TP-Link T2600G-18TSTL-SG3216 T2600G-18TSUN V1 Configuration Guide
TP-Link T2600G-18TSTL-SG3216 Manual
View all TP-Link T2600G-18TSTL-SG3216 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T2600G-18TSTL-SG3216 manual content summary:
- TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 1
Configuration Guide T2600G Series Switches T2600G-18TS (TL-SG3216) / T2600G-28TS (TL-SG3424) T2600G-52TS (TL-SG3452) / T2600G-28MPS (TL-SG3424P) 1910011953 REV2.0.0 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 2
. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 3
't disassemble the product, or make repairs yourself. You run the risk of electric shock and voiding the limited warranty. If you ne ed service, please contact us. Avoid water and wet locations. Explanation of the symbols on the product label Symbol Explanation AC voltage RECYCLING This product - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 4
CONTENTS About This Guide Intended Readers...1 Conventions...1 More Information...2 Accessing the Switch Overview ...4 Switch's IP Address and Default Gateway...20 Managing System System...22 Overview...22 Supported Features...22 System Info Configurations...24 Using the GUI...24 Viewing the System - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 5
Specifying the Device Description...31 Setting the System Time...32 Setting the Daylight Saving Time...34 Specifying the Serial Port Parameter...36 User Management Configurations...38 Using the GUI...38 Creating Admin Accounts...38 Creating Accounts of Other Types...39 Using the CLI...41 Creating - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 6
...73 Using the GUI...73 Using the CLI...74 Appendix: Default Parameters...76 Managing Physical Interfaces Physical Interface...80 Overview...80 Supported Features...80 Basic Parameters Configurations...81 Using the GUI...81 Using the CLI...82 Port Mirror Configuration...85 Using the GUI...85 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 7
Configuration Scheme...105 Using the GUI...105 Using the CLI...106 Appendix: Default Parameters...108 Configuring LAG LAG...111 Overview...111 Supported Features...111 LAG Configuration...112 Using the GUI...113 Configuring Load-balancing Algorithm...113 Configuring Static LAG or LACP...114 Using - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 8
Managing MAC Address Table MAC Address Table...133 Overview...133 Supported Features...133 Address Configurations...135 Using the GUI...135 Adding Static MAC Address Entries ...135 Modifying the Aging Time of Dynamic Address Entries 137 Adding - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 9
Configuring the Rx Power Threshold...159 Viewing DDM Status...159 Using the CLI...160 Configuring DDM Globally...160 Configuring DDM Shutdown...161 Configuring Temperature Threshold...162 Configuring Voltage Threshold...163 Configuring Bias Current Threshold...164 Configuring Tx Power Threshold... - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 10
Network Requirements...191 Configuration Scheme...191 Network Topology...192 Using the GUI...192 Using the CLI...195 Appendix: Default Parameters ...197 Configuring MAC VLAN Overview...199 MAC VLAN Configuration...200 Using the GUI...200 Configuring 802.1Q VLAN...200 Binding the MAC Address to the - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 11
Scheme...222 Using the GUI...223 Using the CLI...229 Appendix: Default Parameters...234 Configuring VLAN-VPN VLAN-VPN...236 Overview...236 Supported Features...237 Basic VLAN-VPN Configuration...238 Using the GUI...238 Configuring 802.1Q VLAN...238 Configuring Global VLAN-VPN and Up-link - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 12
Using the CLI...265 Appendix: Default Parameters...269 Configuring Private VLAN Overview...271 Private VLAN Configurations...273 Using the GUI...273 Creating Private VLAN...273 Configuring the Up-link Port...274 Configuring the Down-link Port...275 Using the CLI...276 Creating Private VLAN...276 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 13
Scheme...333 Using the GUI...334 Using the CLI...345 Appendix: Default Parameters...352 Configuring OAM Ethernet OAM...355 Overview...355 Supported Features...356 Ethernet OAM Configurations...359 Using the GUI...359 Enabling OAM and Configuring OAM Mode...359 Configuring Link Monitoring...360 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 14
the GUI...385 Using the CLI...390 Appendix: Default Parameters...395 Configuring Layer 2 Multicast Layer 2 Multicast...397 Overview...397 Supported Layer 2 Multicast Protocols...398 IGMP Snooping Configurations...399 Using the GUI...399 Configuring IGMP Snooping Globally...399 Enabling IGMP Snooping - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 15
Configuring IGMP Snooping Globally in the VLAN 403 (Optional) Configuring the Static Router Ports in the VLAN 404 (Optional) Configuring the Forbidden Router Ports in the VLAN 404 Configuring the Multicast VLAN...404 Creating Multicast VLAN and Configuring Basic Settings 405 (Optional) Creating - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 16
Configuring IGMP Snooping Last Listener Query 421 Configuring IGMP Snooping Parameters in the VLAN 423 Configuring Router Port Time and Member Port Time 423 Configuring Static Router Port...424 Configuring Forbidden Router Port...425 Configuring Static Multicast (Multicast IP and Forward Port - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 17
(Optional) Creating Replace Source IP...444 Viewing Dynamic Router Ports in the Multicast VLAN 444 (Optional) Configuring the Static Router Ports 444 (Optional) Configuring the Forbidden Router Ports 444 (Optional) Configuring the Querier...445 Configuring the Querier...445 Viewing Settings of - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 18
Configuring Static Router Port...464 Configuring Forbidden Router Port...465 Configuring Replace Source IP...466 Configuring the Querier...467 Enabling MLD Querier...467 Configuring Query Interval, Max Response Time and General Query Source IP 468 Configuring Multicast Filtering...469 Creating - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 19
Using the CLI...501 Appendix: Default Parameters ...504 Default Parameters for IGMP Snooping...504 Default Parameters for MLD Snooping...505 Configuring Logical Interfaces Overview...508 Logical Interfaces Configurations...509 Using the GUI...509 Creating a Layer 3 Interface...509 Configuring IPv4 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 20
532 Appendix: Default Parameter...535 Configuring DHCP DHCP...537 Overview...537 Supported Features...537 DHCP Server Configuration...540 Using the GUI...540 Enabling DHCP Server...540 Configuring DHCP Server Pool...542 Configuring Manual Binding...543 Using the CLI...545 Enabling DHCP Server...545 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 21
...576 Using the GUI...576 Viewing the ARP Entries...576 Adding Static ARP Entries Manually...577 Using the CLI...577 Configuring ARP Function...577 Configuring QoS QoS...582 Overview...582 Supported Features...582 DiffServ Configuration...583 Using the GUI...584 Configuring Priority Mode...584 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 22
the CLI...641 Appendix: Default Parameters...646 Configuring PoE PoE...648 Overview...648 Supported Features...648 PoE Power Management Configurations...649 Using the GUI...649 Configuring the PoE Parameters Manually...649 Configuring the PoE Parameters Using the Profile 651 Using the CLI...653 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 23
Scheme...664 Using the GUI...664 Using the CLI...666 Appendix: Default Parameters...668 Configuring ACL Overview...670 Introduction...670 Supported Features...670 ACL Configuration...671 Using the GUI...672 Configuring Time-Range ...672 (Optional) Configuring Holiday...673 Creating an ACL - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 24
Network Security...718 Overview...718 Supported Features...718 IP-MAC Binding Configurations...724 Using the GUI...724 Binding Entries Manually...724 Binding Entries Dynamically...725 Viewing the Binding Entries...727 Using the CLI...728 Binding Entries Manually...729 Viewing Binding Entries...730 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 25
Viewing ARP Statistics...753 Using the CLI...754 Configuring ARP Detection...754 Configuring ARP Defend...755 Viewing ARP Statistics...757 ND Detection Configuration...758 Using the GUI...758 Using the CLI...759 IP Source Guard Configuration...761 Using the GUI...761 Using the CLI...762 DoS Defend - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 26
...826 Network Requirements...826 Configuration Scheme...827 Using the GUI...827 Using the CLI...830 Appendix: Default Parameters...833 Configuring LLDP LLDP...840 Overview...840 Supported Features...840 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 27
LLDP Configurations...841 Using the GUI...841 Global Config...841 Port Config...843 Using the CLI...844 Global Config...844 Port Config...846 LLDP-MED Configurations...848 Using the GUI...848 Global Config...848 Port Config...849 Using the CLI...851 Global Config...851 Port Config...852 Viewing LLDP - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 28
Configuring Maintenance Maintenance ...884 Overview...884 Supported Features...884 Monitoring the System...885 Using the GUI...885 Monitoring the CPU...885 Monitoring the Memory...886 Using the CLI...887 Monitoring the CPU... - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 29
Using the CLI...908 Configuration Examples...910 Example for Configuring SFlow...910 Network Requirements...910 Configuration Scheme...910 Using the GUI...910 Using the CLI...911 Example for Configuring Remote Log...913 Network Requirements...913 Configuration Scheme...913 Using the GUI ...913 Using - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 30
Configuring Statistics...942 Configuring History...943 Configuring Event...944 Configuring Alarm...945 Using the CLI...947 Configuring Statistics...947 Configuring History...948 Configuring Event...949 Configuring Alarm...951 Configuration Example ...953 Network Requirements...953 Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 31
of the switch may vary slightly depending on the model and software version you have. All screenshots, images, parameters and descriptions documented in this guide are used for demonstration only. The information in this document is subject to change without notice. Every effort has been made in the - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 32
. More Information The latest software and documentations can be found at Download Center at http://www.tp-link.com/support. The Installation Guide (IG) can be found where you find this guide or inside the package of the switch. Specifications can be found on the product page at http://www.tp - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 33
Part 1 Accessing the Switch CHAPTERS 1. Overview 2. Web Interface Access 3. Command Line Interface Access - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 34
, while web configuration is easier and more visual than the CLI configuration. You can choose the method according to their available applications and preference. Configuration Guide 4 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 35
1) Make sure that the route between the host PC and the switch is available. 2) Launch a web browser. The supported web browsers include, but are not limited to, the following types: IE 8.0, 9.0, 10.0, 11.0 Firefox 26 status and configure the switch on this interface. Configuration Guide 5 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 36
after the switch reboots, please use the Save Config function on the main interface to save the configurations in the start-up configuration file. Configuration Guide 6 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 37
access to the web interface. Go to System > Access Security > HTTP Config, disable the HTTP server and click Apply. Figure 2-5 Shut down HTTP server Configuration Guide 7 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 38
the IP Address field and click Apply. Make sure that the route between the host PC and the switch's new IP address is available. Configuration Guide 8 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 39
Hop Specify the destination as 0.0.0.0. Specify the subnet mask as 255.255.255.0. Configure your desired default gateway as the next hop's IP address. Configuration Guide 9 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 40
to verify the default gateway you configured. The entry marked in red box displays the valid default gateway. Figure 2-10 View the default gateway Configuration Guide 10 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 41
requires the host PC connecting to the switch's console port directly, while Telnet and SSH connection support both local and remote access. The following table shows the typical applications used in the CLI access logged in to the switch and you can use the CLI now. Configuration Guide 11 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 42
to Start > All Programs > Accessories > Communications > Hyper Terminal to open the Hyper Terminal and configure the above settings to log in to the switch. Configuration Guide 12 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 43
Accessing the Switch Command Line Interface Access 3.2 Telnet Login The switch supports Login Local Mode for authentication by default. Login Local Mode: Username and password are required, Later you can set a password for users who want to access the Privileged EXEC Mode. Configuration Guide 13 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 44
you can manage your switch with CLI commands through Telnet connection. 3.3 SSH Login SSH login supports the following two modes: Password Authentication Mode and Key Authentication Mode. You can choose one the Port field; select SSH as the Connection type. Click Open. Configuration Guide 14 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 45
a public/private key pair. In the following figure, an SSH-2 RSA key pair is generated, and the length of each key is 1024 bits. Configuration Guide 15 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 46
public key to a TFTP server; click Save private key to save the private key to the host PC. Figure 3-11 Save the Generated Keys Configuration Guide 16 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 47
Type 5) Go to Connection > SSH > Auth. Click Browse to download the private key file to PuTTY. Click Open to start the connection and negotiation. Configuration Guide 17 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 48
CLI interface. Using the GUI: Go to System > Access Security > Telnet Config, disable the Telnet function and click Apply. Figure 3-16 Disable Telnet login Configuration Guide 18 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 49
copy running-config startup-config to save the configurations in the start-up configuration file. Switch(config)#end Switch#copy running-config startup-config Configuration Guide 19 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 50
no default gateway. Switch#configure Switch(config)#ip route 0.0.0.0 255.255.255.0 192.168.0.100 1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 20 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 51
Part 2 Managing System CHAPTERS 1. System 2. System Info Configurations 3. User Management Configurations 4. System Tools Configurations 5. Access Security Configurations 6. SDM Template Configuration 7. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 52
of the switch. It provides controls over the type of the access users and the access security. 1.2 Supported Features System Info The System Info is mainly used for the basic properties configuration. You can view the allow or deny users to access the switch via a web browser. Configuration Guide 22 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 53
is based on the SSL or TLS protocol working in transport layer. It supports a security access via a web browser. SSH Config function is based on Database Management) templates prioritize system resources to optimize support for certain features. SDM Template function provides three templates - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 54
the corresponding 1000Mbps port is at the speed of 1000Mbps. Indicates that the corresponding 1000Mbps port is at the speed of 10Mbps or 100Mbps. Configuration Guide 24 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 55
view the bandwidth utilization of receiving packets on this port. Tx Select Tx to view the bandwidth utilization of sending packets on this port. Configuration Guide 25 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 56
Time to load the following page. Figure 2-5 Setting the System Time In the Time Info section, view the current time information of the switch. Configuration Guide 26 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 57
the system time: 1) Choose one method to set the system time and specify the information. Manual Set the system time manually. Date: Specify the date of the system. Time: Specify the time of the system. Get Apply. Synchronize the system time of the switch with PC's clock. Configuration Guide 27 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 58
Daylight Saving Time of New Zealand. It is from 2: 00 a.m. on the Last Sunday in September to 3:00 a.m. on the First Sunday in April. Configuration Guide 28 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 59
. The default value is 38400 bps. Date Bits Displays the data bits. Parity Bits Displays the parity bits. Stop Bits Displays the stop bits. Configuration Guide 29 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 60
Contact Information - www.tp-link.com Hardware Version - T2600G-52TS 2.0 Software Version - 2.0.0 Build 20160923 Rel.39814(s) System Time - 2006-01-03 12:54:41 Configuration Guide 30 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 61
http://www.tp-link.com Switch(config)#show system-info System Description - JetStream 48-Port Gigabit Smart Switch with 4 SFP Slots System Name - Switch_A Configuration Guide 31 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 62
configuration mode. Use the following command to set the system time manually: system-time manual time Configure the system time manually. time: Specify the date and time manually in the format of MM/DD/YYYY-HH:MM:SS. The time-zone, which ranges from UTC-12:00 to UTC+13:00. Configuration Guide 32 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 63
server. backup-ntp-server: Specify the IP address of the backup NTP server. fetching-rate: Specify the interval fetching time from the NTP server. Configuration Guide 33 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 64
2.2.4 Setting the Daylight Saving Time Follow these steps and choose one method to set the Daylight Saving Time: Step 1 configure Enter global configuration mode. Configuration Guide 34 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 65
in date mode: system-time dst date { smonth } { sday } { stime } { syear } { emonth } { eday } { etime } { eyear } [ offset ] Specify the Daylight Saving Time in Date mode. Configuration Guide 35 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 66
running-config startup-config 2.2.5 Specifying the Serial Port Parameter Follow These steps to specify the serial port parameter. Step 1 configure Enter global configuration mode. Configuration Guide 36 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 67
)#show serial_port Serial Port Settings Baud rate: 9600 Data Bits: 8 Parity Bits: None Stop Bits: 1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 37 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 68
and password. User Name Create a user name for users' login. It contains 16 characters at most, composed of digits, English letters and underscore only. Configuration Guide 38 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 69
of other types: 1) In the User Info section, select the access level from the drop-down list and specify the user name and password. Configuration Guide 39 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 70
to AAA Configuration in Configuring Network Security. The logged-in users can enter the Enable Password on this page to get the administrative privileges. Configuration Guide 40 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 71
to the configuration file MD5 encrypted. encrypted-password: Enter a MD5 encrypted password with fixed length, which you can copy from another switch's configuration file. Configuration Guide 41 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 72
to change the users' access level to Admin. Follow these steps to create an account of other type: Step 1 configure Enter global configuration mode. Configuration Guide 42 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 73
. After the encrypted password is configured, you should use the corresponding unencrypted password to reenter this mode. aaa enable Globally enable the AAA function. Configuration Guide 43 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 74
to AAA Configuration in Configuring Network Security . The logged-in users can enter the Enable Password on this page to get the administrative privileges. Configuration Guide 44 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 75
Switch(config)#show user account-list Index User-Name User-Type --------- 1 user1 Operator 2 admin Admin Switch(config)#end Switch#copy running-config startup-config Configuration Guide 45 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 76
File Follow these steps to configure the boot file: 1) In the Boot Table section, select one or more units and configure the relevant parameters. Configuration Guide 46 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 77
restore the configuration. Please wait without any operation. • After the configuration is restored successfully, the device will reboot to make the configuration change effective. Configuration Guide 47 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 78
effect the backup image. Firmware Version Displays the current firmware version of the system. Hardware Version Displays the current hardware version of the system. Configuration Guide 48 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 79
the backup image after upgrading. 4.1.5 Configuring Auto Install Function Note: • Only T2600G-18TS supports the Auto Install Function. • You should configure the DHCP server and the TFTP server first to 3. Auto Install State Display the state of the auto install function. Configuration Guide 49 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 80
process is failed, the switch will restart the process every 10 minutes. You can stop the process manually. 4.1.6 Rebooting the switch Choose the menu System > System Tools > System Reboot to load the following Setting section, select one method and specify the parameters. Configuration Guide 50 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 81
to the default. 4.2 Using the CLI 4.2.1 Configuring the Boot File Follow these steps to configure the boot file: Step 1 configure Enter global configuration mode. Configuration Guide 51 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 82
the configuration file to the switch from TFTP server. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the configuration file to be downloaded. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 83
server. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the configuration file to be saved. The following example shows how to steps to upgrade the firmware: Step 1 enable Enter privileged mode. Configuration Guide 53 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 84
the backup image. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. name: Specify the name of the desired firmware file. Enter Y to continue then enter Y to reboot. retry count which ranges from 1 to 3. The default value is 1. Configuration Guide 54 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 85
failed, the switch will restart the process every 10 minutes. You can stop the process manually. The following example shows how to configure the Auto Install function. Switch#configure Switch(config)# these steps to reboot the switch: Step 1 enable Enter privileged mode. Configuration Guide 55 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 86
save_before_reboot Reboot system at 15/01/2016 12:00. Continue? (Y/N): Y Reboot Schedule Settings Reboot schedule at 2016-01-15 12:00 (in 17007 minutes) Configuration Guide 56 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 87
2 enable Enter privileged mode. reset Reset the switch. Note: After the system is reset, configurations of the switch will be reset to the default. Configuration Guide 57 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 88
are allowed to access the switch. Port-based: Only the users connecting to the ports you set here are allowed to access the switch. Configuration Guide 58 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 89
display. Port Select one or more ports to configure. Only the users connected to these ports are allowed to access the switch. 2) Click Apply. Configuration Guide 59 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 90
is Operator, Power User or User. Note: For T2600-18TS, the number of Operator, Power User and User can be set respectively. 4) Click Apply. Configuration Guide 60 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 91
. Table 5-1 Configuring the HTTPS Function 1) In the Global Config section, select Enable to enable HTTPS function and select the protocol the switch supports. Click Apply. HTTPS Select Enable to enable the HTTPS function. HTTPS function is based on the SSL or TLS protocol. It provides a secure - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 92
connection. TLS Version 1 Select Enable to make the switch support TLS Version 1 protocol. TLS is a transport protocol upgraded from SSL. It supports a different encryption algorithm from SSL, so TLS and SSL match each other, otherwise the HTTPS connection will not work. Configuration Guide 62 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 93
Enable to enable SSH version 2. Idle Timeout Specify the idle timeout time. The system will automatically release the connection when the time is up. Configuration Guide 63 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 94
the Encryption Algorithm section, select the encryption algorithm you want the switch to support and click Apply. 3) In Data Integrity Algorithm section, select the integrity algorithm you want configure the access control: Step 1 configure Enter global configuration mode. Configuration Guide 64 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 95
access control as IP-based. Set the IP address as 192.168.0.100,set the subnet mask as 255.255.255.0 and make the switch support snmp, telnet, http and https. Switch#configure Switch(config)#user access-control ip-based 192.168.0.100 255.255.255.0 snmp telnet http https Switch - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 96
example shows how to set the session timeout as 9, set the maximum admin number as 6, and set the maximum guest number as 5. Switch#configure Configuration Guide 66 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 97
http secure-protocol { [ ssl3 ] [ tls1 ] } Configure to make the switch support the corresponding protocol. By default, the switch supports SSLv3 and TLSv1. ssl3: Enable the SSL version 3 protocol. SSL is a transport DES-CBC for message encryption and SHA for message digest. Configuration Guide 67 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 98
BASE64 encoded. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. Step 9 show ip http secure-server Verify the global configuration of HTTPS. Step 10 end Return to server Switch(config)#ip http secure-protocol ssl3 tls1 Configuration Guide 68 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 99
configuration mode. ip ssh server Enable the SSH function. By default, it is disabled. ip ssh version { v1 | v2 } Configure to make the switch support the corresponding protocol. By default, the switch supports SSHv1 and SSHv3. v1 | v2: Select to enable the corresponding protocol. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 100
to 3072 bits. ip-addr: Specify the IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported. Step 8 show ip ssh Verify the global configuration of SSH. Step 9 end Return to privileged EXEC mode. Switch(config)#ip ssh server Switch(config)#ip ssh version v1 Configuration Guide 70 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 101
Data Integrity Algorithm: HMAC-SHA1: Disabled HMAC-MD5: Enabled Key Type: SSH-2 RSA/DSA Key File: ---- BEGIN SSH2 PUBLIC KEY ---- Comment: "dsa-key-20160711" Configuration Guide 71 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 102
, it is enabled. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Access Security Configurations Configuration Guide 72 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 103
SDM Template function is used to configure system resources in the switch to optimize support for specific features. The switch provides three templates, and the hardware resources allocation is Select the template of enterpriseV6. It allocates resources to IPv6 ACL rules. Configuration Guide 73 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 104
and MAC ACL rules. enterpriseV6: Select the template of enterpriseV4. It allocates resources to IPv6 ACL rules. Step 4 end Return to privileged EXEC mode. Configuration Guide 74 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 105
the running SDM preferences have been stored, but cannot take effect until reboot the switch. Switch(config)#end Switch#copy running-config startup-config Configuration Guide 75 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 106
Table 7-2 Default Settings of System Time Configuration Parameter Time Source System Time Default Setting Manual 2006-01-01 08:01:56 Sunday Table 7-3 Default Settings of Daylight Saving Time Image Backup Image Default Setting image1.bin image1.bin image2.bin Configuration Guide 76 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 107
-CBC AES192-CBC AES256-CBC Blowfish-CBC Cast128-CBC 3DES-CBC Default Setting Disabled Enabled Enabled 120 seconds 5 Enabled Enabled Enabled Enabled Enabled Enabled Configuration Guide 77 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 108
Parameter Auto Install Mode Auto Install Persistent Mode Auto Save Mode Auto Reboot Mode Auto Install Retry Count Default Setting Stop Disable Enable Disable 1 Configuration Guide 78 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 109
Part 3 Managing Physical Interfaces CHAPTERS 1. Physical Interface 2. Basic Parameters Configurations 3. Port Mirror Configuration 4. Port Security Configuration 5. Port Isolation Configurations 6. Loopback Detection Configuration 7. Configuration Examples - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 110
the switch. Logical interfaces are manually configured and do not physically exist, such interfaces. 1.2 Supported Features The switch supports the following features the copied packets to monitor network traffic and troubleshoot network problems. Port Security You can use this feature to Guide 80 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 111
, the port autonegotiates speed mode with the connected device. The default setting is Auto. This value is recommended if both ends of the line support auto-negotiation. Duplex Select the appropriate duplex mode for the port. There are three options: Half, Full and Auto. When Auto is selected, the - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 112
fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | port-channel port-channel-id | range port-channel port-channelid-list } Enter interface configuration mode. Configuration Guide 82 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 113
