TP-Link T2700G-28TQ T2700G-28TQ User Guide V1
TP-Link T2700G-28TQ Manual
 |
View all TP-Link T2700G-28TQ manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T2700G-28TQ manual content summary:
- TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 1
T2700G-28TQ JetStream 28-Port Gigabit Stackable L2+ Managed Switch REV1.0.1 1910011208 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 2
without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2015 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved. http://www.tp-link.com FCC and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 3
source. Don't disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you need service, please contact us. Avoid water and wet locations. This product can be used in the following countries: AT BG BY CA CZ DE DK - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 4
CONTENTS Package Contents ...1 Chapter 1 About This Guide ...2 1.1 Intended Readers...2 1.2 Conventions ...2 1.3 Overview of This Guide 2 Chapter 2 Introduction ...7 2.1 Overview of the Switch 7 2.2 Main Features ...7 2.3 Appearance Description 9 2.3.1 Front Panel ...9 2.3.2 Rear Panel ...11 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 5
Chapter 5 Stack ...36 5.1 Stack Management ...42 5.1.1 Stack Info...42 5.1.2 Stack Config ...43 5.1.3 Switch Renumber 44 5.2 Application Example for Stack 45 Chapter 6 Switching ...47 6.1 Port ...47 6.1.1 Port Config ...47 6.1.2 Port Mirror...48 6.1.3 Port Security ...50 6.1.4 Port Isolation ...52 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 6
7.5.3 Protocol Template 84 7.6 Application Example for Protocol VLAN 86 7.7 VLAN VPN...88 7.7.1 VPN Config...89 7.7.2 Port Enable...89 7.7.3 VLAN Mapping 90 7.8 GVRP ...92 7.9 Private VLAN...96 7.9.1 PVLAN Config 97 7.9.2 Port Config ...98 7.10 Application Example for Private VLAN 99 Chapter 8 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 7
DHCP Server...148 10.4.1 DHCP Server 154 10.4.2 Pool Setting ...156 10.4.3 Manual Binding 157 10.4.4 Binding Table 157 10.4.5 Packet Statistics 158 10.4.6 Application ...201 10.9.6 Area Aggregation 202 10.9.7 Virtual Link...204 10.9.8 Route Redistribution 205 10.9.9 ASBR Aggregation 206 IV - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 8
10.9.10 Neighbor Table 207 10.9.11 Link State Database 209 10.9.12 Application Example for OSPF 209 10.10 VRRP (License Required 211 10.10.1 Basic Config ...215 10.10.2 Advanced Config - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 9
11.5.3 Application Example for Static Mroute 263 Chapter 12 QoS...266 12.1 DiffServ...269 12.1.1 Port Priority...269 12.1.2 Schedule Mode 270 12.1.3 802.1P Priority 271 12.1.4 DSCP Priority 272 12.2 Bandwidth Control ...274 12.2.1 Rate Limit ...274 12.2.2 Storm Control 275 12.3 Voice VLAN ... - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 10
14.1.2 Manual Binding 297 14.1.3 ARP Scanning 299 14.2 DHCP Snooping ...301 14.2.1 Global Config 304 14.2.2 Port Config ...305 14.3 ARP Inspection...306 14.3.1 ARP Detect... - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 11
16.4 LLDP-MED ...350 16.4.1 Global Config 351 16.4.2 Port Config ...352 16.4.3 Local Info ...354 16.4.4 Neighbor Info 355 Chapter 17 Cluster...357 17.1 NDP ...358 17.1.1 Neighbor Info 358 17.1.2 NDP Summary 359 17.1.3 NDP Config...360 17.2 NTDP...361 17.2.1 Device Table ...361 17.2.2 NTDP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 12
Appendix B: Configuring the PCs 395 Appendix C: 802.1X Client Software 397 Appendix D: Glossary...405 IX - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 13
Cable One Power Supply Module Slot Cover Two mounting brackets and other fittings Installation Guide Resource CD for T2700G-28TQ switch, including: • This User Guide • The Command Line Interface Guide • SNMP Mibs • 802.1X Client Software • Other Helpful Information Note: Make sure that the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 14
network managers familiar with IT concepts and network terminologies. 1.2 Conventions In this Guide the following conventions are used: The switch or T2700G-28TQ mentioned in this Guide stands for T2700G-28TQ JetStream 28-Port Gigabit Stackable L2+ Managed Switch without any explanation. Menu - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 15
: Port: Configure the basic features for the port. LAG: Configure Link Aggregation Group. LAG is to combine a number of ports together to make a tags of public networks at the network access terminal of the Internet Service Provider. GVRP: GVRP allows the switch to automatically add or - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 16
Chapter Chapter 8 Spanning Tree Chapter 9 Multicast Chapter 10 Routing Chapter 11 Multicast Routing Introduction This module is used to configure spanning tree function of the switch. Here mainly introduces: STP Config: Configure and view the global settings of spanning tree function. Port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 17
to provide different quality of service for various network applications and requirements ports to solve mainly authentication and security problems. This module is used to configure SNMP provide information for SNMP applications to simplify troubleshooting. Here mainly introduces: Basic Config - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 18
router hops from the switch to the destination. Introduces how to download firmware of the switch via FTP function. Lists the glossary used in this manual. Introduces how to configure the PCs. Introduces how to use 802.1X Client Software provided for authentication. Lists the glossary used in this - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 19
3 upgraded T2700G-28TQ supports advanced routing protocols such as OSPF, VRRP, IGMP and PIM DM/SM for converged networks. Tips: To obtain the T2700G-28TQ Layer 3 License T2700G-28TQ-L1000: 1. Buy a license key from a TP-LINK authorized distributor. 2. Go to T2700G-28TQ page at TP-LINK website, use - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 20
assignment of VLANs. + Supports up to 4K VLANs simultaneously (out of 4K VLAN IDs). • Quality of Service + Supports L2/L3 granular CoS with SSL 2.0/3.0 and TLS v1 for access encryption. • Manageability + IP Clustering provides high scalability and easy Single-IP-Management. + Supports Telnet, CLI, - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 21
2.3 Appearance Description 2.3.1 Front Panel Figure 2-1 Front Panel The following parts are located on the front panel of the switch: Console Port: Designed to connect with the serial port of a computer or terminal for monitoring and configuring the switch. LEDs LED Power System Status On - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 22
device with the bandwidth of 10Mbps, 100Mbps or 1000Mbps. Each has a corresponding Link/Act LED. SFP Ports: Port 21F-24F, designed to install the SFP ports support 1000M SFP module connection only. SFP+ Ports: Port 25-26, designed to install the 10Gbps SFP+ transceiver/cable. T2700G-28TQ also - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 23
Interface Card (TX432 of TP-LINK for example) for your switch if needed. Grounding Terminal: T2700G-28TQ already comes with Lightning Protection Installation Guide. RPS Input Connector: Provides an interface to connect the RPS (Redundant Power Supply). You can select an RPS (RPS150 of TP-LINK - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 24
addresses of the switch. The IP address is 192.168.0.x ("x" is any number from 2 to 254), Subnet Mask is 255.255.255.0. For the detailed instructions as to how to do this, please refer to Appendix B. 2) After a moment, a login window will appear, as shown in Figure 3-2. Enter admin for the User - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 25
3.2 Configuration After a successful login, the main page will appear as Figure 3-3, and you can configure the function by clicking the setup menu on the left side of the screen. Figure 3-3 Main Setup-Menu Note: Clicking Apply can only make the new configurations effective before the switch is - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 26
Chapter 4 System The System module is mainly for system configuration of the switch, including four submenus: System Info, User Management, System Tools and Access Security. 4.1 System Info The System Info, mainly for basic properties configuration, can be implemented on System Summary, Device - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 27
Indicates the 1000Mbps port is at the speed of 1000Mbps. Indicates the 1000Mbps port is at the speed of 10Mbps or 100Mbps. Indicates the SFP port is not connected to a device. Indicates the SFP port is at the speed of 1000Mbps. Indicates the SFP+ port is not connected to a device. Indicates the SFP+ - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 28
. On this page you can configure the system time and the settings here will be used for other time-based functions like ACL. You can manually set the system time, get UTC automatically if it has connected to an NTP server or synchronize with PC's clock as the system time. 16 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 29
and time of the switch. Current Time Source: Displays the current time source of the switch. Time Config Manual: When this option is selected, you can set the date and time manually. Get Time from NTP Server: Synchronize with PC'S Clock: When this option is selected, you can configure the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 30
4.1.4 License Info This page displays the status of the license and the features it supports. Choose the menu System → System Info → License Info to load the following page. Figure 4-6 License Info The following entries are displayed on this screen: License - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 31
4.1.5 Daylight Saving Time Here you can configure the Daylight Saving Time of the switch. Choose the menu System → System Info → Daylight Saving Time to load the following page. Figure 4-7 Daylight Saving Time The following entries are displayed on this screen: DST Config DST Status: Predefined - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 32
settings without the right to configure the switch; the admin can configure all the functions of the switch. The Web management pages contained in this guide are subject to the admin's login without any explanation. 20 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 33
Choose the menu System → User Management → User Config to load the following page. Figure 4-9 User Config The following entries are displayed on this screen: User Info User Name: Create a name for users' login. Access Level: User Status: Select the access level to login. Admin: Admin can - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 34
Operation: Click the Edit button of the desired entry, and you can edit the corresponding user information. After modifying the settings, please click the Modify button to make the modification effective. Access level and user status of the current user information can't be modified. 4.3 System - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 35
Current Startup Image: Next Startup Image: Backup Image: Current Startup Config: Next Startup Config: Backup Config: Restore: Displays the current startup image. Select the next startup image. Select the backup boot image. Displays the current startup config filename. Input the next startup config - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 36
system can be upgraded via the Web management page. To upgrade the system is to get more functions and better performance. Go to http://www.tp-link.com to download the updated firmware. Choose the menu System→System Tools→Firmware Upgrade to load the following page. Figure 4-13 Firmware Upgrade 24 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 37
to upgrade the switch and activate the layer 3 routing capabilities. To obtain the T2700G-28TQ Layer 3 License T2700G-28TQ-L1000: 1. Buy a license key from a TP-LINK authorized distributor. 2. Go to T2700G-28TQ page at TP-LINK website, use the license key together with the switch S/N and MAC address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 38
Note: To avoid damage, please do not turn off the device while rebooting. 4.3.7 System Reset On this page you can reset the specified unit in the stack to the default. All the settings will be cleared after the switch is reset. Choose the menu System→System Tools→System Reset to load the following - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 39
Choose the menu System→Access Security→Access Control to load the following page. Figure 4-17 Access Control The following entries are displayed on this screen: Access Control Config Control Mode: IP Address& Mask： MAC Address: Port: Select the control mode for users to log on to the Web - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 40
the data transmission between the Web browser and servers. It is mainly applied through ecommerce and online banking. SSL mainly provides the following services: 1. Authenticate the users and the servers based on the certificates to ensure the data are transmitted to the correct users and servers - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 41
the client sends authentication request to the server for login, and then the two can communicate with each other after successful authentication. This switch supports SSH server and you can log on to the switch via SSH connection using SSH client software. SSH key can be downloaded into the switch - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 42
connections reaches the maximum number you set. The default value is 5. Key Download Key Type: Select the type of SSH Key to download. The switch supports three types: SSH-1 RSA, SSH-2 RSA and SSH-2 DSA. Key File: Download: Select the desired key file to download. Click the Download button to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 43
2. After the Key File is downloaded, the user's original key of the same type will be replaced. The wrong uploaded file will result in the SSH access to the switch via Password authentication. Application Example 1 for SSH: Network Requirements 1. Log on to the switch via password authentication - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 44
2. PuTTY client software is recommended. Configuration Procedure 1. Select the key type and key length, and generate SSH key. Note: 1. The key length is in the range of 256 to 3072 bits. 2. During the key generation, randomly moving the mouse quickly can accelerate the key generation. 32 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 45
2. After the key is successfully generated, please save the public key and private key to the computer. 3. On the Web management page of the switch, download the public key file saved in the computer to the switch. Note: 1. The key type should accord with the type of the key file. 2. The SSH key - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 46
4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. 5. Click Browse to download the private key file to SSH client software and click Open. 34 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 47
the console connection. For how to configure the Privileged EXEC Mode password, please refer to the 1.1.2 Configuring the Privileged EXEC Mode Password in CLI Reference Guide. Return to CONTENTS 35 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 48
and maintenance of the stack, while the other stack members process services and keep a copy configuration file in accordance with the master for affecting its normal operation. 2) Distributed LACP (Link Aggregation Control Protocol) supports link aggregation across devices. Since the whole stack - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 49
occurs, which further ensures the normal operation of load distribution and backup across devices and links as Figure 5-2 shows. Figure 5-2 Load Distribution and Backup across Devices 3. Network scalability. Each member device in the stack system is able to process protocol packets - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 50
called stack member. Each stack member processes services packets and plays a role which is either merge into one stack because of stack link establishment, as shown in the following figure partition probably brings about routing and forwarding problems on the network since the partitioned stacks - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 51
stack ports of the member devices with cables. The stack ports of T2700-28TQ can be used for stack connection or as normal Ethernet Gigabit port. When more reliable than the daisy chain topology. In a daisy chained stack, link failure can cause stack split. While in a ring connected stack, the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 52
value is, the more likely the member will be elected as the master. By default, the member priority of the switch is 5. We recommend you manually assign the highest priority value to the switch that you prefer to be the stack master before stack establishment. 2. The switch is non-preemptible when - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 53
Slot Number: Indicates the number of the slot the interface card is in. For T2700G-28TQ, the front panel ports belong to slot 0. Slot number starting from 1 each represents stack members. The switch can quickly judge the link status of the stack port via monitoring the response of the packets. When - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 54
5.1 Stack Management Before configuring the stack, we highly recommend you to prepare the configuration planning with a clear set of the role and function of each member device. Some configuration needs device reboot to take effect, so you are kindly recommended to configure the stack at first, next - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 55
