch(config-mst)#name 1 Switch(config-mst)#revision 100 Switch(config-mst)#instance 1 vlan 101-103 Switch(config-mst)#instance 2 vlan 104-106 Switch(config-mst)#exit Switch(config)#spanning-tree mst instance - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 375
Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Local Bridge Priority : 32768 Address : 00-0a-eb-13-23-97 Configuration Example for MSTP Interface the configurations of Switch A in instance 2: Switch(config)#show spanning-tree mst instance 2 MST-Instance 2 Root Bridge Priority : 0 Address : - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 376
LAG Gi1/0/1 128 200000 Desg Fwd N/A Gi1/0/2 128 200000 Root Fwd N/A ■■ Switch B Verify the configurations of Switch B in instance 1: Switch(config)#show spanning-tree mst instance 1 MST-Instance 1 Root Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Local bridge is the root bridge Designated Bridge - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 377
-Instance 1 Root Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Internal Cost : 200000 Root Port : 2 Designated Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Local Bridge Priority : 32768 Address : 3c-46-d8-9d-88-f7 Interface Prio Cost Role Status Configuration Example for MSTP User Guide 352 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 378
3c-46-d8-9d-88-f7 Local bridge is the root bridge Designated Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Local Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Interface Prio Cost Role Status Gi1/0/1 128 200000 Desg Fwd Gi1/0/2 128 200000 Desg Fwd Configuration Example for MSTP User Guide 353 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 379
Port Parameters Parameter Default Setting Status Disabled Priority 128 Ext-Path Cost Auto In-Path Cost Auto Edge Port Disabled P2P Link Auto MCheck ------ Table 6-3 Default Settings of the MSTP Instance Parameter Default Setting Status Disabled Revision Level 0 User Guide 354 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 380
Configuring Spanning Tree Parameter Default Setting Priority 32768 Port Priority 128 Path Cost Auto Table 6-4 Default Settings of the STP Security Parameter Default Setting Loop Protect Disabled Root Protect Disabled TC Guard Disabled BPDU Protect Disabled BPDU Filter Disabled - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 381
Part 12 Configuring LLDP CHAPTERS 1. LLDP 2. LLDP Configurations 3. LLDP-MED Configurations 4. Viewing LLDP Settings 5. Viewing LLDP-MED Settings 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 382
use LLDP-MED for auto-configuration to minimize the configuration effort. 1.2 Supported Features The switch supports LLDP and LLDP-MED. LLDP allows the local device to encapsulate its management address, device ID, interface ID and other information into a LLDPDU (Link Layer Discovery Protocol Data - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 383
LLDP function, follow the steps: 1) Configure the LLDP feature globally. 2) Configure the LLDP feature for the port. 2.1 Using the GUI 2.1.1 Configuring LLDP Globally Choose the L2 FEATURES > LLDP > LLDP Config > Global Config to load the following page. Figure 2-1 Global Config User Guide 358 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 384
function is disabled. 3) In the Parameter Config section, configure the LLDP parameters. Click Apply. Transmit Interval Enter the that the local port sends when its Admin Status changes from Disable (or Rx_Only) to Tx&RX (or Tx_Only). The default value is 3. In this case, the local device - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 385
steps to configure the LLDP feature for the interface. 1) Select one or more ports to configure. 2) Configure the Admin changes. Management Address Specify the Management IP address of the port to be notified to the neighbor. Value 0.0.0.0 means the port will notify its default management address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 386
or of manual set override action. FS: Used to advertise the maximum frame size capability of the implemented MAC and PHY. PW: Used to advertise the port's PoE (Power over Ethernet) support capabilities. 2.2 Using the CLI 2.2.1 Global Config Enable the LLDP feature on the switch and configure the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 387
port sends when its Admin Status changes. The default is 3. show lldp Display the LLDP information. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to configure the following parameters, lldp timer - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 388
5 Step 6 configure Enter global configuration mode. interface default. lldp transmit (Optional) Set the mode for the port to send LLDP packets. It is enabled by default changed. It is disabled by default. lldp tlv-select (Optional) Configure the TLVs included in the outgoing LLDP packets. By default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 389
enabled and the outgoing LLDP packets include all TLVs. Switch#configure Switch(config)#lldp Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if System-Description Yes System-Name Yes Management-Address Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes User Guide 364 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 390
Configuring LLDP Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes Switch(config-if)#end Switch#copy running-config startup-config LLDP Configurations User Guide 365 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 391
configuration of LLDP-MED feature, you also need configure the Auto VoIP feature. Refer to Configuring QoS for detailed instructions. 3.1 Using the GUI 3.1.1 Configuring LLDP Globally Enable LLDP globally and configure Parameters Config Configure the Fast Start endpoints. The default is 4. If - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 392
port and enable LLDP-MED. Click Apply. 2) Click Detail to enter the following page. Configure the TLVs included in the outgoing LLDP packets. If Location Identification is selected, you need configure the Emergency Number or select Civic Address to configure the details. Click Apply. User Guide 367 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 393
configure the emergency number and the detailed address of the endpoint device in the Location Identification Parameters section. Used to advertise the detailed PoE , Firmware Revision TLV, Software Revision TLV, Serial Number TLV, Manufacturer Name TLV, Model Name TLV and Asset ID TLV. Configure the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 394
Configurations Civic Address Configure the address of the audio device in the IETF defined address 5 Step 6 configure Enter global configuration mode. lldp to 10. The default is 4. show lldp configuration file. The following example shows how to configure LLDP-MED fast count as 4: Switch#configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 395
-MED TLVs included in the outgoing LLDP packets. By default, the outgoing LLDP packets include all TLVs. If LLDP-MED Location TLV is selected, configure the parameters as follows: lldp med-location {emergency-number identifier | civic-address [language language | province-state province-state | lci - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 396
Save the settings in the configuration file. The following example shows how to enable LLDP-MED on port 1/0/1, configure the LLDPMED TLVs included in Yes System-Name Yes Management-Address Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Link-Aggregation Yes MAC-Physic Yes - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 397
Configuring LLDP LLDP-MED Status: Enabled TLV Status --- ------ Network Policy Yes Location Identification Yes Extended Power Via MDI Yes Inventory Management Yes Switch(config)#end Switch#copy running-config startup-config LLDP-MED Configurations User Guide 372 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 398
Configuring LLDP Viewing LLDP Settings 4 Viewing LLDP Settings This chapter introduces how to view the LLDP settings on the local device. 4.1 Using GUI the Local Info Choose the menu L2 FEATURES > LLDP > LLDP Config > Local Info to load the following page. Figure 4-1 Local Info User Guide 373 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 399
Displays the supported capabilities of the local system. System Capabilities Enabled Displays the primary functions of the local device. Management Address Type Displays the management IP address type of the local device. Management Address Displays the management IP address of the local - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 400
Displays the OperMau (Optional Mau) field of the TLV configured by the local device. Link Aggregation Supported Displays whether the local device supports link aggregation. Link Aggregation Enabled Displays the status of link aggregation fot the local device. Aggregation Port ID Displays the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 401
Configuring LLDP Viewing LLDP Settings ■■ Viewing the Neighbor Info Choose the menu L2 FEATURES > LLDP > LLDP Config > Neighbor Info to load the following page. the neighbor device which is connected to the local port. Information Click to view the details of the neighbor device. User Guide 376 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 402
Configuring LLDP Viewing LLDP Settings 4.1.2 Viewing LLDP Statistics Choose the menu L2 FEATURES > LLDP > LLDP Config > Statistics Info to load the following page. port can learn a maximum of 80 neighbor device, and the subsquent neighbors will be dropped when the limit is exceeded. User Guide 377 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 403
Configuring LLDP Viewing LLDP Settings Total Ageouts Displays the latest number of neighbors that have aged out on the local device. 3) { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } View the statistics of the corresponding port on the local device. User Guide 378 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 404
Configuring LLDP 5 Viewing LLDP-MED Settings Viewing LLDP-MED Settings 5.1 Using GUI Choose the menu L2 FEATURES > LLDP > LLDP-MED Config > Local Info to load the following page. ■■ Viewing the Local Info Figure 5-1 LLDP-MED Local Info User Guide 379 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 405
Configuring MED. Application Type Displays the supported applications of the local device VLAN tagged Displays the VLAN Tag type of the applications, tagged or untagged. Media Policy VLAN ID Displays the 802.1Q VLAN the local device. Firmware Revision Displays the firmware revision of the local - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 406
Configuring LLDP Viewing LLDP-MED Settings Serial Number Manufacturer Name Model Name Asset ID Displays the serial number of the local device. Displays . Power Type Displays the power type of the neighbor device. Information View more LLDP-MED details of the neighbor device. User Guide 381 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 407
Configuring LLDP Viewing LLDP-MED Settings 5.2 Using CLI ■■ Viewing the Local Info show lldp local-information interface { fastEthernet port | lldp traffic interface { fastEthernet port | gigabitEthernet port | tengigabitEthernet port } View the statistics of the corresponding port. User Guide 382 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 408
Configuring LLDP 6 Configuration Example Configuration Example 6.1 Configuration Example for LLDP 6.1.1 Network Requirements The network administrator needs view the information of the devices in the company network to know about the link situation and network topology so that he can troubleshoot - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 409
FEATURES > LLDP > LLDP Config > Port Config to load the following page. Set the Admin Status of port Gi1/0/1 as Tx&Rx, enable Notification Mode and configure all the TLVs included in the outgoing LLDP packets. Figure 6-3 LLDP Port Config 6.1.5 Using CLI 1) Enable LLDP globally and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 410
select all Switch_A(config-if)#end Switch_A#copy running-config startup-config Verify the Configurations View LLDP settings globally Switch_A#show lldp LLDP Status: Enabled LLDP Forward Message: interface config: gigabitEthernet 1/0/1: Admin Status: TxRx SNMP Trap: Enabled User Guide 385 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 411
Configuring LLDP Configuration Example TLV Status --- ------ Port-Description Yes System-Capability Yes System-Description Yes System-Name Yes Management-Address Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Link 1/0/1: Chassis type: MAC address Chassis ID: 00:0A: - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 412
LLDP Configuration Example TTL: 120 System name: T1600G-52TS System description: JetStream 24-Port Gigabit L2 Managed Switch with 4 SFP Slots System capabilities supported: Bridge Router System capabilities enabled: Bridge Router Management address type: ipv4 Management address: 192 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 413
VLAN ID: 0 Layer 2 Priority: 0 DSCP: 0 Location Data Format: Civic Address LCI - What: Switch - Country Code: CN Hardware Revision: T1600G-52TS 3.0 Firmware Revision: Reserved Software Revision: 3.0.0 Build 20170918 Rel.71414(s) Serial Number: Reserved Manufacturer Name: TP-Link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 414
Configuring LLDP Configuration Example System name: T1600G-52PS System description: JetStream 48-Port Gigabit Smart PoE Switch with 4 SFP Slots System capabilities supported: Bridge Router System capabilities enabled: Bridge Router Management address type: ipv4 Management address: 192. - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 415
as the default value 1. In this way, all the untagged packets from the PC are sent to VLAN1; all the packets with VLAN Tag 2 from the IP phone are sent to VLAN2. 2) Configure Auto VoIP on port 1/0/1. 3) Enable LLDP globally. 4) Configure LLDP-MED on port 1/0/1. Demonstrated with T1600G-28TS, this - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 416
Configuring LLDP Figure 6-2 VLAN Config Configuration Example 2) Choose the menu QoS > Auto VoIP to load the following page. Select port 1/0/1, configure the interface mode as VLAN ID and set the VLAN ID value as 2. Click Apply. User Guide 391 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 417
LLDP Figure 6-3 Auto VoIP Config Configuration Example 3) Choose the menu L2 FEATURES > LLDP > LLDP Config > Global Config to load the following page. Enable LLDP globally Config >Global Config > Port Config to load the following page. Enable LLDP-MED on port 1/0/1 and click Apply. User Guide 392 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 418
1/0/1 to VLAN2. Switch#configure Switch(config)#vlan 2 Switch(config-vlan)#name voice_vlan Switch(config-vlan)#exit Switch(config)#interface Switch(config)#auto-voip 3) Configure Auto VoIP. On port 1/0/1, configure the interface mode as VLAN ID and set the VLAN ID value as 2. Switch(config - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 419
startup-config Verify the Configurations View VLAN settings: Switch#show vlan VLAN Name Status Ports 1 System-VLAN active Gi1/0/1, Gi1/0/2, Interface.Gi1/0/1 Auto-VoIP Interface Mode. Enabled Auto-VoIP VLAN ID. 2 Auto-VoIP COS Override. False Auto-VoIP DSCP Value. 0 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 420
Configuring LLDP View global LLDP settings: Switch_A#show lldp LLDP Status: Enabled LLDP Forward Message: Disabled : Enabled TLV Status --- ------ Network Policy Yes Location Identification Yes Extended Power Via MDI Yes Inventory Management Yes Configuration Example User Guide 395 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 421
Configuring LLDP Appendix: Default Parameters 7 Appendix: Default Parameters Default settings of LLDP are listed in the following tables. Default LLDP Settings Table 7-1 Default LLDP Settings Parameter LLDP Default Setting Disabled LLDP Forward Message Transmit Interval Hold Multiplier - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 422
Part 13 Configuring Layer 3 Interfaces CHAPTERS 1. Overview 2. Layer 3 Interface Configurations 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 423
IP routing and inter-VLAN routing. This chapter introduces the configurations for Layer 3 interfaces. The supported types of Layer 3 interfaces are shown as below: Table 1-1 Supported Types of Layer 3 interfaces Type Description VLAN Interface A Layer 3 interface with which acts as the default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 424
information of the created interface To complete IPv6 interface configuration, follow these steps: 1) Create an Layer 3 interface 2) Configure IPv6 parameters of the created interface 3) View detailed IPv4 routing function globally for all Layer 3 interfaces. It is enabled by default. User Guide 399 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 425
the interface. Static: Assign an IP address to the interface manually. DHCP: Assign an IP address to the interface through the DHCP server. BOOTP: Assign an IP address to the interface through the BOOTP server. DHCP Option 12 If you select DHCP as the IP Address Mode, configure the Option 12 here - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 426
an IP address manually. DHCP: Obtain an IP address through DHCP. BOOTP: Obtain an IP address through BOOTP. IP Address Specify the IP address of the interface if you choose "Static" as the IP address assignment mode. Subnet Mask Specify the subnet mask of the interface's IP address. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 427
of the interface. Subnet Mask Specify the subnet mask of the secondary IP address. 3) (Optional) In the Secondary IP List section, you can view the corresponding secondary IP entry you have created. 2.1.3 Configuring IPv6 Parameters of the Interface In Figure 2-1, you can view the corresponding - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 428
Select the link-local address configuration mode. Manual: With this option selected, you can assign a link-local address manually. Auto: With this option selected, the switch generates a link-local address automatically. Link-local Address Enter a link-local address if you choose "Manual" as the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 429
progress of DAD and cannot be used right now. Repeat: Indicates that the link-local address is duplicated, this address is already used by another node and cannot be used by the interface. 2) Configure IPv6 global address of the interface via following three ways: Via RA Message: Enable global - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 430
View or modify the prefix length of the global address. Type Displays the configuration mode of the global address. Manual: Indicates that the corresponding address is configured manually. Auto: Indicates that the corresponding address is created automatically using the RA message or obtained - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 431
2.2 Using the CLI 2.2.1 Creating an Layer 3 Interface Follow these steps to create an Layer 3 interface. You can create a VLAN interface, a loopback interface, a routed port or a port-channel interface according to your needs. Step 1 configure Enter global configuration mode. User Guide 406 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 432
5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to create a VLAN interface with a description of VLAN-2. Switch#configure Switch(config)#interface vlan 2 Switch(config-if)#description VLAN-2 Switch(config-if)#end User Guide 407 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 433
3 interface to obtain an IPv4 address from the BOOTP Server. Manually assign an IP Address for the interface: ip address { ip-addr } { mask } [ secondary ] Configure the IP address and subnet mask for the specified interface manually. ip-addr: Specify thse IP address of the Layer 3 interface. mask - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 434
the specified Layer 3 interface. By default, it is enabled on VLAN interface 1. IPv6 function can only be enabled on one Layer 3 interface at a time. Configure the IPv6 link-local address for the specified interface: Manually configure the ipv6 link-local address for the specified interface: ipv6 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 435
of a VLAN interface: Switch#configure Switch(config)#interface vlan 2 Switch(config-if)#ipv6 enable Switch(config-if)#ipv6 address autoconfig Switch(config-if)#ipv6 address dhcp Switch(config-if)#show ipv6 interface Vlan2 is up, line protocol is up IPv6 is enable, Link-Local Address: fe80::20a - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 436
Layer 3 Interfaces Layer 3 Interface Configurations ICMP error messages limited to one every 1000 milliseconds ICMP redirects are enable MTU is 1500 bytes ND DAD milliseconds ND reachable time is 30000 milliseconds Switch(config-if)#end Switch#copy running-config startup-config User Guide 411 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 437
as the default gateway for the hosts in the VLAN. All the requests to internet are sent to the VLAN interface first, then the VLAN interface will forward the packets to the internet according to the routing table. Demonstrated with T1600G-28TS, this chapter provides configuration procedures in - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 438
the IP address mode as Static and manually assign an IP address 192.168.2.1 to the interface. Table 3-3 Create VLAN Interface 2 3) Click to save the settings. 3.3.1 Using the CLI 1) Create VLAN 2 and add port 1/0/2 to VLAN 2 with its egress rule as Untagged. Switch#configure User Guide 413 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 439
-if)#end Switch#copy running-config startup-config Verify the VLAN Interface Configurations Verify the configurations of VLAN interface 2. Switch#show interface vlan 2 VLAN2 is down, line protocol is down Hardware is CPU Interface, address is 00:0a:eb:13:a2:98 ip is 192.168.2.1/24 User Guide 414 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 440
Default Setting Interface ID VLAN IP Address Mode None Admin Status Enabled Table 4-3 Configuring the IPv6 Parameters of the Interface Parameter Default Setting Admin Status Enabled IPv6 Enable Enabled Link-local Address Mode Auto Enable global address auto Enabled configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 441
Part 14 Configuring Routing CHAPTERS 1. Overview 2. IPv4 Static Routing Configuration 3. IPv6 Static Routing Configuration 4. Viewing Routing Table 5. Example for Static Routing - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 442
configuration guide, it means the switch) to forward packets to the correct destination. When the switch receives packets of which the source IP address and destination IP address when the topology changes. The switch supports IPv4 static routing and IPv6 static routing configuration. User Guide 417 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 443
. Figure 2-1 Configuring the IPv4 Static Routing Configure the corresponding parameters to add an IPv4 static routing entry. Then click Create. Destination Specify the destination IPv4 address of the packets table. The valid value ranges from 1 to 255 and the default value is 1. User Guide 418 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 444
the subnet mask as 255.255.255.0 and the next-hop address as 192.168.0.2: Switch#configure Switch(config)#ip route 192.168.2.0 255.255.255.0 192.168.0.2 Switch(config)#show ip route Codes: C - connected, S - static * - candidate default C 192.168.0.0/24 is directly connected, Vlan1 S 192.168.2.0/24 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 445
Configuring the IPv6 Static Routing Configure the corresponding parameters to add an IPv6 static routing entry. Then click Create. IPv6 Address Specify the destination IPv6 address value ranges from 1 to 255 and the default value is 1 3.2 Using the CLI Follow these steps to enable IPv6 routing - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 446
IPv6 static route with the destination IP address as 3200::/64 and the next-hop address as 3100::1234: Switch#configure Switch(config)#ipv6 route 3200::/64 3100::1234 Switch(config)#show ipv6 route static Codes: C - connected, S - static * - candidate default C 3000::/64 is directly connected, Vlan1 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 447