18TS) Change the MTU (Maximum Transmission Unit) size on the port to support jumbo frames. The default MTU size for frames received and sent on frames. Note: For T2600G-18TS, the jumbo size can be set manually according to your needs. Please use command jumbo-size size. The Configuration Guide 83 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 114
State Speed Duplex FlowCtrl Jumbo Description Gi1/0/1 Enable Auto Auto Enable Enable router connection Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 84 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 115
The above page displays a mirror session, and no more session can be created. Click Edit to configure this mirror session on the following page. Configuration Guide 85 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 116
. Egress With this option enabled, the packets sent by the monitored port will be copied to the monitoring port. By default, it is disabled. Configuration Guide 86 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 117
#configure Switch(config)#monitor session 1 destination interface gigabitEthernet 1/0/10 Switch(config)#monitor session 1 source interface gigabitEthernet 1/0/1-3 both Switch(config)#show monitor session Monitor Session: 1 Configuration Guide 87 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 118
Managing Physical Interfaces Destination Port: Gi1/0/10 Source Ports(Ingress): Gi1/0/1-3 Source Ports(Egress): Gi1/0/1-3 Switch(config-if)#end Switch#copy running-config startup-config Port Mirror Configuration Configuration Guide 88 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 119
port will stop learning. The default value is 64. Learned Num Displays the number of MAC addresses that have been learned on the port. Configuration Guide 89 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 120
MAC addresses are out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. Permanent: The learned MAC port | range gigabitEthernet port-list } Enter interface configuration mode. Configuration Guide 90 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 121
learned MAC address is out of the influence of the aging time and can only be deleted manually. The learned entries will be saved even the switch is rebooted. status: Status of port security Status ---- --------- ----------- ------ ------ Gi1/0/1 30 0 permanent drop Configuration Guide 91 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 122
Managing Physical Interfaces Switch(config-if)#end Switch#copy running-config startup-config Port Security Configuration Configuration Guide 92 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 123
following page. Figure 5-1 Port Isolation List The above page displays the port isolation list. Click Edit to configure Port Isolation on the following page. Configuration Guide 93 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 124
4 show port isolation interface { fastEthernet port | gigabitEthernet port } Verify the Port Isolation configuration of the specified port. Step 5 end Return to privileged EXEC mode. Configuration Guide 94 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 125
(config-if)#show port isolation interface gigabitEthernet 1/0/5 Port LAG Forward-List ---- Gi1/0/5 N/A Gi1/0/1-3,Po4 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 95 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 126
Detection Follow these steps to configure loopback detection: 1) In the Global Config section, enable loopback detection and configure the global parameters. Then click Apply. Configuration Guide 96 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 127
to normal status after the automatic recovery time. It is the default setting. Manual: You need to manually release the blocked port. Click the Recovery button to release the selected port. configure Loopback Detection: Step 1 configure Enter global configuration mode. Configuration Guide 97 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 128
is disabled. loopback-detection config [ process-mode { alert | port-based } ] [ recovery-mode { auto | manual } ] Set the process mode when a loopback is detected on the port. There are two modes: alert: The detection globally (keeping the default parameters): Switch#configure Configuration Guide 98 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 129
gigabitEthernet 1/0/3 Port Enable Process Mode Recovery Mode Loopback Block LAG ---- -------- ----- ---- Gi1/0/3 enable alert auto N/A N/A N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 99 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 130
hosts and a network analyzer are directly connected to the switch. For network security and troubleshooting, the network manager needs to use the network analyzer to monitor the data packets from to load the following page. It displays the information of the mirror session. Configuration Guide 100 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 131
and sent packets to be copied to the monitoring port. Then click Apply. Figure 7-4 Source Port Configuration 4) Click Save Config to save the settings. Configuration Guide 101 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 132
the MAC address or IP address of Host A is changed. Figure 7-5 Network Topology Switch Gi1/0/1 Gi1/0/2 Gi1/0/4 Gi1/0/3 Host A Host B Host C VLAN 10 Server Configuration Guide 102 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 133
on the above page to load the following page. Select port 1/0/1 as the isolated port, and select port 1/0/4 as the forwarding port. Click Apply. Configuration Guide 103 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 134
Verify the Configuration Switch#show port isolation interface Port LAG Forward-List ---- Gi1/0/1 N/A Gi1/0/4 Gi1/0/2 N/A Gi1/0/1-52,Po1-14 Gi1/0/3 N/A Gi1/0/1-52,Po1-14 ...... Configuration Guide 104 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 135
loopback detection on ports 1/0/1-3 and configure SNMP to receive the notifications. For detailed instructions about SNMP, refer to Configuring SNMP & RMON. Here we introduce how to configure detection and web refresh globally. Keep the default parameters and click Apply. Configuration Guide 105 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 136
the detection interval and recovery time. Switch#configure Switch(config)#loopback-detection Switch(config)#loopback-detection interval 30 Switch(config)#loopback-detection recovery-time 3 Configuration Guide 106 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 137
Port Enable Process Mode Recovery Mode Loopback Block LAG ---- Gi1/0/1 enable port-based auto N/A N/A N/A Gi1/0/2 enable port-based auto N/A N/A N/A Gi1/0/3 enable port-based auto N/A N/A N/A Configuration Guide 107 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 138
Disable Loopback Detection Loopback Detection Status Disable Detection Interval 30 seconds Automatic Recovery Time 3 detection times Web Refresh Status Disable Web Refresh Interval 6 seconds Configuration Guide 108 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 139
Managing Physical Interfaces Parameter Port Status Operation mode Recovery mode Default Setting Disable Alert Auto Appendix: Default Parameters Configuration Guide 109 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 140
Part 4 Configuring LAG CHAPTERS 1. LAG 2. LAG Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 141
and configure the backup ports to enhance the connection reliability. 1.2 Supported Features You can configure LAG in two ways: static LAG and LACP (Link Aggregation Control Protocol). Static LAG The member ports are manually added to the LAG. LACP The switch uses LACP to implement dynamic link - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 142
evenly. If an active link fails, the other active links share the traffic evenly. One LACP LAG supports more than eight member ports, but at most eight of them can be active. Using LACP protocol, the switches member port of an LAG cannot be enabled with these functions. Configuration Guide 112 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 143
+SRC IP" to allow Switch A to determine the forwarding port based on the source MAC addresses and source IP addresses of the received packets. Configuration Guide 113 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 144
Port section, select the member ports for the LAG. It is multi-optional. 3) Click Apply. Note: Clearing all member ports will delete the LAG. Configuration Guide 114 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 145
other static LAGs cannot be set as an Admin Key. The valid value of the Admin Key is determined by the maximum number of LAG supported by your switch. For example, if your switch supports up to 14 LAGs, the valid value is from 1 to 14. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 146
computation is based on the source and destination IP addresses of the packets. show etherchannel load-balance Verify the configuration of load-balancing algorithm. Configuration Guide 116 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 147
group number of the LAG. mode:LAG mode. Select on to add the port to a static LAG. Active and passive are two LACP modes. Configuration Guide 117 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 148
(config-if-range)#end Switch#copy running-config startup-config Configuring LACP Follow these steps to configure LACP: Step 1 configure Enter global configuration mode. Configuration Guide 118 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 149
LACP configuration of the local switch. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 119 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 150
/0/3 SA Down 32768 0x6 0 0x3 0x45 Gi1/0/4 SA Down 32768 0x6 0 0x4 0x45 Switch(config-if-range)#end Switch#copy running-config startup-config Configuration Guide 120 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 151
enabled to transmit data. Demonstrated with T2600G-52TS, the following sections provide configuration procedure in two ways: using the GUI and using the CLI. Configuration Guide 121 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 152
, select ports 1/0/1-10, and respectively set the admin key, port priority, mode and status for each port as follows. Click Apply. Figure 3-4 LACP Configuration Configuration Guide 122 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 153
1/0/10 Switch(config-if)#channel-group 1 mode active Switch(config-if)#lacp port-priority 2 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 123 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 154
/0/7 SA Down 0 0x1 0 0x7 0x45 Gi1/0/8 SA Down 0 0x1 0 0x8 0x45 Gi1/0/9 SA Down 1 0x1 0 0x9 0x45 Gi1/0/10 SA Down 2 0x1 0 0xa 0x45 Configuration Guide 124 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 155
LAG Table Hash Algorithm LACP Config System Priority Admin Key Port Priority Mode Status Default Setting SRC MAC+DST MAC 32768 0 32768 Passive Disable Configuration Guide 125 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 156
Part 5 Monitoring Traffic CHAPTERS 1. Traffic Monitor 2. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 157
. 2) In the Traffic Summary section, click 1 to show the information of the physical ports, and click LAGS to show the information of the LAGs. Configuration Guide 127 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 158
Auto Refresh section, or click Refresh at the bottom of the page. Auto Refresh: With this option enabled, the switch refreshes the web timely. Configuration Guide 128 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 159
transmitted on the port. Error frames are not counted in. Collisions: Displays the number of collisions experienced by a half-duplex port during packet transmissions. Configuration Guide 129 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 160
of the received packets (including error packets) that are over 1023 bytes. Collisions: Displays the number of collisions experienced by a port during packet transmissions. Configuration Guide 130 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 161
Monitoring Traffic Appendix: Default Parameters 2 Appendix: Default Parameters Table 2-1 Traffic Statistics Monitoring Parameter Traffic Summary Auto Refresh Refresh Rate Traffic Statistics Auto Refresh Refresh Rate Default Setting Disable 10 seconds Disable 10 seconds Configuration Guide 131 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 162
Part 6 Managing MAC Address Table CHAPTERS 1. MAC Address Table 2. Address Configurations 3. Security Configurations 4. Example for Security Configurations 5. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 163
02 1 ...... 1 Dynamic 2 Config static Aging no-Aging 1.2 Supported Features The address table of the switch contains dynamic addresses, static manually added to configure the switch to automatically drop the packets with specific source or destination MAC addresses. Configuration Guide - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 164
the number of learned addresses has reached the limit, preventing the address table from being used up by broadcast packets of MAC address attacks. Configuration Guide 134 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 165
entries by manually specifying the desired MAC address or binding dynamic MAC address entries. Adding MAC Addresses Manually Choose the menu Switching > MAC Address > Static Address to load the following page. Figure 2-1 Adding MAC Addresses Manually Follow - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 166
as a filter- ing address, and vice versa. • Multicast or broadcast addresses cannot be set as static addresses. • Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. Configuration Guide 136 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 167
aging time is applicable to stable networks. We recommend that you keep the default value if you are unsure about settings in your case. Configuration Guide 137 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 168
set as filtering addresses . 2.1.4 Viewing Address Table Entries You can view entries in MAC address table to check your former operations and address information. Configuration Guide 138 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 169
address are received. port: Specify a port to which packets with the specific MAC address are forwarded. The port must belong to the specified VLAN. Configuration Guide 139 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 170
broadcast addresses cannot be set as static addresses. • Ports in LAGs (Link Aggregation Group) are not supported for static address configuration. The following example shows how to add a static MAC address entry with MAC Step 1 configure Enter global configuration mode. Configuration Guide 140 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 171
:00:01. vid: Specify an existing VLAN in which packets with the specific MAC address are dropped. Step 3 end Return to privileged EXEC mode. Configuration Guide 141 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 172
:1e:4b:04:01:5d 10 filter no-aging Total MAC Addresses for this criterion: 1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 142 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 173
the GUI 3.1.1 Configuring MAC Notification Traps Choose the menu Switching > MAC Address > MAC Notification to load the following page. Figure 3-1 Configuring MAC Notification Traps Configuration Guide 143 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 174
be generated and sent to the management host. 3) Configure SNMP and set a management host. For detailed SNMP configurations, please refer to Configuring SNMP & RMON. Configuration Guide 144 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 175
specified VLAN is exceeded. Disable 4) Click Create. The number limit on the VLAN is not valid, and the switch follows the original forwarding rules. Configuration Guide 145 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 176
to the management host. Step 7 Step 8 end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 146 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 177
Number of MAC Addresses in VLANs Follow these steps to limit the number of MAC addresses in VLANs: Step 1 configure Enter global configuration mode. Configuration Guide 147 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 178
mac address-table security vid 10 VlanId Max-learn Current-learn Status ------ 10 100 0 Drop Switch(config)#end Switch#copy running-config startup-config Configuration Guide 148 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 179
new users access the network. Demonstrated with T2600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 149 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 180
interval as 10 seconds, and click Apply. Then, enable new-mac-learned trap on port 1/0/2 and click Apply. Figure 4-3 Configuring New-MAC-learned Traps Configuration Guide 150 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 181
Notification on port 1/0/2. Switch#show mac address-table notification interface gigabitEthernet 1/0/2 Port LrnMode Change Exceed Max Limit New Mac Learned ---- Gi1/0/2 disable disable enable Configuration Guide 151 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 182
Exceed Max Learned Notification Disable New MAC Learned Notification Disable Table 5-4 Default Settings of MAC VLAN Security Parameter Default Setting MAC VLAN Security Disable Configuration Guide 152 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 183
Part 7 Configuring DDM CHAPTERS 1. Overview 2. DDM Configuration 3. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 184
when the specified parameter exceeds the alarm threshold or warning threshold. The monitoring parameters include: Temperature, Voltage, Bias Current, Tx Power and Rx Power. Configuration Guide 154 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 185
alarm threshold or warning threshold is exceeded. This is the default option. LAG 2) Click Apply. Displays the LAG number which the port belongs to. Configuration Guide 155 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 186
the port belongs to. 2.1.3 Configuring the Voltage Threshold Choose the menu Switching > DDM > Voltage Threshold to load the following page. Figure 2-3 Configure Voltage Threshold Configuration Guide 156 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 187
warning. When the operating parameter rises above this value, action associated with the warning will be taken. The valid values are from 0 to 131. Configuration Guide 157 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 188
the warning will be taken. The valid values are from 0 to 6.5535. LAG 2) Click Apply. Displays the LAG number which the port belongs to. Configuration Guide 158 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 189
which the port belongs to. 2.1.7 Viewing DDM Status Choose the menu Switching > DDM > DDM Status to load the following page. Figure 2-7 View DDM Status Configuration Guide 159 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 190
Enable DDM on this SFP port. show ddm configuration state Display the DDM state of the SFP ports. end Return to Privileged EXEC Mode. Configuration Guide 160 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 191
DDM state of the SFP ports. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 161 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 192
from -128 to 127.996. show ddm configuration temperature Display the DDM temperature threshold on the SFP ports. end Return to Privileged EXEC Mode. Configuration Guide 162 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 193
below this value, action associated with the warning will be taken. value: Enter the threshold value in V. The valid values are from 0 to 6.5535. Configuration Guide 163 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 194
{ fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | ten-gigabitEthernet port | range ten-gigabitEthernet port-list } Enter interface configuration mode. Configuration Guide 164 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 195
(V) : High Alarm Low Alarm High Warning Low Warning Gi1/0/17 120.000000 -- -- -- Gi1/0/18 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 165 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 196
6 Switch(config-if)#show ddm configuration tx_power Tx Power Threshold(mW) : High Alarm Low Alarm High Warning Low Warning Gi1/0/17 6.000000 -- -- -- Gi1/0/18 Configuration Guide 166 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 197
Rx power as 6 mW. Switch#configure Switch(config)#interface gigabitEthernet 1/0/17 Switch(config-if)#ddm rx_power_threshold high_alarm 6 Switch(config-if)#show ddm configuration rx_power Configuration Guide 167 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 198
)#show ddm configuration rx_power Rx Power Threshold(mW) : High Alarm Low Alarm High Warning Low Warning Gi1/0/17 6.000000 -- -- -- Gi1/0/18 Switch(config)#end Configuration Guide 168 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 199
Temperature(C) Voltage(V) Bias Current(mA) Rx Power(mW) Data Ready Rx Los Tx Fault Tx Power(mW) Gi1/0/17 Gi1/0/18 Switch(config)#end Configuration Guide 169 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 200
SFP ports are being monitored. Threshold Action None. The port will not be shut down even if the alarm or warning threshold is exceeded. Configuration Guide 170 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 201
Part 8 Configuring L2PT CHAPTERS 1. Overview 2. L2PT Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 202
(Layer 2 Protocol Tunneling) is a feature for service providers to transparently transmit layer 2 protocol data units Network PE2 UNI CE1 CE2 Customer Network Customer Network To resolve this problem, the ISP network should transparently transmit the layer 2 PDUs between Guide 172 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 203
Protocol), CDP (Cisco Discovery Protocol), VTP (VLAN Trunking Protocol), PAgP (Port Aggregation Protocol), UDLD (UniDirectional Link Detection) and PVST+(Per VLAN Spanning Tree Plus). Configuration Guide 173 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 204
. Usually, the UNI port is connected to the customer network. The default setting is NONE, which indicates that L2PT is disabled on this port. Configuration Guide 174 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 205
the destination MAC address as 01000CCCCCCD. ALL: All the above layer 2 protocols are supported for tunneling. Threshold Specify the maximum number of packets to be processed for the specified configuration mode. Step 2 l2protocol-tunnel Enable the L2PT feature globally. Configuration Guide 175 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 206
stp: Enable protocol tunneling for the STP packets. all: All the above layer 2 protocols are supported for tunneling. threshold: Set a threshold which determines the maximum number of packets to be processed for startup-config Save the settings in the configuration file. Configuration Guide 176 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 207
(config-if)#show l2protocol-tunnel interface gigabitEthernet 1/0/5 Interface Type Protocol Threshold LAG --------- ---- Gi1/0/5 nni --,--,--,-- --,--,--,-- N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 177 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 208
1/0/1 ISP Network 1/0/2 Switch B 1/0/2 Customer Network Customer Network 3.2 Configuration Scheme The service provider can configure L2PT on the two edge switches (Switch A and Switch B). With B are similar. The following introductions take Switch A as an example. Configuration Guide 178 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 209
)#exit Switch_A(config)#interface gigabitEthernet 1/0/2 Switch_A(config-if)#l2protocol-tunnel type uni stp 1000 Switch_A(config-if)#end Switch_A#copy running-config startup-config Configuration Guide 179 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 210
---- Gi1/0/1 nni --,--,--,-- --,--,--,-- N/A Verify the configuration on port 1/0/2: Switch_A#show l2protocol-tunnel interface gigabitEthernet 1/0/2 Interface Type Protocol Threshold LAG --------- --------- ---- Gi1/0/2 uni stp,--,--,-- 1000,--,--,-- N/A Configuration Guide 180 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 211
following table. Table 4-1 Default Settings of L2PT Parameter Defualt Setting Global Config Layer 2 Protocol Tunneling Disable Port Config Type NONE Protocol NONE Threshold Disable Configuration Guide 181 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 212
Part 9 Configuring 802.1Q VLAN CHAPTERS 1. Overview 2. 802.1Q VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 213
need not be located in the same place. It eases the management of devices in the same work group but located in different places. Configuration Guide 183 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 214
menu VLAN > 802.1Q VLAN > Port Config to load the following page. Figure 2-1 Configuring the Port Select a port and configure its PVID. Click Apply. Configuration Guide 184 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 215
one VLAN and its egress rule isUNTAG. An access port is usually connected to a terminal device that does not support VLAN, a host for example. TRUNK: The port can be added to more than one VLAN and its egress rule belongs to. Check details of the VLAN which the port is in. Configuration Guide 185 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 216
ports will forward untagged packets in the target VLAN. Tagged port The selected ports will forward tagged packets in the target VLAN. 3) Click Apply. Configuration Guide 186 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 217
Switch(config)#vlan 2 Switch(config-vlan)#name RD Switch(config-vlan)#show vlan id 2 VLAN Name Status Ports ------- -------- 2 RD active Switch(config-vlan)#end Configuration Guide 187 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 218
Switch(config-if)#switchport pvid 2 Switch(config-if)#show interface switchport gigabitEthernet 1/0/5 Port Gi1/0/5: PVID: 2 Member in LAG: N/A Link Type: Trunk Member in VLAN: Configuration Guide 188 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 219
tagged: Switch#configure Switch(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#switchport general allowed vlan 2 tagged Switch(config-if)#show interface switchport gigabitEthernet 1/0/5 Port Gi1/0/5: Configuration Guide 189 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 220
Configuring 802.1Q VLAN PVID: 2 Member in LAG: N/A Link Type: General Member in VLAN: Vlan Name Egress-rule ------- 1 System-VLAN Untagged 2 rd Tagged Switch(config-if)#end Switch#copy running-config startup-config 802.1Q VLAN Configuration Configuration Guide 190 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 221
department but not with computers in the other department. Terminal devices like computers usually do not support VLAN tags. Configure the switch ports connected to the computers as Access. Then add the ports to intermediate link as Trunk, and add the ports to both VLANs. Configuration Guide 191 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 222
the following page. For port 1/0/2 and port 1/0/3, set the link type as Access; for port 1/0/4, set the link type as Trunk. Then click Apply. Configuration Guide 192 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 223
VLAN 10 with the description of Department_A. Add port 1/0/2 as an untagged port and port 1/0/4 as a tagged port to VLAN 10. Then click Apply. Configuration Guide 193 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 224
and port 1/0/4 as a tagged port to VLAN 20. Then click Apply. Figure 3-4 Create VLAN 20 for Department B 4) Click Save Config to save the settings. Configuration Guide 194 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 225
(config-if)#switchport trunk allowed vlan 10,20 Switch_1(config-if)#end Switch_1#copy running-config startup-config Verify the Configurations Switch_1#show vlan Configuration Guide 195 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 226
Gi1/0/1, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8, ... Gi1/0/15, Gi1/0/16, Gi1/0/17, Gi1/0/18 10 Department-A active Gi1/0/2, Gi1/0/4 20 Department-B active Gi1/0/3, Gi1/0/4 Configuration Guide 196 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 227
Configuring 802.1Q VLAN Appendix: Default Parameters 4 Appendix: Default Parameters Default settings of 802.1Q VLAN are listed in the following table. Table 4-1 Default Settings of 802.1Q VLAN Parameter Default Setting VLAN ID 1 PVID 1 Link Type ACCESS Configuration Guide 197 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 228
Part 10 Configuring MAC VLAN CHAPTERS 1. Overview 2. MAC VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 229
re-configure the switch to access the original VLAN. Using MAC VLAN can free the user from such a problem. It divides VLANs based on the MAC addresses of terminal devices. In this way, terminal devices always belong to laptop can access only the server in the VLAN it joins. Configuration Guide 199 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 230
MAC VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 200 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 231
. 2.1.3 Enabling MAC VLAN for the Port By default, MAC VLAN is disabled on all ports. You need to enable MAC VLAN for your desired ports manually. Configuration Guide 201 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 232
: ID of the 802.1Q VLAN where the port with MAC VLAN enabled is. descript: MAC address description for identification, with up to 8 characters. Configuration Guide 202 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 233
MAC VLAN for the port. show mac-vlan interface Verify the configuration of MAC VLAN on each interface. end Return to privileged EXEC mode. Configuration Guide 203 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 234
-vlan Switch(config-if)#show mac-vlan interface Port STATUS Gi1/0/1 Enable Gi1/0/2 Disable ...... Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 204 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 235
based on the network topology. Note: For the ports connecting the laptops, set the link type as General, and set the egress rule as Configuration Guide 205 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 236
to load the following page. Create VLAN 10, and add port 1/0/1 as untagged port and port 1/0/2 as tagged ports to VLAN 10. Click Apply. Configuration Guide 206 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 237
ID and click Create to bind the MAC address of Laptop A to VLAN 10 and bind the MAC address of Laptop B to VLAN 20. Configuration Guide 207 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 238
> 802.1Q VLAN > Port Config to load the following page. Set the link type of port1/0/2-5 as General, and click Apply. Figure 3-7 Port Configuration Configuration Guide 208 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 239
page. Create VLAN 20, and add port 1/0/5 as untagged port and ports 1/0/2-3 as tagged ports to VLAN 20. Click Apply. Figure 3-9 VLAN 20 Configuration Configuration Guide 209 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 240
:71 vlan 10 description PCA Switch_1(config)#mac-vlan mac-address 00:19:56:82:3B:70 vlan 20 description PCB Switch_1(config)#end Configuration Guide 210 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 241
(config-if)#switchport mode general Switch_3(config-if)#switchport general allowed vlan 20 untagged Switch_3(config-if)#end Switch_3#copy running-config startup-config Configuration Guide 211 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 242
1 Default VLAN active 10 DeptA 20 DeptB active active Ports Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8 ...... Gi1/0/2, Gi1/0/3, Gi1/0/4 Gi1/0/2, Gi1/0/3, Gi1/0/5 Configuration Guide 212 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 243
in the following table. Table 4-1 Default Settings of MAC VLAN Parameter Default Setting MAC Address None Description None VLAN ID None Port Enable Disable Configuration Guide 213 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 244
Part 11 Configuring Protocol VLAN CHAPTERS 1. Overview 2. Protocol VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 245
