TP-Link T2600G-52TS TL-SG3452 T2600G-52TS V1 User Guide
TP-Link T2600G-52TS TL-SG3452 Manual
 |
View all TP-Link T2600G-52TS TL-SG3452 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T2600G-52TS TL-SG3452 manual content summary:
- TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 1
T2600G-28TS (TL-SG3424) T2600G-52TS (TL-SG3452) JetStream Gigabit L2 Managed Switch REV1.0.0 1910011257 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 2
. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 3
source. Don't disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you need service, please contact us. Avoid water and wet locations. This product can be used in the following countries: AT BG BY CA CZ DE DK - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 4
1.1 Intended Readers...2 1.2 Conventions ...2 1.3 Overview of This Guide 2 Chapter 2 Introduction ...6 2.1 Overview of the Switch 6 2.2 Appearance Description 6 2.2.1 Front Panel ...6 2.2.2 Rear Panel ...8 Chapter 3 Login to the Switch ...10 3.1 Login...10 3.2 Configuration ...11 Chapter 4 System - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 5
4.5 SDM Template...42 4.5.1 SDM Template Config 42 Chapter 5 Switching ...44 5.1 Port ...44 5.1.1 Port Config ...44 5.1.2 Port Mirror...45 5.1.3 Port Security ...47 5.1.4 Port Isolation ...49 5.1.5 Loopback Detection 50 5.2 LAG ...52 5.2.1 LAG Table...53 5.2.2 Static LAG... - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 6
6.7.2 Port Enable...85 6.7.3 VLAN Mapping 85 6.8 GVRP ...88 6.9 Private VLAN...91 6.9.1 PVLAN Config 93 6.9.2 Port Config ...94 6.10 Application Example for Private VLAN 95 Chapter 7 Spanning Tree...98 7.1 STP Config ...103 7.1.1 STP Config ...103 7.1.2 STP Summary 105 7.2 Port Config ...106 7.3 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 7
8.2.7 Profile Binding 148 8.2.8 Packet Statistics 150 8.3 Multicast Table...151 8.3.1 IPv4 Multicast Table 151 8.3.2 Static IPv4 Multicast Table 152 8.3.3 IPv6 Multicast Table 153 8.3.4 Static IPv6 Multicast Table 154 Chapter 9 Routing ...156 9.1 Interface ...156 9.2 Routing Table ...159 9.3 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 8
VLAN Binding 193 11.6 Application Example for ACL 193 Chapter 12 Network Security...196 12.1 IP-MAC Binding...196 12.1.1 Binding Table 196 12.1.2 Manual Binding 197 12.1.3 ARP Scanning 199 12.2 DHCP Snooping ...200 12.2.1 Global Config 204 12.2.2 Port Config ...205 12.3 ARP Inspection...206 12 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 9
13.1.3 SNMP Group 227 13.1.4 SNMP User...228 13.1.5 SNMP Community 230 13.2 Notification...232 13.3 RMON...234 13.3.1 Statistics ...235 13.3.2 History ...236 13.3.3 Event ...237 13.3.4 Alarm Config...238 Chapter 14 LLDP ...240 14.1 Basic Config ...243 14.1.1 Global Config 243 14.1.2 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 10
Appendix B. Glossary ...266 IX - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 11
should be found in your box: One JetStream Gigabit L2 Managed Switch One power cord Two mounting brackets and other fittings Installation Guide Resource CD for T2600G-28TS/T2600G-52TS, including: • This User Guide • CLI Reference Guide • SNMP Mibs • 802.1X Client Software and its User - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 12
the following conventions are used: The switch or the device mentioned in this Guide stands for T2600G-28TS/T2600G-52TS JetStream Gigabit L2 Managed Switch without any explanation. Tips: The T2600G-28TS and T2600G-52TS are sharing this User Guide. They just differ in the number of LED indicators - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 13
of private networks to be encapsulated with VLAN tags of public networks at the network access terminal of the Internet Service Provider. GVRP: GVRP allows the switch to automatically add or remove the VLANs via the dynamic VLAN registration information and propagate the local VLAN registration - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 14
View the information of IPv4 and IPv6 multicast groups already on the switch. The module is used to configure several IPv4 unicast routing protocols. is used to configure QoS function to provide different quality of service for various network applications and requirements. Here mainly introduces: - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 15
mainly authentication and security problems. Chapter 13 SNMP This SNMP applications to simplify troubleshooting. Here mainly introduces switch to the destination. Appendix A Specifications Lists the hardware specifications of the switch. Appendix B Glossary Lists the glossary used in this manual - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 16
choosing the T2600G-28TS/T2600G-52TS JetStream Gigabit L2 Managed Switch! 2.1 Overview of the Switch Designed for workgroups and departments, T2600G-28TS/T2600G-52TS from TP-LINK provides wire-speed performance and full set of L2 and L2+ management features. It provides a variety of service features - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 17
T2600G-28TS features 4 individual SFP ports and supports 1000M SFP module connection only. The front panel of T2600G-52TS is shown as Figure 2-2. Figure 2-2 Front Panel of T2600G-52TS of a computer or terminal for monitoring and configuring the switch. LEDs Name PWR SYS Status On Flashing Off - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 18
, 100Mbps or 1000Mbps. Each 10/100/1000Mbps RJ45 port has a corresponding 1000Mbps LED. SFP Port Designed to install the SFP module. T2600G-52TS features 4 individual SFP ports and supports 1000M SFP module connection only. Port Feature Model 10/100/1000Mbps RJ45 Port SFP Port Console Port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 19
already comes with lightning protection mechanism. You can also ground the switch through the PE (Protecting Earth) cable of AC cord or with Ground Cable. AC Power Socket: Connect the female connector of the power cord here, - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 20
of the browser, then press the Enter key. Figure 3-1 Web-browser Tips: To log in to the switch, the IP address of your PC should be set in the same subnet addresses of the switch. The IP address is 192.168.0.x ("x" is any number from 2 to 254), Subnet Mask is 255.255 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 21
screen. Figure 3-3 Main Setup-Menu Note: Clicking Apply can only make the new configurations effective before the switch is rebooted. If you want to keep the configurations effective even the switch is rebooted, please click Save Config. You are suggested to click Save Config before cutting off the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 22
and the system information. The port status diagram shows the working status of 48 10/100/1000Mbps RJ45 ports and 4 SFP ports of the switch. Choose the menu System→System Info→System Summary to load the following page. Port Status Figure 4-1 System Summary Indicates the 1000Mbps port is not - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 23
information of the port will be displayed. Port Info Figure 4-2 Port Information Port: Type: Rate: Status: Displays the port number of the switch. Displays the type of the port. Displays the maximum transmission rate of the port. Displays the connection status of the port. Click a port to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 24
contact information. 4.1.3 System Time System Time is the time displayed while the switch is running. On this page you can configure the system time and the settings here will be used for other time-based functions. You can manually set the system time, get time from an NTP server or synchronize - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 25
displayed on this screen: Time Info Current System Time: Displays the current date and time of the switch. Current Time Source: Displays the current time source of the switch. Time Config Manual: Get Time from NTP Server: Synchronize with PC'S Clock: When this option is selected, you can - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 26
Protocol version 4). Compared with IPv4, IPv6 increases the IP address size from 32 bits to 128 bits; this solves the IPv4 address exhaustion problem. IPv6 features IPv6 has the following features: 1. Adequate address space: The source and destination IPv6 addresses are both 128 bits (16 bytes - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 27
solutions and improves the interoperability between different IPv6 applications. 5. Automatic address configuration: To simplify the host configuration, IPv6 supports stateful and stateless address configuration. Stateful address configuration means that a host acquires an IPv6 address and related - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 28
Note: Two colons (::) can be used only once in an IPv6 address, usually to represent the longest successive hexadecimal fields of zeros. If two colons are used more than once, the device is unable to determine how many zeros double-colons represent when converting them to zeros to restore a 128-bit - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 29
subnet prefix and an interface ID. Subnet Prefix: This section is allocated by the IANA (The Internet Assigned Numbers Authority), the ISP (Internet Service Provider) or the organizations. Interface ID: An interface ID is used to identify interfaces on a link. The interface ID must be unique to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 30
The figure below shows the structure of a global unicast address. Figure 4-7 Global Unicast Address Format Link-local address A link-local address is an IPv6 unicast address that can be automatically configured on any interface using the link-local prefix FE80::/10 (1111 1110 10) and the interface - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 31
packet header, on the local link. After the source node receives the neighbor advertisement, the source node and destination node can communicate. Neighbor advertisement messages are also sent when there is a change in the link-layer address of a node on a local link. Address Resolution The address - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 32
2. IPv6 Router Advertisement Message Router advertisement (RA) messages, which have a value of 134 in the Type field of the ICMP packet header, are periodically sent out each configured interface of an IPv6 router. RA messages typically include the following information: One or more onlink IPv6 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 33
port channel. Link-local Address Config Config Mode: Select the link-local address configuration mode. Manual: When this option is selected, you should assign a link-local address manually. Auto: When this option is selected, the switch will generate a link-local address automatically. 23 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 34
link-local address is duplicate. It is illegal to access the switch using the IPv6 address (including link-local and global address). the global address from the DHCPv6 Server. Add a global address manually Address Format: Global Address: You can select the global address format according - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 35
switch using this address. Tips: After adding a global IPv6 address to your switch manually here, you can configure your PC's global IPv6 address in the same subnet with the switch and login to the switch the switch from of the switch. Choose switch provides two access levels: Guest - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 36
. Access level of the current user information cannot be modified. 4.3 System Tools The System Tools function, allowing you to manage the configuration file of the switch, can be implemented on Boot Config, Config Restore, Config Backup, Firmware Upgrade, System Reboot and System Reset pages. 26 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 37
