TP-Link TL-SL3428 User Guide - Page 33

²¶

Figure 32: Authentication Mapping Page

The

Authentication Mapping Page

contains the following

fields:

Console

— Indicates that authentication profiles are

used to authenticate console users.

Telnet

— Indicates that authentication profiles are used

to authenticate Telnet users.

Secure Telnet (SSH)

— Indicates that authentication

profiles are used to authenticate Secure Shell (SSH)

users. SSH provides clients secure and encrypted

remote connections to a device.

Secure HTTP

— Indicates that authentication methods

are used for Secure HTTP access. Possible field values are:

–

None

— Indicates that no authentication method is used for access.

–

Local

— Indicates that authentication occurs locally.

–

RADIUS

— Indicates that authentication occurs at the RADIUS server.

–

Line

— Indicates that authentication uses a line password.

–

Enable

— Indicates that authentication uses an Enable password.

–

Local, RADIUS

— Indicates that authentication first occurs locally. If authentication cannot be verified locally, the

RADIUS server authenticates the management method. If the RADIUS server cannot authenticate the management

method, the session is blocked.

–

RADIUS, Local

— Indicates that authentication first occurs at the RADIUS server. If authentication cannot be verified

at the RADIUS server, the session is authenticated locally. If the session cannot be authenticated locally, the session is

blocked.

–

Local, RADIUS, None

— Indicates that authentication first occurs locally. If authentication cannot be verified locally, the


method, the session is permitted.

–

RADIUS, Local, None

— Indicates that authentication first occurs at the RADIUS server. If authentication cannot be

verified at the RADIUS server, the session is authenticated locally. If the session cannot be authenticated locally, the

session is permitted.

HTTP

— Indicates that authentication methods are used for HTTP access. Possible field values are:

–

None

— Indicates that no authentication method is used for access.

–

Local

— Indicates that authentication occurs locally.

–

RADIUS

— Indicates that authentication occurs at the RADIUS server.

–

Line

— Indicates that authentication uses a line password.

–

Enable

— Indicates that authentication uses an Enable password.

–

Local, RADIUS

— Indicates that authentication first occurs locally. If authentication cannot be verified locally, the


method, the session is blocked.

–

RADIUS, Local

— Indicates that authentication first occurs at the RADIUS server. If authentication cannot be verified

at the RADIUS server, the session is authenticated locally. If the session cannot be authenticated locally, the session is

blocked.

–

Local, RADIUS, None

— Indicates that authentication first occurs locally. If authentication cannot be verified locally, the


method, the session is permitted.

–

RADIUS, Local, None

— Indicates that authentication first occurs at the RADIUS server. If authentication cannot be

verified at the RADIUS server, the session is authenticated locally. If the session cannot be authenticated locally, the