network is directed connected to the switch. Static: The routing entry is a manually added static routing entry. Destination Network Displays the destination IP address and subnet mask. Next Hop Displays the IPv4 gateway address to which the packet should be sent next. Distance Displays the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 448
manually added static routing entry. Destination Network Displays the destination IPv6 address and subnet mask. Next Hop Displays the IPv6 gateway address EXEC mode or any other configuration mode, you can use the following command to view IPv4 routing table: show ip route [ static | connected - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 449
Routing Viewing Routing Table 4.2.2 Viewing IPv6 Routing Table On privileged EXEC mode or any other configuration mode, you can use the following command to view IPv6 routing table: show ipv6 route [ . static: View the static IPv6 routes. connected: View the connected IPv6 routes. User Guide 424 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 450
A as 10.1.1.1/24, the default gateway of host B as 10.1.2.1/24, and configure IPv4 static routes on Switch A and Switch B so that hosts on different network segments can communicate with each other. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 451
Configuring Routing Figure 5-2 Create a Routed Port Gi1/0/1 for Switch A Example for Static Routing Figure 5-3 Create a Routed Port Gi1/0/2 for Switch A 2) Choose IPv4 Static Routing to load the following page. Add a static routing entry with the destination as 10.1.2.0, the subnet User Guide 426 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 452
255.0 and the admin status as Enable. Switch_A#configure Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#no switchport Switch_A(config-if)#ip address 10.1.1.1 255.255.255.0 Switch_A(config-if)#exit the subnet mask as 255.255.255.0 and the next hop as 10.1.10.1. User Guide 427 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 453
[1/0] via 10.1.10.2, Vlan20 ■■ Switch B Verify the static routing configuration: Switch_B#show ip route Codes: C - connected, S - static * - candidate default C 10.1.2.0/24 is directly connected, Vlan30 C 10.1.10.0/24 is time - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 454
Configuring Routing Ping statistics for 10.1.2.1: Packets: Sent = 4 , Received = 4 , Lost = 0 (0% loss) Approximate round trip times in milli-seconds: Minimum = 1ms , Maximum = 3ms , Average = 1ms Example for Static Routing User Guide 429 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 455
Part 15 Configuring DHCP Service CHAPTERS 1. DHCP 2. DHCP Server Configuration 3. DHCP Relay Configuration 4. DHCP L2 Relay Configuration 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 456
Configuring DHCP Service 1 DHCP DHCP 1.1 Overview DHCP (Dynamic Host Configuration Protocol) is widely used to automatically assign IP addresses and other network configuration parameters to network devices, enhancing the utilization of IP address. 1.2 Supported Features The supported DHCP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 457
network addresses using Option 82, you need to define the two sub-options on the DHCP relay agent, and create a DHCP class on the DHCP server to identify the Option 82 payload. TP-Link switches preset a default circuit ID and remote ID in TLV (Type, Length, and Value) format. You can also configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 458
Configuring DHCP Service (uses the default circuit/remote ID VLAN 2, this field is 00:02:00:01 in hexadecimal. ■■ Default remote ID: A 6-byte value which indicates the MAC address of the DHCP relay agent. ■■ Customized circuit/remote ID: You can configure IP address in the Relay Agent IP Address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 459
all VLANs. The switch fills this default agent interface's IP address in the Relay Agent IP Address field of the DHCP packets from all VLANs. As the following figure shows, no IP addresses are assigned to VLAN 10 and VLAN 20, but a default relay agent interface is configured with the IP address 192 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 460
Configuring DHCP Service Figure 1-3 Application Scenario of DHCP VLAN Relay DHCP Server DHCP DHCP Clients VLAN 10 192.168.2.0/24 DHCP Relay Default Agent Interface: 192.168.2.1/24 DHCP Clients VLAN 20 192.168.2.0/24 Note: •• If the VLAN already has an IP address, the switch will use the IP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 461
steps: 1) Enable the DHCP Server feature on the switch. 2) Configure DHCP Server Pool. 3) (Optional) Manually assign static IP addresses for some clients. 2.1 Using the GUI 2.1.1 Enabling DHCP Server Choose the menu L3 FEATURES > DHCP Service > DHCP Server > DHCP Server to load the following page - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 462
IP Address Config section, click to load the following page to specify the IP addresses that should not be assigned to the clients. Figure 2-2 Configure Excluded IP Address Enter the Starting IP Address and Ending IP Address to specify the range of reserved IP addresses. Click Create. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 463
to reserve certain IP addresses for each subnet, such as the default gateway address, broadcast address and DNS server address. 2.1.2 Configuring DHCP Server Pool DHCP Server Pool defines the parameters that will be assigned to DHCP clients. Choose the menu L3 FEATURES > DHCP Service >DHCP Server - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 464
. If you leave this field blank, the DHCP server will not assign this parameter to clients. In general, you can configure the IP address of the VLAN interface as the default gateway address. (Optional) Specify the DNS server of the DHCP server pool. You can specify up to 8 DNS servers for each DHCP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 465
Choose the menu L3 FEATURES > DHCP Service >DHCP Server > Manual Binding and click to load the following page. Figure 2-4 Manual Binding Select a pool name and enter the IP address to be bound. Select a binding mode and finish the configuration accordingly. Click Create. Pool Name Select - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 466
the default is 1. ip dhcp server exclude-address start-ip-address end-ip-address Specify the starting IP address and ending IP address of the excluded IP address range. If the starting IP address and the ending IP address are the same, the server excludes only one IP address. When configuring DHCP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 467
Configuring DHCP Service DHCP Server Configuration Step 10 Step 11 Step 12 show ip dhcp server excluded-address Verify the configuration of the excluded IP address. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. The following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 468
) Configure the default gateway of the DHCP server pool. In general, you can configure the IP address of the VLAN interface as the default gateway address. gateway-list: Specify the IP address of the default gateway. You can create up to 8 default gateways for each DHCP server pool. User Guide 443 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 469
Configuring DHCP Service DHCP Server Configuration Step 6 Step 7 Step 8 Step 9 Step 10 Step 11 Step 12 Step 13 dns-server dns-server-list (Optional) Specify the DNS server of the DHCP server pool. In general, you can configure the IP address of the VLAN interface as the DNS server address. dns- - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 470
Address 192.168.1.0 Subnet Mask 255.255.255.0 Lease Time 180 minutes Default Gateway 192.168.1.1 DNS Server 192.168.1.4 NetBIOS Server 192.168.1.19 NetBIOS Node Type B-node (Broadcast) TFTP server 192.168.1.30 Domain Name com Bootfile bootfile Switch#configure Switch(config)#ip - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 471
an IP address, and the DHCP server will reserve the bound IP address to this host at all times. Follow these steps to configure Manual Binding: Step 1 Step 2 configure Enter Global Configuration Mode. ip dhcp server pool name Create a DHCP server pool and enter DHCP Configuration Mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 472
Configuring DHCP Service DHCP Server Configuration Step 3 Bind an IP address to a client: address ip-address client-identifier client-id Bind the specified IP address to the client with a specific hexadecimal client ID. ip-address: Specify the IP address to be bound. client-id: Specify the client - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 473
Configuring DHCP Service Switch(dhcp-config)#end Switch#copy running-config startup-config DHCP Server Configuration User Guide 448 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 474
Configuring DHCP Service DHCP Relay Configuration 3 DHCP Relay Configuration To complete DHCP Relay configuration, follow these steps: 1) Enable DHCP Relay. Configure Option 82 if needed. 2) Specify DHCP server for the Interface or VLAN. 3.1 Using the GUI 3.1.1 Enabling DHCP Relay and Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 475
. Enable it if you want to manually configure the circuit ID. Otherwise, the switch uses the default one when inserting Option 82 to DHCP packets. The default circuit ID is a 4-byte value which consists of 2-byte VLAN ID and 2-byte Port ID. The VLAN ID indicates which VLAN the DHCP client belongs to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 476
server. 3.1.3 Configuring DHCP VLAN Relay DHCP VLAN Relay allows clients in different VLANs to obtain IP addresses from a DHCP server using the IP address of a single agent interface. It is often used when the relay switch does not support configuring multiple Layer 3 interfaces. User Guide 451 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 477
interface to apply for IP addresses. IP Address Displays the IP address of this interface. Note: •• If the VLAN the clients belong to already has an IP address, the switch will use the client's own VLAN interface as the relay-agent interface. The manually specified default relay agent will not - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 478
Configuring DHCP Service DHCP Relay Configuration VLAN ID Server Address Specify the VLAN in which the clients can get IP addresses from the DHCP server. Enter the IP address of the DHCP server. 3.2 Using the CLI 3.2.1 Enabling DHCP Relay Follow these steps to enable DHCP Relay and configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 479
Configuring DHCP Service DHCP Relay Configuration Switch(config)#service dhcp relay Switch(config)#show ip dhcp relay Switch(config)#ip dhcp relay hops 5 Switch(config)#ip switch presets a default circuit ID and remote ID in TLV (Type, Length, and Value) format. You can also configure the format to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 480
customized circuit ID with up to 64 characters. ip dhcp relay information remote-id string (Optional) The switch uses its own MAC address as the default remote ID, and you can also run this command to customize the remote ID. The remote ID configurations of the switch and the DHCP server should be - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 481
-address ip-addr Specify DHCP server for the Layer 3 interface. ip-addr: Enter the IP address of the DHCP server. show ip dhcp relay Verify the configuration of DHCP Relay. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 482
Configuring DHCP Service DHCP Relay Configuration The following example shows how to configure the DHCP server address as 192.168.1.7 on VLAN interface 66: Switch#configure Switch(config)#interface vlan 66 Switch(config-if)#ip helper-address 192.168.1.7 Switch(config-if)#show ip dhcp relay - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 483
as the default relay-agent interface. If the VLAN that the clients belong to does not have an IP address, the switch will use the IP address of this interface to fill in the Relay Agent IP Address field of DHCP packets from the DHCP clients. exit Return to Global Configuration Mode. ip dhcp relay - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 484
(config-if)# ip dhcp relay default-interface Switch(config-if)#exit Switch(config)#ip dhcp relay vlan 10 helper-address 192.168.1.8 Switch(config)#show ip dhcp relay ... DHCP VLAN relay helper address is configured on the following vlan: vlan Helper address ---------- VLAN 10 192.168 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 485
. 2) Configure Option 82 for ports. 4.1 Using the GUI 4.1.1 Enabling DHCP L2 Relay Choose the menu L3 FEATURES > DHCP Service > DHCP L2 Relay > Global Config to load the following page. Figure 4-1 Enable DHCP L2 Relay Follow these steps to enable DHCP L2 Relay globally for the specified VLAN: 1) In - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 486
configure Option 82. Option 82 Support Select whether to enable Option 82 or not. Enable it if you want to prevent DHCP client requests from untrusted sources, or assign different IP addresses a default circuit ID and remote ID in TLV (Type, Length, and Value) format. You can also configure the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 487
. Enable it if you want to manually configure the circuit ID. Otherwise, the switch uses the default one when inserting Option 82 to DHCP packets. The default circuit ID is a 4-byte value which consists of 2-byte VLAN ID and 2-byte Port ID. The VLAN ID indicates which VLAN the DHCP client belongs to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 488
DHCP Service DHCP L2 Relay Configuration Step 6 Step 7 end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to enable DHCP L2 Relay globally and for VLAN 2: Switch#configure Switch(config)#ip dhcp - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 489
customized circuit ID with up to 64 characters. ip dhcp l2relay information remote-id string (Optional) The switch uses its own MAC address as the default remote ID, and you can also run this command to customize the remote ID. The remote ID configurations of the switch and the DHCP server should - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 490
Configuring DHCP Service DHCP L2 Relay Configuration Switch(config-if)#show ip dhcp l2relay information interface gigabitEthernet 1/0/7 Interface Option 82 Status Operation Strategy Format Circuit ID Remote ID LAG ----- Gi1/0/7 Enable Replace Normal VLAN20 Host1 N/A Switch(config- - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 491
enable the DHCP Server service on the switch and create a DHCP IP pool for all the connected devices. Then manually bind the MAC address of the FTP server to an IP address specified for the FTP server. Demonstrated with T1600G-28TS, the following sections provide configuration procedures in two ways - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 492
Time, Default Gateway and DNS Server as shown below. Click Create. Figure 5-3 Configuring DHCP Server Pool 3) Choose the menu L3 FEATURES > DHCP Service > DHCP Server > Manual Binding and click to load the following page. Select the DHCP server pool you just created, and enter the IP address of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 493
#configure Switch(config)#service dhcp server 2) Specify the Pool Name, Network Address, Subnet Mask and Lease Time. Switch(config)#ip dhcp department belong to VLAN 10 and VLAN 20, respectively. The IP address of VLAN interface 10 is 192.168.2.1/24, and the IP address of VLAN interface 20 is 192 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 494
Relay globally, and specify the DHCP server address for each VLAN. In this example, the DHCP server is demonstrated with T1600G-52TS and the DHCP relay agent is demonstrated with T1600G-28TS. This section provides configuration procedures in two ways: using the GUI and using the CLI. User Guide 469 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 495
2) Choose the menu L3 FEATURES > DHCP Service > DHCP Server > Pool Setting and click to load the following page. Create pool 1 for VLAN 10 and pool 2 for VLAN 20. Configure the corresponding parameters as the following pictures show. Figure 5-7 Configuring DHCP Pool 1 for VLAN 10 User Guide 470 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 496
Configuring DHCP Service Figure 5-8 Configuring DHCP Pool 2 for VLAN 20 Configuration Examples 3) Choose the menu L3 FEATURES > Static Routing > IPv4 Static Routing that the DHCP server can reach the clients in the two VLANs. Figure 5-9 Creating the Static Routing Entry for VLAN 10 User Guide 471 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 497
Configuring DHCP Service Figure 5-10 Creating the Static Routing Entry for VLAN 20 Configuration Examples ■■ Configuring the VLANs on the Relay Agent 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 10 for the Marketing department - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 498
Configuring DHCP Service Configuration Examples 2) On the same page, click again to create VLAN 20 for the R&D department and add port 1/0/2 as an untagged port to the VLAN. Figure 5-12 Creating VLAN 20 User Guide 473 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 499
Configuring DHCP Service Configuration Examples ■■ Configuring the VLAN Interface and Routed Port on the Relay Agent 1) Choose the menu L3 FEATURES > Interface and click to load the following page. Create VLAN interface 10 and VLAN interface 20. Configure port 1/0/5 as the routed port. Figure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 500
Configuring DHCP Service Figure 5-15 Configuring the Routed Port Configuration Examples ■■ Configuring DHCP Interface Relay on the Relay Agent 1) Choose the menu L3 FEATURES > DHCP Service Relay 2) Choose the menu L3 FEATURES > DHCP Service > DHCP Relay > DHCP Interface Relay and click to load - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 501
service globally. Switch#configure Switch(config)#service dhcp server 2) Create DHCP pool 1 and configure its network address as 192.168.2.0, subnet mask as 255.255.255.0, lease time as 120 minutes, default two VLANs. Switch(config)# ip route 192.168.2.0 255.255.255.0 192.168.0.1 Switch(config)# ip - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 502
.255.0 Switch(config-if)#exit Switch(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#ip address 192.168.0.1 255.255.255.0 Switch(config-if)#exit ■■ Configuring DHCP Interface Relay on the Relay Agent 1) Enable DHCP Relay. Switch#configure Switch(config)#service dhcp relay User Guide 477 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 503
Configuring DHCP Service Configuration Examples 2) Specify the DHCP server for the interface VLAN 10. Switch(config)#interface vlan 10 Switch(config-if)#ip helper-address 192.168.0.59 Switch(config-if)#exit 3) Specify the DHCP server for interface VLAN 20 Switch(config)#interface vlan 20 Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 504
interface) as the default relay agent interface, and specify the DHCP server address for VLAN 10 and VLAN 20. In this example, the DHCP server is demonstrated with T1600G-52TS and the DHCP relay agent is demonstrated with T1600G-28TS. The following sections provide configuration procedures in two - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 505
DHCP Server 2) Choose the menu L3 FEATURES > DHCP Service > DHCP Server > Pool Setting and click to load the following page. Create a DHCP pool for the clients. Configure the corresponding parameters as the following picture shows. Figure 5-21 Configuring DHCP Pool 1 for VLAN 10 User Guide 480 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 506
Configuring DHCP Service Configuration Examples ■■ Configuring the VLANs on the Relay Agent 1) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > VLAN Config and click to load the following page. Create VLAN 10 for the Marketing department and add port 1/0/1 as untagged port to the VLAN. Figure 5- - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 507
to the VLAN. Figure 5-23 Creating VLAN 20 ■■ Configuring DHCP VLAN Relay on the Relay Agent 1) Choose the menu L3 FEATURES > DHCP Service > DHCP Relay > DHCP Service > DHCP Relay > DHCP VLAN Relay to load the following page. In the Default Relay Agent Interface section, specify User Guide 482 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 508
1) Enable DHCP service globally. Switch#configure Switch(config)#service dhcp server 2) Create a DHCP pool and name it as "pool" and configure its network address as 192.168.0.0, subnet mask as 255.255.255.0, lease time as 120 minutes, default gateway as 192.168.0.1. Switch(config)#ip dhcp server - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 509
Switch(config-if)#exit ■■ Configuring DHCP VLAN Relay on the Relay Agent 1) Enable DHCP Relay. Switch(config)#service dhcp relay 2) Specify the routed port 1/0/5 as the default relay agent interface. Switch(config)#interface vlan 1 Switch(config-if)#ip dhcp relay default-interface Switch(config-if - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 510
DHCP Service Configuration Examples Verify the Configurations of the DHCP Relay Agent Switch#show ip dhcp relay Switch#show ip dhcp relay DHCP relay state: enabled ... DHCP relay default relay agent interface: Interface: VLAN 1 IP address: 192.168.0.1 DHCP vlan relay helper address is - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 511
the interface address of VLAN 2. For details, refer to Configuring Layer 3 Interfaces. c. Configure DHCP relay and enable Option 82 in DHCP Relay. In this example, both DHCP Interface Relay and DHCP VLAN Relay can implement the requirements. Demonstrated with T1600G-28TS, 5.4.3 Configuring the DHCP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 512
these steps to configure DHCP relay and enable Option 82 in DHCP Relay on Switch A: 1) Choose the menu L3 FEATURES > DHCP Service > DHCP Relay port 1/0/1 and port 1/0/2, enable Option 82 Support and set Option 82 Policy as Replace. You can configure other parameters according to your needs. In - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 513
Service Configuration Examples 3) Choose the menu L3 FEATURES > DHCP Service > DHCP Relay > DHCP Interface Relay and click to load the following page. Specify the DHCP server address to assign IP addresses for clients in VLAN 2. Click Create. Figure 5-31 Specify DHCP Server for Interface VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 514
Circuit ID ... ... Gi1/0/1 Enable Replace Normal Default:VLAN-PORT ... Gi1/0/2 Enable Replace Normal Default:VLAN-PORT ... ... 5.4.4 Configuring the DHCP Server Note: •• Make sure the DHCP server supports Option 82 and more than one DHCP address pool. •• To make sure the DHCP server - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 515
same subnet. # Assign different IP addresses to the DHCP clients in different groups. subnet 192.168.2.0 netmask 255.255.255.0 { option routers 192.168.2.1; option subnet-mask 255.255.255.0; option domain-name-servers 192.168.0.59; option domain-name "example.com"; default-lease-time 600; max-lease - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 516
assign IP addresses of different address pools to the PCs in different groups. The overview of the configurations are as follows: 1) Configuring Switch A a. Enable DHCP L2 Relay globally and on VLAN 1. b. Configure Option 82 on ports 1/0/1 and 1/0/2. Demonstrated with T1600G‑28TS, 5.5.3 Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 517
DHCP L2 Relay on VLAN 1 and click Apply. Figure 5-33 Enabling DHCP L2 Relay 2) Choose the menu L3 FEATURES > DHCP Service > DHCP L2 Relay > Port Config to load the following page. Select port 1/0/1, enable Option 82 Support and select Option 82 Policy as Replace. You can configure other parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 518
Configuring DHCP Service Figure 5-34 Configuring Port 1/0/1 Configuration Examples 3) On the same page, select port 1/0/2, enable Option 82 Support and select Option 82 Policy as Replace. You can configure other parameters according to your needs. In this example, keep Format as Normal and Remote - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 519
Configuring DHCP Service Configuration Examples Switch(config)#ip dhcp l2relay Switch(config)#ip dhcp l2relay vlan 1 2) On port 1/0/1, enable Option 82 and select Option 82 Policy as Replace. You can configure other parameters according to your needs. In this example, keep Format as Normal and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 520