protocols, network administrators can use protocol VLAN to manage the network based on specific applications and services of network users. The figure below shows a common application scenario of protocol VLAN. With Switch 2 Switch 1 IPv4 Hosts VLAN 10 IPv6 Hosts VLAN 20 Configuration Guide 215 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 246
protocol VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 216 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 247
the data type of the frame. 2) Click Create to create the protocol template. Note: A protocol template that is bound to a VLAN cannot be deleted. Configuration Guide 217 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 248
protocol VLAN, create an 802.1Q VLAN and set the port type according to network requirements. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 218 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 249
Specify the destination service access point with 2 hexadecimal numbers. ssap_type: Specify the source service access point with 2 hexadecimal numbers. Note: T2600G-18TS only supports ether_2 frame. show 8137 5 AT SNAP ether-type 809B 6 IPv6 EthernetII ether-type 86DD Configuration Guide 219 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 250
10: Switch#configure Switch(config)#show protocol-vlan template Index Protocol Name Protocol Type 1 IP EthernetII ether-type 0800 2 ARP EthernetII ether-type 0806 Configuration Guide 220 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 251
(config-if)#show protocol-vlan vlan Index Protocol-Name VID Member 1 IPv6 10 Gi1/0/2 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 221 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 252
packets, Switch 2 will forward them to the corresponding VLANs according to their protocol types. The overview of the configuration on Switch 2 is as follows: Configuration Guide 222 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 253
> 802.1Q VLAN > Port Config to load the following page. Set the link type of port1/0/1-3 as General, and click Apply. Figure 3-2 Port Configuration Configuration Guide 223 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 254
Configuring Protocol VLAN Configuration Example 2) Choose the menu VLAN > 802.1Q VLAN > VLAN Config and click Create to load the following page. Create VLAN 10, and add port 1/0/1 and port 1/0/3 as untagged ports to VLAN 10. Click Apply. Figure 3-3 Create VLAN 10 Configuration Guide 224 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 255
link type of ports 1/0/1-3 as General, and respectively set the PVID of port 1/0/2 and port 1/0/3 as 10 and 20. Click Apply. Figure 3-5 Port Configuration Configuration Guide 225 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 256
page. Create VLAN 10, and add port 1/0/1 as tagged port and port 1/0/2 as untagged port to VLAN 10. Click Apply. Figure 3-6 Create VLAN 10 Configuration Guide 226 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 257
the IPv6 protocol template. Tips: The IPv4 protocol template is already provided by the switch. You only need to create the IPv6 protocol template. Configuration Guide 227 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 258
port 1, and click Apply. Select the IPv6 protocol name, enter VLAN ID 20, select port 1, and click Apply. Figure 3-9 Configure the IPv4 Protocol Group Configuration Guide 228 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 259
)#vlan 10 Switch_1(config-vlan)#name IPv4 Switch_1(config-vlan)#exit Switch_1(config)#vlan 20 Switch_1(config-vlan)#name IPv6 Switch_1(config-vlan)#exit Configuration Guide 229 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 260
10 and VLAN 20. Switch_2(config)#interface gigabitEthernet 1/0/1 Switch_2(config-if)#switchport mode general Switch_2(config-if)#switchport general allowed vlan 10,20 tagged Configuration Guide 230 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 261
)#protocol-vlan vlan 10 template 1 Switch_2(config)#protocol-vlan vlan 20 template 6 6) Add port 1/0/1 to the protocol groups. Switch_2(config)#show protocol-vlan vlan Configuration Guide 231 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 262
VLAN configuration: Switch_2#show vlan VLAN Name Status Ports 1 System-VLAN active Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4 ...... Gi1/0/25, Gi1/0/26, Gi1/0/27, Gi1/0/28 Configuration Guide 232 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 263
Configuring Protocol VLAN 10 IPv4 20 IPv6 active active Gi1/0/1, Gi1/0/2 Gi1/0/1, Gi1/0/3 Verify protocol group configuration: Switch_2#show protocol-vlan vlan Index Protocol-Name VID 1 IP 10 2 IPv6 20 Member Gi1/0/1 Gi1/0/1 Configuration Example Configuration Guide 233 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 264
-type 0800 ARP Ethernet II ether-type 0806 RARP Ethernet II ether-type 8035 IPX SNAP ether-type 8137 AT SNAP ether-type 809B Configuration Guide 234 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 265
Part 12 Configuring VLAN-VPN CHAPTERS 1. VLAN-VPN 2. Basic VLAN-VPN Configuration 3. Flexible VLAN-VPN Configuration 4. Configuration Example 5. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 266
easy-to-implement layer 2 VLAN technology, and it is usually deployed at the edge of the ISP (Internet Service Provider) network. With VLAN-VPN, when forwarding packets from the customer network to the ISP network, the VPN VLAN 100 VLAN 200 VLAN 1050 VLAN 100 VLAN 200 Configuration Guide 236 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 267
Configuring VLAN-VPN VLAN-VPN 1.2 Supported Features The VLAN-VPN function includes: basic VLAN-VPN and flexible VLAN-VPN (VPN mapping). Basic VLAN-VPN All packets ; when an untagged packet arrives, the switch will tag it with the default VLAN tag of the receiving port. Configuration Guide 237 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 268
Configuration Guidelines The TPID preset by the switch is 0x8100. If devices in the ISP network do not support the value, you should change it to ensure VLAN-VPN packets sent to the ISP network can be Config to load the following page. Figure 2-1 Global VPN Configuration Configuration Guide 238 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 269
) follows the configuration of the LAG but not its own. The configurations of the port can take effect only after it leaves the LAG. Configuration Guide 239 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 270
. uni : Set ports that are connected to the customer network as VPN ports. Note: The direct shift between ports modes uni and nni is not supported. To switch from the current mode to another mode, you can use no switchport dot1q-tunnel mode to disable the current mode. For T2600G-18TS - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 271
-if)#exit Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#switchport dot1q-tunnel mode nni Switch(config-if)#show dot1q-tunnel interface Port Type Member Configuration Guide 241 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 272
Configuring VLAN-VPN NNI Gi1/0/2 UNI Gi1/0/1 Switch(config-if)#end Switch#copy running-config startup-config Basic VLAN-VPN Configuration Configuration Guide 242 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 273
3-1 Configuring Flexible VLAN-VPN Follow these steps to configure flexible VLAN-VPN: 1) In the Global Config section, enable VLAN mapping globally and click Apply. Configuration Guide 243 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 274
configuration mode. Step 2 dot1q-tunnel mapping Enable VLAN mapping. Note: T2600G-18TS does not support this command. The status of VLAN mapping is enabled by default and cannot be disabled. mapping entry for identification. Step 5 end Return to privileged EXEC mode. Configuration Guide 244 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 275
-if)#show dot1q-tunnel mapping Port C-VLAN SP-VLAN Name Gi1/0/3 15 1040 mapping1 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 245 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 276
set global TPID as 0x9100. Demonstrated with T2600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 246 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 277
and click Create to load the following page. Create VLAN 1050, and add port 1/0/1 tagged and port 1/0/2 untagged to the VLAN. Then click Apply. Configuration Guide 247 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 278
Configuring VLAN-VPN Figure 4-3 Creating VLAN 1050 Configuration Example 3) Choose the menu VLAN > 802.1Q VLAN > VLAN Config and click Create to load the following page. Create VLAN 100, and add port 1/0/2 tagged to the VLAN. Click Apply. Figure 4-4 Creating VLAN 100 Configuration Guide 248 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 279
following page. Enable VPN globally, set TPID as 9100, and select port 1/0/1 as the up-link port. Click Apply. Figure 4-6 Configuring Global VLAN-VPN Configuration Guide 249 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 280
-if)#switchport general allowed vlan 1050 tagged Switch_1(config-if)#switchport pvid1050 Switch_1(config-if)#switchport dot1q-tunnel mode nni Switch_1(config-if)#exit Configuration Guide 250 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 281
and VPN port: Switch_1#show dot1q-tunnel interface Port Type Member NNI Gi1/0/1 UNI Gi1/0/2 Verify the port configuration: Switch_1#show interface switchport gigabitEthernet 1/0/1 Configuration Guide 251 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 282
: N/A Link Type: General Member in VLAN: Vlan Name Egress-rule ----------- 1 System-VLAN Untagged 100 Client_VLAN100 Tagged 200 Client_VLAN200 Tagged 1050 SP_VLAN Untagged Configuration Example Configuration Guide 252 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 283
listed in the following table. Table 5-1 Default Settings of VLAN-VPN Parameter Global VLAN-VPN VLAN Mapping Global TPID Default Setting Disable Disable 0x8100 Configuration Guide 253 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 284
Part 13 Configuring GVRP CHAPTERS 1. Overview 2. GVRP Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 285
C. Switch C can receive messages sent from Switch A in VLAN 10 only when the network administrator has manually created VLAN 10 on Switch B and Switch C. Figure 1-1 VLAN Topology Switch B VLAN 10 Switch A Switch n ...... ...... VLAN 10-20 Switch 1 VLAN 10-20 Switch 2 Configuration Guide 255 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 286
on both ends of the link. We call manually configured 802.1Q VLAN as static VLAN and To implement two-way registration, you need to manually configure the same static VLAN on both ends of , two-way deregistration is required. And you need to manually delete the static VALN on both ends of the link. - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 287
Trunk, or the system will prompt error when applying the configuration. Status Enable or disable GVRP on the port. By default, it is disabled. Configuration Guide 257 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 288
link type of the ports as Trunk, for GVRP can be enabled only on trunk interfaces. For details, refer to Configuring 802.1Q VLAN. Configuration Guide 258 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 289
timer, the range is is 60 to 3000 centiseconds and the default is 60 centiseconds. show gvrp global Verify the global configurations of GVRP. Configuration Guide 259 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 290
1/0/1 Port Status Reg-Mode LeaveAll JoinIn Leave LAG ---- Gi1/0/1 Enabled Fixed 1000 20 60 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 260 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 291
20 Switch 3 Dept. A: VLAN 10 Switch 4 Dept. B: VLAN 20 3.2 Configuration Scheme To reduce manual configuration and maintenance workload, GVRP can be enabled to implement dynamic VLAN registration and update on the switches. in two ways: using the GUI and using the CLI. Configuration Guide 261 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 292
click Apply. Select port 1/0/1, set Status as Enable, and set Registration Mode as Fixed. Keep the values of the timers as default. Click Apply. Configuration Guide 262 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 293
2) Choose the menu VLAN > 802.1Q VLAN > VLAN Config to load the following page. Create VLAN 10, and add port 1/0/1 to it. Click Apply. Configuration Guide 263 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 294
for Switch 5 1) Choose the menu VLAN > 802.1Q VLAN > Port Config to load the following page. Set the link type of ports 1/0/1-3 as Trunk. Configuration Guide 264 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 295
similar configurations. The following configuration procedures take Switch 1, Switch 2 and Switch 5 as example. Configurations for Switch 1 1) Enable GVRP globally. Switch_1#configure Switch_1(config)#gvrp Configuration Guide 265 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 296
trunk allowed vlan 20 Switch_2(config-if)#gvrp Switch_2(config-if)#gvrp registration fixed Switch_2(config-if)#end Switch_2#copy running-config startup-config Configuration Guide 266 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 297
/0/1 Enabled Fixed 1000 20 60 N/A Gi1/0/2 Disabled Normal 1000 20 60 N/A ...... Switch 2 Verify the global GVRP configuration: Switch_2#show gvrp global GVRP Global Status Configuration Guide 267 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 298
---- ------ -------- Gi1/0/1 Enabled Normal 1000 20 60 N/A Gi1/0/2 Enabled Normal 1000 20 60 N/A Gi1/0/3 Enabled Normal 1000 20 60 N/A Gi1/0/4 Disabled Normal 1000 20 60 N/A ...... Configuration Guide 268 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 299
Config GVRP Port Config Status Registration Mode LeaveAll Timer Join Timer Leave Timer Default Setting Disable Disable Normal 1000 centisecond 20 centisecond 60 centisecond Configuration Guide 269 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 300
Part 14 Configuring Private VLAN CHAPTERS 1. Overview 2. Private VLAN Configurations 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 301
Note: T2600G-18TS doesn't support the function of Configuring Private VLAN creating primary VLAN and secondary VLAN, private VLAN is an effective solution to this problem. Based on 802.1Q VLAN, private VLAN pairs a secondary VLAN with a A Switch B VLAN2 VLAN3 VLAN4 Configuration Guide 271 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 302
isolated by secondary VLANs, VLAN2, VLAN3 and VLAN4, saving VLAN resources for Switch A. Figure 1-2 Topology of Private VLAN Switch A VLAN5 Switch B VLAN2 VLAN3 VLAN4 Configuration Guide 272 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 303
compose one private VLAN. To avoid long response time of the switch, you are recommended to create less than 10 secondary VLANs at a time. Configuration Guide 273 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 304
this port is its primary VLAN ID. Primary VLAN Specify the ID of the primary VLAN to add the port to the primary VLAN. Configuration Guide 274 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 305
is used to connect to end users and shield information from upper-layer devices. The PVID of this port is its secondary VLAN ID. Configuration Guide 275 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 306
. isolated: Set the secondary VLAN type as Isolated. Users in the same community VLAN can communicate with each other. exit Exit VLAN configuration mode. Configuration Guide 276 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 307
5 Switch(config-vlan)#exit Switch(config)#show vlan private-vlan Primary Secondary Type Ports 6 5 Community Switch(config)#end Switch#copy running-config startup-config Configuration Guide 277 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 308
configure the port type of port 1/0/2 as Promiscuous, and add it to the private VLAN composed of primary VLAN 6 and secondary VLAN 5. Switch#configure Configuration Guide 278 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 309
-id: Specify the ID of the secondary VLAN. The ID ranges from 2 to 4094. vlantype: Specify the secondary VLAN type, either community or isolated. Configuration Guide 279 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 310
Ports 6 5 Community Gi1/0/3 Switch(config)#show vlan private-vlan interface gigabitEthernet 1/0/3 Port type Gi1/0/3 Host Switch(config)#end Switch#copy running-config startup-config Configuration Guide 280 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 311
A. To meet the requirement, configure private VLAN on Switch A. This chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 281 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 312
5. Similarly, create primary VLAN 6 and secondary VLAN 7, select Community as the Secondary VLAN Type, click Create and primary VLAN 6 is paired with secondary VLAN 7. Configuration Guide 282 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 313
the following page. Add port 1/0/2 to primary VLAN 6 and secondary VLAN 5, and select Promiscuous as its port type. Figure 3-3 Configuring the Up-link Port Configuration Guide 283 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 314
a private VLAN Switch_A(config)#vlan 6 Switch_A(config-vlan)#private-vlan primary Switch_A(config-vlan)#exit Switch_A(config)#vlan 5 Switch_A(config-vlan)#private-vlan community Configuration Guide 284 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 315
-if)#switchport private-vlan host Switch_A(config-if)#switchport private-vlan host-association 6 7 community Switch_A(config-if)#end Switch_A#copy running-config startup-config Configuration Guide 285 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 316
/0/3 Normal Gi1/0/4 Normal Gi1/0/5 Normal Gi1/0/6 Normal Gi1/0/7 Normal Gi1/0/8 Normal Gi1/0/9 Normal Gi1/0/10 Host Gi1/0/11 Host Gi1/0/12 Normal ...... Configuration Example Configuration Guide 286 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 317
VLAN Type Community Table 4-2 Default Settings of Port Configuration Parameter Default Setting Port selected None Port Type Promiscuous Primary VLAN None Secondary VLAN None Configuration Guide 287 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 318
Part 16 Configuring Spanning Tree CHAPTERS 1. Spanning Tree 2. STP/RSTP Configurations 3. MSTP Configurations 4. STP Security Configurations 5. Configuration Example for MSTP 6. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 319
load balancing among VLANs. 1.2 Basic Concepts 1.2.1 STP/RSTP Concepts Based on the networking topology, this section will introduce some basic concepts in STP/ RSTP. Configuration Guide 289 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 320
ID is composed of a 2-byte priority and a 6-byte MAC address. The priority is allowed to be configured manually on the switch, and the switch with the lowest priority value will be elected as the root bridge. If BPDUs from another switch, it will become an alternate port. Configuration Guide 290 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 321
RSTP/MSTP, the port status includes: Discarding, Learning and Forwarding. The Discarding status is the grouping of STP's Blocking, Listening and Disabled, and the Configuration Guide 291 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 322
the port. The smaller the value, the higher link speed the port has. The path cost can be manually configured on each port. If not, the path cost values are automatically calculated according to the link speed root path cost increases as the BPDU propagates further. Configuration Guide 292 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 323
are independent of each other. As is shown in Figure 1-4, there are three instances in a region, and each instance has its own root bridge. Configuration Guide 293 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 324
used to prevent loops caused by link congestions or link failures. It is recommended to enable this function on root ports and alternate ports. Configuration Guide 294 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 325
to prevent the switch from frequently removing MAC address entries. It is recommended to enable this function on the ports of non-root switches. Configuration Guide 295 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 326
-BPDUs exceeds the maximum number you set in the TC threshold, the switch will not remove MAC address entries in the TC protect cycle. Configuration Guide 296 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 327
configure STP/RSTP parameters on ports: 1) In the Port Config section, configure STP/RSTP parameters on ports. UNIT Select the desired unit or LAGs. Configuration Guide 297 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 328
port, they can transit their states to forwarding directly. Three options are supported: Auto, Open(Force) and Close(Force). By default, it is Auto Open(Force): The port is manually identified as connected to a P2P link. Close(Force): The port is manually identified as not connected to Guide 298 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 329
to. 2.1.2 Configuring STP/RSTP Globally Choose the menu Spanning Tree > STP Config > STP Config to load the following page. Figure 2-2 Configuring STP/RSTP Globally Configuration Guide 299 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 330
tree function, choose the STP mode as STP/RSTP, and click Apply. Spanning-Tree Enable or disable spanning tree function globally on the switch. Configuration Guide 300 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 331
STP/RSTP Configurations The STP Summary section shows the summary information of spanning tree : Spanning Tree Displays the status of the spanning tree function. Configuration Guide 301 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 332
-list] [port-channel port-channel | range port-channel port-channel-list} Enter interface configuration mode. spanning-tree Enable spanning tree function for desired ports. Configuration Guide 302 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 333
gigabitEthernet 1/0/3 Switch(config-if)#spanning-tree Switch(config-if)#spanning-tree common-config port-priority 32 Switch(config-if)#show spanning-tree interface gigabitEthernet 1/0/3 Configuration Guide 303 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 334
STP/RSTP parameters of the switch. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 304 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 335
spanning tree function globally. Step 4 show spanning-tree active (Optional) View the active information of STP/RSTP. Step 5 end Return to privileged EXEC mode. Configuration Guide 305 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 336
) Rstp Desg Fwd Gi1/0/20 Enable 128 200000 200000 No Yes(auto) Rstp Desg Fwd Switch(config)#end Switch#copy running-config startup-config Configuration Guide 306 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 337
to configure parameters on ports in CIST: 1) In the Port Config section, configure the parameters on ports. UNIT Select the desired unit or LAGs. Configuration Guide 307 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 338
port, they can transit their states to forwarding directly. Three options are supported: Auto, Open(Force) and Close(Force). By default, it is Auto Open(Force): The port is manually identified as connected to a P2P link. Close(Force): The port is manually identified as not connected to Guide 308 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 339
the Region Name and Revision Level Choose the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Figure 3-2 Configuring the Region Configuration Guide 309 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 340
be deleted from the corresponding instance. 2) In the Instance Config section, configure the priority of the switch in the desired instance, and click Apply. Configuration Guide 310 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 341
the instance. Click the Clear All to clear up all VLANs from the instance. The cleared VLAN will be automatically mapped to the CIST. Configuration Guide 311 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 342
desired instance. 2) In the Instance Port Config section, configure port parameters in the desired instance. UNIT Select the desired unit or LAGs for configuration. Configuration Guide 312 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 343
packets. Disconnected: The port is enabled with spanning tree function but not connected to any device. Displays the LAG which the port belongs to. Configuration Guide 313 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 344
hops that occur in a specific region before the BPDU is discarded. The valid values are from 1 to 40, and the default value is 20. Configuration Guide 314 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 345
. STP: Specify the spanning tree mode as STP. RSTP: Specify the spanning tree mode as RSTP. MSTP: Specify the spanning tree mode as MSTP. Configuration Guide 315 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 346
path cost from the switch to the root bridge in CIST. Regional Root Bridge Displays the bridge ID of the root bridge in IST. Configuration Guide 316 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 347
] [port-channel port-channel | range port-channel port-channel-list } Enter interface configuration mode. spanning-tree Enable spanning tree function for the desired port. Configuration Guide 317 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 348
in the configuration file. This example shows how to enable spanning tree function for port 1/0/3 and configure the port priority as 32 : Switch#configure Configuration Guide 318 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 349
the desired instance. Step 3 spanning-tree mst configuration Enter MST configuration mode, as to configure the VLAN-Instance mapping, region name and revision level. Configuration Guide 319 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 350
R1 Switch(config-mst)#revision 100 Switch(config-mst)#instance 5 vlan 2-6 Switch(config-mst)#show spanning-tree mst configuration Region-Name : R1 Revision : 100 Configuration Guide 320 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 351
to view, ranging from 1 to 8. port: Specify the port number. lagid: Specify the ID of the LAG. Step 5 end Return to privileged EXEC mode. Configuration Guide 321 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 352
priority. CIST priority the priority of a switch in CIST. The switch with the highest priority will be elected as the root bridge in CIST. Configuration Guide 322 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 353
as 8 and the Max Hop as 25: Switch#configure Switch(config)#spanning-tree priority 36864 Switch(config-if)#spanning-tree timer forward-time 12 Configuration Guide 323 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 354
function globally : Switch#configure Switch(config)#spanning-tree mode mstp Switch(config)#spanning-tree Switch(config)#show spanning-tree active Spanning tree is enabled Configuration Guide 324 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 355
-0a-eb-13-12-ba Local bridge is the root bridge Designated Bridge Priority : 32768 Address : 00-0a-eb-13-12-ba Local Bridge Configuration Guide 325 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 356
Configuring Spanning Tree Priority : 32768 Address : 00-0a-eb-13-12-ba Interface Prio Cost Role Status Gi/0/16 128 200000 Altn Blk Gi/0/20 128 200000 Mstr Fwd Switch(config)#end Switch#copy running-config startup-config MSTP Configurations Configuration Guide 326 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 357
GUI 4.1.1 Configuring the STP Security Choose the menu Spanning Tree > STP Security > Port Protect to load the following page. Figure 4-1 Configuring the Port Protect Configuration Guide 327 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 358
BPDUs. 4.1.2 (Optional) Configuring the Threshold and TC Protect Cycle Note: It's not available to configure TC threshold and TC Protect Cycle in T2600G-28TS. Configuration Guide 328 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 359
it does not receive BPDUs. After the link restores to normal, the port will transit to its normal state, so loops can be prevented. Configuration Guide 329 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 360
-tree guard root Switch(config-if)#spanning-tree bpdufilter Switch(config-if)#spanning-tree bpduguard Switch(config-if)#show spanning-tree interface-security gigabitEthernet 1/0/3 Configuration Guide 330 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 361
the ID of the LAG. end Return to privileged EXEC mode. Step 7 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 331 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 362
BPDU-Guard Loop-Protect Root-Protect TC-Protect Gi1/0/3 Enable ---------Enable -----------Enable -----------Enable --------Enable Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 332 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 363
instances to ensure traffic can be transmitted along the respective instance. Here we configure two instances to meet the requirement, as is shown below: Configuration Guide 333 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 364
load the following page. Enable spanning tree function on port 1/0/1 and port 1/0/2. Here we leave the values of the other parameters as default settings. Configuration Guide 334 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 365
3) Choose the menu Spanning Tree > MSTP Instance > Instance Config to load the following page. Map VLAN101-VLAN103 to instance 1; map VLAN104-VLAN106 to instance 2. Configuration Guide 335 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 366
Configuring Spanning Tree Figure 5-5 Configuring the VLAN-Instance Mapping Configuration Example for MSTP 4) Choose the menu Spanning Tree > MSTP Instance > Instance Port Config to load the following page. Set the path cost of port 1/0/1 in instance 1 as 400000. Configuration Guide 336 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 367
> STP Config to load the following page. Enable MSTP function globally, here we leave the values of the other global parameters as default settings. Configuration Guide 337 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 368
the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Set the region name as 1 and the revision level as 100. Configuration Guide 338 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 369
> MSTP Instance > Instance Config to load the following page. Configure the priority of Switch B as 0 to set it as the root bridge in instance 1. Configuration Guide 339 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 370
the menu Spanning Tree > MSTP Instance > Instance Port Config to load the following page. Set the path cost of port 1/0/2 in instance 2 as 400000. Configuration Guide 340 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 371
> STP Config to load the following page. Enable MSTP function globally. Here we leave the values of the other global parameters as default settings. Configuration Guide 341 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 372
the menu Spanning Tree > MSTP Instance > Region Config to load the following page. Set the region name as 1 and the revision level as 100. Configuration Guide 342 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 373
> MSTP Instance > Instance Config to load the following page. Configure the priority of Switch C as 0 to set it as the root bridge in instance 2. Configuration Guide 343 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 374
leave the values of the other global parameters as default settings. Figure 5-18 Configuring the MSTP Globally 6) Click Save Config to save the settings. Configuration Guide 344 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 375
spanning tree function on port 1/0/1 and port 1/0/2, and specify the path cost of port 1/0/2 in instance 2 as 400000. Switch#configure Switch(config)#interface gigabitEthernet 1/0/2 Configuration Guide 345 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 376