Role: MAC Address： Priority: Version: Status: Stack Port Info: Displays the stack role of the member switch in the stack. There are two options: Master and Slave. Displays the MAC address of the member switch. Displays the member priority of the member switch. The higher the value is, the more - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 56
implemented to identify and manage the member device. Unit number is unique in a stack system. Unit number can be assigned automatically by stack system or manually configured by users. On this page, you can configure the unit number of member switch. 44 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 57
device in a stack. Displays the MAC address of the member switch. 5.2 Application Example for Stack Network Requirements Establish a stack of ring topology with four T2700-28TQ switches. Network Diagram 45 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 58
Configuration Procedure Configure switch A, B, C and D before physically connecting them: Step Operation Description 1 Configure the stack Optional. On Stack Management→Stack Config page, name. configure the stack name. 2 Configure stack port Required. On Stack Management→Stack Config page - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 59
Chapter 6 Switching Switching module is used to configure the basic functions of the switch, including four submenus: Port, LAG, Traffic Monitor and MAC Address. 6.1 Port The Port function, allowing you to configure the basic features for the port, is implemented on the Port Config, Port Mirror, - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 60
specific port (mirroring port). Usually, the mirroring port is connected to a data diagnose device, which is used to analyze the mirrored packets for monitoring and troubleshooting the network. Choose the menu Switching→Port→Port Mirror to load the following page. Figure 6-2 Mirror Session List 48 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 61
The following entries are displayed on this screen. Mirror Session List Session: This column displays the mirror session number. Destination: This column displays the mirroring port. Mode: This column displays the mirror mode. Source: This column displays the mirrored ports. Operation: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 62
The following entries are displayed on this screen. Mirror Session Session: Displays session number. Destination Port Destination Port: Input or select a physical port from the port panel as the mirroring port. Source Port Select: Select the desired port as a mirrored port. It is multi - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 63
Choose the menu Switching→Port→Port Security to load the following page. Figure 6-4 Port Security The following entries are displayed on this screen: Port Security UNIT: Select: Port: Max Learned MAC: Learned Num: Select the unit ID of the desired member in the stack. Select the desired port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 64
. • Static: When Static mode is selected, the learned MAC address will be out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. • Permanent: When Permanent mode is selected, the learned MAC address will be out of - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 65
Click the Edit button to configure the port isolation list in the following page: Port Isolation Config Figure 6-6 Port Isolation Config UNIT: Port: Forward Portlist: Select the unit ID of the desired member in the stack. Select the port number to set its forward list. It is multi-optional. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 66
Choose the menu Switching → Port → Loopback Detection to load the following page. Figure 6-7 Loopback Detection Config The following entries are displayed on this screen: Global Config LoopbackDetection Status: Detection Interval: Automatic Recovery Time: Web Refresh Status: Web Refresh Interval - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 67
number the port belongs to. Remove the block status of selected ports manually. Note: 1. Recovery Mode is not selectable when Alert is chosen in Mode. 2. Loopback Detection must coordinate with storm control. 6.2 LAG LAG (Link Aggregation Group) is to combine a number of ports together to make a - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 68
bandwidth of the LAG is up to 8000Mbps (2000Mbps * 4) because the bandwidth of each member port is 2000Mbps counting the up-linked speed of 1000Mbps and the down-linked speed of 1000Mbps. 2. The traffic load of the LAG will be balanced among the ports according to the Aggregate Arithmetic. If the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 69
information of your selected LAG. Figure 6-9 Detail Information 6.2.2 Static LAG On this page, you can manually configure the LAG. The LACP feature is disabled for the member ports of the manually added Static LAG. Choose the menu Switching→LAG→Static LAG to load the following page. Figure 6-10 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 70
aggregation and disaggregation by exchanging LACP packets with its partner. The switch can dynamically group similarly configured ports into a single logical link, which will highly extend the bandwidth and flexibly balance the load. With the LACP feature enabled, the port will notify its partner - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 71
priority. When exchanging information between systems, the system with higher priority determines which link aggregation a link belongs to, and the system with lower priority adds the proper links to the link aggregation according to the selection of its partner. LACP Config UNIT: Select the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 72
Mode: Status: LAG: member. The port with smaller Port Priority will be considered as the preferred one. If the two port priorities are equal; the port with smaller port number is preferred. Specify LACP mode for your selected port. Enable/Disable the LACP feature for your selected port. Displays - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 73
The following entries are displayed on this screen: Auto Refresh Auto Refresh: Allows you to Enable/Disable refreshing the Traffic Summary automatically. Refresh Rate: Enter a value in seconds to specify the refresh interval. Traffic Summary UNIT: Select the unit ID of the desired member - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 74
Choose the menu Switching→Traffic Monitor→Traffic Statistics to load the following page. Figure 6-13 Traffic Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Allows you to Enable/Disable refreshing the Traffic Summary automatically. Refresh Rate: Enter - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 75
, which is the base for the switch to forward packets quickly. The entries in the Address Table can be updated by auto-learning or configured manually. Most entries are generated and updated by auto-learning. In the stable networks, the static MAC address entries can facilitate the switch to reduce - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 76
Way Being kept after reboot Relationship between Aging out (if the configuration is the bound MAC saved) address and the port Static Manually configuring No Yes Address Table The bound MAC address cannot be learned by the other ports in the same VLAN. Dynamic Automatically Address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 77
Enter the MAC address of your desired entry. VLAN ID: Enter the VLAN ID of your desired entry. Port: Select the corresponding port number or link-aggregation number of your desired entry. Type: UNIT: Select the type of your desired entry. All: This option allows the address table to display - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 78
VLAN ID of the MAC address. Displays the corresponding port number or link-aggregation number of the MAC address. Displays the Type of the MAC table maintains the static address entries which can be added or removed manually, independent of the aging time. In the stable networks, the static - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 79
UNIT: Select the unit ID of the desired member in the stack. Port: Select a port to be bound. Search Option Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in the Static Address Table. • MAC: Enter the MAC address of your - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 80
: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. • Port: Enter the Port number or link-aggregation number of your desired entry. Dynamic Address Table UNIT: Select the unit ID of the desired member in the stack. Select: Select the entry - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 81
value. 6.4.4 Filtering Address The filtering address is to forbid the undesired packets to be forwarded. The filtering address can be added or removed manually, independent of the aging time. The filtering MAC address allows the switch to filter the packets which includes this MAC address as the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 82
Search Option Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in the Filtering Address Table. • MAC Address: Enter the MAC address of your desired entry. • VLAN ID: Enter the VLAN ID number of your desired entry. Filtering - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 83
occupy plenty of bandwidth resources, causing potential serious security problems. A Virtual Local Area Network (VLAN) is a That is, hosts in a VLAN can belong to different physical network segment. This switch supports three ways, namely, 802.1Q VLAN, MAC VLAN and Protocol VLAN, to classify VLANs. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 84
different VLANs. The switch works at the data link layer in OSI model and it can identify the data link layer encapsulation of the packet only, so to the default VLAN of the inbound port for transmission. In this User Guide, the tagged packet refers to the packet with VLAN tag whereas the untagged - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 85
its default VLAN. Different packets, tagged or untagged, will be processed in different ways, after being received by ports of different link types, which is illustrated in the following table. Port Type Receiving Packets Untagged Packets Tagged Packets Forwarding Packets Access Trunk General - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 86
Choose the menu VLAN→802.1Q VLAN→VLAN Config to load the following page. Figure 7-3 VLAN Table To ensure the normal communication of the factory switch, the default VLAN of all ports is set to VLAN1. The following entries are displayed on this screen: VLAN Table Select： Select the desired - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 87
Figure 7-4 Create or Modify 802.1Q VLAN The following entries are displayed on this screen: VLAN Info VLAN ID: Name: Untagged port: UNIT: Tagged port: Enter the ID number of VLAN. Displays the user-defined name of VLAN. Displays the untagged port which is ACCESS, TRUNK or GENERAL. Select the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 88
of the desired member in the stack. Select: Select the desired port for configuration. It is multi-optional. Port: Displays the port number. Link Type: PVID: Select the Link Type from the pull-down list for the port. • ACCESS: The ACCESS port can be added in a single VLAN, and the egress rule - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 89
Allows you to remove the port from the current VLAN. Configuration Procedure: Step Operation Description 1 Set the link type for Required. On the VLAN→802.1Q VLAN→Port Config page, set port. the link type for the port basing on its connected device. 2 Create VLAN. Required. On the VLAN→802 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 90
Port 3 and Port 4. Configure switch B Step 1 2 3 Operation Description Configure the Required. On VLAN→802.1Q VLAN→Port Config page, configure Link Type of the the link type of Port 7, Port 6 and Port 8 as ACCESS, TRUNK and ports ACCESS respectively. Create VLAN10 Required. On VLAN→802.1Q - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 91
The packet in MAC VLAN is processed in the following way: 1. When receiving an untagged packet, the switch matches the packet with the current MAC VLAN. If the packet is matched, the switch will add a corresponding MAC VLAN tag to it. If no MAC VLAN is matched, the switch will add a tag to the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 92
ports are disabled for MAC VLAN function by default. Configuration Procedure: Step Operation Description 1 Set the link type for Required. On the VLAN→802.1Q VLAN→Port Config page, set port. the link type for the port basing on its connected device. 2 Create VLAN. Required. On the VLAN→802 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 93
Configuration Procedure Configure switch A Step Operation Description 1 Configure the Required. On VLAN→802.1Q VLAN→Port Config page, configure the Link Type of the link type of Port 11 and Port 12 as GENERAL and TRUNK respectively. ports 2 Create VLAN10 Required. On VLAN→802.1Q VLAN→VLAN - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 94
802.1Q VLAN→Port Config page, configure the Link Type of the link type of Port 2 and Port 3 as GENERAL, and configure the link type ports of Port 4 and Port 5 manage the network clients basing on their actual applications and services effectively. This switch can classify VLANs basing on the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 95
Protocol Type IPX IS-IS LACP 802.1X Type value 0x8137 0x8000 0x8809 0x888E Table 7-2 Protocol types in common use The packet in Protocol VLAN is processed in the following way: 1. When receiving an untagged packet, the switch matches the packet with the current Protocol VLAN. If the packet is - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 96
7.5.2 Protocol Group On this page, you can configure the Protocol Group. Choose the menu VLAN→Protocol VLAN→Protocol Group to load the following page. Figure 7-10 Enable Protocol VLAN for Port Protocol Group Config Protocol Name: VLAN ID: Select the defined protocol template. Enter the ID - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 97
the Protocol Name. Protocol Type: Displays the Protocol type. Note: The Protocol Template bound to VLAN cannot be deleted. Configuration Procedure: Step Operation 1 Set the link type for port. Description Required. On the VLAN→802.1Q VLAN→Port Config page, set the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 98
Step Operation 2 Create VLAN. 3 Create Protocol Template. 4 Create Protocol VLAN. 5 Modify/View VLAN. 6 Delete VLAN. Description Required. On the VLAN→802.1Q VLAN→VLAN Config page, click the Create button to create a VLAN. Enter the VLAN ID and the description for the VLAN. Meanwhile, specify its - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 99
switch B Step Operation Description 1 Configure the Required. On VLAN→802.1Q VLAN→Port Config page, configure the Link Type of the link type of Port 4 and Port 5 as ACCESS, and configure the link type of ports Port 3 as GENERAL. 2 Create VLAN10 Required. On VLAN→802.1Q VLAN→VLAN Config page - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 100
of public networks at the network access terminal of the Internet Service Provider. And these packets will be transmitted with double-tag across work normally without changing the current configurations. In addition, the switch supports the feature to adjust the TPID Values of VLAN VPN Packets. TPID - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 101
pages. 7.7.1 VPN Config This page allows you to enable the VPN function, adjust the global TPID for VLAN-VPN packets and enable the VPN up-link port. When VPN mode is enabled, the switch will add a tag to the received tagged packet basing on the VLAN mapping entries. Choose the menu - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 102
VPN Port Enable Figure 7-13 Enable Port for VLAN Mapping UNIT: Select the unit ID of the desired member in the stack. Select your desired port for VLAN Mapping function. All the ports are disabled for VLAN Mapping function by default. 7.7.3 VLAN Mapping VLAN Mapping function allows the VLAN - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 103
ID number of the Customer VLAN. C VLAN refers to the VLAN to which the packet received by switch belongs. Enter the ID number of the Service Provider VLAN. Give a name to the VLAN Mapping entry or leave it blank. VLAN Mapping List Select: Operation: Select the desired entry to delete the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 104
to set the port connected to the backbone networks to be up-link port. 4 Create VLAN Mapping Required. On the VLAN→VLAN VPN→VLAN Mapping entries. page, configure the VLAN Mapping entries basing on the actual application. 5 Create SP (Service Optional. On the VLAN→802.1Q VLAN page, create the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 105
• Join Message: When a GARP entity expects other switches to register certain attribute information of its own, it sends out a Join message. And when receiving the Join message from the other entity or configuring some attributes statically, the device also sends out a Join message in order to be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 106
In this switch, only the port with TRUNK link type can be set as the GVRP application entity to maintain the VLAN registration information. GVRP has the following three port registration modes: Normal, Fixed, - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 107
Timer >= 10* Leave Timer, Leave Timer >= 2*Join Timer. Configuration Procedure: Step Operation Description 1 Set the link type for port. Required. On the VLAN→802.1Q VLAN→Port Config page, set the link type of the port to be TRUNK. 2 Enable GVRP function. Required. On the VLAN→GVRP page - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 108
providers usually require that each individual user is Layer-2 separated. VLAN feature can solve this problem. However, as stipulated by IEEE 802.1Q protocol, a device can only support up to 4094 VLANs. If a service provider assigns one VLAN per user, the VLANs will be far from enough; as a result - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 109