ip dhcp l2relay information interface gigabitEthernet 1/0/1 Interface Option 82 Status Operation Strategy Format Circuit ID ... Gi1/0/2 Enable Replace Normal Group2 ... 5.5.4 Configuring the DHCP Server Note: •• Make sure the DHCP server supports Option 82 and more than one DHCP address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 521
Configuring DHCP Service Configuration Examples # IP addresses to the DHCP clients in different groups. subnet 192.168.10.0 netmask 255.255.255.0 { option routers 192.168.10.1; option subnet-mask 255.255.255.0; option domain-name-servers 192.168.10.1; option domain-name "example.com"; default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 522
Start IP Address None End IP Address None Pool Setting Pool Name None Network Address None Subnet Mask None Lease Time 120 min Default Gateway None DNS Server None NetBIOS Server None NetBIOS Node Type None Next Server Address None Domain Name None Bootfile None User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 523
Configuring DHCP Service Appendix: Default Parameters Parameter Manual Binding Pool Name IP Address Binding Mode Client Id Hardware Address Hardware Type Default Setting None None Client ID None None Ethernet Default settings of DHCP Relay are listed in the following table. Table 6-2 Default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 524
Configuring DHCP Service Appendix: Default Parameters Parameter DHCP VLAN Relay Interface ID VLAN ID Server Address Default Setting None None None Default settings of DHCP L2 Relay are listed in the following table. Table 6-3 Default Settings of DHCP L2 Relay Parameter Default Setting Global - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 525
Part 16 Configuring ARP CHAPTERS 1. Overview 2. ARP Configurations 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 526
Configuring ARP Overview 1 Overview ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses. Taking an IP address as input, ARP learns the associated MAC address, and stores the IP-MAC address association in an ARP entry for rapid retrieval. 1.1 Supported Features ARP Table - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 527
address. After that, the ARP request sender sends packets to the Layer 3 interface, and the interface forwards the packets to the intended device. Figure 1-2 Local Proxy ARP Application VLAN Interface 1 IP: 192.168.0.1/24 192.168.0.20/24 Port 1/0/1 Port 1/0/2 VLAN 1 192.168.0.10/24 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 528
remained unless modified or deleted manually. Choose the menu L3 FEATURES > ARP > ARP Table > ARP Table to load the following page. Figure 2-1 Viewing the ARP Entries Interface IP Address MAC Address Displays the network interface of an ARP entry. Displays the IP address of an ARP entry. Displays - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 529
aging time leased. The default aging time value is 600 seconds. If you want to change the aging time, you can use the CLI to configure it. 2.1.2 Adding Static ARP Entries Manually You can add desired static ARP entries by mannually specifying the IP addresses and MAC addresses. Choose the menu L3 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 530
IP address to the other hosts. It is enabled by default. Send on Duplicate IP address table by learning from the received gratuitous ARP packets. It is disabled by default. 2) In the Gratuitous ARP Table section, configure ARP request packets periodically. 2.1.4 Configuring Proxy ARP Proxy ARP is - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 531
the subnet mask of the IP address. Status Enable proxy ARP feature on the interface. The interface will respond the ARP request sender with its own MAC address. 2.1.5 Configuring Local Proxy ARP Local Proxy ARP is used in the situation that two devices are in the same VLAN but isolated on the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 532
Adding Static ARP Entries Follow these steps to add static ARP entries: Step 1 configure Enter global configuration mode. Step 2 arp ip mac type Add a static ARP entry. ip: Enter the IP address of the static ARP entry. mac: Enter the MAC address of the static ARP entry. type: Enter the ARP type - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 533
ARP ARP Configurations Step 1 configure Enter global configuration mode. Step 2 arp timeout timeout Configure the ARP aging time of the VLAN interface or routed port . timeout: Specify the value of aging time, which ranges from 1 to 3000 in seconds. The default value is 1200 seconds. Step - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 534
steps to add static ARP entries: Step 1 configure Enter global configuration mode. Step 2 gratuitous-arp intf-status-up enable Enable the Layer 3 interface to send a gratuitous ARP packet to detect if its IP address is used by other devices. It is enabled by default Step 3 gratuitous-arp dup - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 535
port-channel-list |} no switch port Enter interface configuration mode and change the port or port-channel to be a Layer 3 interface. Interface vlan vlan-id Enter the vlan interface configuration mode. vlan-id: Enter the interface VLAN ID. Step 3 gratuitous-arp send-interval interval Specify - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 536
Switch#copy running-config startup-config 2.2.3 Configuring Proxy ARP You can configure proxy ARP and local proxy ARP. ■■ Configuring Proxy ARP Follow these steps to Proxy ARP on the VLAN interface, routed port or port channel. Step 1 configure Enter global configuration mode. User Guide 511 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 537
example shows how to enable Proxy ARP function for VLAN interface 1: Switch#configure Switch(config)#interface vlan 1 Switch(config-if)#ip proxy-arp Switch(config-if)#show ip proxy-arp Interface IP Address IP Mask Status -------- vlan 1 192.168.0.1 255.255.255.0 Switch(config-if - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 538
how to enable Local Proxy ARP function for VLAN interface 1: Switch#configure Switch(config)#interface vlan 1 Switch(config-if)#ip local-proxy-arp Switch(config-if)#show ip local-proxy-arp Interface IP Address IP Mask Status -------- vlan 1 192.168.0.1 255.255.255.0 Switch(config-if - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 539
Configuring ARP Appendix: Default Parameters 3 Appendix: Default Parameters Default ARP settings are listed in the following tables. Table 3-1 Default Gratuitous Settings Parameter Default Setting Send on IP Interface Status Up Enabled Send on Duplicate IP Detected Disabled Gratuitous ARP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 540
Part 17 Configuring QoS CHAPTERS 1. QoS 2. Class of Service Configuration 3. Bandwidth Control Configuration 4. Voice VLAN Configuration 5. Auto VoIP Configuration 6. Configuration Examples 7. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 541
services to certain types of traffic. 1.2 Supported Features You can configure the class of service, bandwidth control, Voice VLAN supported, Port Priority, 802.1p Priority and DSCP Priority. ■■ Scheduler Mode: Two scheduler types are supported storm. Voice VLAN and Auto VoIP The voice VLAN and Auto - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 542
and delay. To ensure the high voice quality, you can configure Voice VLAN or Auto VoIP. These two features can be enabled on the ports that transmit voice traffic only or transmit both voice traffic and data traffic. Voice VLAN can change the voice packets' 802.1p priority and transmit the packets - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 543
based on the PRI value. In this mode, the switch only prioritizes packets with VLAN tag, regardless of the IP header of the packets. ■■ DSCP Priority DSCP priority determines the priority of packets based on the ToS (Type of Service) field in their IP header. RFC2474 re-defines the ToS field in the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 544
the menu QoS > Class of Service > Port Priority to load the following page. Figure 2-1 Configuring the Trust Mode and Port to 802.1p Mapping Follow these steps to configure the parameters of the port priority the packets will be processed according to the port priority configuration. User Guide 519 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 545
the 802.1p to Queue Mapping Choose the menu QoS > Class of Service > 802.1p Priority to load the following page. Figure 2-2 Configuring the 802.1p to Queue Mapping In the 802.1p to Queue Mapping section, configure the mappings and click Apply. 802.1p Priority Displays the number of 802 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 546
QoS Class of Service Configuration 2.1.2 Configuring 802.1p Priority ■■ Configuring the Trust Mode Choose the menu QoS > Class of Service > Port Priority to load the following page. Figure 2-3 Configuring the Trust Mode Follow these steps to configure the trust mode: 1) Select the desired - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 547
QoS, 802.1p priority is used to represent class of service. IEEE 802.1p standard defines three bits in 802.1Q tag as PRI filed. The PRI values are called 802.1p priority and used to represent the priority of the layer 2 packets. This function requires packets with VLAN tags. User Guide 522 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 548
and set the trust mode as Trust DSCP. Trust Mode 2) Click Apply. Select the Trust mode as Trust DSCP. In this mode, the IP packets will be processed according to the DSCP priority configuration and the non-IP packets will be processed according to the port priority configuration. User Guide 523 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 549
the 802.1p to Queue Mapping Choose the menu QoS > Class of Service > 802.1p Priority to load the following page. Figure 2-6 Configuring the 802.1p to Queue Mapping In the 802.1p to Queue Mapping section, configure the mappings and click Apply. 802.1p Priority Displays the number of 802 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 550
configure the DSCP to 802.1p mapping and the DSCP remap. DSCP Priority Displays the number of DSCP priority. DSCP Priority is used to classify the packets based on the value of DSCP, and map them to different queues. ToS (Type of Service) is a part of IP untagged IP packets mode, non-IP packets will - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 551
Class of Service > Scheduler Settings to load the following page. Figure 2-8 Specifying the Scheduler Settings Follow these steps to configure the schedule mode: 1) In the Scheduler Config section, select the desired port. 2) Select the desired queue and configure the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 552
qos trust mode {untrust | dot1p | dscp} Select the trust mode for the port. By default, it is untrust. Here we set the trust mode as untrust. untrust: Specify the ports' trust mode as untrust. In this mode, the packets will be processed according to the port priority configuration. User Guide 527 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 553
Class of Service Configuration Step 4 configure Enter global configuration mode Step 2 qos cos-map {dot1p-priority} {tc-queue} Specify the 802.1p to queue mapping. The packets with the desired 802.1p priority will be put in the corresponding queues. By default configuration file. User Guide 528 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 554
|7 TC |TC0 |TC3 |TC2 |TC3 |TC4 |TC5 |TC6 |TC7 Switch(config)#end Switch#copy running-config startup-config 2.2.2 Configuring 802.1p Priority ■■ Configuring the Trust Mode Follow these steps to configure the trust mode: Step 1 configure Enter global configuration mode User Guide 529 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 555
QoS Class of Service Configuration Step 2 Step 3 Step 4 Step 5 Step 6 interface { channel port-channel-list} Enter interface configuration mode. qos trust mode {untrust | dot1p | dscp} Select the trust mode for the port. By default, it is untrust. Here we .1p to queue mappings. User Guide 530 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 556
Service Configuration Step 5 Step 6 Step 7 show qos dot1p-remap Verify the 802.1p to 802.1p mappings. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration (config)#show qos dot1p-remap Dot1p Value 0 1 2 3 4 5 6 7 LAG User Guide 531 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 557
the trust mode for the port. By default, it is untrust. Here we set the trust mode as dscp. dscp: Specify the ports' trust mode as dscp. In this mode, the IP packets will be processed according to the DSCP priority configuration and the non-IP packets will be processed according to the port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 558
Service Configuration Step 2 Step 3 Step 4 Step 5 qos cos-map {dot1p-priority} {tc-queue} Specify the 802.1p to queue mapping. The packets with the desired 802.1p priority will be put in the corresponding queues. By default 4 show qos dscp-map Verify the DSCP to queue mappings. User Guide 533 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 559
Service Configuration Step 5 Step 6 Step 7 show qos dscp-remap Verify the DSCP to DSCP mappings. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Note: In Trust DSCP mode, non-IP show qos dscp-map DSCP: 01 234567 User Guide 534 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 560
Configuring QoS DSCP to 802.1P 0 3 3 3 0 3 0 3 DSCP: 8 9 10 11 12 13 14 15 DSCP to 802.1P 1 1 1 1 1 1 1 1 DSCP: 16 2 3 4 5 6 7 DSCP remap value 0 1 2 3 4 5 6 7 DSCP: 8 9 10 11 12 13 14 15 DSCP remap value 8 5 10 11 12 13 14 15 Class of Service Configuration User Guide 535 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 561
Configuring QoS Class of Service Configuration DSCP: 16 17 18 19 20 21 22 23 DSCP remap value 16 17 18 19 20 21 22 -gigabitEthernet port | range ten-gigabitEthernet port-list | port-channel port-channel-id | range port-channel port-channel-list} Enter interface configuration mode. User Guide 536 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 562
QoS Class of Service Configuration Step 3 Step 4 Step 5 Step 6 qos queue tc-queue mode {sp | wrr} [weight weight] Specify the type of scheduling used for corresponding queue. When the network - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 563
Configuring QoS TC1 Strict N/A TC2 WRR 1 TC3 WRR 1 TC4 WRR 5 TC5 WRR 1 TC6 WRR 1 TC7 WRR 1 Switch(config-if)#end Switch#copy running-config startup-config Class of Service Configuration User Guide 538 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 564
Figure 3-1 Configuring Rate Limit Follow these steps to configure the Rate Limit function: 1) Select the desired port and configure the upper rate limit is disabled. Egress Rate (01,000,000Kbps) 2) Click Apply. Configure the bandwidth for sending packets on the port. The valid values are from 0 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 565
disabled. The broadcast traffic exceeding the limit will be processed according to the Action configurations. Multicast Threshold (01,000,000) Specify the upper rate limit for receiving multicast traffic exceeding the limit will be processed according to the Action configurations. User Guide 540 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 566
will be processed according to the Action configurations. Select the action that the switch manually. Note: The member port of an LAG (Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations Step 2 Step 3 configure Enter global configuration mode. interface { - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 567
broadcast packets, multicast packets and unknown unicast frames: Step 1 configure Enter global configuration mode Step 2 interface {fastEthernet port | range fastEthernet port-list port-channel-id | range port-channel port-channel-list} Enter interface configuration mode. User Guide 542 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 568
Configuration to the Action configurations. rate: Enter to the Action configurations. rate: Enter to the Action configurations. rate: Enter the its corresponding limit. By default, it is drop. to 3600 and the default value is 0. When manually. storm-control recover (Optional) Recover the port manually - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 569
the action as shutdown and set the recover time as 10 for port 1/0/5: Switch#configure Switch(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#storm-control rate-mode kbps Switch(config-if shutdown 10 N/A Switch(config-if)#end Switch#copy running-config startup-config User Guide 544 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 570
OUI addresses 3) Configure Voice VLAN globally 4) Add ports to Voice VLAN Configuration Guidelines ■■ Before configuring voice VLAN, you need to create a 802.1Q VLAN for voice traffic. For details about 802.1Q VLAN Configuration, please refer to Configuring 802.1Q VLAN. ■■ VLAN 1 is a default VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 571
OUI addresses in the OUI list, the switch identifies the packet as a voice packet and prioritizes it in transmission. Give an OUI address description for identification. 4.1.1 Configuring Voice VLAN Globally Choose the menu QoS > Voice VLAN > Global Config to load the following page. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 572
. A bigger value means a higher priority. This is an IEEE 802.1p priority, and you can further configure its scheduler mode in Class of Service if needed. 4.1.1 Adding Ports to Voice VLAN Choose the menu QoS > Voice VLAN > Port Config to load the following page. Figure 4-4 Adding Ports to Voice - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 573
the port. 4.2 Using the CLI Follow these steps to configure voice VLAN: Step 1 configure Enter global configuration mode. Step 2 show voice vlan oui-table Check whether the OUI address of your voice device is in the OUI table. The OUI address is used by the switch to determine whether a packet - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 574
port 1/0/3: Switch#configure Switch(config)#show voice vlan oui-table 00:01:E3 Default SIEMENS 00:03:6B Default CISCO1 00:12:43 Default CISCO2 00:0F:E2 Default H3C 00:60:B9 Default NITSUKO 00:D0:1E Default PINTEL 00:E0:75 Default VERILINK 00:E0:BB Default 3COM 00:04:0D Default AVAYA1 00 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 575
Configuring QoS Gi1/0/3 enabled Up N/A Gi1/0/4 disabled Down N/A Gi1/0/5 disabled Down N/A ... Switch(config-if)#end Switch#copy running-config startup-config Voice VLAN Configuration User Guide 550 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 576
features such as VLAN and Class of Service to process the voice packets with specific fields. You can choose and configure Auto VoIP and VoIP to load the following page. Figure 5-1 Configuring Auto VoIP Follow these steps to configure the OUI addresses: 1) In the Global Config section, enable - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 577
.1p priority. Untagged: The voice devices will send untagged voice packets. Enter the value of VLAN ID or 802.1p priority for the port according to the Interface Mode configurations. Enable or disable the Class of Service override mode. Enabled: Enable CoS override. The switch will ignore Class of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 578
configuration to send voice traffic. auto-voip vlan-id Specify the interface mode as VLAN ID. In this mode, the voice devices will send voice packets with desired VLAN Service override mode. By default, it is trust, which means the Class of Service , you can configure the Class of Service to make the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 579
specify the DSCP priority as 10 and enable the CoS override mode for port 1/0/3: Switch#configure Switch(config)#auto-voip Switch(config)#interface gigabitEthernet 1/0/3 Switch(config-if)#auto-voip dot1p 4 Switch False Auto-VoIP DSCP Value. 0 Auto-VoIP Port Status. Disabled User Guide 554 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 580
Configuring QoS Interface.Gi1/0/3 Auto-VoIP Interface Mode. Enabled Auto-VoIP Priority. 4 Auto-VoIP COS Override. True Auto-VoIP DSCP Value. 10 Auto-VoIP Port Status. Enabled ... Switch(config-if)#end Switch#copy running-config startup-config Auto VoIP Configuration User Guide 555 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 581
Configuring QoS 6 Configuration Examples Configuration Examples 6.1 Example for Class of Service 6.1.2 Configuration Scheme To implement this requirement, you can configure Port Priority priority than the packets from the RD department. 1) Configure the trust mode of port 1/0/1 and port 1/0/2 as - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 582
Configuring QoS Configuration Examples Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 6.1.3 Using the GUI 1) Choose the menu QoS > Class of Service > Port Priority to load the following page. Set the trust mode of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 583
Configuration Examples 3) Choose the menu QoS > Class of Service > Scheduler Settings to load the following page. Select the port 1/0/3 and set the scheduler type of TC-0 and TC-1 as Weighted. Specify the queue weight of TC-0 as 1 and specify the queue weight of TC-1 as 5. Click Apply. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 584
trust mode of port 1/0/1 as untrusted and specify the 802.1p priority as 1. Switch_A#configure Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#qos trust mode untrust Switch_A(config-if)#qos TC-0. Switch_A(config)#qos cos-map 0 1 Switch_A(config)#qos cos-map 1 0 User Guide 559 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 585
wrr weight 5 Switch_A(config-if)#end Switch_A#copy running-config startup-config Verify the configurations Verify the trust mode of the port: Switch_A#show qos trust interface Port Trust Mode 0 N/A Gi1/0/3 CoS 0 N/A Gi1/0/4 CoS 0 N/A ... Verify the 802.1p to queue mappings: User Guide 560 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 586
TC |TC1 |TC0 |TC2 |TC4 |TC4 |TC5 |TC6 |TC7 Configuration Examples Verify the scheduler mode of the egress port: Switch _A#show for Voice VLAN 6.2.1 Network Requirements As shown below, the company plans to install IP phones in the office area. To ensure the good voice quality, IP phones and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 587
take precedence when the congestion occurs. 1) Configure 802.1Q VLAN for port 1/0/1, port 1/0/2. port 1/0/3 and port 1/0/4. 2) Configure Voice VLAN feature on port 1/0/1 and port 1/0/2. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 588
Configuring QoS Figure 6-6 Configuring VLAN 2 Configuration Examples 2) Click to load the following page. Create VLAN 3 and add untagged port 1/0/3 and port 1/0/4 to VLAN 3. Click Create. User Guide 563 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 589
Configuring QoS Figure 6-7 Configuring VLAN 3 Configuration Examples 3) Choose the menu L2 FEATURES > VLAN > 802.1Q VLAN > Port Config to load the following page. Disable the Ingress Checking feature on port 1/0/1 and port 1/0/2 and specify the PVID as 2. Click Apply. User Guide 564 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 590
QoS Figure 6-8 Specifying the Parameters of the Ports Configuration Examples 4) Choose the menu QoS > Voice VLAN > OUI Config to load the following page. Check the OUI table. Figure 6-9 Checking the OUI Table 5) Choose the menu QoS > Voice VLAN > Global Config to load the following page. Enable - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 591
#configure Switch_A(config)#vlan 2 Switch_A(config-vlan)#name VoiceVLAN Switch_A(config-vlan)#exit Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#switchport general allowed vlan 2 untagged Switch_A(config-if)#exit Switch_A(config)#interface gigabitEthernet 1/0/2 User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 592
1/0/2 Switch_A(config-if)#no switchport check ingress Switch_A(config-if)#switchport pvid 2 Switch_A(config-if)#exit 4) Check the OUI table. Switch(config)#show voice vlan oui 00:01:E3 Default SIEMENS 00:03:6B Default CISCO1 00:12:43 Default CISCO2 00:0F:E2 Default H3C User Guide 567 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 593