instance 2; configure the priority of Switch C in instance 2 as 0 to set it as the root bridge in instance 2: Switch(config)#spanning-tree mst configuration Configuration Guide 346 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 377
: 400000 Root Port : 1 Designated Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Local Bridge Priority : 32768 Address : 00-0a-eb-13-23-97 Configuration Guide 347 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 378
instance 1: Switch(config)#show spanning-tree mst instance 1 MST-Instance 1 Root Bridge Priority : 0 Address : 00-0a-eb-13-12-ba Configuration Example for MSTP Configuration Guide 348 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 379
-0a-eb-13-12-ba Interface Prio Cost Role Status Gi1/0/1 128 200000 Altn Blk Gi1/0/2 128 200000 Root Fwd Configuration Example for MSTP Configuration Guide 349 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 380
-d8-9d-88-f7 Local bridge is the root bridge Designated Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Configuration Example for MSTP Configuration Guide 350 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 381
Configuring Spanning Tree Local Bridge Priority : 0 Address : 3c-46-d8-9d-88-f7 Interface Prio Cost Role Status Gi1/0/1 128 200000 Desg Fwd Gi1/0/2 128 200000 Desg Fwd Configuration Example for MSTP Configuration Guide 351 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 382
-Path Cost Auto Edge Port Disable P2P Link Auto MCheck ------ Table 6-3 Default Settings of the MSTP Instance Parameter Default Setting Status Disable Priority 32768 Configuration Guide 352 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 383
Configuring Spanning Tree Parameter Port Priority Path Cost Default Setting 128 Auto Appendix: Default Parameters Configuration Guide 353 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 384
Part 17 Configuring OAM CHAPTERS 1 . Ethernet OAM 2 . Ethernet OAM Configurations 3 . Viewing OAM Statistics 4 . Configuration Example 5 . Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 385
Maintenance) is a Layer 2 protocol for monitoring and troubleshooting Ethernet networks. It can monitor link performance, monitor faults a network administrator can manage the network effectively. TP-Link switches support EFM OAM which is defined in IEEE 802.3ah. The following basic Guide 355 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 386
supports the following OAM features: Link Monitoring, Remote Failure Indication (RFI), and Remote Loopback. Link Monitoring Link Monitoring is for monitoring link performance under various circumstances. When problems of received frames, which can be configured by users. Configuration Guide 356 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 387
T2600G-18TS does not support this feature. With Remote Loopback, administrators can test the link performance like delay, jitter, and frame loss rate during installation or for troubleshooting. Figure 1-2 Remote is in active mode, and that on Switch B is in passive mode. Configuration Guide 357 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 388
mode. Besides, Switch B sends an Information OAMPDU to inform its state updating. TP-Link switches can act as Switch A and initiate Remote Loopback request. Configuration Guide 358 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 389
GUI 2.1.1 Enabling OAM and Configuring OAM Mode Choose the menu Ethernet OAM > Basic Config > Basic Config to load the following page. Figure 2-1 Basic Configuration Configuration Guide 359 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 390
the port. By default, it is disabled. 2.1.2 Configuring Link Monitoring Choose the menu Ethernet OAM > Link Monitoring > Link Monitoring to load the following page. Configuration Guide 360 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 391
. Notify 4) Click Apply. Enable or disable the port to report the Link Event. By default, all types of the Link Events can be reported. Configuration Guide 361 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 392
Notify. If the switch detects an unspecified critical event occurs, it will report this condition locally and send Information OAMPDU to notify the peer. Configuration Guide 362 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 393
Configuring OAM Ethernet OAM Configurations 2.1.4 Configuring Remote Loopback T2600G-18TS does not support this feature. Choose the menu Ethernet OAM > Remote Loopbak > Remote Loopback to load the be in active mode and has established OAM connection with the peer. Configuration Guide 363 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 394
. The OAM information of the local entity is as follows: OAM Displays whether OAM is enabled. Mode Displays OAM mode of the local entity. Configuration Guide 364 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 395
the local entity supports Remote Loopback. Unidirection Displays whether the local entity supports Unidirection. Link Monitoring Displays whether the local entity supports Link Monitoring. Variable of the remote entity. Max OAMPDU Displays the maximum size of OAMPDU. Configuration Guide 365 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 396
entity supports Remote Loopback. Unidirection Displays whether the remote entity supports Unidirection. Link Monitoring Displays whether the remote entity supports Link { port | port-list } ] Verify the OAM configuration. Step 6 end Return to privileged EXEC mode. Configuration Guide 366 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 397
: Step 1 configure Enter global configuration mode. Step 2 interface {fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list} Enter interface configuration mode. Configuration Guide 367 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 398
-if)#show ethernet-oam configuration interface gigabitEthernet 1/0/1 Gi1/0/1 ...... Symbol Period Error Notify State : Enabled Window : 1000 milliseconds Threshold : 1 Error Symbol ...... Switch(config-if)#end Configuration Guide 368 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 399
)#interface gigabitEthernet 1/0/1 Switch(config-if)#ethernet-oam link-monitor frame threshold 1 window 20 notify enable Switch(config-if)#show ethernet-oam configuration interface gigabitEthernet 1/0/1 Configuration Guide 369 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 400
ethernet-oam configuration [ interface fastEthernet { port | port-list } | interface gigabitEthernet { port | port-list } ] Verify the OAM configuration. Step 5 end Return to privileged EXEC mode. Configuration Guide 370 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 401
: Step 1 configure Enter global configuration mode. Step 2 interface {fastEthernet port | range fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list} Enter interface configuration mode. Configuration Guide 371 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 402
-if)#show ethernet-oam configuration interface gigabitEthernet 1/0/1 Gi1/0/1 ...... Frame Seconds Error Notify State : Enabled Window : 80000 milliseconds Threshold : 1 Error Seconds ...... Switch(config-if)#end Configuration Guide 372 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 403
)#ethernet-oam dying-gasp notify enable Switch(config-if)#ethernet-oam remote-failure notify enable Switch(config-if)#show ethernet-oam configuration interface gigabitEthernet 1/0/1 Configuration Guide 373 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 404
end Switch#copy running-config startup-config 2.2.4 Configuring Remote Loopback T2600G-18TS does not support this feature. Follow these steps to configure Remote Loopback: Step 1 configure Enter global OAM remote loopback mode of the peer on port 1/0/1: Switch#configure Configuration Guide 374 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 405
the local entity supports Remote Loopback. Unidirection: Displays whether the local entity supports Unidireciton. Link Monitoring: Displays whether the local entity supports Link Monitoring. Variable : The local OAM entity rejects the remote peer OAM entity. Configuration Guide 375 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 406
OAM status of port 1/0/1: Switch(config)#show ethernet-oam status interface gigabitEthernet 1/0/1 Gi1/0/1 Local Client OAM : Enabled Mode : Active Max OAMPDU : 1518 Bytes Remote Loopback : Supported Unidirection : Not Supported Configuration Guide 376 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 407
Variable Request PDU Revision Operation Status Loopback Status : Supported : Not Supported : 1 : Operational : No Loopback Remote Client Mode Remote Loopback : Supported Unidirection : Not Supported Link Monitoring : Supported Variable Request : Not Supported PDU Revision : - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 408
> Statistics to load the following page. Figure 3-1 OAM Statistics Select a port and view the number of different OAMPDUs transmitted and received on this port: Configuration Guide 378 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 409
To OAM Displays the number of frames that are not transmitted successfully on the OAM sublayer but not due to an internal OAM error. Configuration Guide 379 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 410
link or remote link. Critical Event Displays the number of Critical Event link events that have occurred on the local link or remote link. Configuration Guide 380 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 411
ethernet-oam statistics interface gigabitEthernet 1/0/1 Gi1/0/1 Information OAMPDU TX : 28 Information OAMPDU RX : 28 Unique Event Notification OAMPDU TX : 0 Unique Event Notification OAMPDU RX : 0 Configuration Guide 381 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 412
OAMPDU RX : 0 Organization Specific OAMPDUs TX : 0 Organization Specific OAMPDUs RX : 0 Unsupported OAMPDU TX : 0 Unsupported OAMPDU RX : 0 Frames Lost Due To OAM : 0 Viewing OAM Statistics Configuration Guide 382 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 413
-oam event-log interface gigabitEthernet 1/0/1 Gi1/0/1 Event Listing Type Location Time Stamp Critical Event Remote 2016-01-01 08:08:00 Local Event Statistics Configuration Guide 383 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 414
: 0 Remote Event Statistics Error Symbol Event : 0 Error Frame Event : 0 Error Frame Period Event : 0 Error Frame Seconds Event : 0 Dying Gasp : 0 Critical Event : 1 Viewing OAM Statistics Configuration Guide 384 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 415
Example 4 Configuration Example 4.1 Network Requirements A network administrator wants to manage and troubleshoot the network more effectively, requiring that the link failure and frame errors on the and configure the mode as Active and the state as Enable. Click Apply. Configuration Guide 385 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 416
1/0/1. Make sure that Notify is enabled and specify the threshold and window according to your needs. Here we keep the default parameters. Click Apply. Configuration Guide 386 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 417
Configuring OAM Figure 4-3 Link Monitoring Configuration Configuration Example 3) Choose the menu Ethernet OAM > RFI > Remote Failure Indication to load the following page. Select port 1/0/1 and enable Dying Gasp Notify and Critical Event Notify. Click Apply. Configuration Guide 387 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 418
port 1/0/1 to check the OAM status. When the connection status becomes Operational, it indicates that OAM connection has been established and OAM works normally. Configuration Guide 388 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 419
Configuring OAM Figure 4-5 Discovery Infomation Configuration Example 5) Click Save Config to save the settings. 6) Choose the menu Ethernet OAM > Statistics > Event Log to load the following page. Select port 1/0/1 to view the event logs on the port. Configuration Guide 389 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 420
notify enable Switch_A(config-if)#ethernet-oam dying-gasp critical-event notify enable Switch_A(config-if)#ethernet-oam link-monitor frame-period notify enable Configuration Guide 390 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 421
Symbol Frame Error Notify State Window Threshold : Enabled : 1000 milliseconds : 1 Error Frame Frame Period Error Notify State : Enabled Window : 148810 Frames Threshold : 1 Error Frame Configuration Guide 391 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 422
: Supported Variable Request : Not Supported PDU Revision : 1 Operation Status : Operational Loopback Status : No Loopback Remote Client Mode : Passive MAC Address : 18-A6-F7-DB-63-81 Vendor(OUI) : 000aeb Max OAMPDU : 1518 Bytes Remote Loopback : Supported Configuration Guide - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 423
Configuring OAM Unidirection : Not Supported Link Monitoring : Supported Variable Request : Not Supported PDU Revision : 1 Loopback Status : No Loopback Vendor 0 Error Frame Event : 0 Error Frame Period Event : 0 Error Frame Seconds Event : 0 Dying Gasp : 0 Configuration Guide 393 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 424
Configuring OAM Critical Event : 1 Configuration Example Configuration Guide 394 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 425
Threshold : 1 Window: 10*100 ms Notify: Enable Threshold : 1 Window: 1488100 frames Notify: Enable Threshold : 1 Window: 600*100 ms Notify: Enable Enable Enable Ignore None Configuration Guide 395 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 426
Part 18 Configuring Layer 2 Multicast CHAPTERS 1. Layer 2 Multicast 2. IGMP Snooping Configurations 3. Configuring MLD Snooping 4. Viewing Multicast Snooping Configurations 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 427
network resources and impacting information security. Multicast, however, solves all the problems caused by unicast and broadcast. With multicast, the source only need to Internet information provider can provide value-added services such as Online Live, IPTV, Distance Education Guide 397 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 428
Layer 2 switch Host A Receiver Host B Multicast packets Host C Receiver Host A Receiver 1.2 Supported Layer 2 Multicast Protocols Host B Host C Receiver Layer 2 Multicast protocol for IPv4: IGMP and users, to build and maintain Layer 2 multicast forwarding table. Configuration Guide 398 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 429
Unknown Multicast decides how to process the multicast data when its destination multicast address is not in the multicast forwarding table of the switch. Configuration Guide 399 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 430
Configuring Layer 2 Multicast IGMP Snooping Configurations For switches that support MLD Snooping, IGMP Snooping and MLD Snooping share the setting of Unknown Multicast, so you have to it from the multicast forwarding table. The valid values are from 60 to 600 seconds. Configuration Guide 400 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 431
be sent. The valid values are from 1 to 5. Verifying IGMP Snooping Status IGMP Snooping Status Table displays VLANs and ports with IGMP Snooping enabled. Configuration Guide 401 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 432
this multicast group. Follow these steps to configure fast leave. 1) Select the port to be configured and select Enable under the Fast Leave column. Configuration Guide 402 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 433
designate VLAN, and configure the aging time of the router ports and the member ports. VLAN ID Specify the VLAN to enable IGMP Snooping. Configuration Guide 403 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 434
send the data to all member ports of the VLAN. In this way, Multicast VLAN saves bandwidth and reduces network load of Layer 3 devices. Configuration Guide 404 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 435
router port table. The valid values are from 60 to 600 seconds. When the router port time is 0, the VLAN uses the global time. Configuration Guide 405 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 436
Specify the VLAN to be configured. Forbidden Router Ports 2) Click Apply. Select the ports to forbid them from being router ports in the VLAN. Configuration Guide 406 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 437
the IGMP Snooping Querier Table. Viewing Settings of IGMP Querier The IGMP Snooping Querier Table displays all the related settings of the IGMP querier. Configuration Guide 407 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 438
specific multicast groups. Searching Profile Enter the search condition in the Search Option field to search the profile in the IGMP Profile Info table. Configuration Guide 408 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 439
's filtering profile and the number of multicast groups a port can join. Choose the menu Multicast > IGMP Snooping > Profile Binding to load the following page. Configuration Guide 409 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 440
groups a port can join and overflow action. 1) Select a port to configure its Max Group and Overflow Action. Select Select the port to be configured. Configuration Guide 410 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 441
following page. Figure 2-9 View IGMP Statistics on the Port Configuring Auto Refresh Follow these steps to configure auto refresh. 1) Enable or disable Auto Refresh. Configuration Guide 411 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 442
. 2.1.9 Enabling IGMP Accounting and Authentication Choose the menu Multicast > IGMP Snooping > IGMP Authentication to load the following page. Figure 2-10 IGMP Accounting and Authentication Configuration Guide 412 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 443
a port as a static member port in the multicast group. Choose the menu Multicast > Multicast Table > Static IPv4 Multicast Table to load the following page. Configuration Guide 413 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 444
using Multicast IP, VLAN ID or Forward Port as the Search Option. Static Multicast IP Table displays details of all IGMP static multicast groups. Configuration Guide 414 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 445
file. The following example shows how to enable IGMP Snooping globally and enable IGMP Snooping on port 1/0/3: Switch#configure Switch(config)#ip igmp snooping Configuration Guide 415 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 446
. Step 4 show ip igmp snooping Show the basic IGMP snooping configuration. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 416 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 447
. Step 4 show ip igmp snooping Show the basic IGMP snooping configuration. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 417 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 448
Configuring Layer 2 Multicast IGMP Snooping Configurations For switches that support MLD Snooping, IGMP Snooping and MLD Snooping share the setting of Unknown Multicast, so you have to 600 seconds. mtime is the aging time of member ports, ranging from 60 to 600 seconds. Configuration Guide 418 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 449
fastEthernet port-list | gigabitEthernet port | range gigabitEthernet port-list | port-channel port-channel-id | range port-channe port-channel-list} Enter interface configuration mode Configuration Guide 419 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 450
configuration mode Step 3 ip igmp snooping max-groups maxgroup Enter the number of multicast groups the port can join. The range is 0 to 1000. Configuration Guide 420 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 451
/0/3 500 Drop Switch(config-if)#end Switch#copy running-config startup-config 2.2.5 Configuring IGMP Snooping Last Listener Query Step 1 configure Enter global configuration mode. Configuration Guide 421 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 452
Age Time :300 Global Report Suppression :Disable Global Authentication Accounting:Disable Enable Port: Enable VLAN: Switch(config)#end Switch#copy running-config startup-config Configuration Guide 422 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 453
Static Router Port:None Dynamic Router Port:None Forbidden Router Port:None Switch(config)#show ip igmp snooping vlan 3 Vlan Id: 3 Router Time:500 Configuration Guide 423 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 454
igmp snooping vlan 2 Vlan Id: 2 Router Time:0 Member Time:0 Static Router Port:Gi1/0/2 Dynamic Router Port:None Forbidden Router Port:None Switch(config)#end Configuration Guide 424 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 455
Time:0 Member Time:0 Static Router Port:None Dynamic Router Port:None Forbidden Router Port:Gi1/0/4-6 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 425 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 456
startup-config 2.2.7 Configuring IGMP Snooping Parameters in the Multicast VLAN Configuring Router Port Time and Member Port Time Step 1 configure Enter global configuration mode. Configuration Guide 426 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 457
:None Forbidden Router Port:None Switch(config)#end Switch#copy running-config startup-config Configuring Static Router Port Step 1 configure Enter global configuration mode. Configuration Guide 427 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 458
:None Forbidden Router Port:None Switch(config)#end Switch#copy running-config startup-config Configuring Forbidden Router Port Step 1 configure Enter global configuration mode. Configuration Guide 428 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 459
:None Forbidden Router Port:Gi1/0/6 Switch(config)#end Switch#copy running-config startup-config Configuring Replace Source IP Step 1 configure Enter global configuration mode. Configuration Guide 429 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 460
Router Port:None Switch(config)#end Switch#copy running-config startup-config 2.2.8 Configuring the Querier Enabling IGMP Querier Step 1 configure Enter global configuration mode. Configuration Guide 430 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 461
. ip-addr is the source IP address of the general query messages sent by the querier. It cannot be a multicast address or a broadcast address. Configuration Guide 431 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 462
2.2.9 Configuring Multicast Filtering Creating Profile Step 1 configure Enter global configuration mode. Step 2 ip igmp profile id Create a new profile and enter profile configuration mode. Configuration Guide 432 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 463
range 226.0.0.5 226.0.0.10 Switch(config)#end Switch#copy running-config startup-config Binding Profile to the Port Step 1 configure Enter global configuration mode. Configuration Guide 433 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 464
-if)#show ip igmp profile IGMP Profile 1 deny range 226.0.0.5 226.0.0.10 Binding Port(s) Gi1/0/2 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 434 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 465
Switch(config)#end Switch#copy running-config startup-config Note: IGMP Authentication takes effect only after AAA is enabled and RADIUS server is configured. Configuration Guide 435 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 466
configuration. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. IGMP Snooping Configurations Configuration Guide 436 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 467
Unknown Multicast decides how to process the multicast data when its destination multicast address is not in the multicast forwarding table of the switch. Configuration Guide 437 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 468
longer consider this port as a member port and delete it from the multicast forwarding table. The valid values are from 60 to 600 seconds. Configuration Guide 438 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 469
be sent. The valid values are from 1 to 5. Verifying MLD Snooping Status MLD Snooping Status Table displays VLANs and ports with MLD Snooping enabled. Configuration Guide 439 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 470
this multicast group. Follow these steps to configure fast leave. 1) Select the port to be configured and select Enable under the Fast Leave column. Configuration Guide 440 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 471
designate VLAN, and configure the aging time of the router ports and the member ports. VLAN ID Specify the VLAN to enable MLD Snooping. Configuration Guide 441 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 472
send the data to all member ports of the VLAN. In this way, Multicast VLAN saves bandwidth and reduces network load of Layer 3 devices. Configuration Guide 442 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 473
router port table. The valid values are from 60 to 600 seconds. When the router port time is 0, the VLAN uses the global time. Configuration Guide 443 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 474
Specify the VLAN to be configured. Forbidden Router Ports 2) Click Apply. Select the ports to forbid them from being router ports in the VLAN. Configuration Guide 444 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 475
the MLD Snooping Querier Table. Viewing Settings of MLD Querier The MLD Snooping Querier Table displays all the related settings of the MLD querier. Configuration Guide 445 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 476
specific multicast groups. Searching Profile Enter the search condition in the Search Option field to search the profile in the MLD Profile Info table. Configuration Guide 446 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 477
range and click Delete to delete an IP range. 3) Click Submit to save the settings; click Back to go back to the previous page. Configuration Guide 447 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 478
port. One port can only be bound to one profile. ClearBinding 2) Click Apply. Click to clear the binding between the profile and the port. Configuration Guide 448 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 479
will not join any new multicast groups. Replace: Replace the existing multicast group owning the lowest multicast MAC address with the new multicast group. Configuration Guide 449 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 480
valid values are from 3 to 300 seconds. Viewing MLD Statistics The MLD Statistics table displays all kinds of MLD statistics of all the ports. Configuration Guide 450 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 481
using Multicast IP, VLAN ID or Forward Port as the Search Option. Static Multicast IP Table displays details of all MLD static multicast groups. Configuration Guide 451 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 482
following example shows how to enable MLD Snooping globally and enable MLD Snooping Switch#configure Switch(config)#ipv6 mld snooping Switch(config)#interface gigabitEthernet 1/0/3 Configuration Guide 452 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 483
Save the settings in the configuration file. The following example shows how to enable Report Message Suppression: Switch#configure Switch(config)#ipv6 mld snooping Configuration Guide 453 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 484
the same time. The following example shows how to configure the switch to discard unknown multicast data: Switch#configure Switch(config)#ipv6 mld snooping Configuration Guide 454 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 485
the configuration file. The following example shows how to configure the global router port time and member port time as 200 seconds: Switch#configure Configuration Guide 455 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 486
of all the ports. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 456 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 487
-list ]] max-groups Show the IGMP group limitation on the specified port(s) or of all the ports. Step 6 end Return to privileged EXEC mode. Configuration Guide 457 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 488
Show the basic MLD snooping configuration. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 458 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 489
3 show ipv6 mld snooping vlan vlan-id Show the basic MLD snooping configuration in the specified VLAN. Step 4 end Return to privileged EXEC mode. Configuration Guide 459 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 490
[rport interface {gigabitEthernet port-list | portchannel port-channel-id}] port-list and port-channel-id are the static router ports in the specified VLAN. Configuration Guide 460 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 491
3 show ipv6 mld snooping vlan vlan-id Show the basic MLD snooping configuration in the specified VLAN. Step 4 end Return to privileged EXEC mode. Configuration Guide 461 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 492
in the specified VLAN. Step 3 show ipv6 mld snooping groups static Show the static MLD snooping configuration. Step 4 end Return to privileged EXEC mode. Configuration Guide 462 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 493
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 463 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 494
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 464 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 495
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 465 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 496
in the multicast VLAN. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 466 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 497
the MLD querier configuration. Step 4 end Return to privileged EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 467 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 498
interval as 100 seconds, the max response time as 20 seconds, and the general query source IP as fe80::2ff:ffff:fe00:1: Switch#configure Configuration Guide 468 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 499
filtered. start-ip, end-ip are the start IP and end IP of the IP range respectively. Step 5 end Return to privileged EXEC mode. Configuration Guide 469 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 500
detailed MLD profile configuration. Step 5 end Return to privileged EXEC mode. Step 6 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 470 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 501
)#show ipv6 mld profile MLD Profile 1 deny range ff01::1234:5 ff01::1234:8 Binding Port(s) Gi1/0/2 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 471 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 502
ID of the VLAN that the multicast group is in. Forward Port All ports in the multicast group, including router ports and member ports. Configuration Guide 472 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 503
Snooping in the multicast VLAN. show ip igmp snooping groups vlan vlan-id multicast_addr Displays information of specific multicast group in the specific VLAN. Configuration Guide 473 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 504
Snooping in the multicast VLAN. show ipv6 mld snooping groups vlan vlan-id multicast_addr Displays information of specific multicast group in the specific VLAN. Configuration Guide 474 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 505
profile [id] Displays settings in all profiles or in the specific profile. clear ipv6 mld snooping statistics Clear all statistics of all MLD packets. Configuration Guide 475 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 506
Scheme Enable IGMP Snooping globally and on the port. Add the three member ports and the router port to a VLAN and configure their PVIDs. Configuration Guide 476 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 507