it fails, it will try to start up with the backup image. If this fails too, you will enter into the bootutil menu of the switch. Choose the menu System → System Tools → Boot Config to load the following page. Figure 4-12 Boot Config The following entries are displayed on this screen - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 38
following page. Figure 4-13 Config Restore The following entries are displayed on this screen: Config Restore Target Unit: Config File: Select a member switch to import the configuration file. Click the Browse button to select a backup file and click the Import button to restore the startup - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 39
to take this measure before upgrading. Note: It will take a few minutes to backup the configuration. Please wait without any operation. 4.3.4 Firmware Upgrade The switch system can be upgraded via the Web management page. To upgrade the system is to get more functions and better performance. Go to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 40
hardware to upgrade. 4. To avoid damage, please don't turn off the device while upgrading. 4.3.5 System Reboot On this page you can reboot the switch and return to the login page. Please save the current configuration before rebooting to avoid losing the configuration unsaved. Choose the menu System - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 41
4.4 Access Security Access Security provides different security measures for the remote login so as to enhance the configuration management security. It can be implemented on Access Control, HTTP Config, HTTPS Config, SSH Config and Telnet Config pages. 4.4.1 Access Control On this page you can - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 42
4-19 HTTP Config The following entries are displayed on this screen: Global Config HTTP: Select Enable/Disable the HTTP function on the switch. Session Config Session Timeout: If you do nothing with the Web management page within the timeout time, the system will log out automatically - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 43
through ecommerce and online banking. SSL mainly provides the following services: 1. Authenticate the users and the servers based on the certificates switch also supports HTTPS connection for IPv6. After configuring an IPv6 address (for example, 3001::1) for the switch, you can log on to the switch - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 44
on this screen: Global Config HTTPS: Select Enable/Disable the HTTPS function on the switch. SSL Version 3: Enable or Disable Secure Sockets Layer Version 3.0. By default, it's enabled. TLS Version 1: Enable or Disable Transport Layer Security Version 1.0. By default, it's enabled. 34 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 45
Certificate File: Select the desired certificate to download to the switch. The certificate must be BASE64 encoded. Key Download Key File: Select the desired key to download to the switch. The key must be BASE64 encoded. Note: 1. The SSL certificate and - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 46
, the client sends authentication request to the server for login, and then the two can communicate with each other after successful authentication. This switch supports SSH server and you can log on to the switch via SSH connection using SSH client software. SSH key can be downloaded into the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 47
Key Download Key Type: Select the type of SSH Key to download. The switch supports two types: SSH-2 RSA/DSA and SSH-1 RSA. Key File: Please bits. Download: Click the Download button to download the desired key file to the switch. Note: 1. It will take a long time to download the key file. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 48
2. PuTTY client software is recommended. Configuration Procedure 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. 2. Click the Open button in the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 49
via key authentication using SSH and the SSH function is enabled on the switch. 2. PuTTY client software is recommended. Configuration Procedure 1. Select the key type and key length, and generate SSH key. Note: 1. The key length is in the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 50
successfully generated, please save the public key and private key to the computer. 3. On the Web management page of the switch, download the public key file saved in the computer to the switch. Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading cannot be - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 51
4. After the public key and private key are downloaded, please log on to the interface of PuTTY and enter the IP address for login. 5. Click Browse to download the private key file to SSH client software and click Open. 41 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 52
indicates that the key has been successfully downloaded. 4.4.5 Telnet Config On this page you can Enable/Disable Telnet function globally on the switch. Choose the menu System→Access Security→Telnet Config to load the following page. Figure 4-22 Access Control The following entries are displayed - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 53
Choose the menu System→SDM Template→SDM Template Config to load the following page. Select Options Current Template ID: Next Template ID: Select Next Template: Template Table SDM Template: IP ACL Rules: MAC ACL Rules: ARP Detection Entries: Figure 4-23 SDM Template Config Displays the SDM - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 54
it is in need. The parameters will affect the working mode of the port, please set the parameters appropriate to your needs. Choose the menu Switching→Port→Port Config to load the following page. Figure 5-1 Port Config The following entries are displayed on this screen： Port Config UNIT:1/LAGS - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 55
Please enable the port which is used to manage the switch. 2. The SFP ports support 1000M SFP module connection only. 5.1.2 Port Mirror Port used to analyze the mirrored packets for monitoring and troubleshooting the network. Choose the menu Switching→Port→Port Mirror to load the following page. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 56
Source: Operation: Displays the mirrored ports. You can configure the mirror session by clicking Edit, or clear the mirror session configuration by clicking the Clear. Click Edit to display the following figure. Figure 5-3 Port Mirror Config The following entries are displayed on this screen: - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 57
the MAC Address Table. When the MAC Address Table is full, the switch will broadcast the packets to all the ports. At this moment, the drop and even breakdown of the system. Port Security is to protect the switch from the malicious MAC Address Attack by limiting the maximum number of MAC addresses - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 58
is selected, the learned MAC address will be out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. • Permanent: When Permanent mode is selected, the learned MAC address will be out of the influence of the aging - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 59
the network security by forbidding the port to forward packets to the ports that are not on its forward portlist. Choose the menu Switching→Port→Port Isolation to load the following page. Figure 5-5 Port Isolation The following entries are displayed on this screen: Port Isolation List UNIT - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 60
following figure. Figure 5-6 Port Isolation Config 5.1.5 Loopback Detection With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 61
Choose the menu Switching→Port→Loopback Detection to load the following page. Figure 5-7 Loopback Detection Config The following entries are displayed on this screen: Global Config LoopbackDetection Status: Detection - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 62
or disable Loopback Detection function for the port. Select the mode how the switch processes the detected loops. • Alert: When a loop is detected, display an the LAG number the port belongs to. Click the Recover button to manually remove the loop or block status of selected ports. Note: Loopback - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 63
LAG and LACP Config configuration pages. 5.2.1 LAG Table On this page, you can view the information of the current LAG of the switch. Choose the menu Switching→LAG→LAG Table to load the following page. Figure 5-8 LAG Table The following entries are displayed on this screen: Global Config Hash - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 64
of the LAG. Click the Detail button for the detailed information of your selected LAG. Figure 5-9 Detailed Information 5.2.2 Static LAG On this page, you can manually configure the LAG. Choose the menu Switching→LAG→Static LAG to load the following page. Figure 5-10 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 65
Protocol) is defined in IEEE802.3ad and enables the dynamic link aggregation and disaggregation by exchanging LACP packets with its partner. The switch can dynamically group similarly configured ports into a single logical link, which will highly extend the bandwidth and flexibly balance the load - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 66
5-11 LACP Config The following entries are displayed on this screen: Global Config System Priority: Specify the system priority for the switch. The system priority and MAC address constitute the system identification (ID). A lower system priority value indicates a higher system priority. When - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 67
displays the traffic information of each port, which facilitates you to monitor the traffic and analyze the network abnormity. Choose the menu Switching→Traffic Monitor→Traffic Summary to load the following page. Figure 5-12 Traffic Summary The following entries are displayed on this screen: Auto - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 68
displays the detailed traffic information of each port, which facilitates you to monitor the traffic and locate faults promptly. Choose the menu Switching→Traffic Monitor→Traffic Statistics to load the following page. Figure 5-13 Traffic Statistics The following entries are displayed on this screen - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 69
) that are over 1023 bytes. Displays the number of collisions experienced by a port during packet transmissions. 5.4 MAC Address The main function of the switch is forwarding the packets to the correct ports based on the destination MAC address of the packets. Address Table contains the port-based - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 70
the Address Table can be updated by auto-learning or configured manually. Most entries are generated and updated by auto-learning. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and enhance the efficiency of packets forwarding remarkably - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 71
5.4.1 Address Table On this page, you can view all the information of the Address Table. Choose the menu Switching→MAC Address→Address Table to load the following page. Figure 5-14 Address Table The following entries are displayed on this screen: Search Option MAC Address: - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 72
address table maintains the static address entries which can be added or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and remarkably enhance the efficiency of packets forwarding without - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 73