Configuring QoS Configuration Examples 00:60:B9 Default NITSUKO 00:D0:1E Default PINTEL 00:E0:75 Default VERILINK 00:E0:BB Default 3COM 00:04:0D Default AVAYA1 00:1B:4F Default AVAYA2 00:04:13 Default SNOM 5) Enable Voice VLAN globally. Specify the VLAN ID as 2 and set the priority as 7. Switch_A( - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 594
Configuration Examples Verify the Voice VLAN configuration: Switch_A(config)#show voice vlan interface Voice VLAN ID 2 Priority 7 Interface Voice VLAN to install IP phones in the office area. IP phones share switch ports used by computers, because no more ports are available for IP phones. To - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 595
Service. 3) Enable LLDP-MED and configure the corresponding parameters. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 6.3.3 Using the GUI Auto VoIP configurations for port1/0/1 and other ports connected to the IP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 596
Port Priority to load the following page. Set the trust mode of port 1/0/1 as trust DSCP. Click Apply. Figure 6-14 Configuring Port Priority 3) Choose the menu QoS > Class of Service > DSCP Priority to load the following page. Specify the 802.1p priority as 7 for DSCP priority 63. Click Apply. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 597
802.1p priority for DSCP priority 63 Configuration Examples 4) Specify the 802.1p priority as 5 for other DSCP priorities. Click Apply. Figure 6-16 Specifying the 802.1p priority for Other DSCP priorities 5) Choose the menu QoS > Class of Service > Scheduler Settings to load the following page - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 598
Configuring QoS Figure 6-17 Configuring the TC-5 for the Port Configuration Examples 6) Select port 1/0/2. Set the scheduler mode as weighted and specify the queue weight as 10 for TC-7. Click Apply. Figure 6-18 Configuring the TC-7 for the Port User Guide 573 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 599
-MED Config > Port Config click Detail to of port1/0/1 to load the following page. Check the boxes of all the TLVs. Click Save. Figure 6-19 Configuring the TLVs 8) Choose the menu L2 FEATURES > LLDP > LLDP-MED Config > Port Config to load the following page. Enable LLDP-MED on port 1/0/1. Click - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 600
CLI 1) Enable Auto VoIP globally and specify the DSCP value of port 1/0/1 as 63. Switch_A#configure Switch_A(config)#auto-voip Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#auto-voip dscp 63 Switch_A (config-if)#end Switch_A#copy running-config startup-config User Guide 575 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 601
: Enabled Verify the Auto VoIP configuration of ports: Switch_A(config)#show Value. 63 Auto-VoIP Port Status. Disabled Configuration Examples Interface.Gi1/0/2 Auto-VoIP Interface Mode Disabled False 0 Disabled Verify the configuration of Class of Service: Switch_A(config)#show qos trust - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 602
Configuring QoS Switch_A(config)#show qos cos-map Dot1p Value |0 |1 |2 |3 |4 |5 |6 |7 TC |TC1 |TC0 |TC2 |TC3 |TC4 |TC5 |TC6 |TC7 5 5 5 5 DSCP: 48 49 50 51 52 53 54 55 DSCP to 802.1P 5 5 5 5 5 5 5 5 DSCP: 56 57 58 59 60 61 62 63 Configuration Examples User Guide 577 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 603
Yes System-Name Yes Management-Address Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes LLDP-MED Status: Enabled TLV Status --- ------ Network Policy Yes Configuration Examples User Guide 578 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 604
Configuring QoS Location Identification Yes Extended Power Via MDI Yes Inventory Management Yes ... Configuration Examples User Guide 579 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 605
QoS Appendix: Default Parameters 7 Appendix: Default Parameters Default settings of Class of Service are listed in the following tables. Table 7-1 Default Settings of Port Priority Configuration Parameter 802.1P Priority Trust Mode Default Setting 0 Untrusted Table 7-2 Default Settings of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 606
DSCP 16 to 23 24 to 31 32 to 39 40 to 47 48 to 55 56 to 63 802.1p Priority 2 3 4 5 6 7 Table 7-5 Default Settings of DSCP Remap Configuration Original DSCP 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 New DSCP 0 be (000000) 1 54 55 56 cs7 (111000) 57 58 59 60 61 62 63 User Guide 581 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 607
,000) UL-Frame Threshold (01,000,000) Action Recover Time Default Setting kbps 0 0 0 Drop 0 Default settings of Voice VLAN are listed in the following tables. Table 7-9 Default Settings of Global Configuration Parameter Voice VLAN VLAN ID Priority Default Setting Disabled None 7 User Guide 582 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 608
of Port Configuration Parameter Voice VLAN Default Setting Disabled Table 7-11 Default Settings of OUI Table OUI Status Description 00:01:E3 Default SIEMENS 00:03:6B Default CISCO1 00:12:43 Default CISCO2 00:0F:E2 Default H3C 00:60:B9 Default NITSUKO 00:D0:1E Default PINTEL - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 609
Part 18 Configuring Access Security CHAPTERS 1. Access Security 2. Access Security Configurations 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 610
the configuration management security. 1.2 Supported Features Access Control This function is used to control the users' access to the switch based on IP address, MAC address or port on the Telnet protocol subjected to TCP/IP protocol. Through Telnet, users can log on to the switch remotely. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 611
IP-range can access the switch via the specified interfaces MAC-based: Only the users with a certain MAC address can access the switch via the specified interfaces. Port-based: Only the users who are connected to certain ports can access the switch via the specified interfaces. User Guide 586 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 612
Enter the IP address and mask to specify an IP range. Only the users within this IP range can access the switch via the specified interfaces. ■■ When the MAC-based mode is selected, the following window will pop up. Figure 2-3 Configuring Access Control Entry Based on MAC Address User Guide 587 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 613
Address Enter the MAC address. Only the users with this MAC address can access the switch via the specified interfaces. ■■ When the Port-based mode is selected, the following window will pop up. Figure 2-4 Configuring A communication protocol to test the connection of the network. User Guide 588 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 614
view the created entries in the table. 2.1.2 Configuring the HTTP Function Choose the menu SECURITY > Access Security > HTTP switch through a web browser. Port Specify the port number for HTTP service. 2) In the Session Config section, specify the Session Timeout and User Guide 589 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 615
Access Security Access Security Configurations Number Control Enable or disable Number Control. With this option enabled, you can control the number of the users logging access level is Power User. Number of Users Specify the maximum number of users whose access level is User. User Guide 590 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 616
Choose the menu SECURITY > Access Security > HTTPS Config to load the following page. Figure 2-6 Configuring the HTTPS Function 1) In the Global Config section, enable HTTPS function, select the protocol version that the switch supports and specify the port using for HTTPS. Click Apply. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 617
Security Configurations HTTPS Enable . TLS is a transport protocol upgraded from SSL. It can support a more secure connection than SSL. TLS and SSL are not protocol each time. Port Specify the port number for HTTPS service. 2) In the CipherSuite Config section, select the algorithm to Guide 592 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 618
Access Security Access Security Configurations 4) In the Number of Access Users section, enable Number Control function, specify the following parameters and click Apply. . The SSL certificate and key downloaded must match each other, otherwise the HTTPS connection will not work. User Guide 593 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 619
Choose the menu SECURITY > Access Security > SSH Config to load the following page. Figure 2-7 Configuring the SSH Feature 1) In the Global Config section, select Enable to enable SSH function and device. It is more secure than Telnet protocol as it provides strong encryption. User Guide 594 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 620
Configurations the switch to support and click Apply. 3) In want the switch to support and click Apply. 4) operation. 2.1.5 Configuring the Telnet Function Choose the menu SECURITY > following page. Figure 2-8 Configuring the Telnet Function Enable subjected to TCP/IP protocol. It allows users to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 621
command to control the users' access by limiting the IP address: user access-control ip-based enable Configure the control mode as IP-based. user access-control ip-based { ip-addr ip-mask } [ snmp ] [ telnet ] [ access the switch via it. By default, all the interfaces are selected. User Guide 596 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 622
. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to set the type of access control as IP-based. Set the IP address as 192.168.0.100, set the subnet mask as 255.255.255.0, and select snmp, telnet - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 623
config)#show ip http configuration HTTP Status: Enabled HTTP Port: 80 HTTP Session Timeout: 9 HTTP User Limitation: Enabled HTTP Max Users as Admin: 6 HTTP Max Users as Operator: 2 HTTP Max Users as Power User: 2 HTTP Max Users as User: 2 Switch(config)#end User Guide 598 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 624
configure the HTTPS function: Step 1 Step 2 Step 3 configure Enter global configuration mode. ip http secure-server Enable the HTTPS function. By default, it is enabled. ip TLS is a transport protocol upgraded from SSL. It can support a more secure connection than SSL. TLS and SSL are not Guide 599 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 625
, which ranges from 5 to 30 minutes. The default value is 10. Step 6 ip http secure-max-users admin-num operator-num poweruser ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. Step 9 show ip http secure-server Verify the global configuration Guide 600 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 626
IP address 192.168.0.100. Switch#configure Switch(config)#ip http secure-server Switch(config)#ip http secure-protocol all Switch(config)#ip http secure-ciphersuite 3des-ede-cbc-sha Switch(config)#ip as User: 2 Switch(config)#end Switch#copy running-config startup-config User Guide 601 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 627
time, which ranges from 1 to 120 seconds. The default value is 120 seconds. ip ssh max-client num Specify the maximum number of the ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. show ip ssh Verify the global configuration of SSH. User Guide 602 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 628
ip-address 192.168.0.100 Start to download SSH key file... Download SSH key file OK. Switch(config)#show ip ssh Global Config: SSH Server: Enabled Protocol V1: Enabled Protocol V2: Enabled Idle Timeout: 100 MAX Clients: 4 Port: 22 Encryption Algorithm: AES128-CBC: Enabled User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 629
configuration mode. telnet enable Enable the telnet function. By default, it is enabled. telnet port port Specify the port using for Telnet. It ranges from 1 to 65535. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 630
Enabled All 443 Enabled Enabled Enabled Enabled Enabled ECDHE_WITH_AES_256_GCM_ SHA384 Enabled Session Timeout Number Control 10 minutes Disabled Table 3-4 Default Settings of SSH Configuration Parameter SSH Protocol V1 Protocol V2 Default Setting Disabled Enabled Enabled User Guide 605 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 631
3DES-CBC HMAC-SHA1 HMAC-MD5 Key Type: Default Setting 120 seconds 5 22 Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled SSH-2 RSA/DSA Table 3-5 Default Settings of Telnet Configuration Parameter Telnet Port Default Setting Enabled 23 Appendix: Default Parameters User Guide 606 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 632
Configuring Access Security User Guide 607 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 633
Part 19 Configuring AAA CHAPTERS 1. Overview 2. AAA Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 634
Configuring AAA Overview 1 Overview AAA stands for authentication, authorization and accounting. On TP-Link switches, this feature + server(s). As the following figure shows, the network administrator can centrally configure the management accounts of the switches on the RADIUS server and use this - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 635
Configure the server groups. 3) Configure the method list. 4) Configure the AAA application list. 5) Configure the login account and the Enable password. Configuration Guidelines The basic concepts and working mechanism of AAA are as follows: ■■ AAA Default Setting By default . User Guide 610 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 636
switch supports the following access applications: Telnet, SSH and HTTP. You can select the configured authentication Configuration to load the Follow these steps to add a RADIUS server: 1) Configure the following parameters. Server IP Enter the IP address default setting is 1812. User Guide 611 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 637
The default setting is . The default value is the MAC address of the Configure the following parameters. Server IP Enter the IP address of the server running the TACACS+ secure protocol. Timeout Specify the time interval that the switch waits for the server to reply before resending. The default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 638
will pop up. Figure 2-4 Add Server Group Configure the following parameters: Server Group Specify a name for the server group. Server Type Select the server type for the group. The following options are provided: RADIUS and TACACS+. Server IP Select the IP address of the server which will be - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 639
Configuring AAA AAA Configuration 2.1.3 Configuring the Method List A method list describes the authentication methods and their sequence to authenticate the users. The switch supports default methods respectively for the Login authentication and the Enable authentication. You can edit the default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 640
authentication. 2) Click Create to add the new method. 2.1.4 Configuring the AAA Application List Choose the menu SECURITY > AAA Configure Application List Follow these steps to configure the AAA application list. 1) In the AAA Application List section, select an access application and configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 641
configured in the User Management feature. For details, refer to Managing System. To configure page. Figure 2-8 Configure Enable Password There be customized. ■■ For Enable password configuration: On RADIUS server, the user configure the value of "enable 15" as the Enable password in the configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 642
configure Enter global configuration mode. Step 2 radius-server host ip-address configure the related parameters as needed. host ip-address: Enter the IP address default the default default value is the MAC address default configuration file of another switch. The key or encrypted-key you configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 643
configure the related parameters as needed. host ip-address: Enter the IP address of the server running the TACACS+ protocol. port port-id: Specify the TCP destination port on the TACACS+ server for authentication requests. The default 9 seconds and the default setting is 5 seconds. By default, the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 644
the group type. group-name: Specify a name for the group. Step 3 server ip-address Add the existing servers to the server group. ip-address: Specify IP address of the server to be added to the group. Step 4 show aaa group [ group-name ] Verify the configuration of server group. User Guide 619 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 645
add the existing two RADIUS servers whose IP address is 192.168.0.10 and 192.168.0.20 to the group. Switch#configure Switch(config)#aaa group radius RADIUS1 Switch( and so on. The default methods include radius, tacacs, local and none. None means no authentication is used for login. User Guide 620 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 646
named Login1, and configure the method 1 as the default radius server group and the method 2 as local. Switch#configure Switch(config)##aaa authentication named Enable1, and configure the method 1 as the default radius server group and the method 2 as local. Switch#configure Switch(config)##aaa - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 647
configure Enter global configuration mode. Step 2 line telnet Enter line configuration Step 5 show aaa global Verify the configuration of application list. Step 6 end Return Save the settings in the configuration file. The following example shows Telnet. Switch#configure Switch(config)# - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 648
default default Http default default Switch(config-line)#end Switch#copy running-config startup-config ■■ SSH Follow these steps to apply the Login and Enable method lists for the application SSH: Step 1 configure Enter global configuration the configuration of configuration configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 649
the application HTTP: Switch#configure Switch(config)#ip http login authentication Login1 Switch(config)#ip http enable authentication Enable1 Switch(config)#show aaa global Module Login List Enable List Telnet default default Ssh default default Http Login1 Enable1 User Guide 624 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 650
which you can copy from the configuration file of another switch. The key or encrypted-key you configured here will be displayed in the default, the encryption type is 0. encrypted-password is an MD5 encrypted password with fixed length, which you can copy from another switch's configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 651
value of "enable 15" as the Enable password in the configuration file. All the users trying to get administrative privileges share this Enable password. Tips: The logged-in guests can get administrative privileges by using the command enableadmin and providing the Enable password. User Guide 626 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 652
and the Enable password on the two RADIUS servers, and configure the AAA feature on the switch. The IP addresses of the two RADIUS servers are 192.168.0.10/24 and Server 1 is the first server for authentication. 3) Configure the method list. 4) Configure the AAA application list. User Guide 627 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 653
Add RADIUS Server 1 2) On the same page, click to load the following page. Configure the Server IP as 192.168.0.20, the Shared Key as 123456, the Auth Port as 1812, and keep the other parameters as default. Click Create to add RADIUS Server 2 on the switch Figure 3-3 Add RADIUS Server 2 User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 654
Configuring AAA Configuration Example 3) Choose the menu SECURITY > AAA > Server Group to load Pri1 as RADIUS1. Click Create to set the method list for the Login authentication. Figure 3-5 Configure Login Method List 5) On the same page, click in the Authentication Eanble Method List section. - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 655
In the AAA Application List section, select telnet and configure the Login List as MethodLogin and Enable List as Method-Enable. Then click Apply. Figure 3-7 Configure AAA Application List 7) Click to save the settings. Switch(aaa-group)#server 192.168.0.20 Switch(aaa-group)#exit User Guide 630 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 656
Method-Enable RADIUS1 4) Configure Method-Login and Configuration Verify the configuration of the RADIUS servers: Switch#show radius-server Server Ip configuration of the method lists: Switch#show aaa authentication Authentication Login Methodlist: Methodlist pri1 pri2 pri3 pri4 default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 657
-Enable RADIUS1 -- -- -- ... Configuration Example Verify the status of the AAA feature and the configuration of the AAA application list: Switch#show aaa global Module Login List Enable List Telnet Method-Login Method-Enable SSH default default Http default default User Guide 632 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 658
Configuring AAA Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of AAA are listed in the following tables. Table 4-1 AAA Parameter Default Setting Global Config AAA Feature Enabled RADIUS Config Server IP None Shared Key None Auth Port 1812 Acct Port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 659
Configuring AAA Parameter AAA Application List telnet ssh http Default Setting Login List: default Enable List: default Login List: default Enable List: default Login List: default Enable List: default Appendix: Default Parameters User Guide 634 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 660
Part 20 Configuring 802.1x CHAPTERS 1. Overview 2. 802.1x Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 661
Configuring 802.1x Overview 1 Overview TP-Link 802.1x authentication client software on the client hosts, enabling them to request 802.1x authentication to access the LAN. ■■ Authenticator An authenticator is usually a network device that supports whether a client is authenticated. User Guide 636 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 662
RADIUS Server Configure the parameters of RADIUS sever and configure the RADIUS server group. ■■ Adding the RADIUS Server Choose the menu SECURITY > AAA > RADIUS Config and click following page. Figure 2-1 Adding RADIUS Server to load the Follow these steps to add a RADIUS server: User Guide 637 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 663
.1x 802.1x Configuration 1) Configure the parameters of the RADIUS server. Server IP Enter the IP address of the server 1 to 31 characters. The default value is the MAC address of the switch. Generally, the NAS indicates the switch itself. ■■ Configuring the RADIUS Server Group Choose the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 664
window will pop up. Specify a name for the server group, select the server type as RADIUS and select the IP address of the RADIUS server. Click Save. Figure 2-4 Adding Server Group ■■ Configuring the Dot1x List Choose the menu SECURITY > AAA > Dot1x List to load the following page. Figure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 665
Pri1 drop-down list and click Apply. 2.1.2 Configuring 802.1x Globally Choose the menu SECURITY > 802 steps to configure 802.1x global parameters: 1) In the Global Config section, configure the following parameters to detect the connection status between the TP-Link 802.1x Client and the switch. - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 666
add the authenticated port to the related VLAN and change the PVID instead of creating a new VLAN. If no VLAN is supplied by the RADIUS server or if 802.1x authentication is disabled, the port will be in its original VLAN after successful authentication. 2.1.3 Configuring 802.1x on Ports Choose the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 667
IP phones and fax machines do not have 802.1x capability. Note: MAB cannot work if Guest VLAN is enabled. Specify a Guest VLAN ID. 0 means that Guest VLAN is disabled. The configured VLAN must be an existing 802.1Q VLAN. With Guest VLAN from 1 to 60 seconds and the default time is 30 seconds. If the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 668