4. A Primary VLAN can be associated with multi-Secondary VLANs to create multi-Private VLANs. Private VLAN Implementation To hide Secondary VLANs from uplink devices and save VLAN resources, Private VLAN containing one Primary VLAN and one Secondary VLAN requires the following characteristics: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 110
Search Option Search Option: Select a Search Option from the pull-down list and click the Search button to find your desired entry in Private VLAN. All: Enter either the Primary VLAN ID or Secondary VLAN ID of the desired Private VLAN. Primary VLAN ID: Enter the Primary VLAN ID number of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 111
The following entries are displayed on this screen: Port Config Port selected: Select the desired port for configuration. You can input one or select from the port table down the blank. Port Type: Select the Port Type from the pull-down list for the port. Primary VLAN: Specify the Primary - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 112
Network Diagram Configuration Procedure Configure Switch C Step 1 Operation Create VLAN6 Description Required. On VLAN→802.1Q VLAN→VLAN Config page, create a VLAN with its VLAN ID as 6, owning Port 1/0/1. Configure switch A Step 1 2 3 Operation Description Create Private Required. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 113
Configure switch B Step 1 2 3 Operation Description Create Private Required. On the VLAN→Private VLAN→PVLAN Config page, VLANs. enter the Primary VLAN 6 and Secondary VLAN 5 and 8, select one type of secondary VLAN and then click the Create button. Add Promiscuous port to Private VLANs - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 114
to IEEE 802.1D standard, is to disbranch a ring network in the Data Link layer in a local network. Devices running STP discover loops in the network BPDUs between each other to exchange information and all the switches supporting STP receive and process the received BPDUs. BPDUs carry the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 115
STP Timers Hello Time: Hello Time ranges from 1 to 10 seconds. It specifies the interval to send BPDU packets. It is used to test the links. Max Age: Max. Age ranges from 6 to 40 seconds. It specifies the maximum time the switch can wait without receiving a BPDU before attempting to reconfigure - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 116
Comparing BPDUs Each switch sends out configuration BPDUs and receives a configuration BPDU on one of its ports from another switch. The following table shows the comparing operations. Step Operation 1 If the priority of the BPDU received on the port is lower than that of the BPDU if of the port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 117
rapidly: The designated port is an edge port or connecting to a point-to-point link. If the designated port is an edge port, it can directly transit to forwarding state; if the designated port is connecting to a point-to-point link, it can transit to forwarding state after getting response from the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 118
Figure 8-2 Basic MSTP diagram MSTP MSTP divides a network into several MST regions. The CST is generated between these MST regions, and multiple spanning trees can be generated in each MST region. Each spanning trees is called an instance. As well as STP, MSTP uses BPDUs to generate spanning tree. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 119
Figure 8-3 Port roles The Spanning Tree module is mainly for spanning tree configuration of the switch, including four submenus: STP Config, Port Config, MSTP Instance and STP Security. 8.1 STP Config The STP Config function, for global configuration of spanning trees on the switch, can be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 120
1 to 10 in seconds to specify the interval to send BPDU packets. It is used to test the links. 2*(Hello Time + 1) ≤ Max Age. The default value is 2 seconds. Max Age: Enter a network congestions to be falsely regarded as link problems. A too large max age parameter result in the switches unable to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 121
turn handicaps spanning trees being regenerated in time and makes the network less adaptive. The default value is recommended. 4. If the TxHold Count parameter is too large, the number of MSTP packets being sent in each hello time may be increased with occupying too much network resources. The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 122
The following entries are displayed on this screen: Port Config UNIT: Select: Port: Status: Priority: Ext-Path Cost: Int-Path Cost: Edge Port: P2P Link: MCheck: Port Mode: Select the unit ID of the desired member in the stack. Select the desired port for STP configuration. It is multi-optional - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 123
, the spanning tree instances owning this port are configured as point-to-point links. If the physical link of a port is not a point-to-point link and you forcibly configure the link as a point-to-point link, temporary loops may be incurred. 8.3 MSTP Instance MSTP combines VLANs and spanning tree - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 124
Choose the menu Spanning Tree→MSTP Instance→Region Config to load the following page. Figure 8-7 Region Config The following entries are displayed on this screen: Region Config Region Name: Revision: Create a name for MST region identification using up to 32 characters. Enter the revision - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 125
VLAN ID: Instance Config Select: Instance ID: Status: Priority: VLAN ID: Show All: Clear All: Enter the desired VLAN ID. Click 'Add' button, the new VLAN ID will be added to the corresponding instance ID and the previous VLAN ID won't be replaced. Click 'Delete' button, the VLAN ID will be delete - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 126
Choose the menu Spanning Tree→MSTP Instance→Instance Port Config to load the following page. Figure 8-9 Instance Port Config The following entries are displayed on this screen: Instance ID Select Instance ID: Select the desired instance ID for its port configuration. Instance Port Config - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 127
Protect In a stable network, a switch maintains the states of ports by receiving and processing BPDU packets from the upstream switch. However, when link congestions or link failures occurred to the network, a downstream switch does not receive BPDU packets for certain period, which results in 115 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 128
root bridge to lose its position and network topology jitter to occur. In this case, flows that should travel along high-speed links may lead to low-speed links, and network congestion may occur. To avoid this, MSTP provides root protect function. Ports with this function enabled can only be set - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 129
-optional. Displays the port number of the switch. Loop Protect is to prevent the loops in the network brought by recalculating STP because of link failures and network congestions. Root Protect is to prevent wrong network topology change caused by the role change of the current legal root bridge - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 130
to 10 to specify the TC Protect Cycle. The default value is 5. 8.5 Application Example for STP Function Network Requirements Switch A, B, C, D and E all support MSTP function. A is the central switch. B and C are switches in the convergence layer. D, E and F are switches in the access layer - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 131
1Q VLAN page, configure the link type of the related ports as Trunk, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the Config the revision of MST region page, configure the region as TP-LINK and keep the default revision setting. 4 Configure VLAN-to-Instance On - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 132
Config the revision of MST region page, configure the region as TP-LINK and keep the default revision setting. 4 Configure VLAN-to-Instance On VLAN page, configure the link type of the related ports as Trunk, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 133
VLAN page, configure the link type of the related ports as Trunk, and add the ports to VLAN101-VLAN106. The detailed instructions can be found in the Config the revision of MST region page, configure the region as TP-LINK and keep the default revision setting. 4 Configure VLAN-to-Instance On - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 134
For Instance 2 (VLAN 102, 104 and 106), the blue paths in the following figure are connected links; the gray paths are the blocked links. Suggestion for Configuration Enable TC Protect function for all the ports of switches. Enable Root Protect function for all the ports of root bridges. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 135
users requiring this information is not certain, unicast and broadcast deliver a low efficiency. Multicast solves this problem. It can deliver a high efficiency to send data in the point to multi-point service, which can save large bandwidth and reduce the network load. In multicast, the packets are - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 136
Multicast Address 1. Multicast IP Address: As specified by IANA (Internet Assigned Numbers Authority), Class D IP addresses are used as destination addresses of multicast packets. The multicast IP addresses range from 224.0.0.0~239.255.255.255. The following table displays the range and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 137
IGMP Snooping In the network, the hosts apply to the near Router for joining (leaving) a multicast group by sending IGMP (Internet Group Management Protocol) messages. When the up-stream device forwards down the multicast data, the switch is responsible for sending them to the hosts. IGMP Snooping - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 138
3. IGMP Leave Message The host, running IGMPv1, does not send IGMP leave message when leaving a multicast group, as a result, the switch cannot get the leave information of the host momentarily. However, after leaving the multicast group, the host does not send IGMP report message any more, so the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 139
Choose the menu Multicast→IGMP Snooping→Snooping Config to load the following page. Figure 9-4 Basic Config The following entries are displayed on this screen: Global Config IGMP Snooping: Unknown Multicast: Select Enable/Disable IGMP Snooping function globally on the switch. Select the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 140
IGMP leave messages. Displays the LAG number which the port belongs to. Note: 1. Fast Leave on the port is effective only when the host supports IGMPv2 or IGMPv3. 2. When both Fast Leave feature and Unknown Multicast Discard feature are enabled, the leaving of a user connected to a port owning - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 141
9.1.3 VLAN Config Multicast groups established by IGMP Snooping are based on VLANs. On this page you can configure different IGMP parameters for different VLANs. Choose the menu Multicast→IGMP Snooping→VLAN Config to load the following page. Figure 9-6 VLAN Config The following entries are - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 142
the multicast router will duplicate this multicast information and deliver each VLAN owning a receiver one copy. This mode wastes a lot of bandwidth. The problem above can be solved by configuring a multicast VLAN. By adding switch ports to the multicast VLAN and enabling IGMP Snooping, you can make - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 143
Choose the menu Multicast→IGMP Snooping→Multicast VLAN to load the following page. Figure 9-7 Multicast VLAN The following entries are displayed on this screen: Multicast VLAN Multicast VLAN: Select Enable/Disable Multicast VLAN feature. VLAN ID: Enter the VLAN ID of the multicast VLAN. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 144
VLAN→802.1Q VLAN page. Configure the link type of the member ports as GENERAL. Configure the link type of the router ports as TRUNK or querier to send IGMP queries and manage the multicast table. But IGMP is not supported by the devices in Layer 2 network. IGMP Snooping Querier can act as an - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 145
Choose the menu Multicast→IGMP Snooping→Querier Config to load the following page. Figure 9-8 Packet Statistics The following entries are displayed on this screen: IGMP Snooping Querier Config VLAN ID: Query Interval: Enter the ID of the VLAN that enables IGMP Snooping Querier. Enter the time - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 146
VLAN ID: Query Interval: Max Response Time: General Query Source IP: Last Listener Query Interval: Last Listener Query Count: Special Query Source IP: Displays the ID of the VLAN that enables IGMP Snooping Querier. Displays the Query Interval of the IGMP Snooping Querier. Displays the maximal time - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 147
ports On VLAN→802.1Q VLAN function pages. For port 3, configure its link type as GENERAL and its egress rule as TAG, and add it to VLAN3, VLAN4 and VLAN5. as UNTAG, and add it to VLAN3 and VLAN 4. For port 5, configure its link type as GENERAL and its egress rule as UNTAG, and add it to VLAN3 and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 148
The following entries are displayed on this screen: Search Option Search Option: Select the rules for displaying multicast IP table to find the desired entries quickly. All: Displays all multicast IP entries. Multicast IP: Enter the multicast IP address the desired entry must carry. VLAN - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 149
Choose the menu Multicast→Multicast IP→Static Multicast IP to load the following page. Figure9-10 Static Multicast IP Table The following entries are displayed on this screen: Create Static Multicast Multicast IP: Enter static multicast IP address. VLAN ID: Enter the VLAN ID of the multicast - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 150
Static Multicast IP Table Multicast IP: VLAN ID: Forward Port: Displays the multicast IP. Displays the VLAN ID of the multicast group. Displays the forward port of the multicast group. 9.4 Multicast Filter When IGMP Snooping is enabled, you can specified the multicast IP-range the ports can - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 151
Mode: The attributes of the profile. Permit: Only permit the IP address within the IP range and deny others. Deny: Only deny the IP address within the IP range and permit others. Search Option All: Displays all the profile entries. Profile ID: Enter the profile ID the desired entry must - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 152
Mode: ADD IP-range: Start IP: End IP: IP-range Table: Select: Index: Start IP: End IP: Configure the filter mode of the profile. Enter the start IP address of the IP-range to the selected profile. Enter the end IP address of the IP-range to the selected profile. Select to delete the IP-range - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 153
The following entries are displayed on this screen: Profile and Max Group Binding UNIT: Select the unit ID of the desired member in the stack. Select: Select the desired entry for configuration. Port: It is multi-optional. Displays the port number. Profile ID: The existing Profile ID - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 154
Choose the menu Multicast→Packet Statistics to load the following page. Figure 9-14 Packet Statistics The following entries are displayed on this screen: Auto Refresh Auto Refresh: Select Enable/Disable auto refresh feature. Refresh Period: Enter the time from 3 to 300 in seconds to specify - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 155
This chapter describes how to configure the IPv4 unicast routing on the T2700G-28TQ. 10.1 Interface Interface is a virtual interface in Layer 3 mode Specify IP Address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. IP Address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 156
Select the interfaces to modify or delete. Displays the ID of the interface. Display IP address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. Displays the IP address of the interface. Displays the subnet mask of the interface - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 157
IP address allocation mode. None: without ip. Static: setup manually. DHCP: allocated through DHCP. BOOTP: allocated through BOOTP. Displays is set. Displays the line protocol status, which is up if any up-link port is connected to the interface. Displays the Admin status. Choose 'Disable' - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 158
of the route. Interface name: Displays the description of the egress interface. 10.3 Static Routing Static routes are special routes manually configured by the administrator and cannot change automatically with the network topology accordingly. Hence, static routes are commonly used in a relative - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 159
The following entries are displayed on this screen: Static Routing Config Destination: Subnet Mask: Next Hop: Distance: Specify the destination IP address of the packets. Specify the subnet mask of the destination IP address. Enter the IP address to which the packet should be sent next. Enter - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 160
Configuration Procedure Configure Switch A Steps Operation Note 1 Add interface VLAN 10 Required. On page Routing→Interface→Interface Config, add interface VLAN 10 with the mode as static, the IP address as 192.168.0.1, the mask as 255.255.255.0 and the interface name as VLAN10. 2 Add - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 161