Section	Page
Preface	8
Guide Overview	8
Intended Audience	9
Section 1. Getting Started	10
1.1 Configuring the device to use TP-Link Embedded Web Interface	10
1.2 Starting the TP-Link Embedded Web Interface	10
1.3 Understanding the TP-Link Embedded Web Interface	11
1.3.1 Device Representation	12
1.3.2 Using the TP-Link Embedded Web Interface Management Buttons	12
1.4 Using Screen and Table Options	13
1.4.1 Adding Configuration Information	13
1.4.2 Modifying Configuration Information	13
1.5 Deleting Configuration Information	13
1.6 Resetting the Device	14
1.7 Logging Off from the Device	14
Section 2. Defining Device Information	15
Section 3. Setting the System Time	16
3.1 Configuring Daylight Savings Time	16
3.2 Configuring SNTP	19
3.2.1 SNTP Overview	19
3.2.1.1 Polling for Unicast Time Information	19
3.2.1.2 Polling for Anycast Time Information	19
3.2.1.3 Polling for Broadcast Time Information	19
3.2.2 Defining SNTP Global Settings	20
3.2.3 Configuring SNTP Authentication	20
3.2.4 Defining SNTP Servers	21
3.2.5 Defining SNTP Interface Settings	22
Section 4. Configuring System Logs	24
4.1 Defining General Log Properties	24
4.2 Viewing Memory Logs	25
4.3 Viewing Flash Logs	25
4.4 Defining System Log Servers	26
Section 5. Configuring Device Security	28
5.1 Configuring Management Security	28
5.1.1 Configuring Authentication Methods	28
5.1.1.1 Defining Access Profiles	28
5.1.1.2 Defining Profile Rules	30
5.1.1.3 Defining Authentication Profiles	31
5.1.1.4 Mapping Authentication Profiles	32
5.1.1.5 Defining TACACS+ Host Settings	34
5.1.1.6 Defining RADIUS Server Settings	35
5.1.2 Configuring Passwords	37
5.1.2.1 Defining Local Users	37
5.1.2.2 Defining Line Passwords	38
5.1.2.3 Defining Enable Passwords	38
5.2 Configuring Network Security	38
5.2.1 Network Security Overview	39
5.2.1.1 Port-Based Authentication	39
5.2.1.2 Advanced Port-Based Authentication	39
5.2.2 Defining Network Authentication Properties	39
5.2.2.1 Defining Port Authentication Properties	40
5.2.2.2 Configuring Multiple Hosts	41
5.2.2.3 Defining Authentication Hosts	42
5.2.3 Configuring Traffic Control	43
5.2.3.1 Managing Port Security	43
5.2.3.2 Enabling Storm Control	44
Section 6. Defining IP Addresses	46
6.1 Defining IP Addressing	46
6.1.1 Defining IP Addresses	46
6.1.2 Defining the Default Gateway	47
6.1.3 Defining DHCP Addresses	47
6.1.4 Defining ARP	48
6.2 Defining Domain Name System	49
6.2.1 Defining DNS Servers	49
6.2.2 Configuring Host Mapping	50
Section 7. Configuring Interfaces	52
7.1 Configuring Ports	52
7.2 Configuring LAGs	54
7.2.1 Defining LAG Members	54
7.2.2 Configuring LACP	55
7.3 Configuring VLANs	56
7.3.1 Defining VLAN Properties	56
7.3.2 Defining VLAN Membership	57
7.3.3 Defining VLAN Interface Settings	58
7.3.4 Configuring GARP	59
7.3.4.1 Defining GARP	59
7.3.5 Defining GVRP	60
Section 8. Defining the Forwarding Database	62
8.1 Configuring Static Addresses	62
8.2 Configuring Dynamic Forwarding Addresses	63
Section 9. Configuring the Spanning Tree Protocol	65
9.1 Configuring the Classic STP	65
9.1.1 Defining STP Properties	65
9.1.2 Defining STP Interface Settings	66
9.2 Configuring the Rapid STP	68
9.3 Configuring the Multiple STP	69
9.3.1 Defining MSTP Properties	69
9.3.2 Configuring MSTP Instances	70
9.3.3 Configuring MSTP VLAN Instances	71
9.3.4 Configuring MSTP Interface Settings	71
Section 10. Configuring Multicast Forwarding	73
10.1 Configuring Multicast Forwarding	73
10.2 Defining Multicast Bridging Groups	74
10.3 Defining Multicast Forward All Parameters	76
Section 11. Configuring SNMP Management	77
11.1 SNMP v1 and v2c	77
11.2 SNMP v3	77
11.3 Defining SNMP Security	77
11.3.1 Defining SNMP Global Parameters	78
11.3.2 Defining SNMP Views	78
11.3.3 Defining SNMP Group Profiles	79
11.3.4 Defining SNMP Group Members	80
11.3.5 Defining SNMP Communities	82
11.3.5.1 SNMP Communities Basic Table	82
11.3.5.2 SNMP Communities Advanced Table	82
11.4 Configuring SNMP Notification Settings	83
11.4.1 Defining SNMP Notification Properties	83
11.4.2 Defining Notification Filters	83
11.4.3 Defining Notification Receivers	84
11.4.3.1 SNMPv1,2c Notification Recipient	85
11.4.3.2 SNMPv3 Notification Recipient	85
Section 12. Configuring Quality of Service	87
12.1 Quality of Service Overview	87
12.1.1 Mapping to Queues	87
12.1.2 QoS Modes	88
12.1.2.1 Basic QoS Mode	89
12.1.2.2 Advanced QoS Mode	89
12.2 Enabling Quality of Service	89
12.2.1 Enabling Quality of Service	89
12.2.2 Defining Queues	90
12.3 Mapping Queues	91
12.3.1 Mapping CoS Values to Queues	91
12.3.2 Mapping QoS Values to Queues	91
Section 13. Managing System Files	93
13.1 Downloading System Files	93
13.1.1 Download Type	93
13.1.2 Firmware Download	94
13.1.3 Configuration Download	94
13.2 Uploading System Files	94
13.2.1 Upload Type	94
13.2.2 Software Image Upload	95
13.2.3 Configuration Upload	95
13.3 Activating Image Files	95
13.4 Copying System Files	95
Section 14. Performing Device Diagnostics	97
14.1 Configuring Port Mirroring	97
14.2 Viewing Integrated Cable Tests	98
14.3 Viewing Optical Transceivers	99
Section 15. Viewing Statistics	100
15.1 Viewing Interface Statistics	100
15.1.1 Viewing Device Interface Statistics	100
15.1.2 Viewing Etherlike Statistics	101
15.1.3 Viewing GVRP Statistics	102
15.1.4 Viewing EAP Statistics	103
15.2 Managing RMON Statistics	103
15.2.1 Viewing RMON Statistics	104
15.2.2 Configuring RMON History	105
15.2.2.1 Defining RMON History Control	105
15.2.2.2 Viewing the RMON History Table	106
15.2.3 Configuring RMON Events	107
15.2.3.1 Defining RMON Events Control	107
15.2.3.2 Viewing the RMON Events Logs	108
15.2.4 Defining RMON Alarms	108

TP-Link TL-SL3428 User Guide - Page 33

Authentication Mapping Console, Telnet, Secure Telnet SSH

Page 33 highlights