1x 802.1x Configuration Note: If . MAC Address Displays the MAC address of the authenticated device. When the port method is Port Based, the MAC address of the whether the port is authorized or not. VID Displays the VLAN ID assigned by the authenticator to the supplicant device when the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 669
not respond. The valid values are from 1 to 3 and the default setting is 2. nas-id nas-id: Specify the name of the ip-address Add the existing servers to the server group. ip-address: Specify IP address of the server to be added to the group. exit Return to global configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 670
Configuration Step 6 aaa authentication dot1x default { method } Select the RADIUS group for 802.1x authentication. method: Specify the RADIUS group for 802.1x authentication. aaa accounting dot1x default in the configuration file. The 1x authentication. The IP address of the RADIUS server is - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 671
dot1x Methodlist pri1 pri2 pri3 pri4 default radius1 -- -- -- Switch(config)#end Switch#copy running-config startup-config 2.2.2 Configuring 802.1x Globally Follow these steps to configure 802.1x globally: Step 1 Step 2 configure Enter global configuration mode. dot1x system-auth-control - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 672
if you are using other client softwares instead of TP-Link 802.1x Client. dot1x vlan-assignment (Optional) Enable or disable the 802.1x VLAN assignment feature. 802.1x VLAN assignment is a technology allowing the RADIUS server to send the VLAN assignment to the port when the port is authenticated - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 673
request frame with the client's MAC address as the username and password. It is also necessary to configure the RADIUS server with the client's . For example, most printers, IP phones and fax machines do not have 802.1x capability. Note: MAB cannot work if Guest VLAN is enabled. User Guide 648 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 674
Clients in the guest VLAN can only access resources from specific VLANs. Note: To use Guest VLAN, the control type of the port should be configured as port-based. dot1x port-control { auto | authorized-force | unauthorized-force } Configure the control mode for the port. By default, it is auto. auto - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 675
authentication on port 1/0/2, configure the control type as port-based, and keep other parameters as default: Switch#configure Switch(config)#interface gigabitEthernet port | tengigabitEthernet port] Displays the authenticator state. configure Enter global configuration mode. User Guide 650 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 676
unauthorized. dot1x auth-reauth [ mac mac-address ] Reauthenticate the specific client. mac-address: Enter the MAC address of the client that will be reauthenticated. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. User Guide 651 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 677
only the authenticated clients can access the internet. 3.2 Configuration Scheme ■■ To authenticate clients separately, enable 802.1x authentication, configure the control mode as auto, and set the control type to the RADIUS server, and port 1/0/3 is connected to the internet. User Guide 652 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 678
with T1600G-52TS acting as the authenticator, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 3.4 Using the GUI 1) Choose the menu SECURITY > AAA > RADIUS Config and click to load the following page. Configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 679
> 802.1x > Global Config to load the following page. Enable 802.1x authentication and configure the Authentication Method as EAP. Keep the default authentication settings. Click Apply. Figure 3-5 Configuring Global Settings 5) Choose the menu SECURITY > 802.1x > Port Config to load the following - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 680
Configure the RADIUS parameters. Switch_A(config)#radius-server host 192.168.0.10 auth-port 1812 key 123456 Switch_A(config)#aaa group radius RADIUS1 Switch_A(aaa-group)#server 192.168.0.10 Switch_A(aaa-group)#exit Switch_A(config)#aaa authentication dot1x default (config-if)#exit User Guide 655 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 681
Enabled 802.1X Accounting State: Disabled 802.1X VLAN Assignment State: Disabled Configuration Example Verify the configurations of 802.1x authentication on the port: 3 10 30 unauthorized N/A 3 10 30 unauthorized N/A PortMethod ---------mac-based mac-based mac-based User Guide 656 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 682
global Module Login List Enable List Telnet default default Ssh default default Http default default Switch_A#show aaa authentication dot1x Methodlist pri1 pri2 pri3 default RADIUS1 -- -- Switch_A#show aaa group RADIUS1 192.168.0.10 pri4 -- Configuration Example User Guide 657 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 683
Port Control Auto Guest VLAN 0 Maximum Request 3 Quiet Period 10 seconds Supplicant Timeout 30 seconds Port Method MAC Based Dot1X List Authentication Dot1x Method List List Name: default Pri1: radius Accounting Dot1x Method List List Name: default Pri1: radius User Guide 658 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 684
Part 21 Configuring Port Security CHAPTERS 1. Overview 2. Port Security Configuration 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 685
Configuring Port Security Overview 1 Overview You can use the Port Security feature to limit the number of MAC addresses that can be learned on each port, thus preventing the MAC address table from being exhausted by the attack packets. In addtion, the switch can send a notification if the number - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 686
and configure the following parameters. Port Displays the port number. Max Learned Number of MAC Specify the maximum number of MAC addresses that can be learned on the port. When the learned MAC address number reaches the limit, the port will stop learning. It ranges from 0 to 64. The default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 687
Security Port Security Configuration Learn Address Mode Status Select the learn mode of the MAC addresses on the port. Three modes are provided: Delete on Timeout: The switch will delete the MAC addresses that are not used or updated within the aging time. It is the default setting. Delete on - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 688
| drop | disable } ]} Enable the port security feature of the port and configure the related parameters. num: The maximum number of MAC addresses that can be learned on the port. The valid values are from 0 to 64. The default value is 64. exceed-max-learned: With exceed-max-learned enabled, when the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 689
Port Security Port Security Configuration Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#mac address-table max-mac-count max-number 30 exceed-maxlearned enable mode permanent status drop Switch(config-if)#show mac address-table max-mac-count interface - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 690
settings of Port Security are listed in the following table. Table 3-1 Default Parameters of Port Security Parameter Default Setting Max Learned Number of 64 MAC Current Learned Number 0 Exceed Max Learned Trap Disabled Learn Address Mode Delete on Timeout Status Disabled User Guide 665 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 691
Part 22 Configuring ACL CHAPTERS 1. Overview 2. ACL Configuration 3. Configuration Example for ACL 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 692
an ACL and configure the rules to filter different packets. 3) Bind the ACL to a port or VLAN to make it effective. Configuration Guidelines ■■ A ■■ If no ACL rule is configured, the packets will be forwarded without being processed by the ACL. If there is configured ACL rules and no matching rule - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 693
time range for the ACL. For details about Time Range configuration, please refer to Managing System 2.1.2 Creating an ACL You can create different types of ACL and define the rules based on source MAC or IP address, destination MAC or IP address, protocol type, port number and so on. MAC ACL: MAC - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 694
Configuration Note: The supported ACL type and ID range varies on different switch models. Please refer to the on-screen information. 2.1.3 Configuring can configure rules for this ACL. The following sections introduce how to configure MAC ACL, IP ACL, Combined ACL and IPv6 ACL. Configuring MAC ACL - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 695
ACL Rule section, configure the following parameters: Rule rule ID will be assigned automatically by the system and the default increment between neighboring rule IDs is 5. Operation Select an action Enter the source MAC address with a mask. A value of 1 in the mask indicates that the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 696
Configuration D-MAC/Mask Enter the destination MAC address with a mask. A value of 1 in the mask indicates that the corresponding bit in the address will be matched. VLAN ID Enter the ID number of the VLAN with which packets will match. The valid range is 1-4094. If the ACL is bound to a VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 697
enabled, configure the related parameters. Figure 2-7 Configuring Rate option enabled, configure the related parameters, and the Configuring QoS Remark DSCP Local Priority 802.1p Priority 6) Click Apply. Specify the DSCP field for the matched packets. The DSCP field of the packets will be changed - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 698
Configuring ACL Configuring IP ACL Rule Click Edit ACL for an IP ACL entry to load the following page. Figure 2-9 Configuring the IP ACL Rule ACL Configuration In ACL Rules Table section, click Figure 2-10 Configuring the IP ACL Rule and the following page will appear. User Guide 673 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 699
the address will be matched. IP Protocol Select a protocol type from the drop-down list. The default is No Limit, which indicates that packets of all protocols will be matched. You can also select Userdefined to customize the IP protocol. TCP Flag If TCP protocol is selected, you can configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 700
Configuration IP Pre Specify an IP Precedence value to be matched to be matched between 0 and 7. The default is No Limit. Time Range Select a time range during which the rule will take effect. The default matched packets. With this option enabled, configure the related parameters. User Guide 675 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 701
for the matched packets. With this option enabled, configure the related parameters, and the remarked values will take effect in changed to the specified one. Specify the 802.1p priority for the matched packets. The 802.1p priority of the packets will be changed to the specified one. Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 702
Configuring ACL Figure 2-15 Configuring the Combined ACL Rule ACL Configuration In ACL Rules Table section, click and the following page will appear. User Guide 677 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 703
Combined ACL rule: 1) In the Combined ACL Rule section, configure the following parameters: Rule ID Enter an ID number to identify the rule. It select Auto Assign, the rule ID will be assigned automatically by the system and the default increment between neighboring rule IDs is 5 User Guide 678 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 704
bit in the address will be matched. Select a protocol type from the drop-down list. The default is No Limit, which indicates that packets of all protocols will be matched. You can also select Userdefined to customize the IP protocol. If TCP protocol is selected, you can configure the TCP Flag - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 705
Configuration IP Pre Specify an IP Precedence value to be matched to be matched between 0 and 7. The default is No Limit. User Priority Specify the User Priority to be matched. Time Range Select a time range during which the rule will take effect. The default Configuring 18 Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 706
, configure the related parameters. Figure 2-19 Configuring Rate With this option enabled, configure the related parameters, and the changed to the specified one. Specify the 802.1p priority for the matched packets. The 802.1p priority of the packets will be changed to the specified one. Configuring - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 707
Configuring the IPv6 ACL Rule ACL Configuration In ACL Rules Table section, click Figure 2-22 Configuring the IPv6 ACL Rule and the following page will appear. Follow these steps to configure the IPv6 ACL rule: 1) In the IPv6 ACL Rule section, configure the following parameters: User Guide 682 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 708
Configuring ACL ACL Configuration will be assigned automatically by the system and the default increment between neighboring rule IDs is 5 Operation address is entered. Enter the complete mask (for example, FFFF:FFFF:0000:FFFF). The IP address mask specifies which bits in the source IP address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 709
ACL ACL Configuration Time Range Select a time range during which the rule will take effect. The default value is No Limit, which means the rule is Limit feature for the matched packets. With this option enabled, configure the related parameters. Figure 2-25 Configuring Rate Limit User Guide 684 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 710
. Figure 2-26 Configuring QoS Remark DSCP Local Priority 802.1p Priority 6) Click Apply. Specify the DSCP field for the matched packets. The DSCP field of the packets will be changed to the specified one and you can view the rule table. We take IP ACL rules table for example. User Guide 685 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 711
also click Resequence to resequence the rules by providing a Start Rule ID and Step value. 2.1.4 Configuring ACL Binding You can bind the ACL to a port or a VLAN. The received packets on the port or in the VLAN will then be matched and processed according to the ACL rules. An ACL takes effect only - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 712
ACL to a Port ACL Configuration Follow these steps to bind the ACL to a Port: 1) Choose ID or Name to be used for matching the ACL. Then select an ACL from the drop-down list. 2) Specify the port to be bound. 3) Click Create. ■■ Binding the ACL to a VLAN Choose the menu SECURITY > ACL - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 713
You can define the rules based on source or destination IP address, source or destination MAC address, protocol type, port number and others. MAC ACL Follow these steps to configure MAC ACL: Step 1 Step 2 configure Enter global configuration mode. access-list create acl-id [name acl-name] Create - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 714
trap will be generated if the matching times changes. source-mac: Enter the source MAC address. The format is FF:FF:FF:FF:FF default is No Limit. vlan-id: The VLAN ID ranges from 1 to 4094. time-range-name: The name of the time-range. The default is No Limit. exit Return to global configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 715
Configuring ACL ACL Configuration Switch(config)#access-list create 50 Switch #copy running-config startup-config IP ACL Follow these steps to configure IP ACL: Step 1 Step 2 configure Enter global configuration mode. access-list create acl-id [name acl-name] Create an IP ACL. acl-id: Enter - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 716
will be generated if the matching times changes. sip-address: Enter the source IP address. sip-address-mask: Enter the mask of the source IP address. This is required if a source IP address is entered. dip-address: Enter the destination IP address. dip-address-mask: Enter the mask of the destination - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 717
5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to create IP ACL 600, and configure Rule 1 to permit packets with source IP address 192.168.1.100: Switch#configure Switch(config)#access-list create 600 Switch(config)#access-list - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 718
if a destination MAC address is entered. vlan-id: The VLAN ID ranges from 1 to 4094. ether-type: Specify the Ethernet-type with 4 hexadecimal numbers. priority: The user priority ranges from 0 to 7. The default is No Limit. sip-address: Enter the source IP address. sip-address-mask: Enter the mask - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 719
default is No Limit. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to create Combined ACL 1100 and configure Rule 1 to deny packets with source IP address 192.168.3.100 in VLAN 2: Switch#configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 720
will be generated if the matching times changes. class-value: Specify a class value to be matched. It ranges from 0 to 63. flow-label-value: Specify a Flow Label value to be matched. source-ip-address: Enter the source IP address. Enter the destination IPv6 address to be matched. All types of IPv6 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 721
configure Rule 1 to deny packets with source IPv6 address CDCD:910A:2222:5498:8475:1111:3900:2020: Switch#configure 2.2.3 Configuring Policy Policy allows changing priority. Follow the steps below to configure the policy actions for an ACL rule. Step 1 Step 2 configure Enter global configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 722
ACL ACL Configuration Step 3 redirect interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } (Optional) Define the policy to redirect the matched packets to the desired port. port: The destination port to which the packets will be redirected. The default is All - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 723
Configuring ACL Binding You can bind the ACL to a port or a VLAN. The received packets on the port or in the VLAN VLAN: Step 1 configure Enter global configuration mode Step 2 access-list bind acl-id-or-name interface { [ vlan vlan for. vlan-list: Specify the ID or the ID list of the VLAN(s) that - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 724
(config)#end Switch#copy running-config startup-config Type ---Port VLAN 2.2.5 Viewing ACL Counting You can use the following command to view the number of matched packets of each ACL in the privileged EXEC mode and any other configuration mode: show access-list acl-id-or-name counter View - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 725
Configuring ACL Configuration Example for ACL 3 Configuration Example for ACL 3.1 Configuration DC-D4-40-A1-79 3.1.2 Configuration Scheme To meet the requirements above, you can set up creating an MAC ACL and configuring rules for it. ■■ Time Range Configuration Create a time range entry for - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 726
to visit internal forum at any time. ■■ Configure a deny rule to match packets with destination MAC address 40-61-86-FC71-56 and apply the time internal forum during work hours. Demonstrated with T1600G-28TS, the following sections explain the configuration procedure in two ways: using the GUI - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 727
Time Configuration Example for ACL 3) After adding the Period Time, click Create to save the time range entry. Figure 3-4 Creating Time Range 4) Choose the menu SECURITY > ACL > ACL Config and click page. Then create a MAC ACL for the marketing department. to load the following User Guide 702 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 728
5) Click Edit ACL in the Operation column. Figure 3-6 Editing the MAC ACL 6) On the ACL configuration page, click . Figure 3-7 Editing the MAC ACL 7) Configure rule 5 to permit packets with the source MAC address 8C-DC-D4-40-A1-79 and destination MAC address 40-61-86-FC-71-56. User Guide 703 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 729
Configuring ACL Figure 3-8 Configuring Rule 5 Configuration Example for ACL 8) In the same way, configure rule 15 to deny packets with destination MAC address 4061-86-FC-71-56 and apply the time range of work hours. User Guide 704 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 730
Configuring ACL Figure 3-9 Configuring Rule 15 Configuration Example for ACL 9) Configure rule 25 to permit all the packets that do not match neither of the above rules. User Guide 705 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 731
Configuring ACL Figure 3-10 Configuring Rule 25 Configuration Example for ACL 10)Choose the menu SECURITY > ACL > ACL Binding and click following page. Bind ACL 100 to port 1/0/2 to make it take effect. Figure 3-11 Binding the ACL to Port 1/0/2 to load the User Guide 706 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 732
configure Switch(config)#access-list create 100 name Forum_Control 3) Configure rule 5 to permit packets with source MAC address 8C-DC-D4-40-A1-79 and destination MAC address FF: FF 4) Configure rule 15 to deny packets with destination MAC address 40-61-86-FC Verify the Configurations Verify the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 733
Configuration Example for IP ACL 3.2.1 Network Requirements As shown below, a company's internal server group can provide different types of services Figure 3-12 Network Topology Internet Gi1/0/1 Gi1/0/2 Server Group IP: 10.10.80.0/24 Marketing IP: 10.10.70.0/24 It is required that: ■■ The - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 734
and initiates the action defined in the rule. ■■ Binding Configuration Bind the IP ACL to port 1/0/1 so that the ACL rules will apply to the Marketing department only. Demonstrated with T1600G-28TS, the following sections explain the configuration procedure in two ways: using the GUI and using the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 735
Figure 3-14 Editing IP ACL Configuration Example for ACL 3) On the ACL configuration page, click . Figure 3-15 Editing IP AC 4) Configure rule 1 to permit packets with the source IP address 10.10.70.0/24 and destination IP address 10.10.80.0/24. Figure 3-16 Configuring Rule 1 User Guide 710 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 736
Configuring ACL Configuration Example for ACL 5) In the same way, configure rule 2 and rule 3 to permit packets with source IP 10.10.70.0 and destination port TCP 80 (http service port) and TCP 443 (https service port). Figure 3-17 Configuring Rule 2 User Guide 711 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 737
Configuring ACL Figure 3-18 Configuring Rule 3 Configuration Example for ACL User Guide 712 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 738
Configuring ACL Configuration Example for ACL 6) In the same way, configure rule 4 and rule 5 to permit packets with source IP 10.10.70.0 and with destination port TCP 53 or UDP 53 (DNS service port). Figure 3-19 Configuring Rule 4 User Guide 713 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 739
Configuration Example for ACL 7) In the same way, configure rule 6 to deny packets with source IP 10.10.70.0. Figure 3-21 Configuring Rule 6 8) Choose the menu SECURITY > ACL > ACL Binding and click following page. Bind ACL Marketing to port 1/0/1 to make it take effect. to load the User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 740
255.255.255.0 dip 10.10.80.0 dmask 255.255.255.0 3) Configure rule 2 and Rule 3 to permit packets with source IP 10.10.70.0/24, and destination port TCP 80 (http service port) or TCP 443 (https service port). Switch(config)#access-list ip 500 rule 2 permit logging disable sip 10.10.70.0 sip-mask - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 741
500 interface gigabitEthernet 1/0/1 Switch(config)#end Switch#copy running-config startup-config Verify the Configurations Verify the IP ACL 500: Switch#show access-list 500 rule 1 permit logging disable sip 10.10 /VID Direction Type 500 marketing Gi1/0/1 Ingress Port User Guide 716 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 742