is always designed to supply hosts with the configuration parameters in three policies. 1) Manual Assignment: For the specific DHCP clients (e.g., web server), the configuration parameters are manually specified by the administrator and are assigned to these clients via a DHCP server. 2) Automatic - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 162
fixed format section of the message and appending tagged data items in the variable length option area. The process is shown as follows. Figure 10-7 The Process of DHCP 1) DHCP discover: the client broadcasts messages on the physical subnet to discover available DHCP servers in the LAN. Network - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 163
The names for the fields given in the figure will be used throughout this document to refer to the fields in DHCP messages. Figure 10-8 The Format of DHCP Message 1) op：Message type, '1' = BOOT-REQUEST, '2' = BOOT-REPLY. 2) htype：Hardware address type, '1' for ethernet. 3) hlen：Hardware address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 164
DNS option is option 6, and it assigns the IP address of domain name server to the client which allows the client can use the web service in the internet. 4) option 12：Host Name option. The option12 is used to specify the name of the client, which may be requested by the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 165
IP parameter for every device manually. 2) There are not enough network resources to assign to every device exclusively. 3) Only a little device need static IP address to connect the network. Details of DHCP Server on T2700G-28TQ A typical application of T2700G-28TQ working at DHCP Server function - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 166
the server will choose the IP which has been bound to the client manually. 2) Then, the server will assign the IP which has been assigned which has not been assigned. Tips for Configure DHCP Server Function on T2700G-28TQ 1) Configure the Excluded IP address which cannot be assigned by the switch - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 167
Choose the menu Routing→DHCP Server→DHCP Server to load the following page. Figure10-11 DHCP Server The following entries are displayed on this screen: Global Config DHCP Server: Enable/Disable the switch as a DHCP server. Ping Time Config Ping Packets: Ping Timeout: The number of packets - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 168
10.4.2 Pool Setting This page shows you how to configure the IP pool in which the IP address can be assigned to the clients in the network. Choose the menu Routing→DHCP Server→DHCP Server Pool to load the following page. Figure 10-12 Pool Setting The following entries are displayed on this screen: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 169
of the corresponding IP Pool. Edit: Click to modify the settings of the Pool. Detail: Click to get the information of the Pool. 10.4.3 Manual Binding In this page, you can specify the IP address for specific clients, and then the switch will supply these specified parameters to them only - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 170
Choose the menu Routing→DHCP Server→Binding Table to load the following page. Figure 10-14 DHCP Server Binding Table DHCP Server Binding Table ID: IP Address: Client ID / Hardware Address: Type: Lease Time Left(s): Displays the ID of the client. Displays the IP address that the Switch has - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 171
Create VLAN. 3 Create VLAN interface. 4 Enable DHCP Server. 5 Configure Excluded IP Address. 6 Configure IP Pool. 7 Bind IP Manually Description Required. On the VLAN→802.1Q VLAN→Port Config page, set the link type for the port basing on its connected device. Required. On the VLAN→802.1Q VLAN→VLAN - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 172
with dynamic IP addresses obtained from the DHCP server. DNS Server is in VLAN 1and its IP address is 160.20.30.2. Network Diagram Use T2700G-28TQ as the central switch and enable its DHCP server function to allocate IP addresses to clients in the network. Enable the DHCP relay function on - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 173
→Manual 82 support. configure problem. Via a relay agent, DHCP clients request an IP address from the DHCP server in another subnet, and DHCP clients in different subnets can share the same DHCP server in the internet. Details of DHCP Relay on T2700G-28TQ A typical application of T2700G-28TQ - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 174
Figure 10-16 DHCP Relay Application To allow all clients in different VLAN request IP address from one server successfully, the DHCP Relay function can transmit the DHCP packet between clients and server in different VLANs, and all clients in different VLANs can share one DHCP Server. When - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 175
82 is defined, at least one sub-option should be defined. This Switch supports two sub-options, Circuit ID and Remote ID. Since there is no universal MAC address information of the client. You can define the sub-options manually. Figure10-18 Option 82 Note: The option 82 parameters configured on the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 176
following entries are displayed on this screen: Option 82 configuration Configure the Option 82 which cannot be assigned by the switch. Option 82 Support: Existed Option 82 Field: Customization: Circuit ID: Remote ID: Enable or disable the Option 82 feature. Select the operation for the existed - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 177
, and the DHCP Relay function will be enabled at the same time. 2 Configure Option 82 Optional. On the Routing→DHCP Relay→Global Config support. page, configure the Option 82 parameters. 3 Configure DHCP Server. Required. On the Routing→DHCP Relay→DHCP Server page, specify the DHCP Server with - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 178
Within the same network segment, hosts connecting with different VLAN interfaces can communicate with each other through Layer 3 forwarding by using proxy ARP function. The following example simply illustrates how proxy ARP works. Figure 10-21 ARP Application As shown in the figure above, PC A and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 179
Proxy ARP Information Select: IP Address: Select the desired item for configuration. It is multi-optional. Displays the interface's IP address. Subnet Mask: Displays the interface's subnet mask. Interface: Displays the interface. Interface Name: Displays the name of the interface. Status: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 180
10.7 ARP This page displays the ARP table information. Choose the menu Routing→ARP→ARP Table to load the following page. Figure 10-23 ARP Table The following entries are displayed on this screen: ARP Table Interface: IP Address: Displays the network interface of arp entry. Enter the DHCP server - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 181
by adopting an aging mechanism to keep only valid routes. RIP Version RIP has two versions, RIPv1 and RIPv2. RIPv1, a classful routing protocol, supports message advertisement via broadcast only. RIPv1 protocol messages do not carry mask information, which means it can only recognize routing 169 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 182
of natural networks such as Class A, B, and C. That is why RIPv1 does not support discontinuous subnets. RIPv2 is a classless routing protocol. Compared with RIPv1, RIPv2 has the following advantages. Supporting route tags. Route tags are used in routing policies to flexibly control routes - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 183
Figure 10-25 RIPv2 Message Format The detailed explanations of each field are stated as following: Version: Version of RIP. For RIPv2 the value is 0x02. Route Tag: Route Tag. IP Address: Destination IP address. It can be a natural network address, subnet address or host address. Subnet Mask: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 184
Choose the menu Routing→RIP→Basic Config to load the following page. Figure 10-27 RIP Basic Config The following entries are displayed on this screen: RIP Enable RIP Protocol: Choose to enable or disable the RIP function. By default is disable. Global Config RIP Version: Choose the global - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 185
RIP Distance: Auto Summary: Default Metric: Set the RIP router distance. If you select enable groups of adjacent routes will be summarized into single entries, in order to reduce the total number of entries The default is disable. Set the default metric for the redistributed routes. The valid - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 186
prompted to enter a key. If you choose 'simple' or 'MD5' the key may be up to 16 octets long. Split horizon is a technique for avoiding problems caused by including routes in updates sent to the router from which the route was originally learned. If you enable split horizon, a route will not - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 187
Choose the menu Routing→RIP→RIP Database to load the following page. Figure 10-29 RIP Database The following entries are displayed on this screen: RIP Route Table Destination Network: Next Hop: Metric: Interface Name: Timer(s): The destination IP address and subnet mask. The Next hop IP address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 188
is defined specifically in RFC2328 and will be introduced generally in this Guide. Introduction 1. OSPF Features OSPF protocol is a popular routing protocol interaction and routing calculation. OSPF supports using the reserved multicast address in the link of specific network type, to reduce - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 189
would be an effective solution. The routers only need to maintain the same link state database in their own area, and then the ABR would collect the its router ID - a 32-bit unsigned integer, which could be manually assigned by the administrator or automatically selected by the router itself. In - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 190
reserved 224.0.0.5, while the other routers forward the link state update and acknowledgement data to OSPF DR with interfaces defaults to Broadcast, and it also supports to be configured as P2P type that can recommended to manually configure the network type of interfaces. In the following guide, we - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 191
interfaces in the same network segment would discover neighbors by sending Hello packets. If the interfaces are connected on the same public data link, and the area IDs, authentication information, network subnet, Hello data interval and neighbor router dead-interval are all matched, the two routers - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 192
table. 8) Any new routers joining the network will accept the current DR/BDR and synchronize the link state database with them until a complete adjacency relation is established. During synchronizing the link state database, DR/BDR will obtain LSA from the newly-joint routers and then flood this LSA - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 193
Figure 10-32 Steps to Establish a Complete Adjacency Relation 2. Flooding As Figure 10-32 shows, two random routers will synchronize the link state database via LSA request, LSA update and LSA acknowledgement packets. But in the actual module of router network, how do the routers flood the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 194
Figure 10-33 Flooding of the LSA 1) DROthers multicast the LSA update of its directly-connected network to DR and BDR. 2) After receiving the LSA update, DR floods it to all the adjacent routers. 3) After receiving the LSA update from DR, the adjacent routers flood it to the other OSPF interfaces in - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 195
in interface belongs to AS via ABR and forward the communication data for all the backbone area areas. ABR Connect one or Maintain independent link state databases for different more areas to the areas, and deliver the topology information of each area to backbone area the other areas via - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 196
, while the OSPF routers between them transmit these packets as regular IP packets. In general, configuring a virtual link is a temporary means to fix the problems of network topology, which usually would to certain degree complicate the network. Therefore, when networking in reality, a virtual - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 197
learn about the routing information from other areas, the size of the routing table of the routers in the stub area as well as the number of the routing message transferred would be reduced greatly. NSSA (Not-So-Stubby-Area) has a lot in common with stub area, but is not completely the same. NSSA - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 198
themselves as the root node. The OSPF protocol routing calculation is simply presented as below. 1) Each OSPF router would generate LSA according to its own link state or routing information, and then send it through the update packets to the other OSPF routers in the network. LSA is to describe the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 199
OSPF packets, as shown in the table below. Type Code Packet Name 1 Hello Packet 2 Database Description Packet 3 Link State Request Packet 4 Link State Update Packet 5 Link State Acknowledgement Packet Table 10-3 OSPF Packet Type 3) Router ID: ID of the router sending this packet. 4) Area - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 200
Type Code Authentication Name Features 0 Non-Authentication The 64-bit authentication information fields behind are all 0. 1 Plain-text Authentication The 64-bit authentication information behind is the password to authenticate. 2 MD5 Ciphertext Authentication The Key ID, authentication - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 201
of the largest IP packet that can be sent out by the routing interface of the advertising router. 2) I: The Initial bit. During the synchronization of link state database between two routers, it may require multiple DD packets to be forwarded, among which the first DD packet will set its initial bit - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 202
an LSA it doesn't have in the DD packet forwarded, it could send a LSR packet to request for a complete LSA. Figure 10-42 LSR Packet 1) Link State Type: The type of LSA. There are 11 types of LSA in total: Router LSA, Network LSA, Network Summarization LSA, ASBR Summarization LSA, and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 203
router doesn't receive an LSA update, it will delete this LSA. 2) Type: The type of LSA. Table 10-5 enumerates several common features of LSA. 3) Link State ID: It has different meanings for different types of LSA. For details please refer to the RFC documentation. 4) Advertising Router: ID of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 204
spreads in its advertising area. Originates from DR, and describes the link state of all routers in its connected network segment and then diffuses Table 10-5 Types of LSA OSPF Features Supported by the Switches This switch, supporting standard OSPF routing features, is applicable to multiple - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 205
8) Configuration of Stub Area and NSSA. 9) ABR route summarization - to summarize the intra-area routing information with the same prefix with a single route and then distribute it to other areas. 10) ASBR route summarization - to summarize the external routing information with the same prefix with - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 206
default route. The valid value ranges from 1 to 16777214 and the default is 1. Set the OSPF metric type of the default route. Two types are supported: External Type 1 and External Type 2. The default value is External Type 2. 194 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 207
value ranges from 1 to 32 and the default is 5. Configure the Auto Cost to control how OSPF calculates link cost. When Enable selected, unless the link cost is manually configured, the link cost is computed by dividing the reference bandwidth by the interface bandwidth. When Disable selected, the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 208
the desired OSPF process for configuration. The IP address of the network. Wildcard Mask: The wildcard mask of the network. Normal subnet mask is also supported. Area ID: The 32 bit unsigned integer that uniquely identifies the area to which a router interface connects. If you assign an Area ID - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 209
specifies the estimated number of seconds it takes to transmit a link state update packet over the selected interface. The valid value ranges from 1 to 65535 seconds and the default is 1 second. The link cost. OSPF uses this value in computing shortest paths. The valid value - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 210
is Disable (MTU mismatch detection is enabled). To prevent outgoing link-state advertisements (LSAs) flooding out of an OSPF interface. originate a Network LSA for the network node. The Network LSA will contain links to all routers (including the Designated Router itself) attached to the network. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 211
The router establishes adjacencies to all other routers attached to the network. The Backup Designated Router performs slightly different functions during the Flooding Procedure, as compared to the Designated Router. DR Other: The interface is connected to a broadcast on which other routers have - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 212
. Disables OSPF MTU mismatch detection on received database description packets. Default value is Disable (MTU mismatch detection is enabled). To prevent outgoing link-state advertisements (LSAs) flooding out of an OSPF interface. The default is Disable, all outgoing LSAs are flooded out of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 213