. Note: 1. If the corresponding port number of the MAC address is not correct, or the connected port (or the device) has been changed, the switch cannot forward the packets correctly. Please reset the static address entry appropriately. 2. If the MAC address of a device has been added to the Static - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 74
Choose the menu Switching→MAC Address→Dynamic Address to load the following page. Figure 5-16 Dynamic Address The following entries are displayed on this screen: Aging Config Auto Aging: - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 75
address is to forbid the undesired packets to be forwarded. The filtering address can be added or removed manually, independent of the aging time. The filtering MAC address allows the switch to filter the packets which includes this MAC address as the source address or destination address, so as - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 76
VLAN ID: Port: Type: Aging Status: Displays the corresponding VLAN ID. Here the symbol "--" indicates no specified port. Displays the type of the MAC address. Displays the aging status of the MAC address. Note: The MAC address in the Filtering Address Table cannot be added to the Static Address - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 77
occupy plenty of bandwidth resources, causing potential serious security problems. A Virtual Local Area Network (VLAN) is a different physical network segments. This switch supports 802.1Q VLAN to classify VLANs. VLAN tags in the packets are necessary for the switch to identify packets of different - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 78
4,094. VLAN ID identifies the VLAN to which a packet belongs. When the switch receives a un-VLAN-tagged packet, it will encapsulate a VLAN tag with the default the default VLAN of the inbound port for transmission. In this User Guide, the tagged packet refers to the packet with VLAN tag whereas the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 79
, the PVID of each port, indicating the default VLAN to which the port belongs, is an important parameter with the following two purposes: (1) When the switch receives an un-VLAN-tagged packet, it will add a VLAN tag to the packet according to the PVID of its received port (2) PVID determines the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 80
the tagged ports of the specific VLAN. 6.1.2 Port Config Before creating the 802.1Q VLAN, please acquaint yourself with all the devices connected to the switch in order to configure the ports properly. 70 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 81
Choose the menu VLAN→802.1Q VLAN→Port Config to load the following page. Figure 6-5 Port Config The following entries are displayed on this screen: VLAN Port Config UNIT:1/LAGS: Click 1 to configure the physical ports. Click LAGS to configure the link aggregation groups. Select: Select the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 82
entry to delete the corresponding VLAN by clicking the Delete button. 6.2 Application Example for 802.1Q VLAN Network Requirements Switch A is connecting to PC A and Server B; Switch B is connecting to PC B and Server A; PC A and Server A is in the same VLAN; PC B and Server B is in - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 83
3. Create VLAN20 Required. On VLAN→802.1Q VLAN→VLAN Config page, create a VLAN with its VLAN ID as 20, owning Port 3 and Port 4. Configure switch B Step 1 2 3 Operation Description Configure the Required. On VLAN→802.1Q VLAN→Port Config page, configure Link Type of the the link type of Port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 84
according to the PVID of the received port. Thus, the packet is assigned automatically to the corresponding VLAN for transmission. • When receiving tagged packet, the switch will process it basing on the 802.1Q VLAN. If the received port is the member of the VLAN to which the tagged packet belongs - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 85
the device in a MAC VLAN, it's required to set its connected port of switch to be a member of this VLAN so as to ensure the normal communication. feature. 6.4 Application Example for MAC VLAN Network Requirements Switch A and switch B are connected to meeting room A and meeting room B - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 86
of Notebook A is 00-19-56-8A-4C-71, Notebook B's MAC address is 00-19-56-82-3B-70. Network Diagram Configuration Procedure Configure switch A Step Operation Description 1 Configure the Required. On VLAN→802.1Q VLAN→Port Config page, configure the Link Type of the link type of Port 11 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 87
always effective. By creating Protocol VLANs, the network administrator can manage the network clients basing on their actual applications and services effectively. This switch can classify VLANs basing on the common protocol types listed in the following table. Please create the Protocol VLAN to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 88
according to the PVID of the received port. Thus, the packet is assigned automatically to the corresponding VLAN for transmission. 2. When receiving tagged packet, the switch will process it basing on the 802.1Q VLAN. If the received port is the member of the VLAN to which the tagged packet belongs - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 89
. Click LAGS to configure the link aggregation groups. 6.5.3 Protocol Template The Protocol Template should be created before configuring the Protocol VLAN. By default, the switch has defined the IP Template, ARP Template, RARP Template, etc. You can add more Protocol Template on this page. 79 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 90
Choose the menu VLAN→Protocol VLAN→Protocol Template to load the following page. Figure 6-11 Create and View Protocol Template The following entries are displayed on this screen: Create Protocol Template Protocol Name: Give a name for the Protocol Template. Frame Type: Select a Frame Type for - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 91
VLAN by clicking the Delete button. 6.6 Application Example for Protocol VLAN Network Requirements Department A is connected to the company LAN via Port12 of switch A; Department A has IP host and AppleTalk host; IP host, in VLAN10, is served by IP server while AppleTalk host is served by - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 92
Network Diagram Configuration Procedure Configure switch A Step Operation Description 1 Configure Port 11 and Port 12, and configure the egress rule of Port 12 as Untag. Configure switch B Step Operation Description 1 Configure the Required. On VLAN→802.1Q VLAN→Port Config page, - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 93
public network VLAN IDs. (4) When the network of the Internet Service Provider is upgraded, the user's network with a relative independence can still work normally without changing the current configurations. In addition, the switch supports the feature to adjust the TPID Values of VLAN VPN Packets - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 94
enable the VPN function, adjust the global TPID for VLAN-VPN packets and enable the VPN up-link port. When VPN mode is enabled, the switch will add a tag to the received tagged packet basing on the VLAN mapping entries. Choose the menu VLAN→VLAN VPN→VPN Config to load the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 95
6.7.2 Port Enable On this page, you can enable the port for the VLAN Mapping function. Only the port is enabled, can the configured VLAN Mapping function take effect. VPN Port Enable Figure 6-13 Enable Port for VLAN Mapping UNIT: Click 1 to configure the physical ports. Click LAGS to configure - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 96
the port number. Enter the ID number of the Customer VLAN. C VLAN refers to the VLAN to which the packet received by switch belongs. Enter the ID number of the Service Provider VLAN. Give a name to the VLAN Mapping entry or leave it blank. VLAN Mapping List Select: Operation: Select the desired - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 97
VLAN Mapping Required. On the VLAN→VLAN VPN→VLAN Mapping entries. page, configure the VLAN Mapping entries basing on the actual application. 5 Create SP (Service Optional. On the VLAN→802.1Q VLAN page, create the Provider) VLAN. SP VLAN. For the steps of creating VLAN, please refer to 802.1Q - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 98
VLAN→VLAN VPN→Port Enable page, enable VLAN Mapping function for the ports. (Service Optional. On the VLAN→802.1Q VLAN page, create the SP VLAN. For other GARP entities. • Leave Message: When a GARP entity expects other switches to deregister certain attribute information of its own, it sends out a - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 99
includes not only the static registration information configured locally, but also the dynamic registration information, which is received from other switches. In this switch, only the port with TRUNK link type can be set as the GVRP application entity to maintain the VLAN registration information - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 100
Figure 6-16 GVRP Config Note: If the GVRP feature is enabled for a member port of LAG, please ensure all the member ports of this LAG are set to be in the same status and registration mode. The following entries are displayed on this screen: Global Config GVRP: Allows you to Enable/Disable the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 101
providers usually require that each individual user is Layer-2 separated. VLAN feature can solve this problem. However, as stipulated by IEEE 802.1Q protocol, a device can only support up to 4094 VLANs. If a service provider assigns one VLAN per user, the VLANs will be far from enough; as a result - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 102
VLANs but not Secondary VLANs. Therefore, they can save VLAN resources without considering the VLAN configuration in the lower layer. Meanwhile, the service provider can assign each user an individual Secondary VLAN, so that users are separated at the Layer 2 level. Private VLAN technology is - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 103
Private VLAN functions are implemented on the PVLAN Config and Port Config pages. 6.9.1 PVLAN Config On this page, you can create Private VLAN and view the information of the current defined Private VLANs. Choose the menu VLAN→Private VLAN→PVLAN Config to load the following page. Figure 6-17 Create - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 104
Primary VLAN: Secondary VLAN: Port: Displays the Primary VLAN ID number of the Private VLAN. Displays the Secondary VLAN ID number of the Private VLAN. Displays the port list of the Private VLAN. 6.9.2 Port Config The Private VLAN provides two Port Types for the ports, Promiscuous and Host. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 105
Private VLAN Network Requirements Switch C is connecting to switch A, switch A is connecting to switch B; Switch A is connecting to VLAN4 and VLAN5; Switch B is connecting to VLAN5 and VLAN8; For switch C, packets from switch A and switch B have no VLAN tags. Switch C needs not to consider - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 106
VLAN6 Description Required. On VLAN→802.1Q VLAN→VLAN Config page, create a VLAN with its VLAN ID as 6, owning Port 1/0/1. Configure switch A Step 1 2 3 Operation Description Create Private Required. On the VLAN→Private VLAN→PVLAN Config page, VLANs. Enter the Primary VLAN 6 and Secondary - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 107