fields. Figure 5-2 Configure IGMP Snooping Globally 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Enable IGMP Snooping on port 1/0/1-4. Configuration Guide 477 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 508
> VLAN Config to load the following page. Create VLAN 10 and add Untagged port 1/0/1-3 and Tagged port 1/0/4 to VLAN 10. Figure 5-4 Configure Link Type Configuration Guide 478 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 509
. Enable IGMP Snooping in VLAN 10. Keep 0 as the Router Port Time and Member Port Time, which means the global settings will be used. Configuration Guide 479 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 510
VLAN 10 and set the link type as tagged. Switch(config)#interface range gigabitEthernet 1/0/1-3 Switch(config-if-range)#switchport general allowed vlan 10 untagged Configuration Guide 480 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 511
igmp snooping IGMP Snooping :Enable Unknown Multicast :Pass Last Query Times :2 Last Query Interval :1 Global Member Age Time :260 Global Router Age Time :300 Configuration Guide 481 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 512
, VLAN 20 and VLAN 30 respectively. Port 1/0/4 is connected to the multicast network in the upper layer network. These 4 ports are all Untagged ports. Configuration Guide 482 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 513
to load the following page. Enable IGMP Snooping globally, and keep the default values in the Router Port Time and Member Port Time fields. Configuration Guide 483 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 514
Configuring Layer 2 Multicast Figure 5-8 Configure IGMP Snooping Globally Configuration Examples 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Enable IGMP Snooping on port 1/0/1-4. Figure 5-9 Configure IGMP Snooping Globally Configuration Guide 484 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 515
> Port Config to load the following page. Configure the PVID of port 1/0/1 as 10, port 1/0/2 as 20, port 1/0/3 as 30 and port 1/0/4 as 40. Configuration Guide 485 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 516
Config to save the settings. 5.2.5 Using the CLI 1) Enable IGMP Snooping Globally. Switch#configure Switch(config)#ip igmp snooping 2) Enable IGMP Snooping on port 1/0/1-4. Configuration Guide 486 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 517
-config Verify the Configurations Switch(config)#show vlan brief VLAN Name Status 1 System-VLAN active Ports Gi1/0/1, Gi1/0/2, Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8, ...... Configuration Guide 487 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 518
Unknown Multicast and Fast Leave 5.3.1 Network Requirement A user experiences lag when he is changing channel on his IPTV. He wants solutions to this problem. As shown in the following network topology, port 1/0/4 on the switch is connected to the upper layer network, and port 1/0/2 is connected to - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 519
data, which increases the network load and results in network congestion. The solution to this problem is using Unknown Multicast and Fast Leave. To avoid Host B from receiving irrelevant multicast . Enable IGMP Snooping globally and configure Unknown Multicast as Discard. Configuration Guide 489 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 520
menu Multicast > IGMP Snooping > Port Config to load the following page. Enable IGMP Snooping on port 1/0/2 and port 1/0/4 and enable Fast Leave on port 1/0/2. Configuration Guide 490 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 521
Configuring Layer 2 Multicast Figure 5-15 Configure IGMP Snooping Globally Configuration Examples 3) Choose the menu Multicast > IGMP Snooping > VLAN Config to load the following page. Enable IGMP Snooping in VLAN 10. Figure 5-16 Enable IGMP Snooping in the VLAN Configuration Guide 491 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 522
igmp snooping IGMP Snooping :Enable Unknown Multicast :Discard Last Query Times :2 Last Query Interval :1 Global Member Age Time :260 Global Router Age Time :300 Configuration Guide 492 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 523
network topology, Host B is connected to port 1/0/1, Host C is connected to port 1/0/2 and Host D is connected to port 1/0/3. They are all in VLAN 10. Configuration Guide 493 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 524
to load the following page. Enable IGMP Snooping globally, and keep the default values in the Router Port Time and Member Port Time fields. Configuration Guide 494 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 525
Configuring Layer 2 Multicast Figure 5-18 Configure IGMP Snooping Globally Configuration Examples 2) Choose the menu Multicast > IGMP Snooping > Snooping Config to load the following page. Figure 5-19 Enable IGMP Snooping on the Port Configuration Guide 495 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 526
Configure Link Type 4) Choose the menu VLAN > 802.1Q VLAN > Port Config to load the following page. Configure the PVID of port 1/0/1-4 as 10. Configuration Guide 496 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 527
. Enable IGMP Snooping in VLAN 10. Keep 0 as the Router Port Time and Member Port Time, which means the global settings will be used. Configuration Guide 497 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 528
Permit as the Mode and click Create. Figure 5-23 Create Profile 1 b. Choose the menu Multicast > IGMP Snooping > Profile Config to load the following page. Configuration Guide 498 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 529
receive a. Choose the menu Multicast > IGMP Snooping > Profile Config to load the following page. Create Profile 2, select Deny as the Mode and click Create. Configuration Guide 499 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 530
> Profile Binding to load the following page. Select port 1/0/1, enter 2 in the Profile ID field and click Apply to bind Profile 2 to this port. Configuration Guide 500 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 531
and set the link type as untagged. Add port 1/0/4 to VLAN 10 and set the link type as tagged. Switch(config)#interface range gigabitEthernet 1/0/1-3 Configuration Guide 501 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 532
.0.0.2 Switch(config-igmp-profile)#exit 10) Bind Profile 2 to Port 1/0/1. Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip igmp filter 2 Switch(config-if)#exit Configuration Guide 502 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 533
)#show ip igmp profile IGMP Profile 1 permit range 225.0.0.1 225.0.0.1 Binding Port(s) Gi1/0/2-3 IGMP Profile 2 deny range 225.0.0.2 225.0.0.2 Binding Port(s) Gi1/0/1 Configuration Examples Configuration Guide 503 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 534
Disabled 0, use global settings. 0, use global settings. None 0, use global settings. 0, use global settings. 0.0.0.0, indicating no replacement. Disabled 60 seconds 10 seconds 192.168.0.1 Configuration Guide 504 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 535
300 seconds 260 seconds 1 second 2 Disabled Disabled Disabled 0, use global settings. 0, use global settings. None 0, use global settings. 0, use global settings. ::, indicating no replacement. Configuration Guide 505 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 536
Configuring Layer 2 Multicast Function IGMP Snooping Querier Parameter Enable or Not Query Interval Max Response Time General Query Source IP Appendix: Default Parameters Default Setting Disabled 60 seconds 10 seconds FE80::02FF:FFFF:FE00:0001 Configuration Guide 506 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 537
Part 19 Configuring Logical Interfaces CHAPTERS 1. Overview 2. Logical Interfaces Configurations 3. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 538
or rear panel of the switch. Logical interfaces are manually configured and do not physically exist, such as loopback interfaces logical interfaces. The supported types of logical interfaces are shown as below: Table 1-1 Supported Types of Logical as a Layer 3 interface. Configuration Guide 508 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 539
parameters for the interface according to your needs. Then click Create. Interface ID Select an interface type and enter the ID of the interface. Configuration Guide 509 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 540
assignment mode of the interface. None: No IP address will be assigned. Static: Assign an IP address manually. DHCP: Assign an IP address through DHCP . BOOTP: Assign an IP address through BOOTP. IP Address Select an interface type and enter the ID of the interface. Configuration Guide 510 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 541
assignment mode of the interface. None: No IP address will be assigned. Static: Assign an IP address manually. DHCP: Assign an IP address through DHCP . BOOTP: Assign an IP address through BOOTP. IP Address following page and configure the IPv6 parameters of the interface. Configuration Guide 511 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 542
of switch. 2) Configure the IPv6 link-local address of the interface manually or automatically in the Link-local Address Config section. Then click Apply link-local address configuration mode. Manual: With this option selected, you can assign a link-local address manually. Auto: With this option - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 543
: Indicates that the corresponding address is configured manually. Auto: Indicates that the corresponding address is created automatically using the RA message or obtained from the DHCPv6 Server. Preferred Lifetime Displays the preferred lifetime of the global address. Configuration Guide 513 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 544
3 interface. You can create a VLAN interface, a loopback interface, a routed port or a port-channel interface according to your needs. Step 1 configure Enter global configuration mode. Configuration Guide 514 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 545
a description of VLAN-2. Switch#configure Switch(config)#interface vlan 2 Switch(config-if)#description VLAN-2 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 515 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 546
from the DHCP Server. bootp: Specify the Layer 3 interface to obtain an IPv4 address from the BOOTP Server. Manually assign an IP Address for the interface: ip address { ip-addr } { mask } [ secondary ] Configure 255.255.255.0 Switch(config-if)#show ip interface brief Configuration Guide 516 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 547
one Layer 3 interface at a time. Configure the IPv6 link-local address for the specified interface: Manually configure the ipv6 link-local address for the specified interface: ipv6 address ipv6-addr link-local ipv6 address for the specified interface: ipv6 address autoconfig Configuration Guide 517 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 548
is enabled, the Layer 3 interface will try to obtain the IPv6 address from DHCPv6 server. Manually configure the interface's global IPv6 address: ipv6 address ipv6-addr ipv6-addr: The Global IPv6 address address(es): ff02::1:ff13:237b Joined group address(es): ff02::1 Configuration Guide 518 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 549
DAD attempts: 1 ND retrans timer is 1000 milliseconds ND reachable time is 30000 milliseconds Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 519 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 550
enabled by default. Config Mode Auto Enable global address auto Enable configuration via RA message Enable global address auto configuration via DHCPv6 Server Disable Configuration Guide 520 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 551
Part 20 Configuring Static Routing CHAPTERS 1. Overview 2. IPv4 Static Routing Configuration 3. IPv6 Static Routing Configuration 4. Viewing Routing Table 5. Example for Static Routing 6. Appendix: Default Parameter - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 552
form of routing that is configured manually by adding non-aging entries into a routing table. The manually-configured routing information guides the router in forwarding data packets even when the topology changes. The switch supports IPv4 static routing and IPv6 static routing. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 553
1 to 255 and the default value is 1. 2) In the IPv4 Static Route Table section, you can view and modify the IPv4 static routing entries. Configuration Guide 523 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 554
default C 192.168.0.0/24 is directly connected, Vlan1 S 192.168.2.0/24 [1/0] via 192.168.0.2, Vlan1 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 524 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 555
has the shortest distance will be recorded in the IP routing table. The valid values are from 1 to 255 and the default value is 1. Configuration Guide 525 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 556
::1234 Switch(config)#show ipv6 route static Codes: C - connected, S - static * - candidate default C 3000::/64 is directly connected, Vlan1 S 3200::/64 [1/0] via 3100::1234, Vlan2 Configuration Guide 526 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 557
Configuring Static Routing Switch(config)#end Switch#copy running-config startup-config IPv6 Static Routing Configuration Configuration Guide 527 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 558
Viewing Routing Table You can view routing tables to learn about the network topology. The switch supports IPv4 routing table and IPv6 routing table. 4.1 Using the GUI 4.1.1 Viewing IPv4 Routing Table IP address. Interface Name Displays the gateway interface name. Configuration Guide 528 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 559
the specified type. If not specified, all types of route entries will be displayed. static: View the static routes. connected: View the connected routes. Configuration Guide 529 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 560
type. If not specified, all types of route entries will be displayed. static: View the static IPv6 routes. connected: View the connected IPv6 routes. Configuration Guide 530 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 561
Gi1/0/2 with the mode as static, the IP address as 10.1.10.1, the mask as 255.255.255.0 and the admin status as Enable. Configuration Guide 531 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 562
mode as static, the IP address as 10.1.1.1, the mask as 255.255.255.0 and the admin status as Enable. Create a routed port Gi1/0/2 Configuration Guide 532 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 563
.0/24 is directly connected, Vlan20 S 10.1.2.0/24 [1/0] via 10.1.10.2, Vlan20 Switch B Verify the static routing configuration: Switch_B#show ip route Codes: C - connected, S - static Configuration Guide 533 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 564
TTL=64 Ping statistics for 10.1.2.1: Packets: Sent = 4 , Received = 4 , Lost = 0 (0% loss) Approximate round trip times in milli-seconds: Minimum = 1ms , Maximum = 3ms , Average = 1ms Configuration Guide 534 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 565
Configuring Static Routing Appendix: Default Parameter 6 Appendix: Default Parameter Default setting of static routing is listed in the following table. Table 6-1 Configuring Static Routing Parameter Default Setting IPv6 Routing Disable Configuration Guide 535 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 566
Part 21 Configuring DHCP CHAPTERS 1. DHCP 2. DHCP Server Configuration 3. DHCP Client Configuration 4. DHCP Relay Configuration 5. Configuration Examples 6. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 567
network configuration parameters to network devices, which enhances the utilization of IP address. 1.2 Supported Features The supported DHCP features of the switch include DHCP Server, DHCP Relay and DHCP Client. client and dynamically obtain IP address from the DHCP server. Configuration Guide 537 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 568
DHCP Server DHCP Switch DHCP Client DHCP Relay The switch supports two kinds of DHCP Relay: DHCP Interface Relay and DHCP server, thus increasing the costs of network construction. DHCP Relay solves this problem. As the following figure shows, the DHCP Relay device acts as a Guide 538 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 569
192.168.1.1/24 Switch DHCP Relay DHCP Clients VLAN 10 192.168.1.0/24 DHCP Clients VLAN 20 192.168.1.0/24 Other Hosts VLAN 30 Configuration Guide 539 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 570
load the following page. Figure 2-1 DHCP Server Follow these steps to configure DHCP Server: 1) In the Global Config section, enable DHCP Server. Click Apply. Configuration Guide 540 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 571
configuring DHCP Server, you need to reserve certain IP addresses for each subnet, such as default gateway address, broadcast address and DNS server address. Configuration Guide 541 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 572
8 default gateways for each DHCP server pool. In general, you can configure the IP address of the VLAN interface as the default gateway address. Configuration Guide 542 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 573
needed, the clients can get the bootfile from the TFTP server for auto installation. 2.1.3 Configuring Manual Binding Some hosts, WWW server for example, requires a static IP address. To satisfy this requirement, you can manually bind the MAC address or client ID of the host to an IP address, and - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 574
menu Routing > DHCP Server > Manual Binding to load the following page. Figure 2-3 Manual Binding Follow these steps to configure Manual Binding: 1) In the Manual Binding section, select a pool name , select a hardware type. The hardware type includes Ethernet and IEEE802. Configuration Guide 544 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 575
and ping timeout. Step 1 Step 2 Step 3 Step 4 Step 5 configure Enter global configuration mode. service dhcp server Enable DHCP Server. ip dhcp server extend-option vendor-class-id class-id (Optional) Specify the The valid values are from 1 to 10, and the default is 1. Configuration Guide 545 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 576
packets as 2 and configure the ping timeout period as 200 ms: Switch#configure Switch(config)#service dhcp server Switch(config)#ip dhcp server ping packets 2 Switch(config)#ip dhcp server ping timeout milliseconds. Switch(config)#end Switch#copy running-config startup-config Configuration Guide 546 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 577
mode. ip dhcp server pool pool-name Configure a name for the DHCP server pool for identification. pool-name: Specify a pool name with 1 to 8 characters. Configuration Guide 547 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 578
try again via unicast. h-node Hybrid: The client sends query message via unicast first. If it fails, the client will try again via broadcast. Configuration Guide 548 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 579
-config)#netbios-node-type b-node Switch(dhcp-config)#next server 192.168.1.30 Switch(dhcp-config)#domain-name com Switch(dhcp-config)#bootfile bootfile Configuration Guide 549 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 580
Switch#copy running-config startup-config 2.2.3 Configuring Manual Binding Some hosts, WWW server for example, To satisfy this requirement, you can manually bind the MAC address or client host at all times. Follow these steps to configure Manual Binding: Step 1 Step 2 configure Enter global - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 581
client, either Ethernet or IEEE802. show ip dhcp server manual-binding Verify the manual binding configuration. end Return to Privileged EXEC Mode. copy 3f:34 hardware-type ethernet Switch(dhcp-config)#show ip dhcp server manual-binding Pool Name Client Id/Hardware Address IP Address Hardware Type - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 582
Configuring DHCP Switch#copy running-config startup-config DHCP Server Configuration Configuration Guide 552 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 583
for the interface through BOOTP. Admin Status Enable or disable the interface's Layer 3 capabilities. Interface Name 2) Click Create. (Optional) Specify a name for the interface. Configuration Guide 553 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 584
file. The following example shows how to configure port 1/0/5 as an Layer 3 interface, and to configure its IP address mode as DHCP: Switch#configure Configuration Guide 554 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 585
-Address Method Status Protocol Shutdown Gi1/0/5 192.168.0.100/24 DHCP up up no Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 555 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 586
In the Option 82 Configuration section, configure Option 82. DHCP Relay Enable or disable DHCP Relay. Option 82 Support Select whether to enable Option 82 or not. By default, it is disabled. Option 82 is used to enable Option 82 on the relay device closest to the client. Configuration Guide 556 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 587
. Select whether to enable Customization of Option 82 or not. When enabled, configure Option 82 information manually. Enter the customized circuit ID, which contains up to 64 characters. The circuit ID configurations of ID, and then enter the server address of the interface. Configuration Guide 557 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 588
server. 2) Click Create to specify the DHCP server for the interface. DHCP VLAN Relay Only T2600G-28TS supports this feature. Choose the menu Routing > DHCP Relay > DHCP VLAN Relay to load the following page. Figure Server Address Enter the IP address of the DHCP server. Configuration Guide 558 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 589
DHCP Relay: Step 1 Step 2 Step 3 Step 4 Step 5 configure Enter global configuration mode. service dhcp relay Enable DHCP Relay. show ip dhcp relay Verify the configuration of DHCP Relay. end Return relay information Enable the Option 82 feature. DHCP Relay Configuration Configuration Guide 559 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 590
information policy keep Switch(config)#show ip dhcp relay ...... DHCP relay option 82 is enabled. Existed option 82 field operation: keep. ...... Switch(config)#end Configuration Guide 560 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 591
: Enter the IP address of the DHCP server. show ip dhcp relay Verify the configuration of DHCP Relay. end Return to Privileged EXEC Mode. Configuration Guide 561 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 592
Helper address ---------- VLAN 66 192.168.1.7 Switch(config-if)#end Switch#copy running-config startup-config DHCP VLAN Relay Only T2600G-28TS supports this feature. Follow these steps to configure DHCP VLAN Relay: Step 1 configure Enter global configuration mode. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 593
Verify the configuration of DHCP Relay. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 563 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 594
helper address is configured on the following vlan: vlan Helper address ---------- VLAN 10 192.168.1.8 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 564 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 595
address and DNS server address are 192.168.0.1, 192.168.0.1 should be configured as an excluded IP address in the Excluded IP Address section. Configuration Guide 565 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 596
load the following page. Specify the Pool Name, Network Address, Subnet Mask, Lease Time, Default Gateway and DNS Server as shown below. Click Create. Configuration Guide 566 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 597
5-3 Configuring DHCP Server Pool Configuration Examples 3) Choose the menu Routing > DHCP Server > Manual Binding to load the following page. Select the DHCP server pool you just created, and the Hardware Address field. Select Ethernet as the Hardware Type. Click Create. Configuration Guide 567 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 598
Configuring DHCP Figure 5-4 Configuring Manual Binding Configuration Examples 5.1.4 Using the CLI 1) Enable DHCP Server. Switch#configure Switch(config)#service dhcp server 2) Specify the Pool Name, Network Address, Verify the Configuration Switch#show ip dhcp server binding Configuration Guide 568 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 599
192.168.0.2 01-d43d-7ebf-615f Automatic 01:57:27 192.168.0.8 01-fcaa-1459-e94a Manual Infinite 5.2 Example for DHCP Interface Relay 5.2.1 Network Requirements A company wants to assign IP addresses 168.3.0/24. Make sure the DHCP server can reach all DHCP clients. Configuration Guide 569 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 600
Add DHCP Server Address section, add the DHCP server address to VLAN 10 and VLAN 20. Figure 5-2 Specify DHCP Server for Interface VLAN 10 Configuration Guide 570 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 601
CLI Follow these steps to configure DHCP Interface Relay: 1) Enable DHCP Relay. Switch#configure Switch(config)#service dhcp relay 2) Specify the DHCP server for the interface VLAN 10. Switch(config)#interface vlan 10 address VLAN10 192.168.0.59 VLAN20 192.168.0.59 Configuration Guide 571 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 602
120 min Default Gateway None DNS Server None Netbios Server None Netbios Node Type None Next Server Address None Domain Name None Bootfile None Configuration Guide 572 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 603
Configuring DHCP Appendix: Default Parameters Parameter Manual Binding Pool Name IP Address: Binding Mode Client of DHCP Relay Parameter Default Setting DHCP Relay DHCP Relay Disable Option 82 Support Disable Existed Option 82 field Keep Customization Disable Circuit ID None Remote ID - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 604
Part 22 Configuring ARP CHAPTERS 1. Overview 2. ARP Configurations - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 605
Configuring ARP Overview 1 Overview ARP (Address Resolution Protocol) is used to map IP addresses to MAC addresses. Taking an IP address as input, ARP learns the associated MAC address, and stores the IP-MAC address association in an ARP entry for rapid retrieval. Configuration Guide 575 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 606
Automatically learned and will be deleted after aging time. Static Entry: Added manually and will be remained unless modified or deleted manually. Choose the menu Routing > ARP > ARP Table to load the following : A dynamic ARP entry that will be deleted after aging time. Configuration Guide 576 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 607
Configuring ARP ARP Configurations 2.1.2 Adding Static ARP Entries Manually You can add desired static ARP entries by mannually specifying the IP addresses and MAC addresses. Choose the MAC address of the static ARP entry. type: Enter the ARP type. Configure it as 'arpa'. Configuration Guide 577 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 608
list of the Ethernet port that you want to configure. interface vlan vlan-id Enter interafce VLAN mode. vlan-id: Specify a vlan interface ID. Configuration Guide 578 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 609
the active ARP entries. ip: Specify the IP address of your desired ARP entry. mac: Specify the MAC address of your desired ARP entry. Configuration Guide 579 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 610
3 interface. port: Specify the number of the routed port. lagid: Specify the ID of the LAG. id: Specify the VLAN interface ID. ARP Configurations Configuration Guide 580 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 611
Part 23 Configuring QoS CHAPTERS 1. QoS 2. DiffServ Configuration 3. Bandwidth Control Configuration 4. Configuration Examples 5. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 612
QoS (Quality of Service) technology, you can classify and prioritize network traffic to provide DiffServ (Differentiated Services) to certain types of traffic. 1.2 Supported Features You can the packets will be automatically discarded to avoid network broadcast storm. Configuration Guide 582 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 613
priority mode appropriate to your network requirements. Three modes are supported on the switch, 802.1P Priority, DSCP Priority and Port DSCP priority determines the priority of packets based on the ToS (Type of Service) field in their IP header. RFC2474 re-defines the ToS field in the Guide 583 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 614
2.1.1 Configuring Priority Mode The instructions of the three priority modes the Tag-id or CoS-id to be mapped to. The switch supports 8 TC queues, from TC0 for the lowest priority to TC 7 -18TS by default. You can manually enable it. On other T2600G series switches, this feature is - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 615
DSCP priority will be mapped to. The packets are firstly mapped to CoS, then to TC queues according to the CoSid-TC mapping relations. Configuration Guide 585 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 616
group which the port is in. 2) Click Apply. Note: All the ports in the same LAG should be assigned with the same port priority. Configuration Guide 586 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 617
-Mode is selected by default. 2) (Optional) Configure the weight value of the each TC queue if the schedule mode is WRR of SP+WRR. Configuration Guide 587 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 618
section. 2.2 Using CLI 2.2.1 Configuring Priority Mode The instructions of the three priority modes are described respectively in priority feature is disabled on T2600G-18TS by default. You can manually enable it with this command. On the other T2600G series switches 7. Configuration Guide 588 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 619
Step 1 configure Enter global configuration mode. Step 2 qos dscp Enable DSCP Priority. Step 3 show qos cos-map Check the CoS-id-TC mapping relations. Configuration Guide 589 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 620
Switch(config)#show qos cos-map Tag |0 |1 |2 |3 |4 |5 |6 |7 TC |TC1 |TC0 |TC0 |TC3 |TC4 |TC5 |TC6 |TC7 Switch(config)#qos queue dscp-map 10-14 0 Configuration Guide 590 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 621
values of all ports. port-list: The list of Ethernet ports. lagid-list: The list of LAGs. Step 6 end Return to privileged EXEC mode. Configuration Guide 591 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 622
steps to configure the schedule mode to control the forwarding sequence of different TC queues when congestion occurs. Step 1 configure Enter global configuration mode. Configuration Guide 592 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 623
maps all the packets that meet the configured ACL rules to the new TC queue, regardless of the mapping relations configured in this section. Configuration Guide 593 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 624
| Weight: TC0=4 TC1=7 TC2=10 TC3=13 TC4=16 TC6=22 TC7=25 TC5=19 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 594 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 625
from 1 to 1000000 Kbps. Egress Rate (11000000Kbps) Configure the bandwidth for sending packets on the port. The valid values are from 1 to 1000000 Kbps. Configuration Guide 595 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 626
broadcast packets in the Broadcast field. The packet traffic exceeding the rate will be discarded. The switch supports the following three rate modes: kbps: Specify the upper rate limit in kilo-bits per second, broadcast rate control, select Disable in the Broadcast field. Configuration Guide 596 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 627