TCP 23. This rule allows the computer of the network administrator to access the switch through Telnet connection. ■■ Configure a deny rule to match all the packets except the packets with source MAC address 6C-62-6D-F5-BA-48 and destination port TCP 23. This rule blocks the Telnet connection to the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 743
and the devices which are restricted to Telnet connection. Demonstrated with T1600G-28TS, the following sections explain the configuration procedure in two ways: using the GUI and using the CLI. column. Figure 3-25 Editing Combined ACL 3) On the ACL configuration page, click . User Guide 718 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 744
Configuring ACL Figure 3-26 Editing Combined ACL Configuration Example for ACL 4) Configure rule 5 to permit packets with the source MAC address 6C-62-6D-F5-BA-48 and destination port TCP 23 (Telnet service port). User Guide 719 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 745
Configuring ACL Figure 3-27 Configuring Rule 5 Configuration Example for ACL 5) Configure rule 15 to deny all the packets except the packet with source MAC address 6C-62-6D-F5-BA-48, and destination port TCP 23 (Telnet service port). User Guide 720 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 746
Configuring ACL Figure 3-28 Configuring Rule 15 Configuration Example for ACL 6) In the same way, configure rule 25 to permit all the packets. The rule makes sure that all devices can get other network services normally. User Guide 721 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 747
Configuring ACL Figure 3-29 Configuring Rule 25 Configuration Example for ACL 7) Choose the menu SECURITY > ACL > ACL Binding and click to load the following page. Bind the Policy ACL_Telnet to port 1/0/2 to make it take effect. User Guide 722 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 748
6 d-port 23 d-portmask FFFF 3) Configure rule 15 to deny all the packets except the packet with source MAC address 6C-62-6D-F5-BA-48, and destination port TCP 23 (Telnet service port). Switch(config)#access-list combined Switch(config)#end Switch#copy running-config startup-config User Guide 723 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 749
Example for ACL Verify the Configurations Verify the Combined ACL 1000: Switch#show access-list 1000 Combined access list 1000 name: "ACL_Telnet" rule 5 permit #show access-list bind ACL ID ACL NAME Interface/VID Direction Type 1000 ACL_Telnet Gi1/0/2 Ingress Port User Guide 724 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 750
Configuring ACL Appendix: Default Parameters 4 Appendix: Default Parameters The default settings of ACL are listed in the following tables: Table 4-1 MAC ACL Parameter Default Setting Operation Permit User Priority No Limit Time-Range No Limit Table 4-2 IP ACL Parameter Operation IP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 751
Configuring ACL Table 4-5 Policy Parameter Mirroring Redirect Rate Limit QoS Remark Default Setting Disabled Disabled Disabled Disabled Appendix: Default Parameters User Guide 726 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 752
Part 23 Configuring IPv4 IMPB CHAPTERS 1. IPv4 IMPB 2. IP-MAC Binding Configuration 3. ARP Detection Configuration 4. IPv4 Source Guard Configuration 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 753
and filter the packets that don't match the binding entries with the IP Source Guard feature. 1.2 Supported Features IP-MAC Binding This feature is used to add binding entries. The binding entries can be manually configured, or learned by ARP scanning or DHCP snooping. The features ARP Detection - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 754
Snooping Additionally, you can view, search and edit the entries in the Binding Table. 2.1 Using the GUI 2.1.1 Binding Entries Manually You can manually bind the IP address, MAC address, VLAN ID and the Port number together on the condition that you have got the detailed information of the hosts - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 755
Follow these steps to manually create an IP-MAC Binding entry: 1) Enter the following information to specify a host. Host Name Enter the host name for identification. IP Address Enter the IP address. MAC Address Enter the MAC address. VLAN ID Enter the VLAN ID. 2) Select protect type - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 756
to bind the entries manually. Choose the menu SECURITY > IPv4 IMPB > IP-MAC Binding > ARP Scanning to load the following page. Figure 2-2 ARP Scanning Follow these steps to configure IP-MAC Binding via ARP scanning: 1) In the Scanning Option section, specify an IP address range and a VLAN ID. Then - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 757
configure the relevant parameters. Then click Bind. Host Name Enter a host name for identification. IP Address Displays the IP address. MAC Address Displays the MAC address. VLAN ID Displays the VLAN Detection feature. IP Source Guard: This entry will be applied to the IP Source Guard feature - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 758
Snooping Follow these steps to configure IP-MAC Binding via DHCP Snooping: 1) In the Global Config section, globally enable DHCP Snooping. Click Apply. 2) In the VLAN Config section, enable DHCP Snooping on a VLAN or range of VLANs. Click Apply. VLAN ID Displays the VLAN ID. Status Enable or - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 759
IP address and click Search to search the specific entry. Additionally, you select one or more entries to edit the host name and protect type and click Apply. Host Name Enter a host name for identification. IP Address Displays the IP address. MAC Address Displays the MAC address. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 760
Binding Entries Manually You can manually bind the IP address, MAC address, VLAN ID and the Port number together on the condition that you have got the detailed information of the hosts. Follow these steps to manually bind entries: Step 1 configure Enter global configuration mode. User Guide 735 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 761
port | ten-gigabitEthernet port | port-channel port-channel-id } { none | arp-detection | ip-verify-source | both } Manually bind the host name, IP address, MAC address, VLAN ID and port number of the host, and configure the protect type for the host. hostname: Specify a name for the host. It - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 762
can learn via DHCP snooping as 100: Switch#configure Switch(config)#ip dhcp snooping Switch(config)#ip dhcp snooping vlan 5 Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip dhcp snooping max-entries 100 Switch(config-if)#show ip dhcp snooping Global Status: Enable User Guide 737 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 763
Entries On privileged EXEC mode or any other configuration mode, you can use the following command to view binding entries: show ip source binding View the information of binding entries, including the host name, IP address, MAC address, VLAN ID, port number and protect type. User Guide 738 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 764
in the IP-MAC Binding Table. So before configuring ARP Detection, you need to complete IP-MAC Binding configuration. For details, refer to IP-MAC Binding Configuration. 3.1.2 Enabling the Global Config section, enable ARP Detection and configure the related parameters. Click Apply. User Guide 739 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 765
sender IP address of all ARP packets and the target IP address of ARP reply packets are legal. The illegal ARP packets will be discarded, including broadcast addresses, multicast addresses, Class E addresses, loopback addresses (127.0.0.0/8) and the following address: 0.0.0.0. 2) In the VLAN Config - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 766
configure the parameters. Trust Status Limit Rate Enable or disable this port to be a trusted port. On a trusted port, the ARP packets are forwarded directly without checked. The specific ports, such as up-link Recovery button to recover If Status is changed to Down, there will be a Guide 741 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 767
addresses, multicast addresses, Class E addresses, loopback addresses (127.0.0.0/8) and the following address: 0.0.0.0. Step 4 ip arp inspection vlan vlan-list Enable ARP Detection on one or more 802.1Q VLANs that already exist. vlan-list: Enter the VLAN ID. The format is 1,5-9. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 768
whether the source MAC address and the sender MAC address are the same when receiving an ARP packet: Switch#configure Switch(config)#ip arp inspection Switch(config)#ip arp inspection validate src-mac Switch(config)#ip arp inspection vlan 2 Switch(config)#show ip arp inspection Global Status - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 769
valid values are from 1 to 15 seconds, and the default value is 1 second. show ip arp inspection interface View the configurations and status of the ports. show ip arp inspection vlan View the configurations and status of the VLANs. ip arp inspection recover (Optional) For ports on which the speed - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 770
Down status to Normal status: Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip arp inspection recover Switch(config-if)# EXEC mode or any other configuration mode, you can use the following command to view ARP statistics: show ip arp inspection statistics View the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 771
ARP Detection, you need to complete IP-MAC Binding configuration. For details, refer to IP-MAC Binding Configuration. 4.1.2 Configuring IPv4 Source Guard Choose the menu SECURITY > IPv4 IMPB > IPv4 Source Guard to load the following page. Figure 4-1 IPv4 Source Guard Config User Guide 746 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 772
source IP address and configure Enter global configuration mode. interface { fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | ten-gigabitEthernet port | range ten-gigabitEthernet port-list } Enter interface configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 773
IPv4 IMPB IPv4 Source Guard Configuration Step 3 Step 4 Step 5 Step 6 ip verify source { sip+mac | sip } Enable IP Source Guard for IPv4 packets. sip+mac: Only the packet with its source IP address, source MAC address and port number matching the IP-MAC binding rules can be processed, otherwise - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 774
, you can configure ARP Detection to prevent the network from ARP attacks in the LAN. The overview of configurations on the switch is as follows: 1) Configure IP-MAC Binding. The binding entries for User 1 and User 2 should be manually bound. 2) Configure ARP Detection globally. User Guide 749 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 775
with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 5.1.3 Using the GUI 1) Choose the menu SECURITY > IPv4 IMBP > IP-MAC Binding > Manual Binding and click to load the following page. Enter the host name, IP address, MAC address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 776
IP, and click Apply. Select VLAN 1, change Status as Enabled and click Apply. Figure 5-4 Enable ARP Detection 4) Choose the menu SECURITY > IPv4 IMBP > ARP Detection > Port Config to load the following page. By default, all ports are enabled with ARP Detection and ARP flooding defend. Configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 777
to save the settings. 5.1.4 Using the CLI 1) Manually bind the entries for User 1 and User 2. Switch_A#configure Switch_A(config)#ip source binding User1 192.168.0.31 74:d3:45:32:b6:8d vlan 1 interface gigabitEthernet 1/0/1 arp-detection Switch_A(config)#ip source binding User1 192.168.0.32 88:a9 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 778
1 User2 192.168.0.33 88:a9:d4:54:fd:c3 1 Gi1/0/2 ARP-D Manual Notice: 1.Here, 'ARP-D' for 'ARP-Detection',and'IP-V-S' for 'IP-Verify-Source'. Verify the global configuration of ARP Detection: Switch_A#show ip arp inspection Global Status: Enable Verify SMAC: Enable Verify DMAC: Enable Verify - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 779
on the switch is as follows: 1) Bind the MAC address, IP address, connected port number and VLAN ID of the legal host with IP-MAC Binding. 2) Enable IP Source Guard on ports 1/0/1-3. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 780
Figure 5-7 Manual Binding Configuration Examples 2) Choose the menu SECURITY > IPv4 IMPB > IPv4 Source Guard to load the following page. Enable IPv4 Source Guard Logging to make the switch generate logs when receiving illegal packets, and click Apply. Select ports 1/0/1-3, configure the Security - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 781
Examples 3) Click to save the settings. 5.2.4 Using the CLI 1) Manually bind the IP address, MAC address, VLAN ID and connected port number of the legal host, and apply this entry to the IP Source Guard feature. Switch#configure Switch(config)#ip source binding legal-host 192.168.0.100 74:d3:45 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 782
------ 1 User1 192.168.0.100 74:d3:45:32:b5:6d 1 Gi1/0/1 IP-V-S Manual Notice: 1.Here, 'ARP-D' for 'ARP-Detection',and'IP-V-S' for 'IP-Verify-Source'. Verify the configuration of IP Source Guard: Switch#show ip verify source IP Source Guard log: Enabled Port Security-Type LAG Gi1/0/1 SIP+MAC - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 783
Configuring IPv4 IMPB Appendix: Default Parameters 6 Appendix: Default Parameters Default settings of DHCP Snooping are listed in the following table: Table 6-1 DHCP Snooping Parameter Default Setting Global Config DHCP Snooping Disabled VLAN Config Status Disabled Port Config Maximum - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 784
Configuring IPv4 IMPB Appendix: Default Parameters Parameter Burst Interval ARP Statistics Auto Refresh Refresh Interval Default Setting 1 second Disabled 5 seconds Default settings of IPv4 Source Guard are listed in the following table: Table 6-3 ARP Detection Parameter Global Config IPv4 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 785
Part 24 Configuring IPv6 IMPB CHAPTERS 1. IPv6 IMPB 2. IPv6-MAC Binding Configuration 3. ND Detection Configuration 4. IPv6 Source Guard Configuration 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 786
Configuring IPv6 IMPB 1 IPv6 IMPB IPv6 IMPB 1.1 Overview IPv6 IMPB (IP-MAC-Port Binding) is used to bind the IPv6 address, MAC address, VLAN Supported Features IPv6-MAC Binding This feature is used to add binding entries. The binding entries can be manually configured address, MAC address, VLAN - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 787
Configuring IPv6 IMPB Figure 1-1 Network Topology of ND Detection IPv6 IMPB User A Untrusted Port Trusted Port Untrusted Port Switch Gateway Internet Attacker the IPv6 packets based on the IPv6-MAC Binding table. Only the packets that match the binding rules are forwarded. User Guide 762 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 788
IMPB IPv6-MAC Binding Configuration 2 IPv6-MAC Binding Configuration You can add IPv6-MAC Binding entries in three ways: ■■ Manual Binding ■■ Via ND . 2.1 Using the GUI 2.1.1 Binding Entries Manually You can manually bind the IPv6 address, MAC address, VLAN ID and the Port number together on the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 789
Configuration Follow these steps to manually create an IPv6-MAC Binding entry: 1) Enter the following information to specify a host. Host Name Enter the host name for identification. IPv6 Address Enter the IPv6 address. MAC Address Enter the MAC address. VLAN . 4) Click Apply. User Guide 764 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 790
IPv6 IMPB IPv6-MAC Binding Configuration 2.1.2 Binding Entries via ND Snooping With ND Snooping, the switch monitors the ND packets, and records the IPv6 addresses, MAC addresses, VLAN IDs and the connected port numbers of the IPv6 hosts. You can bind these entries conveniently. Note: Before - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 791
-MAC Binding > Binding Table to view or edit the entries. 2.1.3 Binding Entries via DHCPv6 Snooping With DHCPv6 Snooping enabled, the switch can monitor the IP address obtaining process of the host, and record the IPv6 address, MAC address, VLAN ID and the connected port number of the host. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 792
VLAN or range of VLANs. Click Apply. VLAN ID Displays the VLAN ID. Status Enable or disable DHCPv6 Snooping on the VLAN. 3) In the Port Config section, configure the maximum number of binding entries a port can learn via DHCPv6 snooping. Click Apply. Port Displays the port number. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 793
IPv6-MAC Binding Configuration Maximum Entries Configure the maximum number Manual Binding: Displays the manually bound entries. ND Snooping: Displays the binding entries learned from ND Snooping. DHCPv6 Snooping: Displays the binding entries learned from DHCP Snooping. IP Enter an IP address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 794
to the IP Source Manually You can manually bind the IPv6 address, MAC address, VLAN ID and the Port number together on the condition that you have got the detailed information of the hosts. Follow these steps to manually bind entries: Step 1 configure Enter global configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 795
ten-gigabitEthernet port | port-channel port-channel-id } { none | nd-detection | ipv6-verify-source | both } Manually bind the host name, IP address, MAC address, VLAN ID and port number of the host, and configure the protect type for the host. hostname: Specify a name for the host. It contains 20 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 796
Save the settings in the configuration file. The following example shows how to enable ND Snooping globally and on VLAN 1. Switch#configure Switch(config)#ipv6 nd snooping Switch(config)#ipv6 nd snooping vlan 1 Switch(config)#show ipv6 nd snooping Global Status: Enable VLAN ID: 1 User Guide 771 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 797
ipv6 dhcp snooping max-entries value Configure the maximum number of binding entries the port can learn via DHCPv6 snooping. value: Enter the value of maximum number of entries. The valid values are from 0 to 512. show ip dhcp snooping Verify global configuration of DHCPv6 Snooping. User Guide 772 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 798
Entries On privileged EXEC mode or any other configuration mode, you can use the following command to view binding entries: show ipv6 source binding View the information of binding entries, including the host name, IP address, MAC address, VLAN ID, port number and protect type. User Guide 773 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 799
these steps to enable ND Detection: 1) In the Global Config section, enable ND Detection and configure the related parameters. Click Apply. ND Detection Enable or disable ND Detection globally. 2) In the VLAN Config section, enable ND Detection on the selected VLANs. Click Apply. User Guide 774 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 800
IMPB ND Detection Configuration VLAN ID Status Log Status Displays the VLAN ID. Enable or disable ND Detection on the VLAN. Enable or disable Log feature on the VLAN. With this feature enabled, the switch generates a log when an illegal ND packet is discarded. 3.1.3 Configuring ND Detection on - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 801
IPv6-MAC Binding configuration. For details, refer to IPv6-MAC Binding Configuration. 3.2.2 Enabling ND Detection Follow these steps to enable ND Detection: Step 1 configure Enter global configuration mode. Step 2 ipv6 nd detection Globally enable the ND Detection feature. User Guide 776 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 802
nd detection vlan VID Enable status Log Status 1 Enable Disable Switch(config)#end Switch#copy running-config startup-config 3.2.3 Configuring ND Detection on Ports Follow these steps to configure ND Detection on ports: Step 1 configure Enter global configuration mode. User Guide 777 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 803
configuration mode. ipv6 nd detection trust Configure the port as a trusted port, on which the ND packets will not be checked. The specific ports, such as up-linked configuration file. The following example shows how to configure port 1/0/1 as trusted port: Switch#configure configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 804
IPv6 IMPB IPv6 Source Guard Configuration 4 IPv6 Source Guard Configuration To complete IPv6 Source Guard configuration, follow these steps: 1) Add IP-MAC Binding entries. 2) Configure IPv6 Source Guard. 4.1 Using the GUI 4.1.1 Adding IPv6-MAC Binding Entries The ND Detection feature allows - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 805
Guard Configuration Port Security Type LAG 2) Click Apply. Displays the port number. Select Security Type on the port for IPv6 packets. The following options are provided: Disable: The IP Source Guard feature is disabled on the port. SIPv6+MAC: Only the packet with its source IPv6 address, source - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 806
gigabitEthernet port | tengigabitEthernet port | port-channel port-channel-id } ] Verify the IP Source Guard configuration for IPv6 packets. end Return to privileged EXEC mode. copy running-config startup- MAC N/A Switch(config-if)#end Switch#copy running-config startup-config User Guide 781 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 807
As shown below, User 1 and User 2 are legal IPv6 users in the LAN and connected to port 1/0/1 and port 1/0/2. Both of them are in the default VLAN 1. The router has been configured with security feature to prevent attacks from the WAN. Now the network administrator wants to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 808
T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 5.1.3 Using the GUI 1) Choose the menu SECURITY > IPv6 IMBP > IPv6-MAC Binding > Manual Binding and click to load the following page. Enter the host name, IPv6 address, MAC address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 809
Select VLAN 1, change Status as Enabled and click Apply. Figure 5-4 Enable ND Detection 4) Choose the menu SECURITY > IPv6 IMBP > ND Detection > Port Config to load the following page. By default, all ports are enabled with ND Detection. Since port 1/0/3 is connected to the gateway router, configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 810
to save the settings. 5.1.4 Using the CLI 1) Manually bind the entries for User 1 and User 2. Switch_A#configure Switch_A(config)#ipv6 source binding User1 2001::5 74:d3:45:32:b6:8d vlan 1 interface gigabitEthernet 1/0/1 nd-detection Switch_A(config)#ip source binding User1 2001::6 88:a9:d4:54:fd - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 811
Manual Notice: 1.Here, 'ND-D' for 'ND-Detection',and'IP-V-S' for 'IP-Verify-Source'. Verify the global configuration of ND Detection: Switch_A#show ipv6 nd detection Global Status: Enable Verify the ND Detection configuration on VLAN to the default VLAN 1. It is required that only the legal - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 812
switch is as follows: 1) Bind the MAC address, IPv6 address, connected port number and VLAN ID of the legal host with IPv6-MAC Binding. 2) Enable IPv6 Source Guard on ports 1/0/1-3. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 813
Figure 5-7 Manual Binding Configuration Examples 2) Choose the menu SECURITY > IPv6 IMPB > IPv6 Source Guard to load the following page. Select ports 1/0/1-3, configure the Security Type as SIPv6+MAC, and click Apply. Figure 5-8 IPv6 Source Guard 3) Click to save the settings. User Guide 788 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 814
5.2.4 Using the CLI 1) Manually bind the IPv6 address, MAC address, VLAN ID and connected port number of the legal host, and apply this entry to the IPv6 Source Guard feature. Switch#configure Switch(config)#ipv6 source binding legal-host 2001::5 74:d3:45:32:b6:8d vlan 1 interface gigabitEthernet - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 815
Configuring IPv6 IMPB Appendix: Default Parameters 6 Appendix: Default Parameters Default settings of DHCP Snooping are listed in the following table: Table 6-1 DHCPv6 Snooping Parameter Default Setting Global Config DHCPv6 Snooping Disabled VLAN Config Status Disabled Port Config - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 816