default Summary-LSA advertised into the stub area. The valid value ranges from 1 to 16777214. Set whether or not the specified Area will allow Summary Link-State Advertisements (Summary LSAs) to be imported into the area from other areas. It is always Enable in Normal areas. The default is Enable - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 214
the OSPF metric type of the default route. Two types are supported: External Type 1 and External Type 2. The default value is of times that the intra-area route table has been calculated using this area's link-state database. This is typically done using Dijkstra's algorithm. Displays the total - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 215
Choose the menu Routing→OSPF→Area Aggregation to load the following page. Figure10-51 OSPF Area Aggregation The following entries are displayed on this screen: Area Aggregation Config Process ID: Area ID: IP Address: Subnet Mask: Cost: Advertise: Select the desired OSPF process for - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 216
to a common (non-backbone) area. Here the common area is named Transit Area. The router ID of the neighbor portion of a virtual link. Virtual Link Table Select: Interface: Transit Area ID: Select the desired item for configuration. It is multi-optional. Displays the virtual interface. When you - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 217
This specifies the estimated number of seconds it takes to transmit a link state update packet over the selected interface. The valid value ranges from connects either to a physical point-to-point network or to a virtual link. Upon entering this state, the router attempts to form an adjacency with - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 218
Metric: Metric Type: Tag: NSSA Only: Set the metric value to be used as the metric of redistributed routes. The valid value ranges from 1 to 16777214 and the default is equal to Default Metric configured on Basic page. Set the OSPF metric type of redistributed routes. The default is External Type - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 219
The area ID of the OSPF area associated with the interface. Options: Router Priority: An integer value that indicates the optional OSPF capabilities supported by the neighbor. The neighbor's optional OSPF capabilities are also listed in its Hello packets. The router priority of the neighbor. 207 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 220
the flooding procedure. These adjacencies are fully capable of transmitting and receiving all types of OSPF routing protocol packets. Loading: In this state, Link State Request packets are sent to the neighbor asking for the more recent LSAs that have been discovered (but not yet received) in the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 221
routing domain that is being described by the advertisement. The value of the LS ID depends on the advertisement's LS type. The time since the link state advertisement was first originated, in seconds. The sequence number field is an unsigned 32-bit integer. It is used to detect old and duplicate - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 222
Network Diagram Configuration Procedure Configure Switch A Step Operation Description 1 Create routing interfaces and their IP addresses Required. On page Routing→Interface→Interface Config, create routed port 1/0/1 with the IP 1.10.1.1/24 and routed port 1/0/2 with the IP 1.20.1.1/24. 2 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 223
communicating with external network. VRRP is developed to solve the problem mentioned above and designed for LAN with multicast or broadcast backup group through election protocol and thus provides routing service for hosts. Therefore, communication between hosts and -reliable default link can 211 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 224
and network interruption can be avoided after a single link fails without reconfiguration of dynamic routing or router discovery router group according to VRRP priority. The elected master router provides routing service to the hosts in LAN, and sends VRRP messages periodically to publicize - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 225
, Master and Backup. Only in Master state can master router provide service for forwarding request via virtual IP address and forward VRRP packet. When backup group that it functions properly. VRRP timer can be manually configured to customize the intervals that master router sends VRRP packet - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 226
, the backup group cannot recognize uplink breakdown. If this router is in Master state, hosts in the LAN cannot visit external network. This problem can be solved with the help of interface tracking function. When the interface connecting the uplink is down, the router will automatically lower its - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 227
VRRP Configuration Before configuring VRRP, users should plan well to specify the role and function of the devices in backup groups. Every switch in backup group should be configured, which is the precondition to construct a backup group. 10.10.1Basic Config VRRP (Virtual Routing Redundancy - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 228
Virtual IP: Displays the primary Virtual IP associated with the VRRP. Priority: Displays the priority associated with the VRRP. Status: Other: Displays the status associated with the VRRP. Displays more information about the VRRP. Select All: Select all the VRRP items. Delete: Delete the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 229
Running Priority: Advertise Timer: Preempt Delay Timer: Preempt Mode: Authentication Type: Key: Virtual IP: Virtual MAC: Track Information Tracked Interface: Reduced Priority: Back: Refresh: Displays the running priority associated with the VRRP. It ranges from 1 to 255. Displays the advertise - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 230
Description: Priority: Advertise Timer: Preempt Mode: Delay Time: Authentication: Key: Apply: Enter the description associated with the VRRP. Numbers, characters and '_' are the only valid inputs, and the maximal length of the inputs is 8. Enter the Priority associated with the VRRP. It ranges from - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 231
The following entries are displayed on this screen: Add Virtual IP This filed is used to add virtual IP addresses associated with the VRRP. Up to five virtual IP addresses can be added for every VRRP. VRID: Interface: Virtual IP: Select the VRID From the from the pull-down list. Select the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 232
with the VRRP. Displays the VLAN ID associated with the VRRP. Tracked Interface: Displays the Interface ID tracked by the VRRP. Reduced Priority: Link Status: Displays the reduced priority associated with the Interface tracked by the VRRP. Displays the status of the Interface tracked by the VRRP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 233
The following entries are displayed on this screen: Global Statistics Router Checksum Errors: Router Version Errors: Router VRID Errors: Displays the total number of VRRP packets received with an invalid VRRP checksum value. Displays the total number of VRRP packets received with an unknown or - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 234
Packet Length Errors: Clear: Refresh: Displays the number of packets received with a packet length less than the length of the VRRP header. Clear the statistics displayed on the web. Refreshes the web page to show the latest VRRP information. Configuration Procedure： Step Operation Note 1 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 235
Network Diagram Configuration Procedure Configure Switch A Step Operation Note 1 Configure the On page Routing→Interface→Interface Config, create the interface interface and its VLAN2, and configure its IP address as 192.168.1.1 and Subnet Mask IP address. as 255.255.255.0. 2 Add port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 236
G) with * representing any multicast source. If the router supports multiple multicast routing protocols, its multicast routing table will contain , DVMRP, and static multicast routing. The domain mentioned in this guide refers to Autonomous System, which contains a group of routers exchanging - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 237
Multicast Router (or the Layer 3 Multicast Device): The router or switch that supports the layer 3 multicast functions, which contains the multicast routing function and the management function of the multicast group members. The multicast model divides into two - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 238
11.1.2 Mroute Table On this page you can get the desired mroute information through different search options. Choose the menu Multicast Routing→Global Config→Mroute Table to load the following page. Figure 11-2 Mroute Table The following entries are displayed on this screen: Search Option All: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 239
far, there are three IGMP versions: IGMPv1 (defined in RFC 1112) IGMPv2 (defined in RFC 2236) IGMPv3 (defined in RFC 3376) All IGMP versions support ASM model, and IGMPv3 can be directly applied in SSM model. IGMPv1 Work Mechanism IGMPv1 is mainly based on the query-and-response mechanism to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 240
the multicast source arrive at the IGMP router via multicast routing, the multicast forwarding entries (*, G1) and (*, G2) in the IGMP router will guide the multicast packets to the local network and the receiver hosts can receive them. IGMPv1 doesn't specially define the leave group message. When - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 241
2. Leave-Group Mechanism When a host leaves a multicast group in IGMPv2: (1) The host will send leave group message to all the multicast routers in the local network with the multicast address 224.0.0.2. (2) After receiving this leave group message, the querier will send group-specific query message - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 242
data from Source 1 will be transferred to Host B. 2. Function Enhancement of the Query and Report Message (1) Query message carrying source address IGMPv3 supports source-specific query as well as the general query in IGMPv1 and the group-specific query in IGMPv2: The general query message carries - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 243
IS_EX: indicating the mapping relationship between the multicast group and the multicast source list is EXCLUDE, which means the host will only receive the multicast data sending to this multicast group with its source not in the specified source list. TO_IN: indicating the mapping relationship - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 244
Robustness: Query Interval: Query Max Response Time: Startup Query Interval: Startup Query Count: Last Member Query Interval: Last Member Query Count: Querier Timeout: Require Router Alert: Send Router Alert: Specify the robustness of the selected interface, ranging from 1 to 255. The default is 2. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 245
Routed Port: Enter the routed port the desired entry must carry. Interface State Table Interface: IP Address: Querier IP: Querier State: Other Querier Expire Time: Number Of Groups: The interface for which data is to be displayed or configured. The IP address of the selected interface. The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 246
Choose the menu Multicast Routing→IGMP→Static Multicast Group to load the following page. Figure 11-7 Static Multicast Group The following entries are displayed on this screen: IGMP Static Multicast Group Interface: Multicast IP: Source IP: Enter the ID of the interface corresponds to, VLAN ID - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 247
Search Option Search Option: Select the rules for displaying multicast IP table to find the desired entries quickly. All: Displays all static multicast IP entries. Multicast IP: Enter the multicast IP address the desired entry must carry. Interface VLAN: Enter the VLAN ID the desired entry - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 248
The following entries are displayed on this screen: Search Option Search Option: Select the rules for displaying multicast IP table to find the desired entries quickly. All: Displays all multicast IP entries. Multicast IP: Enter the multicast IP address the desired entry must carry. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 249
Choose the menu Multicast Routing→IGMP→Profile Binding to load the following page. Figure 11-9 Profile Binding The following entries are displayed on this screen: Profile and Max Group Binding UNIT: Select: Port: Profile ID: Max Group: Select the unit ID of the desired member in the stack. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 250
Profile: Click the Profile button to create new IGMP profiles. 11.2.6 Packet Statistics On this page you can view multicast packet statistics over each interface of the switch, which facilitates you monitor the IGMP packets in the network. Choose the menu Multicast Routing→IGMP→Packet Statistics - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 251
11.2.7 Application Example for IGMP Network Requirements 1. Receivers of different organizations form the stub networks N1 and N2, and Host A and Host C are the multicast information receivers in N1 and N2 respectively. They receive the Video-On-Demand information through multicast. 2. In the PIM - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 252
routing table consists of a group of (S, G) entries, and (S, G) route represents routing information from source S to group G. If the router supports multiple multicast routing protocols, its multicast routing table will contain multicast routes generated from multiple protocols. The router will - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 253
to each destination network segments, and the static multicast routing table lists specified static RPF routing entries configured by the user manually. Instead of maintaining certain unicast routing independently, the multicast routing protocol relies on the current unicast routing information or - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 254
If the check result shows that the RPF interface is the different from the input interface in the current (S, G) entry, which indicates that the (S, G) entry is invalid and the router will correct the input interface to the packet's actual arriving interface, and forward this packet to all the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 255
Neighbor Discovering In PIM domain, routers periodically sends PIM Hello packets to all the PIM routers with the multicast address 224.0.0.13 to discover PIM neighbors, maintain the PIM neighboring relationships between the routers, thus to build and maintain the SPT. SPT Building The SPT - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 256
Grafting When a new receiver on a previously pruned branch of the tree joins a multicast group, the PIM DM takes the Graft mechanism to actively resume this node's function of forwarding multicast data, thus reducing the time it takes to resume to the forwarding state. The process is illustrated - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 257
(2) The router with the unicast route of the smaller cost to the multicast source; (3) The router with the local interface of the higher IP address. 11.3.1 PIM DM Interface Choose the menu Multicast Routing→PIM DM→PIM DM Interface to load the following page. Figure 11-13 PIM DM Interface The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 258
Choose the menu Multicast Routing→PIM DM→PIM DM neighbor to load the following page. Figure 11-14 PIM DM neighbor The following entries are displayed on this screen: PIM DM Interface Config The L3 interfaces can be configured as PIM DM mode by this page. Search Option: PIM DM Neighbor ALL: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 259
Step Operation 4 Enable IGMP Description Required. Enable IGMP on the routing interfaces which connect to the receivers on Multicast Routing→IGMP→Interface Config page. 11.3.3 Application Example for PIM DM Network Requirements 1. Receivers receive VOD data through multicast. The whole network - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 260
Configuration Procedure Configure Switch A: Step Operation Description 1 Configure interface. Configure IP addresses and subnet masks of VLAN interfaces 1, 2 and 3 on Routing→ Interface→Interface Config page. 2 Configure routing protocol. Configure the routing entries via static route or - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 261
The router connected to the receiver sends the join message to the RP of a certain multicast group. The path along which the join message is sent to the RP hop-by-hop forms a branch of RPT. When the multicast source is sending multicast data to a multicast group, the router directly connected to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 262
the highest priority will be elected as the DR; (2) If the routers have the same priorities, or at least one route in the network doesn't support carrying the DR-election priority in the Hello packet, the routers with the highest IP address will be elected as the DR. When the DR - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 263
DR will send prune message up the RPT toward the group's corresponding RP; after the upstream node receives this prune message, it will delete the link to the downstream node in its interface list and 251 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 264