UL-Frames in the ULFrame field. The packet traffic exceeding the rate will be discarded. The switch supports the following three rate modes: kbps: Specify the upper rate limit in kilo-bits per second, which send packets. Step 1 configure Enter global configuration mode. Configuration Guide 597 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 628
Configure the upper rate limit on the port for forwarding broadcast packets, multicast packets and unknown unicast frames. Step 1 configure Enter global configuration mode Configuration Guide 598 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 629
storm control configuration for all ports. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 599 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 630
Configuring QoS Bandwidth Control Configuration Note: • T2600G-18TS does not support the PPS related features. The following example shows how to configure the upper rate kbps 10240 kbps 0 kbps 0 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 600 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 631
priority. 2) Select SP schedule mode. Demonstrated with T2600G-52TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 601 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 632
, and set the priority for port 1/0/1 to CoS 0 (mapping to TC1) and priority for port 1/0/2 to CoS 1 (mapping to TC0). Figure 4-3 Configure Port Priority Configuration Guide 602 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 633
Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#qos 0 Switch(config-if)#exit Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#qos 1 Switch(config-if)#exit Configuration Guide 603 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 634
is connected to port 1/0/2 of Switch A, the server is connected to port 1/0/2 of Switch B and port 1/0/3 of Switch A is connected to port 1/0/1 of Switch B. Configuration Guide 604 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 635
VLAN 10 with the description of RD. Add port 1/0/1 as an untagged port and port 1/0/3 as a tagged port to VLAN 10. Then click Apply. Configuration Guide 605 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 636
untagged port and port 1/0/4 as a tagged port to VLAN 20. Then click Apply. Figure 4-7 Configure VLAN 20 3) Click save config to save the settings. Configuration Guide 606 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 637
following page. Create VLAN 10 and VLAN 20, and add port 1/0/1 to the two VLANs; create VLAN 30, and add port 1/0/2 to VLAN 30. Configuration Guide 607 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 638
Configuring QoS Figure 4-9 Configure VLAN 10 Configuration Examples Figure 4-10 Configure VLAN 20 Configuration Guide 608 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 639
> ACL Config > MAC ACL to load the following page. Select ACL 10, specify the Rule ID as 1 and the Operation as Permit. Click Apply. Configuration Guide 609 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 640
Create to load the following page. Select Policy RD, and ACL 10, click QoS Remark and set the Local Priority to TC 1. Click Apply. Configuration Guide 610 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 641
Create to load the following page. Select Policy Marketing, and ACL 10, click QoS Remark and set the Local Priority to TC 0. Click Apply. Configuration Guide 611 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 642
. Select WRR-Mode as the schedule mode, and click Apply. No configuration is required here because queues based on ACL rules have higher priority. Configuration Guide 612 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 643
20 untagged Switch_A(config-vlan)#exit Switch_A(config)#interface gigabitEthernet 1/0/3 Switch_A(config-if)#switchport general allowed vlan 10,20 tagged Switch_A(config-if)#end Configuration Guide 613 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 644
Policy RD and bind it to ACL 10, enable QoS Remark and set Local Priority to TC1. Switch_B(config)#access-list policy name RD Configuration Guide 614 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 645
VLAN Name Status Ports ------- 1 System-VLAN active Gi1/0/3, Gi1/0/4, Gi1/0/5, Gi1/0/6, Gi1/0/7, Gi1/0/8, Gi1/0/9, Gi1/0/10, Gi1/0/49, Gi1/0/50, Gi1/0/51, Gi1/0/52 Configuration Guide 615 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 646
Interface/VID Direction 1 RD 10 Ingress 2 Marketing 20 Ingress Type Vlan Vlan Verify the schedule mode. Switch_B#show qos queue mode Scheduler Mode | WRR Configuration Guide 616 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 647
~23 24~31 32~39 40~47 48~55 56~63 DSCP-CoS Mapping CoS-id CoS 0 CoS 1 CoS 2 CoS 3 CoS 4 CoS 5 CoS 6 CoS 7 Configuration Guide 617 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 648
Configuring QoS Bandwidth Control Table 5-4 Bandwidth Control Parameter Rate Limit Storm Control Default Setting Disabled Disabled Appendix: Default Parameters Configuration Guide 618 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 649
Part 24 Configuring Voice VLAN CHAPTERS 1. Overview 2. Voice VLAN Configuration 3. Configuration Example 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 650
A voice VLAN can operate in two modes: manual mode and automatic mode. Manual mode: This mode is applicable when the switch port forwards voice traffic only. You manually add ports connecting IP phones to the voice VLAN Traffic on the Same Port Internet PC IP Phone Switch Configuration Guide 620 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 651
address of a packet complies with the OUI addresses in the switch, the switch identifies the packet as a voice packet and prioritizes it in transmission. Configuration Guide 621 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 652
Manual Suggested Link Type and PVID PVID cannot be the voice VLAN ID. Not supported. VLAN ID. Because the voice VLAN in automatic mode supports only tagged voice traffic, you need to make sure can also configure it to instruct the voice device to send tagged voice traffic. For details - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 653
an OUI address description for identification. The length is no more than 16 characters. 2) Click Create to add an OUI address to the table. Configuration Guide 623 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 654
IEEE 802.1p priority, and you can further configure its schedule mode if needed. For details about schedule mode, please refer to Configuring QoS. Configuration Guide 624 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 655
the Auto mode for the selected ports, make sure traffic from your voice device is tagged. Manual: You manually add the ports connecting voice devices to the voice VLAN. Member State Displays the current state of voice VLAN. 2) Set the security mode for selected ports. Configuration Guide 625 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 656
IEEE 802.1p priority, and you can further configure its schedule mode if needed. For details about schedule mode, please refer to Configuring QoS. Configuration Guide 626 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 657
the security mode is disabled. Step 10 switchport general allowed vlan vid { tagged | untagged } (For ports in manual voice VLAN mode) Add the specified ports to the voice VLAN. vid: Enter the voice VLAN ID to add switchport Verify the voice VLAN configuration of the ports. Configuration Guide 627 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 658
The following example shows how to set port 1/0/1 in manual voice VLAN mode. Configure the switch to forward voice traffic if)#switchport voice vlan mode manual Switch(config-if)#switchport voice Port Auto-mode Security State LAG Gi1/0/1 Manual Enabled Active N/A Gi1/0/2 Auto Disabled Inactive - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 659
ports. To separate voice traffic from data traffic, configure LLDP-MED to instruct IP Phones to send traffic with the voice VLAN tag. Voice traffic the voice VLAN tag. Set ports that are connected to IP phones in manual voice VLAN mode. Meanwhile, configure the voice VLAN to work in security Guide 629 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 660
30 PC 20 Meeting Room Demonstrated with T2600G-28TS, this chapter provides configuration procedures in two ways: using the GUI and using the CLI. Configuration Guide 630 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 661
page. Enable voice VLAN, enter 10 in the VLAN ID field and set aging time as 1440 minutes and priority as 6. Then click Apply. Configuration Guide 631 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 662
the menu QoS > Voice VLAN > Port Config to load the following page. Select port 1/0/1, choose auto mode and enable security mode. Select port 1/0/2 and choose manual mode. Click Apply. Figure 3-5 Configuring Voice VLAN Mode on Port 1/0/1 Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 663
Configuring Voice VLAN Figure 3-6 Configuring Voice VLAN Mode on Port 1/0/2 Configuration Example 5) Choose the menu VLAN > 802.1Q VLAN > VLAN Config and edit VLAN 10 to load the following page. Add port 1/0/2 to the voice VLAN. Configuration Guide 633 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 664
Globally 7) Choose the menu LLDP > LLDP-MED> Global Config to load the following page. Set fast start count as 4. Figure 3-9 Configuring LLDP-MED Globally Configuration Guide 634 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 665
the TLV information which will be carried in LLDP-MED frames and sent out by port 1/0/1. Select all TLVs, and configure location identification parameters. Configuration Guide 635 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 666
for Switch B 1) Choose the menu VLAN > 802.1Q VLAN > Port Config to load the following page. Configure the link type of ports 1/0/1-3 as General. Configuration Guide 636 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 667
load the following page. Enable voice VLAN, enter 10 in the VLAN ID field and set priority as 6. Figure 3-14 Configuring Voice VLAN Globally Configuration Guide 637 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 668
Configuring Voice VLAN Configuration Example 4) Choose the menu QoS > Voice VLAN > Port Config to load the following page. Select ports 1/0/1-3, choose manual mode and enable security mode. Click Apply. Figure 3-15 Configuring Voice VLAN Mode on Ports 5) Choose the menu VLAN > 802.1Q VLAN > VLAN - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 669
C 1) Choose the menu VLAN > 802.1Q VLAN > Port Config to load the following page. Configure the link type of ports 1/0/1-3 as General. Click Apply. Configuration Guide 639 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 670
Configuring Voice VLAN Figure 3-17 Configuring the Link Type of port 1/0/1-3 Configuration Example 2) Choose the menu VLAN > 802.1Q VLAN > VLAN Config and click Create to load the following page. Create VLAN 10 and add ports 1/0/1-3 as tagged ports to the VLAN. Click Apply. Configuration Guide 640 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 671
mode, and set the 802.1p priority of voice packets as 6. Set VLAN 10 as the voice VLAN. Switch_A(config)#voice vlan aging 1440 Configuration Guide 641 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 672
a tagged port. Switch_A(config)#interface gigabitEthernet 1/0/2 Switch_A(config-if)#switchport voice vlan mode manual Switch_A(config-if)#switchport general allowed vlan 10 tagged Switch_A(config-if)#exit 6) Enable Switch_B(config)#vlan 10 Switch_B(config-vlan)#name VoiceVLAN Configuration Guide 642 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 673
Switch_B(config)#interface range gigabitEthernet 1/0/1-3 Switch_B(config-if-range)#switchport voice vlan mode manual Switch_B(config-if-range)#switchport voice vlan security Switch_B(config-if-range)#exit 1/0/1-3 Switch_C(config-if-range)#switchport mode general Configuration Guide 643 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 674
vlan switchport Port Auto-mode Security State LAG Gi1/0/1 Auto Enabled Inactive N/A Gi1/0/2 Manual Disabled Active N/A Gi1/0/3 Auto Disabled Inactive N/A ...... Switch B Verify the global voice VLAN configuration on the ports: Switch_B#show voice vlan switchport Configuration Guide 644 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 675
Configuring Voice VLAN Configuration Example Port Auto-mode Security State LAG Gi1/0/1 Manual Enabled Active N/A Gi1/0/2 Manual Enabled Active N/A Gi1/0/3 Manual Enabled Active N/A ...... Switch C Verify the voice VLAN configuration for VLAN 10: Switch_C#show vlan id 10 VLAN Name Status - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 676
-00-00-00 ff-ff-ff-00-00-00 Description Siemens Phone Cisco Phone Avaya Phone Philips Phone Pingtel Phone PolyCom Phone 3Com Phone Configuration Guide 646 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 677
Part 25 Configuring PoE CHAPTERS 1. PoE 2. PoE Power Management Configurations 3. Time-Range Function Configurations 4. Example for PoE Configurations 5. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 678
standard PDs and non-standard PDs. Only standard PDs can be powered via TP-Link PoE switches. 1.2 Supported Features PoE Power Management PoE Power Management is used for users to manage the power the PoE switch supplied time range to save energy according to your actual use. Configuration Guide 648 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 679
Configure the PoE parameters manually Configure the PoE one via configuring the PoE parameters manually. You can also set a profile 2.1.1 Configuring the PoE Parameters Manually Choose the menu PoE > PoE . Figure 2-1 Configuring PoE Parameters Manually Follow these steps to configure the - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 680
port can supply is 15.4W. Class4: The maximum power that the port can supply is 30W. Manual: Enter a value manually. Time Range Select a time range, then the port will supply power only during the time range. For Power Status Displays the port's real-time power status. Configuration Guide 650 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 681
is 7W. Class3: The maximum power that the port can supply is 15.4W. Class4: The maximum power that the port can supply is 30W. Manual: Enter a value manually. Configuration Guide 651 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 682
Profile section for the desired port. If one profile is selected, you will not be able to modify PoE status, PoE priority or power limit manually. Power(w) Displays the port's real-time power supply. Current(mA) Displays the port's real-time current. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 683
time power status. 2.2 Using the CLI 2.2.1 Configuring the PoE Parameters Manually Follow these steps to configure the basic PoE parameters: Step 1 Step Class3 represents 15.4W and Class4 represents 30W, or you can enter a value manually. The value ranges from 1 to 300. It is in the unit of 0.1 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 684
)#show power inline configuration interface gigabitEthernet 1/0/5 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/5 Enable Middle Class3 No Limit None Configuration Guide 654 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 685
7W, Class3 represents 15.4W and Class4 represents 30W or you can enter a value manually. The value ranges from 1 to 300. It is in the unit of 0.1 watt able to modify PoE status, PoE priority or power limit manually. name: Specify the name of the PoE profile. If the name contains spaces, - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 686
-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/6 Enable Middle Class2 No Limit profile1 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 656 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 687
a name for the time-range and select to include or exclude the holiday in the time-range. Name Specify a name for the time-range. Configuration Guide 657 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 688
Time Specify the end time of the periodic mode. Day of the Week Select day of the week for the periodic mode. 3) Click Apply. Configuration Guide 658 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 689
mode of the time-range function. Displays the state of the time-range function. View or edit the configuration of the time-range function. Configuration Guide 659 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 690
week in periodic mode, ranging from 1 to 7. It is in the format of 1,3-4. By default, it is 1-7. exit Exit Power Time-range Configuration Mode. Configuration Guide 660 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 691
of absolute time: 1 1 - 09/08/2016-00:00 to 09/10/2016-24:00 number of periodic time: 1 1 - 01:00 to 23:00 on 5 Configuration Guide 661 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 692
Switch(config)#show power holiday Index Holiday Name Start-End 1 holiday1 08.16-08.20 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 662 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 693
/31/2099-24:00 by default) number of periodic time: 1 1 - 08:30 to 18:00 on 1,2,3,4,5 Switch#end Switch#copy running-config startup-config Configuration Guide 663 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 694
for the security of the company and cannot be power off all the time. AP1 and AP2 provide Internet service and only work in the daytime. Figure 4-1 Network Topology Switch A Gi1/0/1 Gi1/0/2 Gi1/0/4 Gi1/0/3 Camera1 a time range that is from 08:30 to 18:00. Click Apply. Configuration Guide 664 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 695
Config > PoE Config to load the following page. Select port 1/0/3 and enable the PoE function. Set the Time Range as office time. Click Apply. Configuration Guide 665 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 696
1/0/3 Switch_A(config-if)#power inline supply enable Switch_A(config-if)#power inline time-range "office time" Switch_A(config-if)#exit Switch_A(config-if)#end Configuration Guide 666 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 697
)#show power inline configuration interface gigabitEthernet 1/0/3 Interface PoE-Status PoE-Prio Power-Limit(w) Time-Range PoE-Profile Gi1/0/3 Enable Low Class4 office time None Configuration Guide 667 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 698
/01/2000-24:00 Table 5-4 Default Settings of Holiday Config Parameter Holiday Name Start Date End Date Default Setting None 01/01 01/01 Configuration Guide 668 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 699
Part 26 Configuring ACL CHAPTERS 1. Overview 2. ACL Configuration 3. Configuration Example for ACL 4. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 700
limit network traffic and improve network performance by, for example, controlling the uploading and downloading bandwidth. 1.2 Supported Features »» ACL Binding To"permit" or "deny" received packets, bind the ACL to a port takes effect after it is bound to a port or a VLAN. Configuration Guide 670 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 701
rule. If no ACL rule is configured or no matching rule is found, the packets will be forwarded without being processed by the ACL. Configuration Guide 671 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 702
Configuring ACL ACL Configuration 2.1 Using the GUI 2.1.1 Configuring Time-Range Some ACL-based services or features may need to be limited to take effect only during a specified time period specified time periods in the day. 3) Click Apply to make the settings effective. Configuration Guide 672 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 703
and processes data packets based on 4 chunk match conditions, each chunk can specify a user-defined 4-byte segment carried in the packet's first 128 bytes. Configuration Guide 673 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 704
ACL Create section, assign a name to the ACL. ACL ID Enter a number to identify the ACL 2) Click Apply to make the settings effective. Note: The supported ACL type and ID range varies on different switch models. Please refer to the onscreen information. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 705
which the ACL will apply. EtherType Specify the EtherType to be matched using 4 hexadecimal numbers. User Priority Specify the User Priority to be matched.. Configuration Guide 675 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 706
Select a time-range during which the rule will take effect. The default value is No Limit, which means the rule is always in effect. Configuration Guide 676 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 707
/Mask Specify the destination IP address with a mask. A value of 1 in the mask indicates that the corresponding bit in the address will be matched. Configuration Guide 677 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 708
Select a time-range during which the rule will take effect. The default value is No Limit, which means the rule is always in effect. Configuration Guide 678 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 709
which the ACL will apply. EtherType Specify the EtherType to be matched using 4 hexadecimal numbers. User Priority Specify the User Priority to be matched.. Configuration Guide 679 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 710
list. Rule ID Enter an ID number to identify the rule. It should not be the same as any existing IPv6 ACL Rule IDs. Configuration Guide 680 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 711
. The default value is No Limit, wh ich means the rule is always in effect. Configuring the Packet Content ACL Rule Note: Only T2600G-28TS supports Packet Content ACL. Configuration Guide 681 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 712
rule. Permit: To forward the matched packets. Deny: To discard the matched packets. Chunk0-Chunk3 Specify the EtherType to be matched using 4 hexadecimal numbers. Configuration Guide 682 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 713
such as mirroring, rate-limiting, redirecting, or changing priority. To configure the policy, follow these steps: 1) Create a policy. 2) Configure the action of the policy Configuration Guide 683 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 714
2-11 Creating a Policy Follow these steps to create a policy: Enter a policy name, then click Apply. Policy Name Enter a Policy Name between 1 and 16 characters. Configuration Guide 684 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 715
matched packets. Enter a destination port to which the packets will be mirrored. Port Enter a destination port. S-Condition Configure rate limiting for the matched packets. Configuration Guide 685 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 716
ACL binding or Policy binding according to your needs. An ACL or policy takes effect only after it is bound to a port or VLAN. Configuration Guide 686 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 717
bind the ACL to a Port: Select the ACL and the port, and click Apply. ACL ID Select an ACL from the drop-down list. Configuration Guide 687 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 718
Select an ACL from the drop-down list. Note: Packet Content ACLs cannot be bound to any VLANs. VLAN ID Enter the VLAN ID. Configuration Guide 688 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 719
the Policy to a VLAN Choose the menu ACL > Policy Binding > VLAN Binding to load the following page. Figure 2-16 Binding the Policy to a VLAN Configuration Guide 689 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 720
the Policy Binding You can view both port binding and VLAN binding entries in the table. You can also delete existing entries if needed. Configuration Guide 690 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 721
the following page. Figure 2-18 Verifying the Policy Binding 2.2 Using the CLI 2.2.1 Configuring Time Range Some services or features that use ACL need to be limited to a specified time period. In this case, you . name:Assign a name to the time-range using 1-16 characters. Configuration Guide 691 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 722
(Optional) Display all defined holiday times. end Return to privileged EXEC mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 692 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 723
is a new ID , the ACL will be created before entering MAC Access-list mode. access-list-num:Enter an ACL ID between 0 and 499. Configuration Guide 693 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 724
00:34:a2:d4:34:b5 smask ff:ff:ff:ff:ff:ff Switch(config-mac-acl)#exit Switch(config)#show access-list 50 Configuration Guide 694 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 725
example shows how to create Standard-IP ACL 600, and configure Rule 1 to permit packets with source IP address 192.168.1.100: Switch#configure Configuration Guide 695 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 726
-list create access-list-num Create an Extend-IP ACL access-list-num:Enter an ACL ID. The ID ranges from 1500 to 2499. Configuration Guide 696 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 727
)#access-list extended 1700 rule 7 deny sip 192.168.2.100 smask 255.255.255.255 protocol 6 d-port 23 Switch(config)#show access-list 1700 Configuration Guide 697 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 728
packets and always permit to forward the last fragment of a packet . time-segment: The name of the time-range. The default is No Limit. Configuration Guide 698 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 729
2 access-list ipv6 access-list-num Create an IPv6 ACL. access-list-num: Enter an ACL ID. The ID ranges from 3500 to 4499. Configuration Guide 699 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 730
3600 rule 1 deny sip CDCD:910A:2222:5498:8475:1111:3900:2020 sip-mask ffff:ffff:ffff:ffff Switch(config)#show access-list 3600 Configuration Guide 700 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 731
:ffff Switch(config)#end Switch#copy running-config startup-config Packet Content ACL Note: Only T2600G-28TS supports Packet Content ACL. Step 1 Step 2 Step 3 Step 4 configure Enter global configuration mode access-list The name of the time-range. The default is No Limit. Configuration Guide 701 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 732
Apply an ACL to the policy. policy-name: The name of the policy. acl-id: The ID number of the ACL to be applied. Configuration Guide 702 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 733
-action)#redirect interface gigabitEthernet 1/0/4 Switch(config-action)#exit Switch(config)#show access-list policy RD Policy name : RD access-list 600 redirect-port Gi1/0/4 Configuration Guide 703 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 734
bind policy 1 to port 2 and policy 2 to VLAN 2: Switch#configure Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#access-list bind 1 Switch(config-if)#exit Configuration Guide 704 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 735
. vlan-id: The VLAN to which the ACL will bind. acl-id: The ID number of the ACL. end Return to privileged EXEC mode. Configuration Guide 705 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 736
/VID Direction Type ----- ----------- -------- ---- Index ACL ID Interface/VID Direction Type ----- ---------- ------- ---- 1 1 Gi1/0/3 Ingress Port 2 2 4 Ingress Vlan Switch(config)#end Switch#copy running-config startup-config Configuration Guide 706 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 737
Example for ACL 3.1 Network Requirements A company's internal server group can provide different types of services. It is required that: the Marketing department can only access internal server group in filtering by creating an Extend-IP ACL and configuring rules for it. Configuration Guide 707 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 738
Configure a deny rule to match the packets with source IP address 10.10.70.0. This rule blocks other network services. The switch matches the packets with the rules in order, starting with Rule 1. If a packet matches a 10.10.70.0/24 and destination IP address 10.10.80.0/24. Configuration Guide 708 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 739
to load the the following page. Configure rule 2 and rule 3 to permit packets with source IP 10.10.70.0 and destination port TCP 80 (http service port) and UDP 443 (https service port). Figure 3-4 Configuring Rule 2 Configuration Guide 709 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 740
following page. Configure Rule 4 and Rule 5 to permit packets with source IP 10.10.70.0 and with destination port TCP 53 or UDP 53 (DNS service port). Figure 3-6 Configuring Rule 4 Configuration Guide 710 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 741
10.10.70.0. Figure 3-8 Configuring Rule 6 6) Choose the menu ACL > Policy Config > Policy Create to load the the following page. Then create Policy Market. Configuration Guide 711 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 742
8) Choose the menu ACL > Policy Binding > Port Binding to load the the following page. Bind Policy Market to port 1/0/1 to make it take effect. Configuration Guide 712 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 743
and Rule 3 to permit packets with source IP 10.10.70.0, and destination port TCP 80 (http service port) or TCP 443 (https service port). Switch(config)#access-list extended 1600 rule 2 permit sip 10.10.70.0 smask 255.255.255 10.10.70.0 smask 255.255.255.0 protocol 6 d-port 53 Configuration Guide 713 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 744
.0 Switch(config)#show access-list bind Index Policy Name Interface/VID Direction Type 1 Market Gi1/0/1 Ingress Port Index Acl Id Interface/VID Direction Type Configuration Guide 714 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 745
Default Setting Permit All No Limit No Limit No Limit No Limit For IPv6 ACL: Parameter Operation Time-Range Default Setting Permit No Limit Configuration Guide 715 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 746
For Packet Content ACL: Parameter Chunk0 Offset Chunk1 Offset Chunk2 Offset Chunk3 Offset Operation Time-Range Default Setting 1 2 3 4 Permit No Limit Appendix: Default Parameters Configuration Guide 716 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 747
Part 27 Configuring Network Security CHAPTERS 1 . Network Security 2 . IP-MAC Binding 3 . IPv6-MAC Binding 4 . DHCP Snooping 5 . DHCPv6 Snooping 6 . ARP Inspection 7. ND Detection 8 . IP Source Guard 9. DoS Defend 10 . 802.1X 11 . PPPoE ID-Insertion 12 . AAA 13 . Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 748
. The binding entries can be manually configured, or learned by ND Snooping or DHCPv6 snooping. DHCP Snooping DHCP Snooping supports the basic DHCP security feature and the network, security problems and network interference will happen. DHCP Snooping resolves this problem. Configuration Guide 718 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 749
server. Administrators can check the location of the DHCP client via option 82. The DHCP server supporting option 82 can also set the distribution policy of IP addresses and the other parameters, providing a and the connected port number of the host for automatic binding. Configuration Guide 719 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 750
ND packet is considered legal and will be forwarded; if no match is found, the ND packet is considered illegal and will be discarded. Configuration Guide 720 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 751
. DoS attacks occupy the network bandwidth maliciously by sending numerous service requests to the hosts. It results in an abnormal service or breakdown of the network. With DoS Defend feature, the and authentication server. This is described in the figure below: Configuration Guide 721 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 752