Configuring IPv6 IMPB Appendix: Default Parameters Default settings of IPv6 Source Guard are listed in the following table: Table 6-3 ND Detection Parameter Port Config Security Type Default Setting Disabled User Guide 791 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 817
Part 25 Configuring DHCP Filter CHAPTERS 1. DHCP Filter 2. DHCPv4 Filter Configuration 3. DHCPv6 Filter Configuration 4. Configuration Examples 5. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 818
problem. With DHCP Filter configured, the switch can check whether the received DHCP packets are legal and discard the illegal ones. In this way, DHCP Filter ensures that users get IP addresses on each port. 1.2 Supported Features The switch supports DHCPv4 Filter and DHCPv6 Filter. User Guide 793 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 819
Configuring DHCP Filter DHCPv4 Filter DHCPv4 Filter is used for DHCPv4 servers and IPv4 clients. DHCPv6 Filter DHCPv6 Filter is used for DHCPv6 servers and IPv6 clients. DHCP Filter User Guide 794 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 820
the basic settings of DHCPv4 Filter: 1) In the Global Config section, enable DHCPv4 globally. 2) In the Port Config section, select one or more ports and configure the related parameters. User Guide 795 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 821
are different. This prevents the IP address resource on the DHCPv4 server from being exhausted by forged MAC addresses. Rate Limit Select to The member port of an LAG (Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations of the port can take effect only - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 822
Legal DHCPv4 Server Follow these steps to add a legal DHCPv4 server: 1) Configure the following parameters: Server IP Address Specify the IP address of the legal DHCPv4 server. Client MAC Address (Optional) Specify the MAC address of the DHCP Client. You can also keep this field empty, which - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 823
are different. This prevents the IP address resource on the DHCP server from being exhausted by forged MAC addresses. ip dhcp filter limit rate value Enable The default value is 0, which indicates disabling this feature. show ip dhcp filter Verify the global DHCPv4 Filter configuration. show ip dhcp - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 824
an LAG (Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations of the configure Switch(config)#ip dhcp filter Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip dhcp filter Switch(config-if)#ip dhcp filter mac-verify Switch(config-if)#ip - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 825
create an entry for the legal DHCPv4 server whose IP address is 192.168.0.100 and connected port number is 1/0/1 without client MAC address restricted: Switch#configure Switch(config)#ip dhcp filter server permit-entry server-ip 192.168.0.100 client-mac all interface gigabitEthernet 1/0/1 Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 826
Configuration 3 DHCPv6 Filter Configuration To complete DHCPv6 Filter configuration, follow these steps: 1) Configure the basic DHCPv6 Filter parameters. 2) Configure legal DHCPv6 servers. 3.1 Using the GUI 3.1.1 Configuring configure the related parameters. Port Displays the port number. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 827
Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations of the port can take effect only after it leaves the LAG. 3.1.2 Configuring 1) Configure the following parameters: Server IPv6 Address Specify the IP address of the legal DHCPv6 server. User Guide 802 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 828
following options are provided: 0, 5,10,15,20,25 and 30 (packets/second). The default value is 0, which indicates disabling this feature. Step 7 show ipv6 dhcp filter Verify the global DHCPv6 Filter configuration. Step 8 show ipv6 dhcp filter interface [ fastEthernet port | gigabitEthernet port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 829
configuration file. Note: The member port of an LAG (Link Aggregation Group) follows the configuration of the LAG and not its own. The configurations ip Configuring Legal DHCPv6 Servers Follow these steps configure legal DHCPv6 servers: Step 1 configure Enter global configuration mode. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 830
shows how to create an entry for the legal DHCPv6 server whose IPv6 address is 2001::54 and connected port number is 1/0/1: Switch#configure Switch(config)#ipv6 dhcp filter server permit-entry server-ip 2001::54 interface gigabitEthernet 1/0/1 Switch(config)#show ipv6 dhcp filter server permit - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 831
to assign IP addresses to the configuration is as follows: 1) Enable DHCPv4 Filter globally and on all ports. 2) Create an entry for the legal DHCPv4 server. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 832
globally and click Apply. Select all ports, change Status as Enable, and click Apply. Figure 4-2 Basic Config 2) Choose the menu SECURITY > DHCP Filter > DHCPv4 Filter > Legal DHCPv4 Servers and click to load the following page. Specify the IP address and connected port number of the legal - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 833
server permit-entry server-ip 192.168.0.200 client-mac all interface gigabitEthernet 1/0/1 Switch_A(config)#end Switch_A#copy running-config startup-config Verify the Configuration Verify the global DHCPv4 Filter configuration: Switch_A#show ip dhcp filter Global Status: Enable User Guide 808 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 834
Verify the legal DHCPv4 server configuration: Switch_A#show ip dhcp filter server permit-entry Server IP Client MAC Interface 192.168.0.200 all Gi1/0/1 4.2 Example for DHCPv6 Filter 4.2.1 Network Requirements As shown below, all the DHCPv6 clients get IP addresses from the legal DHCPv6 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 835
ports. 2) Create an entry for the legal DHCPv6 server. Demonstrated with T1600G-28TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. 4.2.3 Filter globally and click Apply. Select all ports, change Status as Enable, and click Apply. User Guide 810 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 836
DHCP Filter Figure 4-2 Basic Config Configuration Examples 2) Choose the menu SECURITY > DHCP Filter > DHCPv6 Filter > Legal DHCPv6 Servers and click to load the following page. Specify the IP address and connected port number of the legal DHCPv6 server. Click Create. Figure 4-3 Create - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 837
: Switch_A(config)#ipv6 dhcp filter server permit-entry server-ip 2001::54 interface gigabitEthernet 1/0/1 Switch_A(config)#end Switch_A#copy running-config startup-config Verify the Configuration Verify the global DHCPv6 Filter configuration: Switch_A#show ipv6 dhcp filter Global Status: Enable - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 838
Configuring DHCP Filter Server IP Interface 2001::54 Gi1/0/1 Configuration Examples User Guide 813 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 839
Configuring DHCP Filter Appendix: Default Parameters 5 Appendix: Default Parameters Default settings of DHCPv4 Filter are listed in the following table: Table 5-1 DHCPv4 Filter Parameter Default Rate Limit Decline Protect Default Setting Disabled Disabled Disabled Disabled User Guide 814 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 840
Part 26 Configuring DoS Defend CHAPTERS 1. Overview 2. DoS Defend Configuration 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 841
Configuring DoS Defend Overview 1 Overview The DoS (Denial of Service) defend feature provides protection against DoS attacks. DoS attacks occupy the network bandwidth maliciously by sending numerous service requests to the hosts. It results in an abnormal service or breakdown of the network. With - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 842
to load the following page. Figure 2-1 DoS Defend Follow these steps to configure DoS Defend: 1) In the DoS Defend section, enable DoS Protection and Because both of the source IP address and the destination IP address of the SYN packet are set to be the IP address of the host, the host Guide 817 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 843
will, by default, respond to this by sending a reply to the source IP address. If the number of machines on the network that receive and respond to these packets is very large, the victim's computer will be flooded with traffic. 2.2 Using the CLI Follow these steps to configure DoS Defend: Step - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 844
, by default, respond to this by sending a reply to the source IP address. If the number of machines on the network that receive and respond to these packets is very large, the victim's computer will be flooded with traffic. show ip dos-prevent Verify the DoS Defend configuration. User Guide 819 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 845
enable the DoS Defend type named land: Switch#configure Switch(config)#ip dos-prevent Switch(config)#ip dos-prevent type land Switch(config)#show ip dos-prevent DoS Prevention State: Enabled Type Status Disabled Switch(config)#end Switch#copy running-config startup-config User Guide 820 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 846
Configuring DoS Defend Appendix: Default Parameters 3 Appendix: Default Parameters Default settings of Network Security are listed in the following tables. Table 3-1 DoS Defend Parameter DoS Defend Default Setting Disabled User Guide 821 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 847
Part 27 Monitoring the System CHAPTERS 1. Overview 2. Monitoring the CPU 3. Monitoring the Memory - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 848
switch fails to respond to management requests (ICMP ping, SNMP timeouts, slow Telnet or SSH sessions). You can monitor the system to verify a CPU utilization problem. User Guide 823 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 849
enable the switch to monitor and display its CPU utilization rate every five seconds. 2.2 Using the CLI On privileged EXEC mode or any other configuration mode, you can use the following command to view the CPU utilization: show cpu-utilization View the memory utilization of the switch in the last - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 850
Monitoring the System The following example shows how to monitor the CPU: Switch#show cpu-utilization Unit | CPU Utilization No. | Five-Seconds One-Minute Five-Minutes 1 | 13% 13% 13% Monitoring the CPU User Guide 825 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 851
the switch to monitor and display its memory utilization rate every five seconds. 3.2 Using the CLI On privileged EXEC mode or any other configuration mode, you can use the following command to view the memory utilization: show memory-utilization View the current memory utilization of the switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 852
Monitoring the System Unit | Current Memory Utilization 1 | 74% Monitoring the Memory User Guide 827 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 853
Part 28 Monitoring Traffic CHAPTERS 1. Traffic Monitor 2. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 854
LAGS to show the information of the LAGs. Packets Rx: Displays the number of packets received on the port. Error packets are not counted. User Guide 829 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 855
port. Error octets are counted . To view a port's traffic statistics in detail, click Statistics on the right side of the entry. Figure 1-2 Traffic Statistics User Guide 830 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 856
received on the port. Error packets are not counted. Bytes: Displays the number of bytes received on the port. Error packets are not counted. User Guide 831 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 857
bytes transmitted on the port. Error packets are not counted. Collisions: Displays the number of collisions experienced by a half-duplex port during packet transmissions. User Guide 832 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 858
Monitoring Traffic Traffic Monitor 1.2 Using the CLI On privileged EXEC mode or any other configuration mode, you can use the following command to view the traffic information of each port or LAG: : Displays the number of bytes received on the port. Error packets are not counted. User Guide 833 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 859
Monitoring Traffic Appendix: Default Parameters 2 Appendix: Default Parameters Table 2-1 Traffic Statistics Monitoring Parameter Traffic Summary Auto Refresh Refresh Rate Default Setting Disabled 10 seconds User Guide 834 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 860
Part 29 Mirroring Traffic CHAPTERS 1. Mirroring 2. Configuration Examples 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 861
Mirroring Traffic Mirroring 1 Mirroring You can analyze network traffic and troubleshoot network problems using Mirroring. Mirroring allows the switch to send a copy of the session, and no more session can be created. Click Edit to configure this mirroring session on the following page. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 862
the Mirroring Session Mirroring Follow these steps to configure the mirroring session: 1) In the Destination Port corresponding interface (port, LAG or CPU) will be copied to the destination port. By default, it is disabled. Egress With this option enabled, the packets sent by the corresponding - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 863
configure Mirroring. Step 1 configure Enter global configuration -id }} mode Configure ports or LAGs . Note: You can configure one or more source interface types configuration. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 864
(Ingress): Gi1/0/1-3 Source Ports(Egress): Gi1/0/1-3 Source CPU(Ingress): cpu1 Source CPU(Egress): cpu1 Switch(config-if)#end Switch#copy running-config startup-config User Guide 839 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 865
troubleshooting, the network manager needs to use the network analyzer to monitor the data packets from the end hosts. Figure 2-1 Network Topology Gi1/0/2-5 Gi1/0/1 Hosts Switch Network Analyzer 2.2 Configuration with T1600G-28TS, the following sections provide configuration procedure in - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 866
4) Click to save the settings. 2.4 Using the CLI Switch#configure Switch(config)#monitor session 1 destination interface gigabitEthernet 1/0/1 Switch(config)#monitor session 1 source interface gigabitEthernet 1/0/2-5 both Switch(config)#end Switch#copy running-config startup-config User Guide 841 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 867
Mirroring Traffic Verify the Configuration Switch#show monitor session 1 Monitor Session: 1 Destination Port: Gi1/0/1 Source Ports(Ingress): Gi1/0/2-5 Source Ports(Egress): Gi1/0/2-5 Configuration Examples User Guide 842 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 868
Mirroring Traffic Appendix: Default Parameters 3 Appendix: Default Parameters Default settings of Switching are listed in th following tables. Table 3-1 Configurations for Ports Parameter Default Setting Ingress Disabled Egress Disabled User Guide 843 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 869
Part 30 Configuring DLDP CHAPTERS 1. Overview 2. DLDP Configuration 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 870
received by its peer device but traffic from the peer device is not received by the local device. Unidirectional links can cause a variety of problems, such as spanning-tree topology loops. Once detecting a unidirectional link, DLDP can shut down the related port automatically or inform users. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 871
is enabled on both sides of the links. 2.1 Using the GUI Choose the menu MAINTENANCE > DLDP to load the following page. Figure 2-1 Configure DLDP Follow these steps to configure DLDP: 1) In the Global Config section, enable DLDP and configure the relevant parameters. Click Apply. User Guide 846 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 872
default value is 5 seconds. Choose how to shut down the port when a unidirectional link is detected: Auto: When a unidirectional link is detected on a port, DLDP will generate logs and traps then shut down the port, and DLDP on this port will change to Disabled. Manual: When a unidirectional link - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 873
default, it is 5 seconds. Step 3 dldp shut-mode { auto | manual } Configure the DLDP shutdown mode when a unidirectional link DLDP configuration. Step 7 show dldp interface Verify the DLDP configuration of configuration file. The following example shows how to enable DLDP globally, configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 874
DLDP on port 1/0/1. Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dldp Switch(config-if)#show dldp interface Port DLDP State Protocol State Link State Neighbor State ---- ---------- Gi1/0/1 Enable Inactive Link-Down N/A Gi1/0/2 Disable Initial - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 875
Configuring DLDP Appendix: Default Parameters 3 Appendix: Default Parameters Default settings of DLDP are listed in the following table. Table 3-1 Default Settings of DLDP Parameter Default Setting Global Config DLDP State Disabled Advertisement Interval 5 seconds Shut Mode Auto Auto - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 876
Part 31 Configuring SNMP & RMON CHAPTERS 1. SNMP 2. SNMP Configurations 3. Notification Configurations 4. RMON 5. RMON Configurations 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 877
IP networks. It facilitates device management using NMS (Network Management System) applications. With SNMP, network managers can view or modify the information of network devices, and timely troubleshoot switch, router, host or printer. By configuring SNMP on the switch, you define the Guide 852 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 878
The MIB file can be found on the provided CD or in the download center of our official website: https://www.tp-link.com/download-center.html. Also, TP-Link switches support the following public MIBs: ■■ LLDP.mib ■■ LLDP-Ext-Dot1.mib ■■ LLDP-Ext-MED.mib ■■ RFC1213.mib ■■ RFC1493-Bridge.mib ■■ RFC1757 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 879
Configuring SNMP & RMON SNMP ■■ RFC2620-RADIUS-Acc-Client.mib ■■ RFC2674-pBridge.mib ■■ RFC2674-qBridge.mib ■■ RFC2863-pBridge.mib ■■ RFC2925-Disman-Ping.mib ■■ RFC2925-Disman-Traceroute.mib For detail information about the supported public MIBs, see Supported services supports three SNMP versions - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 880
Configuring SNMP & RMON SNMP Table 1-1 Features Supported by Different SNMP Versions Feature SNMPv1 SNMPv2c SNMPv3 Access Control Based on SNMP Community and MIB View be managed by authenticated administrators (such as when data needs to be transferred on public networks). User Guide 855 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 881
Configurations 2 SNMP Configurations To complete the SNMP configuration, choose an SNMP version according to network requirements and supportability configure the Configuring Global Parameters Follow these steps to configure SNMP globally: 1) In the Global Config section, enable SNMP and configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 882
Configurations Local Engine ID Set the engine ID of the local SNMP agent (the switch) with 10 to 64 hexadecimal digits. A valid engine ID must contain an even number of characters. By default, the switch generates the engine ID using TP-Link's enterprise number (80002e5703) and its own MAC address - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 883
& RMON Figure 2-3 Creating an SNMP View SNMP Configurations View Name Set the view name with 1 to 16 SNMP community: 1) Set the community name, access rights and the related view. Community Name Configure the community name. This community name is used like a password and the NMS can access - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 884
to load the following page. Figure 2-5 Creating an SNMP Group Follow these steps to create an SNMP Group and configure related parameters. 1) Assign a name to the group, then set the security level and the read view, a privacy algorithm are applied to check and encrypt packets. User Guide 859 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 885
engine, which is the SNMP agent of the switch. Remote User: The user resides on the NMS. Before configuring a remote user, you need to set the remote engine ID first. The remote engine ID and user password are Model Displays the security model. SNMPv3 uses v3, the most secure model. User Guide 860 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 886
this step. Authentication Mode With AuthNoPriv or AuthPriv selected, configure the authentication mode and password for authentication. Two authentication modes Using the CLI 2.2.1 Enabling SNMP Step 1 Step 2 configure Enter Global Configuration Mode. snmp-server Enabling SNMP. User Guide 861 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 887
default, the switch generates the engine ID using TP-Link's enterprise number (80002e5703) and its own MAC address . Note: In SNMPv3, changing the value of the SNMP local engine ID changes, the switch will remote engine ID changes. show snmp configuration file. The following example shows Switch#configure - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 888
SNMP & RMON SNMP Configurations 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 0 Number of requested variables 0 OID (Object Identifier) of the view to determine objects to be managed. Step 1 configure Enter Global Configuration Mode. User Guide 863 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 889
. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to set a view to allow the NMS to manage all function. the Community Name is used for authentication, functioning as the password. User Guide 864 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 890
default view is viewDefault. show snmp-server community Displays community entries. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration between the NMS and managed devices. Step 1 configure Enter Global Configuration Mode. User Guide 865 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 891
security levels are sorted from low to high, and the default is noAuthNoPriv. noAuthNoPriv indicates no authentication algorithm but a user name authPriv, and the Read and Notify view are both View: Switch#configure Switch(config)#snmp-server group nms1 smode v3 slev authPriv read View Guide 866 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 892
configure Enter Global Configuration configuring Configure the security model for the user. v3 indicates SNMPv3, the most secure model. noAuthNoPriv: Configure Configure the : Configure the Configure the privacy mode as DES. The switch will use the DES algorithm to encrypt the packets. By default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 893
Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. The following example shows how to create a remote SNMP user named admin and nms1 v3 authPriv SHA DES Switch(config)#end Switch#copy running-config startup-config User Guide 868 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 894
configure SNMP notification, follow these steps: 1) Configure the information of NMS hosts. 2) Enable SNMP traps. Configuration another. 3.1 Using the GUI 3.1.1 Configuring the Information of NMS Hosts Choose Choose the IP mode according to the network environment, and specify the IP address of the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 895
Configurations IP Mode Choose an IP mode for the NMS host. IP Address If you set IP Mode as IPv4, specify an IPv4 address for the NMS host. If you set IP Mode as IPv6, specify an IPv6 address host. For SNMPv1, the supported type is Trap. For SNMPv2c and SNMPv3, you can configure the type as Trap - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 896