2 Add Required. On the VLAN→Private VLAN→Port Config page, Promiscuous configure the port type of Port 1/0/3 as Promiscuous, enter Primary port to Private VLAN 6 and Secondary VLAN 5, and click the Apply button. VLANs 3 Add Host port to Required. On the VLAN→Private VLAN→Port Config page, - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 108
in the network transfer BPDUs between each other to exchange information and all the switches supporting STP receive and process the received BPDUs. BPDUs carry the information that is needed for switches to figure out the spanning tree. STP Elements Bridge ID (Bridge Identifier): Indicates the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 109
send BPDU packets. It is used to test the links. Max. Age: Max. Age ranges from 6 to 40 seconds. It specifies the maximum time the switch can wait without receiving a BPDU before attempting to reconfigure. Forward Delay: Forward Delay ranges from 4 to 30 seconds. It specifies the time for the port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 110
is chosen as the root bridge. Selecting the root port and designate port The operation is taken in the following way: Step Operation 1 For each switch (except the one chosen as the root bridge) in a network, the port that receives the BPDU with the highest priority is chosen as the root - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 111
in the VLAN. MSTP is compatible with both STP and RSTP. MSTP Elements MST Region (Multiple Spanning Tree Region): An MST Region comprises switches with the same region configuration and VLAN-to-Instances mapping relationship. IST (Internal Spanning Tree): An IST is a spanning tree in an MST. CST - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 112
this bridge to the Root Bridge and forwards packets to the root. Designated Port: Indicates the port that forwards packets to a downstream network segment or switch. Master Port: Indicates the port that connects a MST region to the common root. The path from the master port to the common root is - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 113
STP Config, Port Config, MSTP Instance and STP Security. 7.1 STP Config The STP Config function, for global configuration of spanning trees on the switch, can be implemented on STP Config and STP Summary pages. 7.1.1 STP Config Before configuring spanning trees, you should make clear the roles each - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 114
regenerating spanning trees frequently and cause network congestions to be falsely regarded as link problems. A too large max age parameter result in the switches unable to find the link problems in time, which in turn handicaps spanning trees being regenerated in time and makes the network less - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 115
7.1.2 STP Summary On this page you can view the related parameters for Spanning Tree function. Choose the menu Spanning Tree→STP Config→STP Summary to load the following page. Figure 7-5 STP Summary 105 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 116
LAGS to configure the link aggregation groups. Select the desired port for STP configuration. It is multi-optional. Displays the port number of the switch. Select Enable /Disable STP function for the desired port. Enter a value from 0 to 240 divisible by 16. Port priority is an important criterion - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 117
this bridge to the Root Bridge and forwards packets to the root. Designated Port: Indicates the port that forwards packets to a downstream network segment or switch. Master Port: Indicates the port that connects a MST region to the common root. The path from the master port to the common root is - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 118
7.3.1 Region Config On this page you can configure the name and revision of the MST region. Choose the menu Spanning Tree→MSTP Instance→Region Config to load the following page. Figure 7-7 Region Config The following entries are displayed on this screen: Region Config Region Name: Revision: - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 119
Instance ID for configuration. It is multi-optional. Displays Instance ID of the switch. Displays status of the instance. Enter the priority of the switch in the instance. It is an important criterion on determining if the switch will be chosen as the root bridge in the specific instance. Enter the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 120
the link aggregation groups. Select the desired port to specify its priority and path cost. It is multi-optional. Displays the port number of the switch. Enter the priority of the port in the instance. It is an important criterion on determining if the port connected to this port will be - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 121
ports Spanning Tree→Port Config→Port Config page. 4 Configure the MST region Required. Create MST region and configure the role the switch plays in the MST region on Spanning Tree→MSTP Instance→Region Config and Instance Config page. 5 Configure MSTP parameters Optional. Configure different - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 122
sending BPDUs, network topology jitter occurs. To prevent this attack, MSTP provides BPDU protect function. With this function enabled on the switch, the switch shuts down the edge ports that receive BPDUs and reports these cases to the administrator. If a port is shut down, only the administrator - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 123
. It is multi-optional. Displays the port number of the switch. Loop Protect is to prevent the loops in the network brought Protect is to prevent the decrease of the performance and stability of the switch brought by continuously removing MAC address entries upon receiving TC-BPDUs in the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 124
default value is 5. 7.5 Application Example for STP Function Network Requirements Switch A, B, C, D and E all support MSTP function. A is the central switch. B and C are switches in the convergence layer. D, E and F are switches in the access layer. There are 6 VLANs labeled as VLAN101 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 125
Network Diagram Configuration Procedure Configure Switch A: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN→VLAN Config page, configure the link type of the related ports as Tagged, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the section - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 126
to Instance 1; map VLAN 102, 104 and 106 to Instance 2. 5 Configure switch B as the root On Spanning Tree→MSTP Instance→Instance bridge of Instance 1 ports as Tagged, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the section 802.1Q VLAN. 2 Enable STP function - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 127
Configure Switch D: Step Operation Description 1 Configure ports On VLAN→802.1Q VLAN→VLAN Config page, configure the link type of the related ports as Tagged, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the section 802.1Q VLAN. 2 Enable STP function On - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 128
Suggestion for Configuration Enable TC Protect function for all the ports of switches. Enable Root Protect function for all the ports of root bridges. Enable Loop Protect function for the non-edge ports. Enable BPDU Protect function or - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 129
users requiring this information is not certain, unicast and broadcast deliver a low efficiency. Multicast solves this problem. It can deliver a high efficiency to send data in the point to multi-point service, which can save large bandwidth and reduce the network load. In multicast, the packets are - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 130
IPv4 Multicast Address 1. IPv4 Multicast IP Address: As specified by IANA (Internet Assigned Numbers Authority), Class D IP addresses are used as destination addresses of multicast packets. The multicast IP addresses range from 224.0.0.0~239.255.255.255. The following table displays the range and - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 131
IPv6 Multicast Address 1. IPv6 Multicast Address An IPv6 multicast address is an identifier for a group of interfaces, and has the following format: 0XFF at the start of the address identifies the address as being a multicast address. Flags have 4 bits: (1) The high-order flag is reserved, - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 132
Group ID: 112 bits, IPv6 multicast group identifier that uniquely identifies an IPv6 multicast group in the scope defined by the Scope field. Reserved Multicast Addresses: Address Indication FF01::1 All interface-local IPv6 nodes FF02::1 All link-local IPv6 nodes FF01::2 FF02::2 FF05::2 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 133
the multicast address table based on the destination multicast address of the multicast packet. If the corresponding entry cannot be found in the table, the switch will broadcast the packet in the VLAN owning the receiving port. If the corresponding entry can be found in the table, it indicates that - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 134
inform the router of its leaving. When Immediate Leave is not enabled in a VLAN and a leave message is received on a port of this VLAN, the switch will generate Multicast-Address-Specific Queries (MASQs) on this port to check if there are other members in this multicast group. The user can control - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 135
default value is 300 seconds. Member Port Time: Within the time, if the switch does not receive IGMP report message from the member port, it will consider this Snooping Config To configure the IGMP Snooping on the switch, please firstly configure IGMP global configuration and related parameters - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 136
the aging time of the router port. Within this time, if the switch does not receive IGMP query message from the router port, it will consider Specify the aging time of the member port. Within this time, if the switch does not receive IGMP report message from the member port, it will consider this - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 137
IGMP Snooping for the desired port. Select Enable/Disable Fast Leave feature for the desired port. If Fast Leave is enabled for a port, the switch will immediately remove this port from the multicast group upon receiving IGMP leave messages. Displays the LAG number which the port belongs to. 127 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 138
Leave on the port is effective only when the host supports IGMPv2 or IGMPv3. 2. When both Fast Leave feature and Router Port Time: Specify the aging time of the router port. Within this time, if the switch doesn't receive IGMP query message from the router port, it will consider this port is not - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 139
this multicast information and deliver each VLAN owning a receiver one copy. This mode wastes a lot of bandwidth. The problem above can be solved by configuring a multicast VLAN. By adding switch ports to the multicast VLAN and enabling IGMP Snooping, you can make users in different VLANs share the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 140
consider this port is not a router port any more. Member Port Time: Specify the aging time of the member port. Within this time, if the switch doesn't receive IGMP report message from the member port, it will consider this port is not a member port any more. Dynamic Ports: Router Static Router - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 141
only within the multicast VLAN. Configuration procedure: Step Operation Description 1 Enable IGMP Snooping Required. Enable IGMP Snooping globally on the switch function and for the port on Multicast→IGMP Snooping→Snooping Config and Port Config page. 2 Create a multicast VLAN Required - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 142