check if there are other receivers of this group. If there are no more receivers, the prune message will be sent upstream. Multicast Source Registering The multicast source register is to inform its presence to the RP. As shown in Figure 11-18, the process of the multicast source registering to RP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 265
words, the routers contained by the BSR domains are different from each other. In multicast address, each BSR administrative domain provides services for specific multicast groups. These multicast group addresses usually have no intersection with each other, but they may also have crossings and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 266
The multicast messages (such as C-RP Hello Message and BSR BootStrap Message) of each BSR administrative domain can't pass through the domain border. 11.4.1 PIM SM Interface Choose the menu Multicast Routing→PIM SM→PIM SM Interface to load the following page. Figure11-20 PIM SM Interface The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 267
Choose the menu Multicast Routing→PIM SM→PIM SM Neighbor to load the following page. Figure 11-21 PIM SM neighbor The following entries are displayed on this screen: Search Option Search Option: ALL: Displays all entries. Interface: Select Interface and enter the interface ID of your - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 268
Choose the menu Multicast Routing→PIM SM→BSR to load the following page. Figure 11-22 BSR The following entries are displayed on this screen: PIM SM Candidate BSR Config Configure the candidate BSR of current device. Interface: Hash Mask Length: Priority: Select the interface on this switch - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 269
down the shared tree to the multicast group members. You must have an RP if the interface is in sparse-dense mode, and you can manually assign static RP or config candidate RP to generate the RP. Choose the menu Multicast Routing→PIM SM→RP to load the following page. Figure - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 270
Priority: Specify the priority of the candidate RP. The default value is 192. Interval: Specify the interval of advertisement message of the candidate RP in seconds. The default value is 60. PIM SM Candidate RP Table Interface: Priority: Interval: Next advertisement time: Displays the VLAN - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 271
11.4.6 RP Info Choose the menu Multicast Routing→PIM SM→RP Info to load the following page. Figure 11-25 RP Info The following entries are displayed on this screen: Search Option Search Option: RP Information ALL: Select All to display all entries. Group: Select Group and enter the group - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 272
11.4.7 Application Example for PIM SM Network Requirements 1. Receivers receive VOD data through multicast. The whole network runs PIM SM as multicast routing protocol. 2. Host A and Host D act as multicast receivers. 3. Switch A connects to Switch B in VLAN 2, connects to Switch C in VLAN 3. The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 273
unicast route. But in some circumstances, the multicast network topology differs from that of unicast network or some routers in the network supports unicast only. Then you can configure static multicast routes to offer different transferring paths for multicast and unicast data separately. Notice - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 274
The static multicast routing is an important foundation for the RPF check. In the RPF check process, with static multicast routing configured, the router will choose one as the RPF route after comparing the optimal unicast route and the static multicast route selected respectively from the unicast - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 275
Administrative distance of static mroute. 11.5.3 Application Example for Static Mroute Network Requirements 1. The network runs PIM DM and all the switches in the network support multicast features. 2. Switch A, Switch B and Switch C run OSPF protocol. 263 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 276
3. In normal circumstances, Receiver receives multicast data from Source through the path Switch A-Switch B, which is the same as the unicast route. 4. After the configuration takes effect, Receiver will receive multicast data from Source through the path Switch A-Switch C-Switch B. Network - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 277
Step 3 4 Operation Note Enable IGMP Required. On page Multicast Routing→IGMP→Interface Config, enable the IGMP function on VLAN interface 100. Configure static multicast routing Required. On page Multicast Routing→Static Mroute→Static Mroute Config, configure a static multicast routing entry - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 278
the bandwidth resource distribution so as to provide a network service experience of a better quality. QoS This switch the network is congested, the problem that many packets compete for resources must be solved, usually in the way of queue scheduling. The switch supports four schedule modes: SP, - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 279
Figure 12-3 IP datagram As shown in the figure above, the ToS (Type of Service) in an IP header contains 8 bits. The first three bits indicate IP precedence priority mode. Schedule Mode When the network is congested, the problem that many packets compete for resources must be solved, usually in - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 280
, packets in all the queues are sent in order based on the weight value for each queue and every queue can be assured of a certain service time. The weight value indicates the occupied proportion of the resource. WRR queue overcomes the disadvantage of SP queue that the packets in the queues - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 281
specified scheduling algorithms to implement QoS function. This switch implements three priority modes based on port, on 802.1P and on DSCP, and supports four queue scheduling algorithms. The port priorities are labeled as CoS0, CoS1... CoS7. The DiffServ function can be implemented on Port Priority - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 282
select a schedule mode. 12.1.2 Schedule Mode On this page you can select a schedule mode for the switch. When the network is congested, the problem that many packets compete for resources must be solved, usually in the way of queue scheduling. The switch will control the forwarding sequence of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 283
SP+WRR-Mode: Equ-Mode: Strict-Priority + Weight Round Robin Mode. In this mode, this switch provides two scheduling groups, SP group and WRR group. Queues in SP group and WRR group are scheduled strictly based on strict-priority mode while the queues inside WRR group follow the WRR mode. In SP+WRR - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 284
Priority and CoS-mapping Config Tag-id/CoS-id: Indicates the precedence level defined by IEEE 802.1P and the CoS ID. Queue TC-id: Indicates the priority level of egress queue the packets with tag and CoS-id are mapped to. The priority levels of egress queue are labeled as TC0, TC1, TC2 to TC7. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 285
Choose the menu QoS→DiffServ→DSCP Priority to load the following page. Figure 12-9 DSCP Priority The following entries are displayed on this screen: DSCP Priority Config DSCP Priority: Select Enable or Disable DSCP Priority. Priority Level DSCP: Indicates the priority determined by the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 286
12.2 Bandwidth Control Bandwidth function, allowing you to control the traffic rate and broadcast flow on each port to ensure network in working order, can be implemented on Rate Limit and Storm Control pages. 12.2.1 Rate Limit Rate limit functions to control the ingress/egress traffic rate on each - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 287
Note: 1. If you enable ingress rate limit feature for the storm control-enabled port, storm control feature will be disabled for this port. 2. When egress rate limit feature is enabled for one or more ports, you are suggested to disable the flow control on each port to ensure the switch works - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 288
of the switch by default. The OUI Address entries below can be modified manually. Number OUI Address Vendor 1 00-01-E3-00-00-00 Siemens phone VLAN Mode A voice VLAN can operate in two modes: automatic mode and manual mode. Automatic Mode: In this mode, the switch automatically adds a port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 289
egress rule of the access port in the voice VLAN should be TAG. ACCESS: Not supported. UNTAG voice stream TRUNK: Not supported. GENERAL: Not Supported. ACCESS: Not supported. Manual Mode TAG voice stream TRUNK：Supported. The default VLAN of the port cannot be voice VLAN. And the port should - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 290
source MAC addresses do not match OUI addresses. If security mode is not enabled, the port forwards all the packets. Security Mode Packet Type Processing Mode Enable UNTAG packet When the source MAC address of the packet is the OUI address that can be identified, the packet can be Packet with - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 291
Aging Time: Priority: Specifies the living time of the member port in auto mode after the OUI address is aging out. Select the priority of the port when sending voice data. 12.3.2 Port Config Before the voice VLAN function is enabled, the parameters of the ports in the voice VLAN should be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 292
VLAN by checking whether the port receives voice data or not. Manual: In this mode, you can manually add a port to the voice VLAN or remove a port from LAG number which the port belongs to. 12.3.3 OUI Config The switch supports OUI creation and adds the MAC address of the special voice device to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 293
VLAN Description Required. On VLAN→802.1Q VLAN→Port Config page, configure the link type of ports of the voice device. Required. On VLAN→802.1Q VLAN→ QoS→Voice VLAN→OUI Config page, you can check whether the switch is supporting the OUI template or not. If not, please add the OUI address. Required - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 294
Chapter 13 ACL ACL (Access Control List) is used to filter packets by configuring match rules and process policies of packets in order to control the access of the illegal users to the network. Besides, ACL functions to control traffic flows and save network resources. It provides a flexible and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 295
13.1.2 Time-Range Create On this page you can create time-ranges. Choose the menu ACL→Time-Range→Time-Range Create to load the following page. Figure 13-2 Time-Range Create Note: To successfully configure time-ranges, please firstly specify time-slices and then time-ranges. The following entries - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 296
End Time: Delete: Displays the end time of the time-slice. Click the Delete button to delete the corresponding time-slice. 13.1.3 Holiday Config Holiday mode is applied as a different secured access control policy from the week mode. On this page you can define holidays according to your work - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 297
13.2.1 ACL Summary On this page, you can view the current ACLs configured in the switch. Choose the menu ACL→ACL Config→ACL Summary to load the following page. Figure 13-4 ACL Summary The following entries are displayed on this screen: Search Option Select ACL: Select the ACL you have created - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 298
13.2.3 MAC ACL MAC ACLs analyze and process packets based on a series of match conditions, which can be the source MAC addresses, destination MAC addresses and EtherType carried in the packets. Choose the menu ACL→ACL Config→MAC ACL to load the following page. Figure 13-6 Create MAC Rule The - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 299
Choose the menu ACL→ACL Config→Standard-IP ACL to load the following page. Figure 13-7 Create Standard-IP Rule The following entries are displayed on this screen: Create Standard-IP Rule ACL ID: Select the desired Standard-IP ACL for configuration. Rule ID: Enter the rule ID. Operation: S- - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 300
Choose the menu ACL→ACL Config→Extend-IP ACL to load the following page. Figure 13-8 Create Extend-IP Rule The following entries are displayed on this screen: Create Extend-IP Rule ACL ID: Select the desired Extend-IP ACL for configuration. Rule ID: Enter the rule ID. Operation: S-IP: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 301
IP Pre: Time-Range: Enter the IP Precedence contained in the rule. Select the time-range for the rule to take effect. 13.3 Policy Config A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect. The operations here - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 302
Choose the menu ACL→Policy Config→Policy Create to load the following page. Figure 13-10 Create Policy The following entries are displayed on this screen: Create Policy Policy Name: Enter the name of the policy. 13.3.3 Action Create On this page you can add ACLs and create corresponding - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 303
S-Condition: Redirect: QoS Remark: Select S-Condition to limit the transmission rate of the data packets in the policy. Rate: Specify the forwarding rate of the data packets those match the corresponding ACL. Out of Band: Specify the disposal way of the data packets those are transmitted beyond - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 304
The following entries are displayed on this screen: Search Options Show Mode: Select a show mode appropriate to your needs. Policy Vlan-Bind Table Select: Select the desired entry to delete the corresponding binding policy. Index: Displays the index of the binding policy. Policy Name: - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 305
The following entries are displayed on this screen: Port-Bind Config Policy Name: Select the name of the policy you want to bind. Port: Enter the number of the port you want to bind. Port-Bind Table Index: Displays the index of the binding policy. Policy Name: Displays the name of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 306
Configuration Procedure: Step Operation Description 1 Configure time-range effective Required. On ACL→Time-Range configuration pages, configure the effective time-ranges for ACLs. 2 Configure ACL rules Required. On ACL→ACL Config configuration pages, configure ACL rules to match packets. 3 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 307
Step 2 3 4 Operation Description Configure for requirement 1 On ACL→ACL Config→ACL Create page, create ACL 11. On ACL→ACL Config→MAC ACL page, select ACL 11, create Rule 1, configure the operation as Permit, configure the S-MAC as 00-64-A5-5D-12-C3 and mask as FF-FF-FF-FF-FF-FF, and configure - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 308
access and only allow the Hosts matching the bound entries to access the network. The following three IP-MAC Binding methods are supported by the switch. (1) Manually: You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 309
with the other entries. Note: Among the entries with Critical collision level, the one with the highest Source priority will take effect. 14.1.2 Manual Binding You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the related - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 310
for the entry. Port: Select the number of port connected to the Host. UNIT: Select the unit ID of the desired member in the stack. Manual Binding Table UNIT: Select the unit ID of the desired member in the stack. Select: Select the desired entry to be deleted. It is multi - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 311
delivered to their destinations correctly. IP address is the address of the Host on Network layer. MAC address, the address of the Host on Data link layer, is necessary for the packet to reach the very device. So the destination IP address carried in a packet need to be translated into the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 312
Choose the menu Network Security→IP-MAC Binding→ARP Scanning to load the following page. Figure 14-4 ARP Scanning The following entries are displayed on this screen: Scanning Option Start IP Address: Specify the Start IP Address. End IP Address: Specify the End IP Address. VLAN ID: Enter - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 313
basing on the BOOTP, functions to solve the above mentioned problems. DHCP Working Principle DHCP works via the "Client/Server different DHCP Clients, DHCP Server provides three IP address assigning methods: (1) Manually assign the IP address: Allows the administrator to bind the static IP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 314
the DHCP Client via Option 82 so as to locate the DHCP Client for fulfilling the security control and account management of Client. The Server supported Option 82 also can set the distribution policy of IP addresses and the other parameters according to the Option 82, providing more flexible address - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 315
a sub-option should be defined. This switch supports two sub-options: Circuit ID and Remote ID. in the network, network confusion and security problem will happen. The common cases incurring the It's common that the illegal DHCP server is manually configured by the user by mistake. (2) Hacker - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 316
14.2.1 Global Config Choose the menu Network Security→DHCP Snooping→Global Config to load the following page. Figure 14-8 DHCP Snooping Note: If you want to enable the DHCP Snooping feature for the member port of LAG, please ensure the parameters of all the member ports are the same. The following - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 317