on a port, run the command snmp-server traps linkstatus in Interface Configuration Mode of the port. To disable it, run the corresponding no command. By default, the trap is enabled both globally and on all ports, which means that link status changes on any ports will trigger the trap. If you do not - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 897
as backup, reset, firmware upgrade, and configuration import. VLAN Create/Delete Triggered when certain VLANs are created or deleted successfully. IP Change Monitors the changes of interfaces' IP addresses. The trap can be triggered when the IP address of any interface is changed. Storm Control - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 898
SNMP & RMON Notification Configurations PoE IP-MAC Binding IP Duplicate DHCP Filter ACL Counter 2) Click Apply. Only for products that support PoE. The trap includes the following sub-traps: Over-max-pwr-budget: Triggered when the total power required by the connected PDs exceeds the maximum - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 899
mechanism. ip: Specify the IP address of the NMS host in IPv4 or IPv6. Make sure the NMS host and the switch can reach each other. udp-port: Specify a UDP port on the NMS host to receive notifications. The default is port 162. For communication security, we recommend that you change the port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 900
IP Address UDP Port User Name Security Model Security Level Notification Type Retry Times Timeout Interval 172.16.1.222 162 admin v3 authPriv Inform 3 100 seconds Switch#configure SNMP Traps The switch supports many types of SNMP traps, like SNMP standard traps, ACL traps, and VLAN traps, and the - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 901
globally and on the port. Linkdown Trap indicates that a port status changes from linkup to linkdown. The trap can be triggered when you disconnect snmp-server traps link-status in Interface Configuration Mode of the port. To disable them, run the corresponding no command. By default, the traps are - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 902
as backup, reset, firmware upgrade, and configuration import. lldp remtableschange: Indicates that the switch senses an LLDP topology change. The trap change (the topology change of media endpoints). The trap can be triggered when adding or removing a media endpoint that supports LLDP, such as an IP - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 903
traps vlan Switch(config)#end Switch#copy running-config startup-config ■■ Enabling the SNMP Security Traps Globally Step 1 configure Enter Global Configuration Mode. Step 2 snmp-server traps security { dhcp-filter | ip-mac-binding } Enable the corresponding security traps. By default, all - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 904
the IP Traps Globally Step 1 configure Enter Global Configuration Mode. Step 2 snmp-server traps ip { change | duplicate } Enable the IP traps. By default, all IP traps are disabled. change: Monitors the changes of interfaces' IP addresses. The trap can be triggered when the IP address of - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 905
example shows how to configure the switch to enable IP-Change trap: Switch#configure Switch(config)#snmp-server traps ip change Switch(config)#end Switch#copy running-config startup-config ■■ Enabling the SNMP PoE Traps Globally Note: Only T1600G-52PS and TL-SG2428P support PoE traps. Step 1 Step - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 906
example, 1-3, 5 indicates port 1, 2, 3, 5. Step 3 snmp-server traps link-status Enable Link Status Trap for the port. By default, it is enabled. Link Status Trap (including Linkup Trap and Linkdown Trap) can be triggered when the link status of a port changes, and the trap is enabled both globally - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 907
Configuring SNMP & RMON Switch#copy running-config startup-config Notification Configurations User Guide 882 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 908
Configuring SNMP & RMON RMON 4 RMON RMON (Remote Network Monitoring) together with the SNMP system allows the network manager to monitor : Monitors a specific MIB object for a specified interval, and triggers an event at a specified value (rising threshold or falling threshold). User Guide 883 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 909
Configurations 5 RMON Configurations With RMON configurations, you can: ■■ Configuring the Statistics group. ■■ Configuring the History group. ■■ Configuring the Event group. ■■ Configuring the Alarm group. Configuration these steps to configure the Statistics group or manually enter the port - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 910
Status 2) Click Create. Set the entry as Valid or Under Creation. By default, it is Valid. The switch start to collect Ethernet statistics for a Statistics entry since the entry status is configured as valid. Valid: The entry is created and valid. Under Creation: The entry is created - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 911
or disable the entry. By default, it is disabled. Enable: The entry is enabled. Disable: The entry is disabled. Note: To change the parameters of a History entry, enable the entry at the same time; otherwise, the change cannot take effect. 5.1.3 Configuring Event Group Choose the menu MAINTENANCE - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 912
Before you begin, complete configurations of Statistics entries and Event entries, because the Alarm entries must be associated with Statistics and Event entries. Choose the menu MAINTENANCE > SNMP > RMON > Alarm to load the following page. Figure 5-4 Configuring the Alarm Entry User Guide 887 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 913
Configurations Follow these steps to configure the Alarm group: 1) Select an alarm entry, choose a variable to be monitored, and associate the entry with a statistics entry. Index Displays the index of Alarm entries. The switch supports entry specified here should be enabled first. User Guide 888 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 914
SNMP & RMON RMON Configurations Falling Threshold Set the falling threshold of the variable. Valid values are from . Enable: The entry is enabled. Disable: The entry is disabled. 5.2 Using the CLI 5.2.1 Configuring Statistics Step 1 configure Enter Global Configuration Mode. User Guide 889 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 915
entry is created and valid. By default, it is valid. The switch start to collect Ethernet statistics for a Statistics entry since the entry status is configured as valid. show rmon statistics [ ---- ----- ----- 1 Gi1/0/1 monitor valid 2 Gi1/0/2 monitor valid Switch(config)#end User Guide 890 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 916
1 to 12. To configure multiple indexes, enter a default is 1800 seconds. owner-name: Enter the owner name of the entry with 1 to 16 characters. The default default is 50. show rmon history [ index ] Displays the specified History entry and related configurations configuration file #configure Switch - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 917
name of the entry with 1 to 16 characters. The default name is monitor. show rmon event [ index ] Displays the specified Event entry and related configurations. To show multiple entries, enter a list of indexes -config startup-config Save the settings in the configuration file. User Guide 892 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 918
notifications to the NMS), and the owner as monitor: Switch#configure Switch(config)#rmon event 1 user admin description rising-notify type act in the set way when the alarm is triggered. The default variable is revbyte. revbyte means total number of received bytes; specified size. User Guide 893 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 919
. The value ranges from 10 to 3600 seconds; the default is 1800 seconds. show rmon alarm [ index ] Displays the specified alarm entry and related configurations. To show multiple entries, enter a list of indexes 10 seconds, and the owner of the entry as monitor: Switch#configure User Guide 894 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 920
SNMP & RMON RMON Configurations Switch(config)#rmon alarm 1 stats-index 1 alarm-variable bpkt s-type absolute risingthreshold 3000 rising-event-index 1 falling- 2000-2 Alarm startup: All Interval: 10 Owner: monitor Switch(config)#end Switch#copy running-config startup-config User Guide 895 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 921
SNMP & RMON 6 Configuration Example Configuration Example 6.1 Network Requirements The following figure shows the not notify the NMS when that is below the preset falling threshold. The NMS host with IP address 192.168.1.222 is connected to the core switch, Switch B. Switch A is connected to - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 922
entry. Demonstrated with T1600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. 6.3 Using the GUI ■■ Configuring Storm Control on Ports Configure Storm Control on the set MIB Object ID as 1 (which means all functions). Click Create. User Guide 897 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 923
, enable authentication and privacy, and add View to Read View and Notify View. Click Create. Figure 6-4 Configuring an SNMP Group 4) Choose MAINTENANCE > SNMP > SNMP v3 > SNMP User and click to load the DES privacy algorithm, and set corresponding passwords. Click Create. User Guide 898 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 924
an SNMP User Configuration Example 5) Choose MAINTENANCE > SNMP > Notification > Notification Config and click to load the following page. Choose the IP Mode as IPv4, and specify the IP address of the NMS Config to load the following page. Enable Storm Control trap and click Apply. User Guide 899 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 925
Control Trap Configuration Example 7) Click to save the settings. ■■ Configuring RMON 1) status as Valid. Figure 6-8 Configuring Statistics Entry 1 Figure 6-9 Configuring Statistics Entry 2 2) Choose the RMON > History to load the following page. Configure entries 1 and 2. Bind entries 1 and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 926
SNMP > RMON > Event to load the following page. Configure entries 1 and 2. For entry 1, set the SNMP Figure 6-11 Configuring the Event Entries 4) Choose MAINTENANCE > SNMP > RMON > Alarm to load the following page. Configure entries 1 and Other configurations are the same as those of entry 1. User - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 927
configuration, refer to Configuring QoS. ■■ Configuring SNMP 1) Enable SNMP and specify the remote engine ID. Switch_A#configure Set the user as a remote user and configure the security model and security level based on To configure Notification, specify the IP address of the NMS host and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 928
Configuration Example storm-control Trap Switch_A(config)#snmp-server traps storm-control ■■ Configuring RMON 1) Create Statistics entries 1 and 2 to monitor ports entry ID as 2 (bound to port 1/0/2), while all other configurations are the same as those of entry 1. Switch_A(config)#rmon alarm - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 929
falling-event-index 2 a-type all interval 10 owner monitor Verify the Configurations Verify global SNMP configurations: Switch_A(config)#show snmp-server SNMP agent is enabled. 0 SNMP packets snmp-server engineID Local engine ID: 80002e5703000aeb13a23d Remote engine ID: 123456789a User Guide 904 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 930
include 1 Configuration Example Verify SNMP group configurations: Switch_A( nms-monitor v3 authPriv View View Verify SNMP user configurations: Switch_A(config)#show snmp-server user No. U- Verify SNMP host configurations: Switch_A(config)#show snmp-server host No. Des-IP UDP Name SecMode - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 931
2 Gi1/0/2 monitor valid Configuration Example Verify RMON history configurations: Switch_A(config)#show rmon 100 50 monitor Enable Verify RMON event configurations: Switch_A(config)#show rmon event Index monitor Enable Verify RMON alarm configurations: Switch_A(config)#show rmon alarm - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 932
Configuring SNMP & RMON Index-State: 2-Enabled Statistics index: 2 Alarm variable: RevPkt Sample Type: Absolute RHold-REvent: 3000-1 FHold-FEvent: 2000-2 Alarm startup: All Interval: 10 Owner: monitor Configuration Example User Guide 907 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 933
Configuring SNMP & RMON Appendix: Default Parameters 7 Appendix: Default Parameters Default settings of SNMP are listed in the following tables. Table 7-1 Default Global Config Settings Parameter SNMP Default Setting Disabled Local Engine ID Automatically Remote Engine ID None Table 7-2 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 934
Notification Config Notification Entry IP Mode IP Address UDP Port User Security Model Security Level Type Retry Timeout Trap Config Enabled SNMP Traps Default Setting No entries IPv4 None 162 None v1 noAuthNoPriv Trap None None SNMP Authentication, Coldstart, Warmstart, Link Status User Guide 909 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 935
Configuring SNMP & RMON Default settings of RMON are listed in the following tables. Table 7-6 Default Statistics Config Settings Parameter Default Setting Statistics Entry ID Port Owner IP Mode No entries None None None Valid Table 7-7 Default Settings for History Entries Parameter Default - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 936
Configuring SNMP & RMON Parameter Interval Owner Status Default Setting 1800 seconds monitor Disabled Appendix: Default Parameters User Guide 911 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 937
Part 32 Diagnosing the Device & Network CHAPTERS 1. Diagnosing the Device 2. Diagnosing the Network 3. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 938
Device 1 Diagnosing the Device The device diagnostics feature provides cable testing, which allows you to troubleshoot based on the connection status, cable length and fault location. 1.1 Using the GUI Choose connection status is normal, the length range of the cable is displayed. User Guide 913 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 939
from the port to the trouble spot. 1.2 Using the CLI On privileged EXEC mode or any other configuration mode, you can use only test the cable for the port which is in the link-down status. port: Enter the port number in 1/0/1 format to 0 (+/- 10m) --- Pair-D Normal 2 (+/- 10m) --- User Guide 914 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 940
Troubleshoot with Tracert testing. 2.1 Using the GUI 2.1.1 Troubleshooting with Ping Testing You can use the Ping tool to test connectivity to remote hosts. Choose the menu MAINTENANCE > Network Diagnostics > Ping to load the following page. Figure 2-1 Troubleshooting with Ping Testing User Guide - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 941
the IP address of the destination, set the max hop, and then click Tracert to start the test. Destination IP Enter the IP address of the destination device. Both IPv4 and IPv6 are supported. Maximum Hops Specify the maximum number of the route hops the test data can pass through. User Guide 916 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 942
2.2 Using the CLI 2.2.1 Configuring the Ping Test On privileged ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. count: Specify the amount of times to send test data for Ping testing. The values are from 1 to 10 times; the default User Guide 917 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 943
destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. maxHops: Specify the maximum number of the route hops the test data can pass though. The range is 1 to 30 hops; the default is 4 hops. The following example - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 944
3-1 Default Settings of Ping Config Parameter Default Setting Destination IP 192.168.0.1 Ping Times 4 Data Size 64 bytes Interval 1000 milliseconds Table 3-2 Default Settings of Tracert Config Parameter Default Setting Destination IP 192.168.0.100 Maximum Hops 4 hops User Guide 919 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 945
Part 33 Configuring System Logs CHAPTERS 1. Overview 2. System Logs Configurations 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 946
switch generates messages in response to events, faults, or errors occurred, as well as changes in configuration or other occurrences. You can check system messages for debugging and network management. System messages to control the type of log messages saved in each destination. User Guide 921 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 947
Configurations 2 System Logs Configurations System logs configurations include: ■■ Configure the local logs. ■■ Configure the remote logs. ■■ Backing up the logs. ■■ Viewing the log table. Configuration to a port. The display command is used. General operational information. User Guide 922 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 948
configure the corresponding severity and status. Channel Severity Status Sync-Periodic 2) Click Apply. Local logs includes 2 channels: log buffer and log file. Log buffer indicates the RAM for saving system logs. The channel is enabled by default the channel. By default, the log information - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 949
configure the information of remote log servers: 1) Select an entry to enable the server, and then set the server IP address and severity. Server IP UDP Port Severity Status 2) Click Apply. Specify an IP address switch system breaks down, you can check the file for troubleshooting. User Guide 924 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 950
the time the log event occurred. To get the exact time when the log event occurs, you need to configure the system time on the SYSTEM > System Info > System Time Web management page. Module Select a module from smaller. Content Displays the detailed information of the log event. User Guide 925 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 951
a severity level value that is the same or lower than this will be saved. The default level is 6, indicating that the log information of levels 0 to 6 will be saved in the log buffer. logging file flash Configure the switch to save system messages in log file. Log file indicates the flash sector - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 952
and synchronize logs of levels 0 to 2 to the flash every 10 hours: Switch#configure Switch(config)#logging buffer Switch(config)#logging buffer level 5 Switch(config)#logging file flash Switch these steps to set the remote log: Step 1 configure Enter global configuration mode. User Guide 927 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 953
the index of the log server. The switch supports 4 log servers at most. host-ip: Enter the IP address of the log server. level: Specify the default is 6, indicating that the log information of levels 0 to 6 will be sent to the log server. show logging loghost [ index ] View the configuration - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 954
troubleshooting. Figure 3-1 Network Topology Department A Switch IP: 1.1.0.2/16 PC IP: 1.1.0.1/16 3.2 Configuration Scheme The network manager can configure the PC as the log server. Demonstrated with T1600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 955
1.1.0.1 5 Switch(config)#end Switch#copy running-config startup-config Verify the Configurations Switch# show logging loghost Index Host-IP Severity Status 1 1.1.0.1 5 enable 2 0.0.0.0 6 disable 3 0.0.0.0 6 disable 4 0.0.0.0 6 disable Configuration Example User Guide 930 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 956
Configuring System Logs Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of maintenance are listed in the following tables. Table 4-1 Default Settings of Local Logs Parameter Default 4-2 Default Settings of Remote Logs Parameter Default Setting Server IP 0.0.0.0 - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 957
T1600G-52TS/T1600G-52PS/T1600G-18TS/T1600G-28TS/TL-SG2428P Responsible party: TP-Link USA Corporation, d/b/a TP-Link North America, Inc. Address: 145 South State College Blvd. Suite 400, Brea, CA 92821 Website: https://www.tp-link in accordance with the instruction manual, may cause harmful - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 958
/35/EU, 2009/125/EC, 2011/65/EU and (EU)2015/863. The original EU declaration of conformity may be found at https://www.tp-link.com/en/ce Industry Canada Statement CAN ICES-3 (A)/NMB-3(A) This device contains licence-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 959
Don't disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you need service, please contact us. ■■ Avoid water and wet locations. Please read and follow the above safety information when operating the device. We cannot guarantee - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 960
Explanation of the symbols on the product label Symbol Explanation AC voltage Indoor use only RECYCLING This product bears the selective sorting symbol for Waste electrical and electronic equipment (WEEE). This means that this product must be handled pursuant to European directive 2012/19/EU in - TP-Link T1600G-28PS | Jetstream Smart Switches User Guide - Page 961
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
-
497
-
498
-
499
-
500
-
501
-
502
-
503
-
504
-
505
-
506
-
507
-
508
-
509
-
510
-
511
-
512
-
513
-
514
-
515
-
516
-
517
-
518
-
519
-
520
-
521
-
522
-
523
-
524
-
525
-
526
-
527
-
528
-
529
-
530
-
531
-
532
-
533
-
534
-
535
-
536
-
537
-
538
-
539
-
540
-
541
-
542
-
543
-
544
-
545
-
546
-
547
-
548
-
549
-
550
-
551
-
552
-
553
-
554
-
555
-
556
-
557
-
558
-
559
-
560
-
561
-
562
-
563
-
564
-
565
-
566
-
567
-
568
-
569
-
570
-
571
-
572
-
573
-
574
-
575
-
576
-
577
-
578
-
579
-
580
-
581
-
582
-
583
-
584
-
585
-
586
-
587
-
588
-
589
-
590
-
591
-
592
-
593
-
594
-
595
-
596
-
597
-
598
-
599
-
600
-
601
-
602
-
603
-
604
-
605
-
606
-
607
-
608
-
609
-
610
-
611
-
612
-
613
-
614
-
615
-
616
-
617
-
618
-
619
-
620
-
621
-
622
-
623
-
624
-
625
-
626
-
627
-
628
-
629
-
630
-
631
-
632
-
633
-
634
-
635
-
636
-
637
-
638
-
639
-
640
-
641
-
642
-
643
-
644
-
645
-
646
-
647
-
648
-
649
-
650
-
651
-
652
-
653
-
654
-
655
-
656
-
657
-
658
-
659
-
660
-
661
-
662
-
663
-
664
-
665
-
666
-
667
-
668
-
669
-
670
-
671
-
672
-
673
-
674
-
675
-
676
-
677
-
678
-
679
-
680
-
681
-
682
-
683
-
684
-
685
-
686
-
687
-
688
-
689
-
690
-
691
-
692
-
693
-
694
-
695
-
696
-
697
-
698
-
699
-
700
-
701
-
702
-
703
-
704
-
705
-
706
-
707
-
708
-
709
-
710
-
711
-
712
-
713
-
714
-
715
-
716
-
717
-
718
-
719
-
720
-
721
-
722
-
723
-
724
-
725
-
726
-
727
-
728
-
729
-
730
-
731
-
732
-
733
-
734
-
735
-
736
-
737
-
738
-
739
-
740
-
741
-
742
-
743
-
744
-
745
-
746
-
747
-
748
-
749
-
750
-
751
-
752
-
753
-
754
-
755
-
756
-
757
-
758
-
759
-
760
-
761
-
762
-
763
-
764
-
765
-
766
-
767
-
768
-
769
-
770
-
771
-
772
-
773
-
774
-
775
-
776
-
777
-
778
-
779
-
780
-
781
-
782
-
783
-
784
-
785
-
786
-
787
-
788
-
789
-
790
-
791
-
792
-
793
-
794
-
795
-
796
-
797
-
798
-
799
-
800
-
801
-
802
-
803
-
804
-
805
-
806
-
807
-
808
-
809
-
810
-
811
-
812
-
813
-
814
-
815
-
816
-
817
-
818
-
819
-
820
-
821
-
822
-
823
-
824
-
825
-
826
-
827
-
828
-
829
-
830
-
831
-
832
-
833
-
834
-
835
-
836
-
837
-
838
-
839
-
840
-
841
-
842
-
843
-
844
-
845
-
846
-
847
-
848
-
849
-
850
-
851
-
852
-
853
-
854
-
855
-
856
-
857
-
858
-
859
-
860
-
861
-
862
-
863
-
864
-
865
-
866
-
867
-
868
-
869
-
870
-
871
-
872
-
873
-
874
-
875
-
876
-
877
-
878
-
879
-
880
-
881
-
882
-
883
-
884
-
885
-
886
-
887
-
888
-
889
-
890
-
891
-
892
-
893
-
894
-
895
-
896
-
897
-
898
-
899
-
900
-
901
-
902
-
903
-
904
-
905
-
906
-
907
-
908
-
909
-
910
-
911
-
912
-
913
-
914
-
915
-
916
-
917
-
918
-
919
-
920
-
921
-
922
-
923
-
924
-
925
-
926
-
927
-
928
-
929
-
930
-
931
-
932
-
933
-
934
-
935
-
936
-
937
-
938
-
939
-
940
-
941
-
942
-
943
-
944
-
945
-
946
-
947
-
948
-
949
-
950
-
951
-
952
-
953
-
954
-
955
-
956
-
957
-
958
-
959
-
960
-
961
 |
 |
User Guide
Jetstream Smart Switches
T1600G-52TS (TL-SG2452) / T1600G-52PS (TL-SG2452P)
T1600G-18TS (TL-SG2216) / T1600G-28TS / TL-SG2428P
1910012764
REV4.3.0
March 2020