network that runs IGMP, a Layer 3 multicast device works as an IGMP querier to send IGMP queries and manage the multicast table. But IGMP is not supported by the devices in Layer 2 network. IGMP Snooping Querier can act as an IGMP Router in Layer 2 network. It can 132 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 143
help to create and maintain multicast forwarding table on the switch with the Query messages it generates. Choose the menu Multicast→IGMP Snooping→Querier Config to load the following page. Figure 8-9 Querier Config The following entries - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 144
8.1.6 Profile Config On this page you can configure an IGMP profile. Choose the menu Multicast→IGMP Snooping→Profile Config to load the following page. Figure 8-10 Profile Config The following entries are displayed on this screen: Profile Creation Profile ID: Specify the Profile ID you want to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 145
IP: Displays the start IP address of the IP-range. End IP: Displays the end IP address of the IP-range. 8.1.7 Profile Binding When the switch receives IGMP report message, it examines the profile ID bound to the access port to determine if the port can join the multicast group. If - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 146
Choose the menu Multicast→IGMP Snooping→Profile Binding to load the following page. Figure 8-11 Profile Binding The following entries are displayed on this screen: Profile and Max Group Binding UNIT:1/LAGS: Click 1 to configure the physical ports. Click LAGS to configure the link aggregation - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 147
Multicast→IGPM Snooping→Porfile Binding page. 8.1.8 Packet Statistics On this page you can view the multicast data traffic on each port of the switch, which facilitates you to monitor the IGMP messages in the network. Choose the menu Multicast→IGMP Snooping→Packet Statistics to load the following - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 148
Enter the time from 3 to 300 in seconds to specify the auto refresh period. IGMP Statistics Port: Displays the port number of the switch. Query Packet: Displays the number of query packets the port received. Report Packet (V1): Displays the number of IGMPv1 report packets the port received - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 149
General Query The MLD router regularly sends MLD general queries to query if the multicast groups contain any members. When receiving MLD general queries, the switch will forward them to all other ports in the VLAN. The receiving port will be processed: if the receiving port is not a router port yet - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 150
packets refer to those packets without corresponding forwarding entries in the IPv6 multicast table: When unknown multicast filter is enabled, the switch will discard all received unknown IPv6 multicast packets; When unknown multicast filer is disabled, all unknown IPv6 multicast packets are flooded - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 151
member port does not receive Report Message in the aging time, it will be aged. Enter the interval between the switch sends out MASQs. Enter the number of MASQs that the switch sends before aging out a multicast address when there is no MLD report response. Displays MLD Snooping status. Displays the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 152
/Disable MLD Snooping for the desired port. Select Enable/Disable Fast Leave feature for the desired port. If Fast Leave is enabled for a port, the switch will immediately remove this port from the multicast group upon receiving MLD done messages. Displays the LAG number. 142 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 153
Specify the aging time of the router port. Within this time, if the switch don't receive MLD query message from the router port, it will consider Specify the aging time of the member port. Within this time, if the switch don't receive MLD report message from the member port, it will consider this - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 154
this multicast information and deliver each VLAN owning a receiver one copy. This mode wastes a lot of bandwidth. The problem above can be solved by configuring a multicast VLAN. By adding switch ports to the multicast VLAN and enabling MLD Snooping, you can make users in different VLANs share the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 155
Specify the aging time of the member port. Within this time, if the switch doesn't receive IGMP report message from the member port, it will consider this send out MLD queries and manage the multicast table. But MLD is not supported by the devices in Layer 2 network. MLD Snooping Querier can act as - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 156
Choose the menu Multicast→MLD Snooping→Querier Config to load the following page. Figure 8-17 Querier Config The following entries are displayed on this screen: MLD Snooping Querier Config VLAN ID: Enter the VLAN ID which you want to start Querier. Query Interval: Enter the Query message - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 157
8.2.6 Profile Config On this page you can configure an MLD profile. Choose the menu Multicast→MLD Snooping→Profile Config to load the following page. Figure 8-18 Profile Config The following entries are displayed on this screen: Profile Creation Profile ID: Mode: Specify the Profile ID you - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 158
IP: Displays the start IP address of the IP-range. End IP: Displays the end IP address of the IP-range. 8.2.7 Profile Binding When the switch receives MLD report message, it examines the profile ID bound to the access port to determine if the port can join the multicast group. If - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 159
Choose the menu Multicast→MLD Snooping→Profile Binding to load the following page. Figure 8-19 Profile Config The following entries are displayed on this screen: Profile and Max Group Binding UNIT:1/LAGS: Select: Port: Profile ID: Max Group: Overflow Action: LAG: Click 1 to configure the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 160
Binding for ports on for ports Multicast→MLD Snooping→Porfile Binding page. 8.2.8 Packet Statistics On this page you can view the MLD packets the switch received. It helps you to monitor the MLD Snooping function. Choose the menu Multicast→MLD Snooping→Packet Statistics to load the following page - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 161
Table and Static IPv6 Multicast Table pages. 8.3.1 IPv4 Multicast Table On this page you can view the information of the multicast groups already on the switch. Multicast IP addresses range from 224.0.0.0 to 239.255.255.255. The range for receivers to join is from 224.0.1.0 to 239.255.255.255 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 162
The following entries are displayed on this screen: Search Option Search Option: Select the rule for displaying multicast IP table. All: Displays all multicast IP entries. Multicast IP: Enter the multicast IP address the desired entry must carry. VLAN ID: Enter the VLAN ID the desired - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 163
. Displays the forward port of the multicast group. 8.3.3 IPv6 Multicast Table This page displays the multicast groups which are already on the switch. Choose the menu Multicast→Multicast Table→IPv6 Multicast Table to load the following page. Figure 8-23 IPv6 Multicast Table The following entries - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 164
Multicast IP Table Multicast IP: VLAN ID: Forward Ports: Forward Port: Enter the port number the desired entry must carry. Displays the multicast IP. Displays the VLAN ID. Displays the forward ports of the group. 8.3.4 Static IPv6 Multicast Table On this page you can configure the static IPv6 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 165
VLAN ID: Enter the VLAN ID the desired entry must carry. Forward Port: Enter the port number the desired entry must carry. Static Multicast Table Select: Multicast IP: VLAN ID: Forward Port: Select the static multicast group entries you want to configure. Displays multicast IP address. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 166
do routing. The Routing module is mainly for routing management configuration of the switch, including four submenus: Interface, Routing Table, Static Routing and ARP. 9.1 Interface None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. 156 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 167
interfaces to modify or delete. Displays the ID of the interface. Display IP address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. Displays the IP address of the interface. Displays the subnet mask of the interface - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 168
VLAN interface, loopback interface, routed port or port channel. View and modify the IP address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. View and modify the IP address of the interface. View and modify the subnet - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 169
VLAN interface, loopback interface, routed port and port channel. Displays the IP address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. Displays the IP address and subnet mask of the interface. Displays Secondary IP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 170
Interface name: Displays the description of the egress interface. 9.3 Static Routing Static routes are special routes manually configured by the administrator and cannot change automatically with the network topology accordingly. Hence, static routes are commonly used in a relative simple and - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 171
9.4 ARP This page displays the ARP table information and you can configure static ARP here. 9.4.1 ARP Table Choose the menu Routing→ARP→ARP Table to load the following page. Figure 9-4 ARP Table The following entries are displayed on this screen: ARP Table Interface: IP Address: Displays the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 172
as to provide a network service experience of a better quality. QoS This switch classifies the ingress packets, When the network is congested, the problem that many packets compete for resources must be solved, usually in the way of queue scheduling. The switch supports four schedule modes: SP, WRR - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 173
switch processes untagged packets based on the default priority mode. 3. DSCP Priority Figure 10-3 IP datagram As shown in the figure above, the ToS (Type of Service the problem that many packets compete for resources must be solved, usually in the way of queue scheduling. The switch implements - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 174
for each queue and every queue can be assured of a certain service time. The weight value indicates the occupied proportion of the resource. WRR WRR Mode: Strict-Priority + Weight Round Robin Mode. In this mode, the switch provides two scheduling groups, SP group and WRR group. Queues in SP group - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 175
and then forwards the packets according to specified scheduling algorithms to implement QoS function. This switch implements three priority modes based on port, on 802.1P and on DSCP, and supports four queue scheduling algorithms. The port priorities are labeled as CoS0, CoS1... CoS7. The DiffServ - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 176
mode Required. On QoS→DiffServ→Schedule Mode page, select a schedule mode. 10.1.2 Schedule Mode On this page you can select a schedule mode for the switch. When the network is congested, the problem that many packets compete for resources must be solved, usually in the way of queue scheduling. The - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 177