Option 82 Config Option 82 Support: Existed Option 82 field: Customization: Circuit ID: Remote ID: Enable/Disable the Option 82 feature. Select the operation for the Option 82 field of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 318
Trusted Port: MAC Verify: Rate Limit: Decline Protect: LAG: Select Enable/Disable the port to be a Trusted Port. Only the Trusted Port can receive the DHCP packets from DHCP servers. Select Enable/Disable the MAC Verify feature. There are two fields of the DHCP packet containing the MAC address of - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 319
encapsulate this false destination MAC address for packets, which results in a breakdown of the normal communication. Cheating Gateway The attacker sends the wrong IP address-to-MAC address mapping entries of Hosts to the Gateway, which causes that the Gateway cannot communicate with the legal - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 320
Figure 14-12 ARP Attack - Cheating Terminal Hosts As the above figure shown, the attacker sends the fake ARP packets of Host A to Host B, and then Host B will automatically update its ARP table after receiving the ARP packets. When Host B tries to communicate with Host A, it will encapsulate this - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 321
2. Upon receiving the ARP response packets, Host A and Host B updates the ARP table of their own. 3. When Host A communicates with Host B, it will send the packets to the false destination MAC address, i.e. to the attacker, according to the updated ARP table. 4. After receiving the communication - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 322
is unnecessary as the Trusted Port. The specific ports, such as up-linked port, routing port and LAG port, should be set as Trusted Port. the connected Port connected Port number of number of the Host together via Manual Binding, ARP the Host together. Scanning or DHCP Snooping. 2 Enable the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 323
Step Operation Description 4 Enable ARP Detect feature. Required. On the Network Security→ARP Inspection→ARP Detect page, enable the ARP Detect feature. 14.3.2 ARP Defend With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission speed of - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 324
Note: It's not recommended to enable the ARP Defend feature for the LAG member port. 14.3.3 ARP Statistics ARP Statistics feature displays the number of the illegal ARP packets received on each port, which facilitates you to locate the network malfunction and take the related protection measures. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 325
Illegal ARP Packet: Displays the number of the received illegal ARP packets. 14.4 IP Source Guard IP Source Guard is to filter the IP packets based on the IP-MAC Binding entries. Only the packets matched to the IP-MAC Binding rules can be processed, which can enhance the bandwidth utility. Choose - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 326
) Attack is to occupy the network bandwidth maliciously by the network attackers or the evil programs sending a lot of service requests to the Host, which incurs an abnormal service or even breakdown of the network. With DoS Defend function enabled, the switch can analyze the specific fields of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 327
DoS Attack Type Description Ping Flooding The attacker floods the destination system with Ping broadcast storm packets to forbid the system to respond to the legal communication. SYN/SYN-ACK Flooding The attacker uses a fake IP address to send TCP request packets to the Server. Upon receiving - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 328
and security problems. 802.1X support the 802.1X authentication protocol. 2. Authenticator System: The authenticator system is usually an 802.1X-supported network device, such as this TP-LINK trouble, the alternate authentication server can substitute it to provide normal authentication service - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 329
the controlled port according to the instructions (accept or reject) received from an EAPOL-Start packet to the switch, This TP-LINK switch can authenticate supplicant systems in EAP relay support the two fields of EAP: the EAP-message field and the Message-authenticator field. This switch supports - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 330
are accomplished through RADIUS protocol. In this mode, PAP or CHAP is employed between the switch and the RADIUS server. This switch supports the PAP terminating mode. The authentication procedure of PAP is illustrated in the following figure. Figure 14-21 PAP Authentication Procedure In PAP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 331
there are still ports that have not sent any response back, the switch will then add these ports into the Guest VLAN according to their link types. Only when the corresponding user passes the 802.1X authentication, the port will be removed from the Guest VLAN and added to the specified - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 332
Choose the menu Network Security→802.1X→Global Config to load the following page. Figure 14-22 Global Config The following entries are displayed on this screen: Global Config 802.1X: Auth Method: Guest VLAN: Guest VLAN ID: Enable/Disable the 802.1X function. Select the Authentication Method - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 333
Quiet Period: Retry Times: Supplicant Timeout: Server Timeout: Specify a value for Quiet Period. Once the supplicant failed to the 802.1X Authentication, then the switch will not respond to the authentication request from the same supplicant during the Quiet Period. Specify the maximum transfer - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 334
of the port. Displays the LAG to which the port belongs to. 14.6.3 Radius Server RADIUS (Remote Authentication Dial-In User Service) server provides the authentication service for the switch via the stored client information, such as the user name, password, etc, with the purpose to control the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 335
Required. For the client computers, you are required to software. install the 802.1X software TpSupplicant provided on the CD. For the installation guide, please refer to Appendix C: 802.1X Client Software. 3 Configure the 802.1X Required. By default, the global 802.1X function is disabled - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 336
Management Station, SNMP Agent and MIB is illustrated in the following figure. Figure15-1 Relationship among SNMP Network Elements SNMP Versions This switch supports SNMP v3, and is compatible with SNMP v1 and SNMP v2c. The SNMP versions adopted by SNMP Management Station and SNMP Agent should be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 337
SNMP v1: SNMP v1 adopts Community Name authentication. The community name is used to define the relation between SNMP Management Station and SNMP Agent. The SNMP packets failing to pass community name authentication are discarded. The community name can limit access to SNMP Agent from SNMP NMS, - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 338
3. Create SNMP User The User configured in an SNMP Group can manage the switch via the client program on management station. The specified User Name and the Auth/Privacy Password are used for SNMP Management Station to access the SNMP Agent, functioning as the password. SNMP module is used to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 339
Note: The amount of Engine ID characters must be even. 15.1.2 SNMP View The OID (Object Identifier) of the SNMP packets is used to describe the managed objects of the switch, and the MIB (Management Information Base) is the set of the OIDs. The SNMP View is created for the SNMP management station to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 340
15.1.3 SNMP Group On this page, you can configure SNMP Group to control the network access by providing the users in various groups with different management rights via the Read View, Write View and Notify View. Choose the menu SNMP→SNMP Config→SNMP Group to load the following page. Figure15-5 SNMP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 341
Write View: Notify View: Group Table Select: Group Name: Security Model: Security Level: Read View: Write View: Notify View: Operation: Select the View to be the Write View. The management access is writing only and changes can be made to the assigned SNMP View. The View defined both as the Read - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 342
Choose the menu SNMP→SNMP Config→SNMP User to load the following page. Figure15-6 SNMP User The following entries are displayed on this screen: User Config User Name: User Type: Group Name: Security Model: Security Level: Auth Mode: Auth Password: Privacy Mode: Privacy Password: Enter the User - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 343
User Table Select: User Name: User Type: Group Name: Security Model: Security Level: Auth Mode: Privacy Mode: Operation: Select the desired entry to delete the corresponding User. It is multi-optional. Displays the name of the User. Displays the User Type. Displays the Group Name of the User. - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 344
Access: MIB View: Community Table Select: Community Name: Access: MIB View: Operation: Defines the access rights of the community. • read-only: Management right of the Community is restricted to read-only, and changes cannot be made to the corresponding View. • read-write: Management right of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 345
If SNMPv1 or SNMPv2c is employed, please take the following steps: Step Operation Description 1 Enable SNMP function globally. Required. On the SNMP→SNMP Config→Global Config page, enable SNMP function globally. 2 Create SNMP View. Required. On the SNMP→SNMP Config→SNMP View page, create SNMP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 346
Choose the menu SNMP→Notification→Notification Config to load the following page. Figure15-8 Notification Config The following entries are displayed on this screen: Host Config IP Address: User: Security Model: Type: Retry: Timeout: Enter the IP Address of the management Host. Enter the User - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 347
to manage the large-scale network since it reduces the communication traffic between management station and managed agent. RMON Group This switch supports the following four RMON Groups defined on the RMON standard (RFC1757): History Group, Event Group, Statistic Group and Alarm Group. RMON Group - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 348
Choose the menu SNMP→RMON→Statistics to load the following page. Figure 15-9 Statistics The following entries are displayed on this screen: Statistics Config ID: Enter the ID number of statistics entry, ranging from 1 to 65535. Port: Enter or choose the Ethernet interface from which to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 349
the maximum number of buckets desired for the RMON history group of statistics, ranging from 1 to 65535. The default is 50 buckets. 130 buckets supported at most so far. Owner: Enter the name of the device or user that defined the entry. Status: Select Enable/Disable the corresponding sampling - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 350
Choose the menu SNMP→RMON→Event to load the following page. Figure15-11 Event Config The following entries are displayed on this screen: Event Table Select: Select the desired entry for configuration. Index: Displays the index number of the entry. User: Enter the name of the User or the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 351
Choose the menu SNMP→RMON→Alarm to load the following page. Figure 15-12 Alarm Config The following entries are displayed on this screen: Alarm Table Select: Select the desired entry for configuration. Index: Displays the index number of the entry. Variable: Select the alarm variables from - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 352
Interval: Owner: Status: Enter the alarm interval time in seconds, ranging from 10 to 3600. Enter the name of the device or user that defined the entry. Select Enable/Disable the corresponding alarm entry. Note: When alarm variables exceed the Threshold on the same direction continuously for - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 353
and these TLVs are encapsulated in LLDPDU (Link Layer Discovery Protocol Data Unit). The LLDPDU by SNMP applications to simplify troubleshooting, enhance network management, and to both transmit and receive LLDPDUs. Four LLDP admin statuses are supported by each port. Tx&Rx: the port can both - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 354
Disable: the port cannot transmit or receive LLDPDUs. 2) LLDPDU transmission mechanism If the ports are working in TxRx or Tx mode, they will advertise local information by sending LLDPDUs periodically. If there is a change in the local device, the change notification will be advertised. To - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 355
TLV are defined by IEEE 802.3. Note: For detailed introduction of TLV, please refer to IEEE 802.1AB standard. In TP-LINK switch, the following LLDP optional TLVs are supported. Port Description TLV The Port Description TLV allows network management to advertise the IEEE 802 LAN station's port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 356
link initiation or of manual set override action. Max Frame Size TLV The Maximum Frame Size TLV indicates the maximum frame size capability of the implemented MAC and PHY. Power Via MDI TLV The Power Via MDI TLV allows network management to advertise and discover the MDI power support - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 357
Choose the menu LLDP→Basic Config→Global Config to load the following page. Figure 16-1 Global Configuration The following entries are displayed on this screen: Global Config LLDP: Choose to enable/disable LLDP. Parameters Config Transmit Interval: Hold Multiplier: Transmit Delay: Reinit - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 358
Choose the menu LLDP→Basic Config→Port Config to load the following page. Figure 16-2 Port Configuration The following entries are displayed on this screen: Port Config UNIT: Select the unit ID of the desired member in the stack. Select: Select the desired entry for configuration. It is - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 359
16.2.1 Local Info On this page you can see all ports' configuration and system information. Choose the menu LLDP→Device Info→Local Info to load the following page. Figure 16-3 Local Information The following entries are displayed on this screen: Auto Refresh Auto Refresh: Enable/Disable the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 360
Chassis ID Subtype： Chassis ID： Port ID Subtype： Port ID： TTL: Port Description： System Name： System Description： System Capabilities Supported： System Capabilities Enabled： Management Address： Indicates the basis for the chassis ID, and the default subtype is MAC address. Indicates the specific - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 361
neighbor device. System Description: Displays the system description of the neighbor. Neighbor Port: Information： Displays the port number of the neighbor linking to local port. Click to display the detail information of the neighbor. 16.3 Device Statistics You can view the LLDP statistics of - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 362
of error LLDPDUs received by this port. Displays the number of overtime neighbors linking to this port. Displays the number of TLVs dropped by this port. MED Device at the network edge, providing some aspects of IP communications service, based on IEEE 802 LAN technology. Endpoint Devices may be a - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 363
, Software Revision TLV, Serial Number TLV, Manufacturer Name TLV, Model Name TLV and Asset ID TLV. If support for any of the TLVs in the Inventory Management set is implemented, then support for all Inventory Management TLVs shall be implemented. LLDP-MED is configured on the Global Config, Port - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 364
The following entries are displayed on this screen: LLDP-MED Parameters Config Fast Start Count: Device Class: When LLDP-MED fast start mechanism is activated, multiple LLDP-MED frames will be transmitted (the number of frames equals this parameter). The default value is 4. LLDP-MED devices are - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 365
Parameters Configure the Location Identification TLV's content in outgoing LLDPDU of the port. Emergency Number: Civic Address: Emergency number is Emergency Call Service ELIN identifier, which is used during emergency call setup to a traditional CAMA or ISDN trunk-based PSAP. The Civic address is - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 366
should not be used unless it is known that the DHCP client is in close physical proximity to the server or network element. • Country Code: The two-letters ISO 3166 country code in capital ASCII letters, e.g., CN or US. • Language, Province/State, etc.: a part of civic address. 16.4.3 Local Info On - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 367
Application Type: Unknown Policy Flag: VLAN tagged: Media Policy VLAN ID: Media Policy Layer 2 Priority: Media Policy DSCP: Application Type indicates the primary function of the applications defined for the network policy. Displays whether the local device will explicitly advertise the policy - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 368
Unit: Device Type: Application Type: Local Data Format: Power Type: Information: Select the unit ID of the desired member in the stack. Displays the device type of the neighbor. Displays the application type of the neighbor. Application Type indicates the primary function of the applications - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 369