LAN. Authenticator An authenticator is usually a network device that supports 802.1X protocol. As the above figure shows, the switch to access the Internet. PPPoE ID-Insertion provides a way to resolve this problem. With this feature enabled, the switch attaches a tag to the PPPoE Active Guide 722 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 753
this server to authenticate the users trying to access the switch or get administrative privileges. Figure 1-5 Network Topology of AAA Users Switches RADIUS Server Configuration Guide 723 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 754
IP-MAC binding in two ways: Manual Binding Dynamical Binding (including ARP . 2.1 Using the GUI 2.1.1 Binding Entries Manually You can manually bind the IP address, MAC address, VLAN Binding > Manual Binding to load the following page. Figure 2-1 Manual Binding In the Manual Binding Option - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 755
switch can get the IP address, MAC address, VLAN ID and the connected port number of the host. You can bind these entries conveniently. Configuration Guide 725 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 756
identification. IP Address Displays the IP address. MAC Address Displays the MAC address. VLAN ID Displays the VLAN ID. Port Displays the port number. Configuration Guide 726 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 757
The priority of different entry types, from high to low, is Manually, ARP Scanning and DHCP Snooping. DHCP Snooping With DHCP Snooping , VLAN ID and the connected port number of the host. For instructions on how to configure DHCP Snooping, refer to DHCP Snooping Configurations. Guide 727 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 758
and DHCP Snooping. 2.2 Using the CLI Binding entries via ARP scanning is not supported by the CLI; Binding entries via DHCP Snooping is introduced in DHCP Snooping Configurations. The following sections introduce how to bind entries manually and view the binding entries. Configuration Guide 728 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 759
none | arp-detection | ip-verify-source | both } [ forced-source {arp-scanning | dhcp-snooping} ] Manually bind the host name, IP address, MAC address, VLAN ID and port number of the host, and configure the protect :ee:ff vlan 10 interface gigabitEthernet 1/0/5 arp-detection Configuration Guide 729 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 760
entries learned different sources, only the entry with the highest priority will be valid. The priority of different entry types, from high to low, is Manually, ARP Scanning and DHCP Snooping. Configuration Guide 730 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 761
-MAC binding in two ways: Manual Binding Dynamical Binding (including ND . 3.1 Using the GUI 3.1.1 Binding Entries Manually You can manually bind the IPv6 address, MAC address, VLAN Binding > Manual Binding to load the following page. Figure 3-1 Manual Binding In the Manual Binding Option - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 762
, and records the IPv6 addresses, MAC addresses, VLAN IDs and the connected port numbers of the IPv6 hosts. You can bind these entries conveniently. Configuration Guide 732 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 763
Snooping: 1) In the ND Snooping section, enable ND Snooping globally and on the specified VLAN(s). Then click Apply. ND Snooping Enable ND Snooping Globally. Configuration Guide 733 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 764
address, VLAN ID and the connected port number of the host. For instructions on how to configure DHCPv6 Snooping, refer to DHCPv6 Snooping Configuration. Search. All: Displays the entries from all sources. Manual: Displays the manually bound entries. ND Snooping: Displays the binding entries - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 765
learned form different sources, only the entry with the highest priority will be valid. The priority of different entry types, from high to low, is Manually, DHCP Snooping and ND Snooping. Configuration Guide 735 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 766
on the condition that you have got the related information of the hosts. Follow these steps to manually bind entries: Step 1 configure Enter global configuration mode. Step 2 ipv6 source binding hostname ipv6- 10, port number 1/0/5, and enable this entry for ND Detection. Configuration Guide 736 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 767
1 1 host1 2001:0:9d38:90d5::34 aa:bb:cc:dd:ee:ff 10 Gi1/0/5 ND-D ND-D Manual Switch(config)#end Switch#copy running-config startup-config 3.2.2 Binding Entries via ND Snooping Follow these steps to port } Verify the IPv6 ND Snooping configuration of the specific port. Configuration Guide 737 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 768
startup-config 3.2.3 Viewing Binding Entries On privileged EXEC mode or any other configuration mode, you can use the following command to view binding entries: Configuration Guide 738 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 769
entries learned different sources, only the entry with the highest priority will be valid. The priority of different entry types, from high to low, is Manually, DHCPv6 Snooping and ND Snooping. Configuration Guide 739 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 770
page. Figure 4-1 Global Config Follow these steps to enable DHCP Snooping: 1) Globally enable DHCP Snooping. 2) Enable DHCP Snooping on a VLAN or range of VLANs. Configuration Guide 740 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 771
to set the port that is connected to the DHCP server as a trusted port. Select Disable to set the other ports as untrusted ports. Configuration Guide 741 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 772
can check the location of the DHCP client via option 82. The DHCP server supporting Option 82 can also set the distribution policy of IP addresses and other parameters, providing or more ports and configure the parameters. Option 82 Support Enable the Option 82 feature. Configuration Guide 742 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 773
with each other. Enter the customized circuit ID, which contains up to 64 characters. Select Enable to manually define the remote ID field, which is a sub-option of Option 82. The remote ID configurations of show ip dhcp snooping Verify global configuration of DHCP Snooping. Configuration Guide 743 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 774
packet if the two fields are different. This prevents the IP address resource on the DHCP server from being exhausted by forged MAC addresses. Configuration Guide 744 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 775
1/0/1 Interface Trusted MAC-Verify Limit-Rate Dec-rate LAG Gi1/0/1 Enable Enable 10 20 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 745 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 776
Administrators can check the location of the DHCP client via option 82. The DHCP server supporting Option 82 can also set the distribution policy of IP addresses and other parameters, providing more -channel port-channel-id } Verify the Option 82 configuration of the port. Configuration Guide 746 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 777
82 Status Operation Strategy Circuit ID Remote ID LAG Gi1/0/7 Enable Replace VLAN20 Host1 N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 747 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 778
Specify the VLAN ID(s) in the format shown on the page. VLAN Configuration Display Displays the VLANs that have been enabled with DHCPv6 Snooping. Configuration Guide 748 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 779
example shows how to enable DHCP Snooping globally and on VLAN 5, and configure port 1/0/1 as a trusted port: Switch#configure Switch(config)#ipv6 dhcp snooping Configuration Guide 749 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 780
: 5 Switch(config-if)#show ipv6 dhcp snooping interface gigabitEthernet 1/0/1 Interface Trusted LAG Gi1/0/1 Enable N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 750 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 781
function will be inactive. The specific ports, such as up-link ports and routing ports are suggested to be set as trusted. 3) Click Apply. Configuration Guide 751 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 782
of receiving the ARP packets has exceeded the specified value, and the port will drop the received ARP packets in the next 300 seconds. Configuration Guide 752 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 783
Auto Refresh section, you can enable the auto refresh feature and specify the refresh interval, and thus the web page will be automatically refreshed. Configuration Guide 753 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 784
the settings in the configuration file. The following example shows how to globally enable ARP Detection and configure port 1/0/1 as a trusted port. Switch#configure Configuration Guide 754 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 785
pps (packets/second), and the default value is 15. Step 5 show ip arp inspection interface (Optional) View the configurations and status of the ports. Configuration Guide 755 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 786
,290s N/A Gi1/0/2 Enabled 15 N/A Normal N/A ...... Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip arp recover Switch(config-if)#show ip arp inspection interface gigabitEthernet 1/0/1 Configuration Guide 756 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 787
View the ARP statistics on each port, including whether the port is trusted port and the number of received ARP packets on the port. Configuration Guide 757 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 788
Specify the VLAN ID(s) in the format shown on the page. VLAN Configuration Display Displays the VLANs that have been enabled with ND Detection. Configuration Guide 758 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 789
configuration of the port. Step 8 end Return to privileged EXEC mode. Step 9 copy running-config startup-config Save the settings in the configuration file. Configuration Guide 759 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 790
: 1 Switch(config-if)#show ipv6 nd detection interface gigabitEthernet 1/0/1 Interface Trusted LAG Gi1/0/1 Enable N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 760 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 791
8-1 IP Source Guard Follow these steps to configure IP Source Guard: 1) Select one or more ports and configure IP Source Guard on the port(s). Configuration Guide 761 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 792
source IPv6 address, source MAC address and port number matching the IPv6-MAC binding rules can be processed, otherwise the packet will be discarded. Configuration Guide 762 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 793
-if)#show ipv6 verify source interface gigabitEthernet 1/0/1 Port Security-Type LAG ---- ---- Gi1/0/1 SIPv6+MAC N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 763 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 794
all the control fields set to 0. During the TCP connection and data transmission, the packets with all control fields set to 0 are considered illegal. Configuration Guide 764 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 795
CLI Follow these steps to configure DoS Defend: Step 1 configure Enter global configuration mode. Step 2 ip dos-prevent Globally enable the DoS defend feature. Configuration Guide 765 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 796
startup-config Save the settings in the configuration file. The following example shows how to enable the DoS Defend type named land: Switch#configure Configuration Guide 766 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 797
dos-prevent Type Status --------- ------ Land Attack Enabled Scan SYNFIN Disabled Xmascan Disabled ...... Switch(config)#end Switch#copy running-config startup-config DoS Defend Configuration Configuration Guide 767 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 798
to load the following page. Figure 10-1 Enable AAA Function In the Global Config section, enable AAA function on the switch and click Apply. Configuration Guide 768 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 799
authentication and accounting. If multiple radius servers are available, you are suggested to add them to different server groups respectively for authentication and accounting. Configuration Guide 769 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 800
to be added to the group from the Server IP drop-down list . Then click Add to add this server to the server group. Configuration Guide 770 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 801
. 2) In the Accounting Dot1x Method List section, select an existing RADIUS server group for accounting from the Pri1 drop-down list and click Apply. Configuration Guide 771 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 802
-Link 802.1X Client and the switch. Please disable Handshake feature if you are using other client softwares instead of TPLink 802.1X Client. Configuration Guide 772 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 803
default time is 3 seconds. If the switch does not receive any reply from the client within the specified time, it will resend the request. Configuration Guide 773 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 804
clients can access the LAN without authentication. Authorized Displays whether the port is authorized or not. LAG Displays the LAG the port belongs to. Configuration Guide 774 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 805
. Step 4 aaa group radius group-name Create a radius server group. radius: Specify the group type as radius. group-name: Specify a name for the group. Configuration Guide 775 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 806
address of the RADIUS server is 192.168.0.100; the shared key is 123456; the authentication port is 1812; the accounting port is 1813. Configuration Guide 776 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 807
#copy running-config startup-config 10.2.2 Configuring 802.1X Globally Follow these steps to configure 802.1X globally: Step 1 configure Enter global configuration mode. Configuration Guide 777 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 808
client to send the authentication packet. It ranges from 1 to 9 and the default is 3. show dot1x global (Optional) Verify global configurations of 802.1X. Configuration Guide 778 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 809
#copy running-config startup-config 10.2.3 Configuring 802.1X on Ports Follow these steps to configure the port: Step 1 configure Enter global configuration mode. Configuration Guide 779 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 810
how to enable 802.1X authentication on port 1/0/2, configure the control type as port-based, and configure the control mode as auto: Switch#configure Configuration Guide 780 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 811
1/0/2 Port State GuestVLAN PortControl PortMethod Authorized LAG ---- ----- --------- -------- -------- Gi1/0/2 enabled disabled auto port-based unauthorized N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 781 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 812
the Circuit-ID Insertion feature. With this option enabled, the switch will insert a Circuit ID to the received PPPoE Discovery packet on this port. Configuration Guide 782 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 813
4 pppoe circuit-id Enable Circuit-ID Insertion feature, and the switch will insert a Circuit ID to the received PPPoE Discovery packet on this port. Configuration Guide 783 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 814
type udf-only 123 Switch(config-if)#pppoe remote-id host1 Switch(config-if)#show pppoe id-insertion global PPPoE ID Insertion State: Enabled Configuration Guide 784 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 815
C-ID Value(UDF) Remote-ID R-ID Value Gi1/0/1 Enabled UDF-ONLY 123 Enabled host1 Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 785 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 816
are provided: Login method list for users of all types to access the switch, and Enable method list for guests to get administrative privileges. Configuration Guide 786 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 817
Configuring Network Security AAA Configuration AAA Application List The switch supports the following access applications: Console, Telnet, SSH and HTTP. You can select the configured AAA > RADIUS Conifg to load the following page. Figure 12-2 RADIUS Server Configuration Configuration Guide 787 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 818
TACACS+ secure protocol. Timeout Specify the time interval that the switch waits for the server to reply before resending. The default setting is 5 seconds. Configuration Guide 788 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 819
type for the group. The following options are provided: RADIUS and TACACS+. 2) Select the newly added group, and click edit in the Operation column. Configuration Guide 789 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 820
Add Server to Group 12.1.4 Configuring the Method List A method list describes the authentication methods and their sequence to authenticate the users. The switch supports Login Method List for users of all types to gain access to the switch, and Enable Method List for guests to get administrative - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 821
/server groups for authentication. Other user-defined server groups: Use the user-defined server groups for authentication. 2) Click Add to add the new method. Configuration Guide 791 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 822
> Global Config to load the following page. Figure 12-9 Configure Enable Password Specify the Enable password in the Enable Admin section, and click Apply. Configuration Guide 792 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 823
EXEC mode. Step 5 copy running-config startup-config Save the settings in the configuration file. The following example shows how to globally enable AAA: Configuration Guide 793 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 824
can copy from the configuration file of another switch. The key or encrypted-key you configure here will be displayed in the encrypted form. Configuration Guide 794 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 825
#copy running-config startup-config Adding TACACS+ Server Follow these steps to add TACACS+ server on the switch: Step 1 configure Enter global configuration mode. Configuration Guide 795 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 826
(config)#show tacacs-server Server Ip Port Timeout Shared key 192.168.0.20 49 8 123456 Switch(config)#end Switch#copy running-config startup-config Configuration Guide 796 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 827
)#server 192.168.0.10 Switch(aaa-group)#server 192.168.0.20 Switch(aaa-group)#show aaa group RADIUS1 192.168.0.10 192.168.0.20 Configuration Guide 797 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 828
A method list describes the authentication methods and their sequence to authenticate the users. The switch supports Login Method List for users of all types to gain access to the switch, and Enable login Login1 radius local Switch(config)#show aaa authentication login Configuration Guide 798 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 829
login through console port. Its value is 0 in general, for the reason that console input is only active on one console port at a time. Configuration Guide 799 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 830
Enable List Console Login1 Enable1 Telnet default default Ssh default default Http default default Switch(config-line)#end Switch#copy running-config startup-config Configuration Guide 800 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 831
-line)#enable authentication Enable1 Switch(config-line)#show aaa global ...... Module Login List Enable List Console default default Telnet Login1 Enable1 Ssh default default Configuration Guide 801 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 832
ssh Switch(config-line)#login authentication Login1 Switch(config-line)#enable authentication Enable1 Switch(config-line)#show aaa global ...... Module Login List Enable List Configuration Guide 802 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 833
Switch(config)#ip http login authentication Login1 Switch(config)#ip http enable authentication Enable1 Switch(config)#show aaa global ...... Module Login List Enable List Configuration Guide 803 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 834
. encryptedpassword is an MD5 encrypted password with fixed length, which you can copy from another switch's configuration file. end Return to privileged EXEC mode. Configuration Guide 804 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 835
share this Enable password. Tips: The logged-in guests can get administrative privileges by using the command enable-admin and providing the Enable password. Configuration Guide 805 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 836
port and other ports as untrusted ports. So that the illegal DHCP server on any other port cannot assign IP addresses for the clients. Configuration Guide 806 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 837
binding entries for User 1 and User 2 will be automatically learned via DHCP Snooping, and you need to manually bind the entry for User 3. 3) Enable ARP Detection on Switch A to prevent ARP cheating attacks. port and ports 1/0/1-port1/0/3 as untrusted ports, and click Apply. Configuration Guide 807 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 838
Examples 3) Choose the menu Network Security > IP-MAC Binding > Manual Binding to load the following page. Enter the host name, the protect type, and select port 1/0/3 on the panel. Click Bind. Figure 13-4 Manual Binding 4) Choose the menu Network Security > IP-MAC Binding > Binding Table to load - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 839
-6 ARP Detect 6) Choose the menu Network Security > ARP Inspection > ARP Defend to load the following page. Enable ARP Defend for ports 1/0/1-3 and click Apply. Configuration Guide 809 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 840
(config)#interface gigabitEthernet 1/0/4 Switch_A(config-if)#ip dhcp snooping trust Switch_A(config-if)#exit 3) Manually bind the entry for User 3. Switch_A(config)#ip source binding User3 192.168.0.33 88:a9 gigabitEthernet 1/0/4 Switch_A(config-if)#ip arp inspection trust Configuration Guide 810 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 841
:d9:33:56:78:a3 1 1 3 User3 192.168.0.33 88:a9:d4:54:fd:c3 1 Port ACL Col. ---- --- -- Gi1/0/1 ARP-D Gi1/0/2 ARP-D Gi1/0/3 ARP-D Configuration Guide 811 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 842
clients (User 1 and User 2) can get the IPv6 addresses from the legal DHCPv6 server. Additionally, the network needs to be prevented from ND attacks. Configuration Guide 812 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 843
for User 1 and User 2 will be automatically learned via DHCPv6 Snooping, and you need to manually bind the entry for User 3. 3) Enable ND Detection on Switch A to prevent ND attacks. Demonstrated of the DHCPv6 clients will be automatically learned via DHCPv6 Snooping. Configuration Guide 813 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 844
Examples 2) Choose the menu Network Security > IP-MAC Binding > Manual Binding to load the following page. Enter the host name, the protect type, and select port 1/0/3 on the panel. Click Bind. Figure 13-3 Manual Binding 3) Choose the menu Network Security > ND Detection > ND Detection to load the - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 845
interface gigabitEthernet 1/0/4 Switch_A(config-if)#ipv6 dhcp snooping trust Switch_A(config-if)#exit 3) Manually bind the entry for User 3. Switch_A(config)#ipv6 source binding User3 2001::5 88: config)#ipv6 nd detection vlan 1 Switch_A(config)#interface gigabitEthernet 1/0/4 Configuration Guide 815 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 846
Snooping 1 2 User2 2001::3 76:d9:33:56:78:a3 1 Gi1/0/2 Both ND-D ND Snooping 1 3 User3 2001::5 88:a9:d4:54:fd:c3 1 Gi1/0/3 ND-D ND-D Manual Verify the configuration of ND Detection: Switch_A#show ipv6 nd detection Global Status: Enable Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 847
and IP Source Guard to filter out the packets received from the unknown hosts. The overview of configuration on the switch is as follows: Configuration Guide 817 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 848
.3.3 Using the GUI 1) Choose the menu Network Security > IP-MAC Binding > Manual Binding to load the following page. Specify the host name, IP address, MAC IP Source Guard, and select port 1/0/1. Click Bind. Figure 13-6 Manual Binding 2) Choose the menu Network Security > IP Source Guard> IP Source - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 849
IP Source Guard Configuration Examples 3) Click Save Config to save the settings. 13.3.4 Using the CLI 1) Manually bind the IP address, MAC address, VLAN ID and connected port number of the host, and apply Switch(config-if-range)#end Switch#copy running-config startup-config Configuration Guide 819 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 850
, configure the control mode as auto, and set the control type as MAC based. Enable 802.1X authentication on the ports connected to clients. Configuration Guide 820 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 851
13-9 Enable AAA Function 2) Choose the menu Network Security > AAA > RADIUS Config to load the following page. Configure the parameters of the RADIUS server. Configuration Guide 821 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 852
Authentication Dot1x Method List section, select radius1 as the radius server group for authentication, and click Apply. Figure 13-13 Configure Authentication RADIUS Server Configuration Guide 822 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 853
.1X authentication, set the Control Mode as auto and set the Control Type as MAC Based; For port 1/0/2 and port 1/0/3, disable 802.1X authentication. Configuration Guide 823 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 854
feature and configure relevant parameters. Switch_A#configure Switch_A(config)#dot1x system-auth-control Switch_A(config)#dot1x auth-method eap Switch_A(config)#dot1x quiet-period Configuration Guide 824 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 855
ID: N/A 802.1X Accounting State: Disabled Quiet-period State: Enabled Quiet-period Timer: 10 sec. Max Retry-times For RADIUS Packet: 3 Supplicant Timeout: 3 sec. Configuration Guide 825 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 856
are deployed in the network to provide a safer authenticate method for the administrators trying to log in or get administrative privileges. If RADIUS Server 1 Configuration Guide 826 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 857
Security > AAA > Global Config to load the following page. In the Global Config section, enable AAA and click Apply. Figure 13-17 Global Config Configuration Guide 827 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 858
Add New Server Group section, specify the group name as RADIUS1 and the server type as RADIUS. Click Add to create the server group. Configuration Guide 828 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 859
, and select the Pri1 as RADIUS1. Click Add to set the method list for the Login authentication. Figure 13-22 Configure Login Method List Configuration Guide 829 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 860
RADIUS1 and add the two RADIUS servers to the server group. Switch(config)#aaa group radius RADIUS1 Switch(aaa-group)#server 192.168.0.10 Configuration Guide 830 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 861
group RADIUS1: Switch#show aaa group RADIUS1 192.168.0.10 192.168.0.20 Verify the configuration of the method lists: Switch#show aaa authentication Configuration Guide 831 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 862
global AAA global status: Enable Module Login List Enable List Console default default Telnet Method-Login Method-Enable Ssh default default Http default default Configuration Guide 832 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 863
listed in the following tables. Table 14-1 IP-MAC Binding Parameter Defualt Setting Protect Type For Manual Binding: None For ARP Scanning: None For DHCP Snooping: All Table 14-2 IPv6-MAC Binding VLAN ID Disable Port Config Trusted Port Disable MAC Verify Enable Configuration Guide 833 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 864
Setting Rate Limit Disable Decline Protect Disable Option 82 Config Option 82 Support Disable Operation Strategy Keep Circuit ID Customization Disable Circuit ID None Remote ID Default Setting Disable None Disable 15 pps Disable Appendix: Default Parameters Configuration Guide 834 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 865
802.1X Authentication Auth Method Handshake Guest VLAN Accounting Quiet Feature Quiet Feature Default Setting Disable EAP Enable Disable Disable Disable Appendix: Default Parameters Configuration Guide 835 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 866
-Insertion Disable Port Config Circuit-ID Disable Circuit-ID Type IP UDF Value None Remote-ID Disable Remote-ID Value None Appendix: Default Parameters Configuration Guide 836 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 867
name: default Pri1: none AAA Application List console Login List: default Enable List: default telnet Login List: default Enable List: default Appendix: Default Parameters Configuration Guide 837 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 868
Configuring Network Security Parameter ssh http Defualt Setting Login List: default Enable List: default Login List: default Enable List: default Appendix: Default Parameters Configuration Guide 838 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 869
Part 28 Configuring LLDP CHAPTERS 1. LLDP 2. LLDP Configurations 3. LLDP-MED Configurations 4. Viewing LLDP Settings 5. Viewing LLDP-MED Settings 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 870
know about the network topology, examine the network connectivity and troubleshoot the network faults. LLDP-MED (Media Endpoint Discovery) is for auto-configuration to minimize the configuration effort. 1.2 Supported Features The switch supports LLDP and LLDP-MED. LLDP allows the local Guide 840 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 871
feature for the interface. 2.1 Using the GUI 2.1.1 Global Config Choose the LLDP > Basic Config > Global Config to load the following page. Figure 2-1 Global Config Configuration Guide 841 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 872
quickly discovered by its neighbors. After the specified number of LLDP packets are sent, the Transmit Interval will be restored to the specified value. Configuration Guide 842 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 873
to inform the NMS when the local information changes. 2) Select the TLVs (Type/Length/Value) included in the LLDP packets according to your needs. Configuration Guide 843 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 874
station. SC: Used to advertise the supported functions and whether or not these functions are result of auto-negotiation during link initiation or of manual set override action. FS: Used to advertise the the port's PoE (Power over Ethernet) support capabilities. 2.2 Using the CLI 2.2.1 Global - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 875
(config)#lldp timer tx-interval 30 tx-delay 2 reinit-delay 3 notify-interval 5 fastcount 3 Switch(config)#show lldp LLDP Status: Enabled Tx Interval: 30 seconds Configuration Guide 845 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 876