be customized and their default values are 1:2:4:8:16:32:64:127 respectively. SP+WRR-Mode: Strict-Priority + Weight Round Robin Mode. In this mode, the switch provides two scheduling groups, SP group and WRR group. SP group is processed prior to WRR group. Queues in SP group are scheduled strictly - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 178
Choose the menu QoS→DiffServ→802.1P Priority to load the following page. Figure 10-8 802.1P Priority The following entries are displayed on this screen: Priority and CoS-mapping Config Select: Select the desired 802.1P tag-id/cos-id for 802.1P priority configuration. It is multi-optional. Tag- - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 179
Choose the menu QoS→DiffServ→DSCP Priority to load the following page. Figure 10-9 DSCP Priority The following entries are displayed on this screen: DSCP Priority Config DSCP Priority: Select Enable or Disable DSCP Priority. Priority Level Select: Select the desired DSCP value for DSCP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 180
for Rate configuration. It is multi-optional. Displays the port number of the switch. Configure the bandwidth for receiving packets on the port. You can select a rate from the dropdown list or manually set Ingress rate, the system will automatically select integral multiple of 64Kbps that closest - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 181
storm control feature will be disabled for this port. 2. When manually set Ingress/Egress rate, the system will automatically select integral multiple on each port to ensure the switch works normally. 10.2.2 Storm Control Storm Control function allows the switch to filter broadcast, multicast and UL - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 182
: UL-Frame Rate Mode: UL-Frame: LAG: Displays the port number of the switch. Enable or disable the PPS mode. Select the broadcast rate mode, pps mode is voice quality. OUI Address (Organizationally unique identifier address) The switch can determine whether a received packet is a voice packet by - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 183
remove this port from voice VLAN. Voice ports are automatically added into or removed from voice VLAN. Manual Mode: You need to manually add the port of IP phone to voice VLAN, and then the switch will assign ACL rules and configure the priority of the packets through learning the source MAC address - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 184
Security Mode of Voice VLAN When voice VLAN is enabled for a port, you can configure its security mode to filter data stream. If security mode is enabled, the port just forwards voice packets, and discards other packets whose source MAC addresses do not match OUI addresses. If security mode is - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 185
VLAN ID: Aging Time: Priority: Enter the VLAN ID of the voice VLAN. Specifies the living time of the member port in auto mode after the OUI address is aging out. Select the priority of the port when sending voice data. 10.3.2 Port Config Before the voice VLAN function is enabled, the parameters of - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 186
switch automatically adds a port to the voice VLAN or removes a port from the voice VLAN by checking whether the port receives voice data or not. Manual: In this mode, you can manually . 10.3.3 OUI Config The switch supports OUI creation and adds the MAC address of the special voice device to the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 187
page, click the Create button to create a VLAN. 2 Add OUI address Optional. On QoS→Voice VLAN→OUI Config page, you can check whether the switch is supporting the OUI template or not. If not, please add the OUI address. 3 Configure the parameters Required. On QoS→Voice VLAN→Port Config page, of - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 188
time-ranges. The ACL module is mainly for ACL configuration of the switch, including four submenus: Time-Range, ACL Config, Policy Config and data packets can be filtered by differentiating the time-ranges. On this switch absolute time, week time and holiday can be configured. Configure an absolute - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 189
11.1.2 Time-Range Create On this page you can create time-ranges. Choose the menu ACL→Time-Range→Time-Range Create to load the following page. Figure 11-2 Time-Range Create Note: To successfully configure time-ranges, please firstly specify time-slices and then time-ranges. The following entries - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 190
processes the matched packets taking the operation specified in the rule without considering the other rules, which can enhance the performance of the switch. The ACL Config function can be implemented on ACL Summary, ACL Create, MAC ACL, Standard-IP ACL and Extend-IP ACL pages. 11.2.1 ACL Summary - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 191
Choose the menu ACL→ACL Config→ACL Summary to load the following page. Figure 11-4 ACL Summary The following entries are displayed on this screen: Search Option Select ACL: Select the ACL you have created ACL Type: Displays the type of the ACL you select. Rule Order: Displays the rule - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 192
-Rule ACL ID: Select the desired MAC ACL for configuration. Rule ID: Enter the rule ID. Operation: S-MAC: Select the operation for the switch to process packets which match the rules. Permit: Forward packets. Deny: Discard Packets. Enter the source MAC address contained in the rule. D-MAC - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 193
ACL ID: Select the desired Standard-IP ACL for configuration. Rule ID: Enter the rule ID. Operation: S-IP: Select the operation for the switch to process packets which match the rules. Permit: Forward packets. Deny: Discard Packets. Enter the source IP address contained in the rule. D-IP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 194
ACL ACL ID: Select the desired Extend-IP ACL for configuration. Rule ID: Enter the rule ID. Operation: Fragment: Select the operation for the switch to process packets which match the rules. Permit: Forward packets. Deny: Discard Packets. Select if the rule will take effect on the fragment - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 195
TCP Flag： S-Port: D-Port: DSCP: IP ToS: IP Pre: Time-Range: Configure TCP flag when TCP is selected from the pull-down list of IP Protocol. Configure TCP/IP source port contained in the rule when TCP/UDP is selected from the pull-down list of IP Protocol. Configure TCP/IP destination port contained - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 196
Redirect: QoS Remark: Operation: Displays the redirect added to the policy. Displays the QoS remark added to the policy. Edit the information of this action. 11.3.2 Policy Create On this page you can create the policy. Choose the menu ACL→Policy Config→Policy Create to load the following page. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 197
Select ACL: S-Mirror: S-Condition: Redirect: QoS Remark: Select the ACL for configuration in the policy. Select S-Mirror to mirror the data packets in the policy to the specific port. Select S-Condition to limit the transmission rate of the data packets in the policy. Rate: Specify the forwarding - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 198
11.4.1 Binding Table On this page view the ACL bound to port/VLAN. Choose the menu ACL→ACL Binding→Binding Table to load the following page. Figure 11-12 Binding Table The following entries are displayed on this screen: Search Option Show Mode: Select a show mode appropriate to your needs. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 199
11.4.2 Port Binding On this page you can bind a ACL to a port. Choose the menu ACL→ACL Binding→Port Binding to load the following page. Figure 11-13 Bind the policy to the port The following entries are displayed on this screen: Port-Bind Config ACL ID: Select the ID of the ACL you want to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 200
11.4.3 VLAN Binding On this page you can bind an ACL to a VLAN. Choose the menu ACL→ACL Binding→VLAN Binding to load the following page. Figure 11-14 Bind the policy to the VLAN The following entries are displayed on this screen: VLAN-Bind Config ACL ID: Select the ID of the ACL you want to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 201
11.5.1 Binding Table On this page view the policy bound to port/VLAN. Choose the menu ACL→Policy Binding→Binding Table to load the following page. Figure 11-15 Binding Table The following entries are displayed on this screen: Search Option Show Mode: Select a show mode appropriate to your - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 202
11.5.2 Port Binding On this page you can bind a policy to a port. Choose the menu ACL→ACL Binding→Port Binding to load the following page. Figure 11-16 Bind the policy to the port The following entries are displayed on this screen: Port-Bind Config Policy Name: Select the name of the policy - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 203
11.5.3 VLAN Binding On this page you can bind a policy to a VLAN. Choose the menu ACL→Policy Binding→VLAN Binding to load the following page. Figure 11-17 Bind the policy to the VLAN The following entries are displayed on this screen: VLAN-Bind Config Policy Name: Select the name of the policy - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 204
3. The staff of the marketing department can access to the Internet but cannot visit the forum. 4. The R&D department and marketing department cannot communicate with each other. Network Diagram Configuration Procedure Step Operation Description 1 Configure for On ACL→ACL Config→ACL Create - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 205
Step Operation Description 2 Configure for On ACL→ACL Config→ACL Create page, create ACL 500. requirement 2 On ACL→ACL Config→Standard-IP ACL page, select ACL 500, and 4 create Rule 1, configure operation as Deny, configure S-IP as 10.10.70.0 and mask as 255.255.255.0, configure D-IP as 10.10 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 206
access and only allow the Hosts matching the bound entries to access the network. The following three IP-MAC Binding methods are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 207
with the other entries. Note: Among the entries with Critical collision level, the one with the highest Source priority will take effect. 12.1.2 Manual Binding You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the related - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 208
ID: Enter the VLAN ID. Protect Type: Select the Protect Type for the entry. Port: Select the number of port connected to the Host. Manual Binding Table Select: Select the desired entry to be deleted. It is multi-optional. Host Name: Displays the Host Name here. IP Address: Displays the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 209
its ARP Table for the further packets forwarding. ARP Scanning function enables the switch to send the ARP request packets of the specified IP field to the Hosts in the LAN or VLAN. Upon receiving the ARP reply packet, the switch can get the IP address, MAC address, VLAN and the connected port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 210
Choose the menu Network Security→IP-MAC Binding→ARP Scanning to load the following page. Figure 12-4 ARP Scanning The following entries are displayed on this screen: Scanning Option Start IP Address: End IP Address: VLAN ID: Scan: Specify the Start IP Address. Specify the End IP Address. Enter - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 211