device needs to be respectively configured to meet the application requirements, manpower are needed. The Cluster Management function can solve the above problem. It is mainly used to central manage the scattered devices in the network. A network administrator can manage and maintain the switches in - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 370
and batch Management. 17.1 NDP NDP (Neighbor Discovery Protocol) is used to get the information of the directly connected neighbor devices to support cluster establishing. An NDP-enabled device sends NDP packets regularly to neighbor devices as well as receives NDP packets from neighbor devices. An - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 371
The following entries are displayed on this screen: Neighbor Search Option: Select the information the desired entry should contain and then click the Search button to display the desired entry in the following Neighbor Information table. Neighbor Info Native Port: Displays the port number - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 372
Aging Time: Hello Time: Port Status UNIT: Port: NDP: Send NDP Packets: Receive NDP Packets: Error NDP Packets: Neighbors: LAG: Detail： Clear: Displays the period for the neighbor switch to keep the NDP packets from this switch. Displays the interval to send NDP packets. Select the unit ID of the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 373
the network regularly and you can also enable topology collection manually on the commander switch. After the commander switch sends out in network congestion and the commander switch overload. To avoid the above problem, two time parameters are designed to control the spread speed of NTDP request - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 374
Choose the menu Cluster→NTDP→Device Table to load the following page. Figure17-5 Device Table The following entries are displayed on this screen: Device Table Device Name: Device MAC: Cluster Name: Role: Hops: Neighbor Info: Refresh: Displays the device type collected through NTDP. Displays - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 375
Click the Detail button to view the complete information of this device and its neighbors. Figure17-6 Information of the Current Device 17.2.2 NTDP Summary On this page you can view the NTDP configuration. Choose the menu Cluster→NTDP→NTDP Summary to load the following page. Figure17-7 NTDP Summary - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 376
The following entries are displayed on this screen: Global Config NTDP: NTDP Interval Time: NTDP Hops: NTDP Hop Delay: NTDP Port Delay: Displays the NTDP status (enabled or disabled) of the switch globally. Displays the interval to collect topology information. Displays the hop count the switch - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 377
the port. 17.3 Cluster A commander switch can recognize and add the candidate switch to a cluster automatically based on NDP and NTDP. You can manually add the candidate switch to a cluster. If the candidate switch is successfully added to the cluster, it will get a private IP address assigned by - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 378
Cluster Role: Displays the role the switch plays in the cluster. Cluster Management-vlan VLAN ID: Displays the management VLAN ID of the switch. For a commander switch，the following page is displayed: Figure 17-10 Cluster Summary for Commander Switch The following entries are displayed on - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 379
TFTP Server: Displays the IP address of TFTP server. Member Info Device Name: Displays the description of the member switch. Device MAC: Displays the MAC address of the member switch. IP Address: Displays the IP address of the member switch used in the cluster. Status: Displays the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 380
For an individual switch, the following page is displayed: Figure17-12 Cluster Summary for Individual Switch The following entries are displayed on this screen: Global Config Cluster: Displays the cluster status (enabled or disabled) of the switch. Cluster Role: Displays the role the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 381
The following entries are displayed on this screen: Current Role Role: Displays the role the current switch plays in the cluster. Cluster management-vlan VLAN ID: Enter the cluster management-vlan id. Role Change Individual: Select this option to change the role of the switch to be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 382
Cluster Config Hold Time: Enter the time for the switch to keep the cluster information. Interval Time: Enter the interval to send handshake packets. For a member switch, the following page is displayed. Figure17-15 Cluster Configuration for Member Switch The following entries are - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 383
the switch to be candidate switch. 17.3.3 Member Config When this switch is the commander switch of the cluster, via the commander switch you can manually add a candidate switch to the cluster as well as remove the designated member switch from the cluster. On this page you can configure and manage - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 384
The following entries are displayed on this screen: Create Member Member MAC: Enter the MAC address of the candidate switch. Member Info Select: Device Name: Member MAC: IP Address: Status: Role: Online Time: Hops: Manage: Select the desired entry to manage/delete the corresponding member - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 385
The following entries are displayed on this screen: Graphic Show Collect Topology: Refresh: Manage: Click the Collect Topology button to display the cluster topology. Click the Refresh button to refresh the cluster topology. If the current device is the commander switch in the cluster and the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 386
collect NTDP information. Or On Cluster→Cluster→Cluster Topology page, click the Collect Topology button to manually collect NTDP information. 4 View the detailed Optional. On Cluster→Cluster→Cluster Topology page, information of other double-click the icon of the switch to view - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 387
Configuration Procedure Configure the member switch Step Operation Description 1 Enable NDP function on the On Cluster→NDP→NDP Config page, enable NDP switch and for port 1 function. 2 Enable NTDP function on the On Cluster→NTDP→NTDP Config page, enable switch and for port 1 NTDP - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 388
switch, provides the convenient method to locate and solve the network problem. (1) System Monitor: Monitor the utilization status of the memory Test: Test the connection status of the cable to locate and diagnose the trouble spot of the network. (4) Loopback: Test whether the ports of the switch - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 389
18.1.1 CPU Monitor Choose the menu Maintenance→System Monitor→CPU Monitor to load the following page. UNIT: Figure18-1 CPU Monitor Select the unit ID of the desired member in the stack. Click the Monitor button to enable the switch to monitor and display its CPU utilization rate every four - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 390
every four seconds. 18.2 Log The Log system of switch can record, classify and manage the system information effectively, providing powerful support for network administrator to monitor network operation and diagnose malfunction. The Logs of switch are classified into the following eight levels - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 391
18-1 Log Level The Log function is implemented on the Log Table, Local Log, Remote Log and Backup Log pages. 18.2.1 Log Table The switch supports logs output to two directions, namely, log buffer and log file. The information in log buffer will be lost after the switch is rebooted or - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 392
Time: Module: Severity: Content: Displays the time when the log event occurs. The log can get the correct time after you configure on the System→System Info→System Time Web management page. Displays the module which the log information belongs to. You can select a module from the drop-down list to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 393
page. Figure18-5 Log Host The following entries are displayed on this screen: Log Host Index: Displays the index of the log host. The switch supports 4 log hosts. Host IP: Configure the IP for the log host. UDP Port: Displays the UDP port used for receiving/sending log information. Here - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 394
.3.1 Cable Test Cable Test functions to test the connection status of the cable connected to the switch, which facilitates you to locate and diagnose the trouble spot of the network. 382 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 395
Choose the menu Maintenance→Device Diagnostics→Cable Test to load the following page. Figure18-7 Cable Test The following entries are displayed on this screen: Cable Test Port: Select the port for cable testing. UNIT: Select the unit ID of the desired member in the stack. Pair: Displays the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 396
18.3.2 Loopback Loopback test function, looping the sender and the receiver of the signal, is used to test whether the port of the switch is available as well as to check and analyze the physical connection status of the port to help you locate and solve network malfunctions. Choose the menu - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 397
connectivity of the gateways during its journey from the source to destination of the test data. When malfunctions occur to the network, you can locate trouble spot of the network with this tracert test. 385 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 398
Choose the menu Maintenance→Network Diagnostics→Tracert to load the following page. Figure18-10 Tracert The following entries are displayed on this screen: Tracert Config Destination IP: Enter the IP address of the destination device. Max Hop: Specify the maximum number of the route hops the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 399
Chapter 19 System Maintenance via FTP The firmware can be downloaded to the switch via FTP function. FTP (File Transfer Protocol), a protocol in the application layer, is mainly used to transfer files between the remote server and the local PCs. It is a common protocol used in the IP network for - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 400
1) Select Start→All Programs→Accessories→Communications→Hyper Terminal to open hyper terminal. Figure 19-2 Open Hyper Terminal 2) The Connection Description Window will prompt shown as Figure 19-3. Enter a name into the Name field and click OK. Figure 19-3 Connection Description 388 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 401
3) Select the port to connect in Figure 19-4 and click OK. Figure 19-4 Select the port to connect 4) Configure the port selected in the step above shown as the following Figure 19-5. Configure Bits per second as 38400, Data bits as 8, Parity as None, Stop bits as 1, Flow control as None, and then - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 402
2) Power off and restart the switch. When you are prompted that "Press CTRL-B to enter the bootutil" in the hyper terminal, please press CTRL-B key to enter into bootutil menu shown as Figure 19-6. Figure 19-6 bootutil Menu As the prompt is displayed for a short time, you are suggested not to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 403
For example: Configure the IP address as 10.10.70.22, mask as 255.255.255.0 and gateway as10.10.70.1. The detailed steps are shown as the figure below. Figure 19-7 Configure the IP parameters of the switch 4) Configure the parameters of the FTP server which keeps the upgrade firmware, and download - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 404
5) Enter 1 and y, the switch will reboot with the startup image. Figure 19-10 Reboot with the startup image 6) Please 3 to start the switch shown as the following figure. After the switch is started, you can login to the CLI command window and manage the switch via CLI command. Figure 19-11 Start - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 405
Fast Ethernet IEEE802.3ab 1000Base-T Gigabit Ethernet IEEE802.3z 1000Base-X Gigabit Ethernet IEEE802.3ae 10GBase-X Ten-Gigabit Ethernet IEEE802.3ad Link Aggregation IEEE802.3x Flow Control Standards IEEE802.1p QoS IEEE802.1q VLAN IEEE802.1d Spanning Tree Protocol IEEE802.1s Multi Spanning - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 406
LED Transmission Method Power, System, RPS, FAN, Master, Module, Link/Act, 21F-24F, 25, 26, M1, M2, Unit ID LED Store and Forward Packets Forwarding Rate 10BASE-T: 14881pps/port 100BASE-TX: 148810pps/port 1000Base-T: 1488095pps/ - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 407
how to install and configure the TCP/IP correctly in Windows 2000. First make sure your Ethernet Adapter is working, refer to the adapter's manual if necessary. Configure TCP/IP component: 1) On the Windows taskbar, click the Start button, and then click Control Panel. 2) Click the Network and - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 408
5) The following TCP/IP Properties window will display and the IP Address tab is open on this window by default. Figure B-3 6) Select Use the following IP address. And the following items will be available. If the switch's IP address is 192.168.0.1, specify IP address as 192.168.0.x (x is from 2 to - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 409
802.1X authentication. When the switch works as the authenticator system, please take the following instructions to install the TpSupplicant provided on the attached CD for the supplicant Client. 1.1 Installation Guide 1. Insert the provided CD into your CD-ROM drive. Open the file folder and double - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 410
3. Then the following screen will appear. Click Next to continue. If you want to stop the installation, click Cancel. Figure C-3 Welcome to the InstallShield Wizard 4. To continue, choose the destination location for the installation files and click Next on the following screen. Figure C-4 Choose - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 411
5. Till now, The Wizard is ready to begin the installation. Click Install to start the installation on the following screen. Figure C-5 Install the Program 6. The InstallShield Wizard is installing TpSupplicant shown as the following screen. Please wait. Figure C-6 Setup Status 399 - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 412
Software If you want to remove the TpSupplicant, please take the following steps: 1. On the Windows taskbar, click the Start button, point to All Programs→TP-LINK →TpSupplicant, and then click Uninstall TP-LINK 802.1X, shown as the following figure. Figure C-8 Uninstall - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 413
2. Then the following screen will appear. If you want to stop the remove process, click Cancel. Figure C-9 Preparing Setup 3. On the continued screen, click Yes to remove the application from your PC. Figure C-10 Uninstall the Application 4. Click Finish to complete. Figure C-11 Uninstall Complete - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 414
1.3 Configuration 1. After completing installation, double click the icon Software. The following screen will appear. to run the TP-LINK 802.1X Client Figure C-12 TP-LINK 802.1X Client Enter the Name and the Password specified in the Authentication Server. The length of Name and Password should be - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 415
Auto reconnect after timeout: Select this option to allow the Client to automatically start the connection again when it does not receive the handshake reply packets from the switch within a period. 3. To continue, click Connect button after entering the Name and Password on Figure D-12. Then the - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 416
1.4 FAQ: Q1: Why does this error dialog box pop up when starting up the TP-LINK 802.1X Client Software? A1: It's because the supported DLL file is missing. You are suggested to go to http://www.winpcap.org to download WinPcap 4.0.2 or the higher version for installation, and run - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 417
TFTP server that contains the devices system files, and the name of the boot file. Class of Service (CoS) CoS is supported by prioritizing packets based on the required level of service, and then placing them in the appropriate output queue. Data is transmitted from the queues using weighted round - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 418
switched networks. IEEE 802.1p An IEEE standard for providing quality of service (QoS) in Ethernet networks. The standard uses packet tags that define start/stop requests and timers used for flow control on full-duplex links. (Now incorporated in IEEE 802.3-2002) Internet Group Management Protocol - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 419
method whereby data on a target port is mirrored to a monitor port for troubleshooting with a logic analyzer or RMON probe. This allows data on the target single high-speed logical link that combines several lower-speed physical links. Remote Authentication Dial-in User Service (RADIUS) RADIUS is - TP-Link T2700G-28TQ | T2700G-28TQ User Guide V1 - Page 420
any loops. A loop can often occur in complicated or backup linked network systems. Spanning Tree detects and directs data along the shortest IP as the underlying transport mechanism to provide access to IP-like services. UDP packets are delivered just like IP packets - connection-less datagrams
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
 |
 |
T2700G-28TQ
JetStream 28-Port Gigabit Stackable L2+
Managed Switch
REV1.0.1
1910011208