LLDP configuration of the corresponding port. end Return to Privileged EXEC Mode. copy running-config startup-config Save the settings in the configuration file. Configuration Guide 846 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 877
-Name Yes Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 847 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 878
feature, you also need configure the Voice VLAN feature. Refer to Configuring Voice VLAN for detailed instructions. 3.1 Using the GUI 3.1.1 Global Config Choose the LLDP > LLDP-MED> Global Config to load and Endpoint Device. The switch is a Network Connectivity device. Configuration Guide 848 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 879
outgoing LLDP packets. If Location Identification is selected, you need configure the Emergency Number or select Civic Address to configure the details. Click Apply. Configuration Guide 849 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 880
TLV, Model Name TLV and Asset ID TLV. Configure the emergency number to call CAMA or PSAP. The number should contain 10-25 characters. Configuration Guide 850 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 881
count as 4: Switch#configure Switch(config)#lldp Switch(config)#lldp med-fast-count 4 Switch(config)#show lldp LLDP Status: Enabled Tx Interval: 30 seconds Configuration Guide 851 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 882
address in the IETF defined address format. show lldp interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } Display LLDP configuration of the corresponding port. Configuration Guide 852 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 883
Yes Port-VLAN-ID Yes Protocol-VLAN-ID Yes VLAN-Name Yes Link-Aggregation Yes MAC-Physic Yes Max-Frame-Size Yes Power Yes Configuration Guide 853 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 884
Configuring LLDP LLDP-MED Status: Enabled TLV Status --- ------ Network Policy Yes Location Identification Yes Extended Power Via MDI Yes Inventory Management Yes Switch(config)#end Switch#copy running-config startup-config LLDP-MED Configurations Configuration Guide 854 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 885
4.1.1 Viewing LLDP Device Info Viewing the Local Info Choose the menu LLDP > Device Info > Local Info to load the following page. Figure 4-1 Local Info Configuration Guide 855 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 886
system name of the local device. System Description Displays the system description of the local device. System Capabilities Supported Displays the supported capabilities of the local system. System Capabilities Enabled Displays the primary functions of the local device. Management Address - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 887
the port ID of the neighbor device which is connected to the local port. Information Click to view the details of the neighbor device. Configuration Guide 857 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 888
latest number of neighbors that have aged out on the local device. 3) In the Neighbors Statistics section, view the statistics of the corresponding port. Configuration Guide 858 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 889
. Viewing LLDP Statistics show lldp traffic interface { fastEthernet port | gigabitEthernet port | tengigabitEthernet port } View the statistics of the corresponding port on the local device. Configuration Guide 859 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 890
the LLDP-MED settings. Local Interface Displays the local port ID. Device Type Displays the local device type defined by LLDP-MED.LLDP-MED. Configuration Guide 860 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 891
Configuring LLDP Viewing LLDP-MED Settings Application Type Displays the supported applications of the local device. Unknown Policy Flag Displays the unknown location settings included in settings. Device Type Displays the LLDP-MED device type of the neighbor device. Configuration Guide 861 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 892
connected to the port. Viewing LLDP Statistics show lldp traffic interface { fastEthernet port | gigabitEthernet port | tengigabitEthernet port } View the statistics of the corresponding port. Configuration Guide 862 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 893
the company network to know about the link situation and network topology so that he can troubleshoot the potential network faults in advance. 6.1.2 Network Topology Exampled with the following situation: Port Gi1 parameters. Here we take the default settings as an example. Configuration Guide 863 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 894
configure all the TLVs included in the outgoing LLDP packets. Figure 6-3 LLDP Port Config 6.1.5 Using CLI 1) Enable LLDP globally and configure the corresponding parameters. Configuration Guide 864 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 895
Fast-packet Count: 3 LLDP-MED Fast Start Repeat Count: 4 View LLDP settings on each port Switch_A#show lldp interface gigabitEthernet 1/0/1 LLDP interface config: gigabitEthernet 1/0/1: Configuration Guide 865 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 896
-information interface gigabitEthernet 1/0/1 LLDP local Information: gigabitEthernet 1/0/1: Chassis type: MAC address Chassis ID: 00:0A:EB:13:23:97 Port ID type: Interface name Configuration Guide 866 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 897
supported: 0 Port and protocol VLAN supported: Yes Port and protocol supported: Yes Auto-negotiation enabled: Yes OperMau: speed(1000)/duplex(Full) Link aggregation supported : Yes Link aggregation enabled: No Aggregation port ID: 0 Power port class: PD PSE power supported - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 898
Information: gigabitEthernet 1/0/1: Neighbor index 1: Chassis type: MAC address Chassis ID: 00:0A:EB:13:18:2D Port ID type: Interface name Port ID: GigabitEthernet1/0/2 Configuration Guide 868 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 899
: Yes Auto-negotiation enabled: Yes OperMau: speed(1000)/duplex(Full) Link aggregation supported: Yes Link aggregation enabled: No Aggregation port ID: 0 Power port class: PSE PSE power supported: Yes PSE power enabled: Yes PSE pairs control ability: No Configuration Guide 869 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 900
cannot be the same as the VLAN ID of the Voice VLAN. Refer to Configuring Voice VLAN for detailed instructions. 6.2.3 Network Topology Exampled with the configuration of one IP phone: One end of the IP phone is procedures in two ways: using the GUI and using the CLI. Configuration Guide 870 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 901
. Figure 6-6 Configuring Voice VLAN Globally Choose the menu QoS > Voice VLAN > Port Config, set the Voice VLAN mode on Gi1/0/1 and Gi1/0/2 as Auto and Manual respectively. Configuration Guide 871 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 902
Configuring LLDP Figure 6-7 Configuring Voice VLAN Mode on Port 1/0/1 Configuration Example Figure 6-8 Configuring Voice VLAN Mode on Port 1/0/2 Configuration Guide 872 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 903
6-11 LLDP-MED Global Config 5) Choose th menu LLDP > LLDP-MED > Policy Config to load the following page. Select port 1/0/1 and enable LLDP-MED. Configuration Guide 873 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 904
packets. Figure 6-13 LLDP-MED Port Config-Detail In the Location Identification Parameters section, configure the detailed address of the IP phone. Click Apply. Configuration Guide 874 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 905
. Switch_A(config)#interface gigabitEthernet 1/0/1 Switch_A(config-if)#switchport voice vlan mode auto Switch_A(config-if)#exit 3) Configure the Voice VLAN mode on port Gi1/0/2 as Manual and add port Gi1/0/2 to Voice VLAN. Configuration - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 906
(config)#interface gigabitEthernet 1/0/2 Switch_A(config-if)#switchport voice vlan mode manual Switch_A(config-if)#switchport general allowed vlan 10 tagged Switch_A(config- : Switch_A#show lldp interface gigabitEthernet 1/0/1 LLDP interface config: gigabitEthernet 1/0/1: Configuration Guide 876 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 907
-information interface gigabitEthernet 1/0/1 LLDP local Information: gigabitEthernet 1/0/1: Chassis type: MAC address Chassis ID: 00:0A:EB:13:23:97 Port ID type: Interface name Configuration Guide 877 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 908
supported: 0 Port and protocol VLAN supported: Yes Port and protocol supported: Yes Auto-negotiation enabled: Yes OperMau: speed(100)/duplex(Full) Link aggregation supported : Yes Link aggregation enabled: Yes Aggregation port ID: 1 Power port class: PD PSE power supported - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 909
Number: Reserved Manufacturer Name: TP-Link Model Name: T2600G-28TS 2.0 Asset ID: unknown View the neighbor information: Switch_A#show lldp neighbor-information interface gigabitEthernet 1/0/1 Configuration Guide 879 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 910
VLAN enabled: Protocol identity: Auto-negotiation supported: Yes Auto-negotiation enabled: Yes OperMau: speed(100)/duplex(Full) Link aggregation supported: Link aggregation enabled: Aggregation port ID: Power port class: PSE power supported: PSE power enabled: Configuration Guide 880 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 911
No No 4095 5 46 Voice Signaling No No 4095 4 32 PD Device Unknown Unknown 7.0w 4 tnp31.3-2-0-11.bin term31.default FCH1537A2JV Cisco Systems, Inc. Configuration Guide 881 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 912
Disable All Default LLDP-MED Settings Table 7-3 Default LLDP-MED Settings Parameter Fast Start Count LLDP-MED Status Included TLVs Default Setting 4 Disable All Configuration Guide 882 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 913
Part 29 Configuring Maintenance CHAPTERS 1. Maintenance 2. Monitoring the System 3. SFlow Configuration 3. System Log Configurations 4. Diagnosing the Device 5. Diagnosing the Network 6. DLDP Configuration 7. Configuration Example for Remote Log 8. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 914
network troubleshooting. 1.2 Supported Features network usage. This feature is not supported by T2600G-18TS. Log You can check length and error length for troubleshooting. Network Diagnose The network diagnose Unidirectional links can cause a variety of problems, such as spanning-tree topology loops. - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 915
the switch fails to respond to management requests. In similar situations, you can monitor the system to verify a CPU or memory utilization problem. 2.1 Using the GUI 2.1.1 Monitoring the CPU Choose the menu Maintenance > System Monitor > CPU Monitor to load the following page. Figure 2-1 Monitoring - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 916
the following page. Figure 2-2 Monitoing the Memory Click Monitor to enable the switch to monitor and display its memory utilization rate every four seconds. Configuration Guide 886 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 917
the last 5 seconds, 1minute and 5minutes. The following example shows how to monitor the memory: Switch#show memory-utilization Unit | Current Memory Utilization 1 | 74% Configuration Guide 887 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 918
, enable the sFlow function, specify the sFlow agent IP address, and then click Apply. sFlow Status Enable the sFlow function globally on the switch. Configuration Guide 888 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 919
parameters, and click Apply. Collector ID Select a collector for configuration. The switch supports 4 collectors at most. Description Give a collector description for identification with 16 characters to load the following page. Figure 3-2 Configuring the SFlow Sampler Configuration Guide 889 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 920
can be bound to only one collector. Collector ID Select a collector for configuration. The switch supports 4 collectors at most. Ingress Rate Specify the ingress sampling frequency; then the samplers takes ; the default is 0, which means the collector is always valid. Configuration Guide 890 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 921
-ID 1 ip 192.168.0.100 Switch(config)# sflow collector collector-ID 1 port 6343 Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#sflow sampler collector-ID 1 Configuration Guide 891 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 922
sampler Port Collector IngRate EgRate MaxHeader LAG Gi1/0/1 1 1024 0 128 N/A Gi1/0/2 0 0 0 128 N/A Gi1/0/3 0 0 0 128 N/A ...... Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 892 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 923
or password is entered. Error protocol packets are detected. The shutdown command is applied to a port. The display command is used. General operational information. Configuration Guide 893 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 924
log buffer immediately, and synchronized to the log file every 24 hours. If necessary, you can modify the log synchronization frequency using the CLI. Configuration Guide 894 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 925
Click Backup Log to save the system log as a file on your computer. If the switch system breaks down, you can check the file for troubleshooting. Configuration Guide 895 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 926
to the RAM. And the information will be lost when the switch is restarted. You can view the logs with show logging buffer command. Configuration Guide 896 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 927
(config)#logging file flash Switch(config)#logging file flash frequency periodic 10 Switch(config)#logging file flash level 2 Switch(config)#show logging local-config Configuration Guide 897 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 928
status of other devices through the log host. idx: Enter the index of the log host. The switch supports 4 log hosts at most. host-ip: Specify the IP address for the log host. level: Enter the the host: Switch#configure Switch(config)# logging host index 2 192.168.0.148 5 Configuration Guide 898 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 929
Index Host-IP Severity Status 1 0.0.0.0 6 disable 2 192.168.0.148 5 enable 3 0.0.0.0 6 disable 4 0.0.0.0 6 disable Switch(config)#end Switch#copy running-config startup-config System Log Configurations Configuration Guide 899 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 930
connection status is normal, here displays the length range of the cable. The value makes sense only when the cable is longer than 30m. Configuration Guide 900 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 931
status is short, close or crosstalk, here displays the length from the port to the trouble spot. The value makes sense only when the cable is longer than 30m. 5.2 Using (+/- 10m) --- Pair-B Normal 2 (+/- 10m) --- Pair-C Normal 0 (+/- 10m) --- Pair-D Normal 2 (+/- 10m) --- Configuration Guide 901 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 932
destination device for Ping test, set Ping times, data size and interval according to your needs, and then click Ping to start the test. Configuration Guide 902 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 933
address of the destination node for Ping test. Both IPv4 and IPv6 are supported. Enter the amount of times to send test data for Ping test. We IP Enter the IP address of the destination device. Both IPv4 and IPv6 are supported. Max Hop Specify the maximum number of the route hops the test data can - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 934
ping test. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. -n count: Specify the amount of times to loss) Approximate round trip times in milli-seconds: Minimum = 0ms , Maximum = 0ms , Average = 0ms Configuration Guide 904 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 935
of the destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, such as 192.168.0.100 or fe80::1234. maxHops: Specify the maximum number of the route hops ms 1 ms 2 ms 192.168.1.1 2 2 ms 2 ms 2 ms 192.168.0.100 Trace complete. Configuration Guide 905 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 936
page. Figure 7-1 DLDP Config Follow these steps to configure DLDP: 1) In the Global Config section, enable DLDP and configure the relevant parameters. Click Apply. Configuration Guide 906 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 937
link is detected on a port, DLDP will generate logs and traps, and then the users can manually shut down the unidirectional link ports. Enable or disable the web automatic refresh function. Configure the interval state. Link-Down: The link is down. Link-Up: The link is up. Configuration Guide 907 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 938
1 to 30 seconds. By default, it is 5 seconds. Step 3 dldp shut-mode { auto | manual } Configure the DLDP shutdown mode when a unidirectional link is detected. auto: The switch automatically shuts down ports of the ports. Step 8 end Return to privileged EXEC mode. Configuration Guide 908 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 939
/0/2 Disable Initial Link-Down N/A Gi1/0/3 Disable Initial Link-Down N/A Gi1/0/4 Disable Initial Link-Down N/A Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 909 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 940
Config section, enable sFlow, set the switch IP address 192.168.0.26 as the agent address, and click Apply. Figure 8-2 SFlow Collector Global Config Configuration Guide 910 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 941
collector. Switch#configure Switch(config)#sflow address 192.168.0.26 Switch(config)#sflow enable Switch(config)#sflow collector collector-ID 1 ip 192.168.0.27 Configuration Guide 911 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 942
300 0 0 4 0.0.0.0 6343 300 0 0 Verify the configuration of sFlow sampler: Switch#show sflow sampler Port Collector IngRate EgRate MaxHeader LAG Gi1/0/1 1 1024 0 128 N/A Gi1/0/2 0 0 0 128 N/A ...... Configuration Guide 912 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 943
Network Requirements The company network manager needs to monitor network of department A for troubleshooting. Figure 8-1 Network Topology Department A Switch IP: 1.1.0.2/16 PC IP: 1.1.0.1/16 Log Host 8.2.4 Using the CLI Configure the remote log host. Switch#configure Configuration Guide 913 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 944
Switch#copy running-config startup-config Verify the Configurations Switch# show logging loghost Index Host-IP Severity Status 1 1.1.0.1 5 enable 2 0.0.0.0 6 disable 3 0.0.0.0 6 disable 4 0.0.0.0 6 disable Configuration Examples Configuration Guide 914 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 945
of Tracert Config Parameter Default Setting Destination IP 192.168.0.100 Max Hop 4 hops Table 9-5 Default Settings of DLDP Parameter Default Setting Global Config Configuration Guide 915 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 946
Configuring Maintenance Parameter DLDP State Adver Interval Shut Mode Web Refresh State Web Refresh Interval Port Config DLDP State Default Setting Disable 5 seconds Auto Disable 5 seconds Disable Appendix: Default Parameters Configuration Guide 916 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 947
Part 30 Configuring SNMP & RMON CHAPTERS 1. SNMP Overview 2. SNMP Configurations 3. Notification Configurations 4. RMON Overview 5. RMON Configurations 6. Configuration Example 7. Appendix: Default Parameters - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 948
troubleshoot according to notifications sent by those devices in a timely manner. The device supports three SNMP versions: SNMPv1, SNMPv2c and SNMPv3.Table 1-1 lists features supported good security (such as VPNs), but with busy services in which the traffic congestion may occur. You can Guide 918 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 949
2 SNMP Configurations To complete the SNMP configuration, choose an SNMP version according to network requirements and supportability of the NMS software, and then follow these steps: Choose SNMPv3 1) Enable SNMP. 2) Read/Write View is the same for the user and the group. Configuration Guide 919 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 950
) manages MIB (Management Information Base) variables based on the SNMP view. Choose the menu SNMP > SNMP Config > SNMP View to load the following page. Configuration Guide 920 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 951
: The NMS cannot view or manage the function indicated by the object. 2.1.3 Creating an SNMP Group Create an SNMP group and configure related parameters. Configuration Guide 921 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 952
mode and a privacy mode are applied to check and encrypt packets. 2) Set the read, write and notify view of the SNMP Group. Click Create. Configuration Guide 922 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 953
the group that the user belongs to. Users with the same Group Name, Security Model and Security Level will be in the same group. Configuration Guide 923 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 954
encryption. 3) Click Create. 2.1.5 Creating SNMP Communities If you want to use SNMPv1 or SNMPv2c as the security model, you can create SNMP communities directly. Configuration Guide 924 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 955
accessed by the community. The default is viewDefault. 2.2 Using the CLI 2.2.1 Enabling SNMP Step 1 Step 2 configure Enter global configuration mode. snmp-server Enabling SNMP. Configuration Guide 925 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 956
version errors 0 Unknown community name 0 Illegal operation for community name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 0 Get-request PDUs Configuration Guide 926 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 957
the view cannot be managed by the NMS. Step 3 show snmp-server view Displays the view table. Step 4 end Return to Privileged EXEC Mode. Configuration Guide 927 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 958
views. Meanwhile, set the authentication and privacy modes to secure the communication between the NMS and managed devices. Step 1 configure Enter global configuration mode. Configuration Guide 928 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 959
-Mode Sec-Lev Read-View Write-View Notify-View 1 nms-monitor v3 authPriv View View Switch(config)#end Switch#copy running-config startup-config Configuration Guide 929 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 960
user on the switch. Name the user as admin, and set the user as a remote user, SNMPv3 as the security mode, authPriv as the Configuration Guide 930 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 961
set an SNMP community. Name the community as the nms-monitor, and allow the NMS to view and modify parameters of View: Switch#configure Configuration Guide 931 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 962
(config)#show snmp-server community Index Name Type MIB-View 1 nms-monitor read-write View Switch(config)#end Switch#copy running-config startup-config Configuration Guide 932 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 963
162. For communication security, we recommend that you change the port number under the condition that communications on other UDP ports are not affected. Configuration Guide 933 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 964
. Set the length of time that the switch waits for a response from the NMS after sending an inform message; the default is 100 seconds. Configuration Guide 934 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 965
a response from the NMS within the timeout interval. show snmp-server host Displays the information of the host. end Return to privileged EXEC mode. Configuration Guide 935 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 966
traps snmp [ linkup | linkdown | warmstart | coldstart | auth-failure ] Configure parameters of basic traps supported on the switch. linkup: When a port status changes from linkdown to linkup, the switch sends a request fails in authentication. The trap is enabled by default. Configuration Guide 936 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 967
traps snmp linkup Switch(config)#end Switch#copy running-config startup-config (Optional) Enabling the SNMP Extend Trap Step 1 configure Enter global configuration mode. Configuration Guide 937 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 968
| loopback-detection | storm-control | spanning-tree | memory } Configure parameters of extended traps supported on the switch. bandwidth-control: The trap is used to monitor whether the bandwidth has reached Switch(config)#end Switch#copy running-config startup-config Configuration Guide 938 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 969
warning threshold. rx_power: Enable DDM Rx Power trap. It is sent when the DDM Rx power value exceeds the alarm threshold or warning threshold. Configuration Guide 939 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 970
: Switch#configure Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#snmp-server traps link-status Switch(config-if)#end Switch#copy running-config startup-config Configuration Guide 940 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 971
MIB because of the limited device resources. Generally, the NMS can only get information of the following four groups: statistics, history, event and alarm. Configuration Guide 941 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 972
SNMP Notification before RMON configurations. 5.1 Using the GUI 5.1.1 Configuring Statistics Choose the menu SNMP > RMON > Statistics to load the following page. Figure 5-1 Statistics Config Configuration Guide 942 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 973
1/0/1 format to be monitored. To change the port, please enable the entry first. 2) Set the sample interval and the maximum buckets of history entries. Configuration Guide 943 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 974
. The name should be what you have set in SNMP previously. By default, it is public. 2) Set the description and type of the event. Configuration Guide 944 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 975
to be monitored, and associate the entry with a statistics entry. Index Displays the index of alarm entries. There are 12 alarm entries all together. Configuration Guide 945 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 976
default is 100. Falling Event Specify the index of the event that will be triggered when the sampled value is below the preset threshold. Configuration Guide 946 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 977
. index: Enter the index of statistics entries that you want to view. The ranges are from 1 to 65535. end Return to privileged EXEC mode. Configuration Guide 947 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 978
the number of records exceeds the limit, the earliest record will be overwritten. The values are from 10 to 130; the default is 50. Configuration Guide 948 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 979
Owner State 1 Gi1/0/1 100 50 monitor Enable Switch(config)#end Switch#copy running-config startup-config 5.2.3 Configuring Event Step 1 configure Enter global configuration mode. Configuration Guide 949 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 980
)#show rmon event Index User Description Type Owner State ----- 1 admin rising-notify Notify monitor Enable Switch(config)#end Switch#copy running-config startup-config Configuration Guide 950 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 981
characters. The default name is monitor. interval: Set the sampling interval. The value ranges from 10 to 3600 seconds; the default is 1800 seconds. Configuration Guide 951 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 982
Type: Absolute RHold-REvent: 3000-1 FHold-FEvent: 2000-2 Alarm startup: All Interval: 10 Owner: monitor Switch(config)#end Switch#copy running-config startup-config Configuration Guide 952 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 983
rising threshold and falling threshold, and bind the rising event to the notify event entry, and the falling event to the log event entry. Configuration Guide 953 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 984
SNMP 1) Choose SNMP > SNMP Config > Global Config to load the following page. Enable SNMP, and set the Remote Engine ID as 123456789a. Click Apply. Configuration Guide 954 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 985
with the name of nms-monitor, choose SNMPv3 and enable authentication and privacy, and add View to Read View and Notify View. Click Create. Configuration Guide 955 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 986
of the SNMP User. Choose the type as Inform, and set the retry times as 3, with the timeout period as 100 seconds. Click Create. Configuration Guide 956 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 987
entries and bind them to ports 1/0/1 and 1/0/2 respectively. Set the owner of the entries as monitor and the status as valid. Figure 6-7 Configuring Entry 1 Configuration Guide 957 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 988
enable. For entry 2, set the SNMP user name as admin, type as Log, description as "falling log", owner as monitor, and status as enable. Configuration Guide 958 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 989
settings. 6.5 Using the CLI Configuring Rate Limit on ports Configure the rate limit on required ports. For detailed configuration, please refer to Configuring QoS. Configuration Guide 959 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 990
as 100 seconds, max buckets as 50, and the owner as monitor. Switch(config)#rmon history 1 interface gigabitEthernet 1/0/1 interval 100 owner monitor buckets 50 Configuration Guide 960 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 991
name supplied 0 Encoding errors 0 Number of requested variables 0 Number of altered variables 0 Get-request PDUs 0 Get-next PDUs 0 Set-request PDUs 0 SNMP packets output Configuration Guide 961 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 992
Sec-Lev Read-View Write-View Notify-View 1 nms-monitor v3 authPriv View View Verify SNMP user configurations: Switch(config)#show snmp-server user Configuration Guide 962 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 993
configurations: Switch(config)#show rmon event Index User Description Type -------- 1 admin rising-notify Notify 2 admin falling-log Log Owner ---------monitor monitor State ---------Enable Enable Configuration Guide 963 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 994
: 2-Enabled Statistics index: 2 Alarm variable: BPkt Sample Type: Absolute RHold-REvent: 3000-1 FHold-FEvent: 2000-2 Alarm startup: All Interval: 10 Owner: monitor Configuration Example Configuration Guide 964 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 995
Security Model Security Level Read View Write View Notify View Default Setting None v1 noAuthNoPriv viewDefault None None MIB Object ID 1 1.3.6.1.6.3.15 1.3.6.1.6.3.16 1.3.6.1.6.3.18 Configuration Guide 965 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 996
None 162 None IPv4 v1 noAuthNoPriv Trap None in trap mode; 3 times in Inform mode. None in trap mode; 100 seconds in Inform mode. Configuration Guide 966 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 997
Falling Threshold Falling Event Alarm Type Interval Owner Default Setting RecBytes None Absolute 100 None 100 None All 1800 seconds monitor Appendix: Default Parameters Configuration Guide 967 - TP-Link T2600G-18TSTL-SG3216 | T2600G-18TSUN V1 Configuration Guide - Page 998
Configuring SNMP & RMON Parameter Status Default Setting Disable Appendix: Default Parameters Configuration Guide 968
Configuration Guide
T2600G Series Switches
T2600G-18TS (TL-SG3216) / T2600G-28TS (TL-SG3424)
T2600G-52TS (TL-SG3452) / T2600G-28MPS (TL-SG3424P)
1910011953
REV2.0.0