basing on the BOOTP, functions to solve the above mentioned problems. DHCP Working Principle DHCP works via the "Client/Server different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 212
location of the DHCP Client. Upon receiving the DHCP-REQUEST packet, the switch adds the Option 82 to the packet and then transmits the packet to fulfilling the security control and account management of Client. The Server supported Option 82 also can set the distribution policy of IP addresses and - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 213
least a sub-option should be defined. This switch supports two sub-options: Circuit ID and Remote ID in the network, network confusion and security problem will happen. The common cases incurring the It's common that the illegal DHCP server is manually configured by the user by mistake. (2) Hacker - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 214
which enable DHCP Snooping function. Option 82 Configuration Option 82 Support: Enable/Disable the Option 82 feature. Existed Option 82 field: to replace the Option 82 field of the packets with the switch defined one. • Drop: Indicates to discard the packets including the Option 82 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 215
if the two fields are different. Rate Limit: Select the value to specify the maximum amount of DHCP messages that can be forwarded by the switch of this port per second. The excessive DHCP packets will be discarded. Decline Protect: Select the value to specify the maximum amount of DHCP decline - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 216
12.3 ARP Inspection According to the ARP Implementation Procedure stated in 12.1.3 ARP Scanning, it can be found that ARP protocol can facilitate the Hosts in the same network segment to communicate with one another or access to external network via Gateway. However, since ARP protocol is - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 217
Figure 12-11 ARP Attack - Cheating Gateway As the above figure shown, the attacker sends the fake ARP packets of Host A to the Gateway, and then the Gateway will automatically update its ARP table after receiving the ARP packets. When the Gateway tries to communicate with Host A in LAN, it will - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 218
illustrated in the following figure. Figure 12-13 Man-In-The-Middle Attack Suppose there are three Hosts in LAN connected with one another through a switch. Host A: IP address is 192.168.0.101; MAC address is 00-00-00-11-11-11. Host B: IP address is 192.168.0.102; MAC address - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 219
attacks. The ARP Inspection function is implemented on the ARP Detect, ARP Defend and ARP Statistics pages. 12.3.1 ARP Detect ARP Detect feature enables the switch to detect the ARP packets basing on the bound entries in the IP-MAC Binding Table and filter the illegal ARP packets, so as to - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 220
the connected Port connected Port number of number of the Host together via Manual Binding, ARP the Host together. Scanning or DHCP Snooping. 2 Enable feature. 12.3.2 ARP Defend With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 221
Port: Defend: Speed(10-100)pps: Current Speed(pps): Status LAG: Operation: Displays the port number. Select Enable/Disable the ARP Defend feature for the port. Enter a value to specify the maximum amount of the received ARP packets per second. Displays the current speed of the received ARP packets. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 222
Auto Refresh: Refresh Interval: Illegal ARP Packet Port: Trusted Port: Illegal ARP Packet: Enable/Disable the Auto Refresh feature. Specify the refresh interval to display the ARP Statistics. Displays the port number. Indicates the port is an ARP Trusted Port or not. Displays the number of the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 223
maliciously by the network attackers or the evil programs sending a lot of service requests to the Host, which incurs an abnormal service or even breakdown of the network. With DoS Defend function enabled, the switch can analyze the specific fields of the IP packets and distinguish the malicious - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 224
issues of wireless LANs. It was then used in Ethernet as a common access control mechanism for LAN ports to solve mainly authentication and security problems. 802.1X is a port-based network access control protocol. It authenticates and controls devices requesting for access in terms of the ports of - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 225
support the 802.1X authentication protocol. 2. Authenticator System: The authenticator system is usually an 802.1X-supported network device, such as this TP-LINK switch trouble, the alternate authentication server can substitute it to provide normal authentication service the instructions (accept - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 226
them successfully reach the authentication server. This mode normally requires the RADIUS server to support the two fields of EAP: the EAP-message field and the Message-authenticator field. This switch supports EAP-MD5, EAP-TLS, EAP-TTLS and EAP-PEAP authentication way for the EAP relay mode. The - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 227
. Authentication and accounting are accomplished through RADIUS protocol. In this mode, PAP or CHAP is employed between the switch and the RADIUS server. This switch supports the PAP terminating mode. The authentication procedure of PAP is illustrated in the following figure. Figure 12-21 PAP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 228
no supplicant past the authentication on the port in a certain time, the switch will add the port to the Guest VLAN. With 802.1X function enabled and there are still ports that have not sent any response back, the switch will then add these ports into the Guest VLAN according to their link types - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 229
uses extensible authentication protocol (EAP) to exchange information between the switch and the client. The EAP protocol packets with authentication data the connection status between the TP-LINK 802.1X Client and the switch. Please disable Handshake feature if you are using other client softwares - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 230
Timeout: Enable/Disable the Quiet timer. Specify a value for Quiet Period. Once the supplicant failed to the 802.1X Authentication, then the switch will not respond to the authentication request from the same supplicant during the Quiet Period. Specify the maximum transfer times of the repeated - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 231
. Displays the LAG to which the port belongs to. 12.6.3 Radius Server RADIUS (Remote Authentication Dial-In User Service) server provides the authentication service for the switch via the stored client information, such as the user name, password, etc, with the purpose to control the authentication - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 232
modify the authentication key. Set the shared password for the switch and the authentication servers to exchange messages. Enable/Disable the LINK 802.1X Client provided on the CD. Please refer to the software guide in the same directory with the software for more information. 3 Configure the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 233
Management Station, SNMP Agent and MIB is illustrated in the following figure. Figure 13-1 Relationship among SNMP Network Elements SNMP Versions This switch supports SNMP v3, and is compatible with SNMP v1 and SNMP v2c. The SNMP versions adopted by SNMP Management Station and SNMP Agent should - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 234
SNMP v1: SNMP v1 adopts Community Name authentication. The community name is used to define the relation between SNMP Management Station and SNMP Agent. The SNMP packets failing to pass community name authentication are discarded. The community name can limit access to SNMP Agent from SNMP NMS, - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 235
for SNMP Management Station to access the SNMP Agent, functioning as the password. SNMP module is used to configure the SNMP function of the switch, including three submenus: SNMP Config, Notification and RMON. 13.1 SNMP Config The SNMP Config can be implemented on the Global Config, SNMP View, SNMP - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 236
ID characters must be even. 13.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the managed objects of the switch, and the MIB (Management Information Base) is the set of the OIDs. The SNMP View is created for the SNMP management station to manage MIB - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 237
13.1.3 SNMP Group On this page, you can configure SNMP Group to control the network access by providing the users in various groups with different management rights via the Read View, Write View and Notify View. Choose the menu SNMP→SNMP Config→SNMP Group to load the following page. Figure 13-5 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 238
apply. Note: Every Group should contain a Read View. The default Read View is viewDefault. 13.1.4 SNMP User The User in a SNMP Group can manage the switch via the management station software. The User and its Group have the same security level and access right. You can configure the SNMP User on - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 239
Choose the menu SNMP→SNMP Config→SNMP User to load the following page. Figure 13-6 SNMP User The following entries are displayed on this screen: User Config User Name: User Type: Group Name: Security Model: Security Level: Auth Mode: Auth Password: Privacy Mode: Privacy Password: Enter the User - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 240
User Table Select: User Name: User Type: Group Name: Security Model: Security Level: Auth Mode: Privacy Mode: Operation: Select the desired entry to delete the corresponding User. It is multi-optional. Displays the name of the User. Displays the User Type. Displays the Group Name of the User. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 241
Access: MIB View: Community Table Select: Community Name: Access: MIB View: Operation: Defines the access rights of the community. • read-only: Management right of the Community is restricted to read-only, and changes cannot be made to the corresponding View. • read-write: Management right of the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 242
SNMP Group. 13.2 Notification With the Notification function enabled, the switch can initiatively report to the management station about the important events that sent to inform the management station and ask for the reply. The switch will resend the inform request if it doesn't get the response - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 243
. • Inform: Indicates informs are sent. The Inform type has a higher security than the Trap type. Specify the amount of times the switch resends an inform request. The switch will resend the inform request if it doesn't get the response from the management station during the Timeout interval, and it - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 244
to manage the large-scale network since it reduces the communication traffic between management station and managed agent. RMON Group This switch supports the following four RMON Groups defined on the RMON standard (RFC1757): History Group, Event Group, Statistic Group and Alarm Group. RMON - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 245
The RMON Groups can be configured on the Statistics, History, Event and Alarm pages. 13.3.1 Statistics On this page you can configure and view the statistics entry. Choose the menu SNMP→RMON→Statistics to load the following page. Figure 13-9 Statistics The following entries are displayed on this - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 246
the maximum number of buckets desired for the RMON history group of statistics, ranging from 1 to 130. The default is 50 buckets. 130 buckets supported at most so far. Owner: Enter the name of the device or user that defined the entry. Status: Select Enable/Disable the corresponding sampling - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 247
13.3.3 Event On this page, you can configure the RMON events. Choose the menu SNMP→RMON→Event to load the following page. Figure 13-11 Event Config The following entries are displayed on this screen: Event Table Select: Select the desired entry for configuration. Index: Displays the index - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 248
13.3.4 Alarm Config On this page, you can configure Statistic Group and Alarm Group for RMON. Choose the menu SNMP→RMON→Alarm to load the following page. Figure 13-12 Alarm Config The following entries are displayed on this screen: Alarm Config Select: Select the desired entry for configuration - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 249
Alarm Type: Interval: Owner: Status: Specify the type of the alarm. • All: The alarm event will be triggered either the sampled value exceeds the Rising Threshold or is under the Falling Threshold. • Rising: When the sampled value exceeds the Rising Threshold, an alarm event is triggered. • Falling - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 250
information can be used by SNMP applications to simplify troubleshooting, enhance network management, and maintain an accurate network to allow the port to both transmit and receive LLDPDUs. Four LLDP admin statuses are supported by each port. Tx&Rx: the port can both transmit and receive LLDPDUs. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 251
Disable: the port cannot transmit or receive LLDPDUs. 2) LLDPDU transmission mechanism If the ports are working in TxRx or Tx mode, they will advertise local information by sending LLDPDUs periodically. If there is a change in the local device, the change notification will be advertised. To - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 252
by IEEE 802.3. Note: For detailed introduction of TLV, please refer to IEEE 802.1AB standard. In TP-LINK switch, the following LLDP optional TLVs are supported. Port Description TLV The Port Description TLV allows network management to advertise the IEEE 802 LAN station's port description - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 253
settings are the result of auto-negotiation during link initiation or of manual set override action. Max Frame Size TLV The Maximum Frame Size TLV power support capabilities of the sending IEEE 802.3 LAN station. The LLDP module is mainly for LLDP function configuration of the switch, including - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 254
Choose the menu LLDP→Basic Config→Global Config to load the following page. Figure 14-1 Global Configuration The following entries are displayed on this screen: Global Config LLDP: Choose to enable/disable LLDP. Parameters Config Transmit Interval: Hold Multiplier: Transmit Delay: Reinit - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 255
Choose the menu LLDP→Basic Config→Port Config to load the following page. Figure 14-2 Port Configuration The following entries are displayed on this screen: Port Config Select: Select the desired entry for configuration. It is multi-optional. Port: Displays the port number to be configured. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 256
Choose the menu LLDP→Device Info→Local Info to load the following page. Figure 14-3 Local Information The following entries are displayed on this screen: Auto Refresh Auto Refresh: Enable/Disable the auto refresh function. Refresh Rate: Configure the auto refresh rate. Local Info Select - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 257
valid. Displays local port's description. Indicates local device's administratively assigned name. Displays local device's system description. Displays the supported function of the local device. Displays the primary function of the local device. Displays the particular management address associated - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 258
System Name: Chassis ID: System Description: Neighbor Port: Information： Displays the system name of the neighbor device. Displays the Chassis ID of the neighbor device. Displays the system description of the neighbor. Displays the port number of the neighbor linking to local port. Click to display - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 259
Voice over IP phones and network switches. The LLDP-MED TLVs advertise information , providing some aspects of IP communications service, based on IEEE 802 LAN technology supports media stream capabilities. Communication Device Endpoint (Class III): The class of Endpoint Device that directly supports - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 260
, Software Revision TLV, Serial Number TLV, Manufacturer Name TLV, Model Name TLV and Asset ID TLV. If support for any of the TLVs in the Inventory Management set is implemented, then support for all Inventory Management TLVs shall be implemented. LLDP-MED is configured on the Global Config, Port - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 261
Choose the menu LLDP→LLDP-MED→Port Config to load the following page. Figure 14-7 LLDP-MED Port Configuration The following entries are displayed on this screen: LLDP-MED Port Config Select: LLDP-MED Status: Included TLVs: Detail: Select the desired port to configure. Configure the port's - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 262
Emergency Number: Civic Address: Emergency number is Emergency Call Service ELIN identifier, which is used during emergency call setup ), the location of the network element believed to be closest to the client (1: Switch) or the location of the client (2: LLDP-MED Endpoint). Option (2) should be - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 263
capital ASCII letters, e.g., CN or US. • Language, Province/State, etc.: a part of civic address. 14.4.3 Local Info On this page you can see all ports' LLDP-MED configuration. Choose the menu LLDP→LLDP-MED→Local Info to load the following page. Figure 14-9 LLDP-MED Local Information The following - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 264
Unknown Policy Flag: VLAN tagged: Media Policy VLAN ID: Media Policy Layer 2 Priority: Media Policy DSCP: Displays whether the local device will explicitly advertise the policy required by the device but currently unknown. Indicates the VLAN type the specified application type is using, 'tagged' or - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 265
Application Type: Local Data Format: Power Type: Information: Displays the application type of the neighbor. Application Type indicates the primary function of the applications defined for the network policy. Displays the location identification of the neighbor. Displays the power type of the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 266
problem. （1） System Monitor: Monitor the utilization status of the memory and the CPU of switch. （2） Log: View the configuration parameters of the switch trouble spot of the network. （4） Network Diagnostics: Test whether the destination device is reachable and detect the route hops from the switch - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 267
to monitor and display its Memory utilization rate every four seconds. 15.2 Log The Log system of switch can record, classify and manage the system information effectively, providing powerful support for network administrator to monitor network operation and diagnose malfunction. The Logs of - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 268
Table 15-1 Log Level The Log function is implemented on the Log Table, Local Log, Remote Log and Backup Log pages. 15.2.1 Log Table The switch supports logs output to two directions, namely, log buffer and log file. The information in log buffer will be lost after the - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 269
are displayed. 15.2.2 Local Log Local Log is the log information saved in switch. By default, the logs with severities from level_0 to level_6 are saved in displayed on the Log Table page. It will be lost when the switch is restarted. • Log File: Indicates the flash sector for saving system log. - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 270
page. Figure 15-5 Log Host The following entries are displayed on this screen: Log Host Index: Displays the index of the log host. The switch supports 4 log hosts. Host IP: Configure the IP for the log host. UDP Port: Displays the UDP port used for receiving/sending log information. Here - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 271
for device diagnose. 15.3.1 Cable Test Cable Test functions to test the connection status of the cable connected to the switch, which facilitates you to locate and diagnose the trouble spot of the network. Choose the menu Maintenance→Device Diagnostics→Cable Test to load the following page. 261 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 272
. 2. The result is more reasonable when the cable pair is in the open status. 3. The result is just for your information. 15.4 Network Diagnostics This switch provides Ping test and Tracert test functions for network Diagnostics. 262 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 273
, testing the connectivity between the switch and one node of the network IP address of the destination node for Ping test. Both IPv4 and IPv6 are supported. Ping Times: Data Size: Interval: Enter the amount of times to send test locate trouble spot of the network with this tracert test. 263 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 274
The following entries are displayed on this screen: Tracert Config Destination IP: Enter the IP address of the destination device. Both IPv4 and IPv6 are supported. Max Hop: Specify the maximum number of the route hops the test data can pass through. Return to CONTENTS 264 - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 275
Cat. 5 or above 1000Base-T: 4-pair UTP (≤100m) of Cat. 5e, Cat.6 or above 1000Base-X: MMF or SMF SFP Module (Optional) T2600G-28TS: PWR, SYS, 1000Mbps, Link/Act T2600G-52TS: PWR,SYS, 10/100/1000Mbps (port 1-48), Link/Act (port 49-52) Transmission Method Store and Forward Packets Forwarding Rate - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 276
of the boot file. Class of Service (CoS) CoS is supported by prioritizing packets based on the required level of service, and then placing them in the way for VLANs to communicate across switched networks. IEEE 802.1p An IEEE standard for providing quality of service (QoS) in Ethernet networks. The - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 277
specified multicast group. Multicast Switching A process whereby the switch filters incoming multicast frames for services forwhich no attached host has whereby data on a target port is mirrored to a monitor port for troubleshooting with a logic analyzer or RMON probe. This allows data on the target - TP-Link T2600G-52TS TL-SG3452 | T2600G-52TS V1 User Guide - Page 278
used for software downloads. User Datagram Protocol (UDP) UDP provides a datagram mode for packet-switched communications. It uses IP as the underlying transport mechanism to provide access to IP-like services. UDP packets are delivered just like IP packets - connection-less datagrams that may be
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
 |
 |
T2600G-28TS (TL-SG3424)
T2600G-52TS (TL-SG3452)
JetStream Gigabit L2 Managed Switch
REV1.0.0
1910011257