Home » TP-Link Manuals » Hubs & Switches » TP-Link TL-SL3452 » Manual Viewer

TP-Link TL-SL3452 User Guide - Page 42

Deﬁning Authentication Hosts

UPC - 845973020507

Add to My Manuals
Save this manual to your list of manuals

Page 42 highlights

Figure 46: Multiple Hosts Page The Multiple Hosts Page contains the following fields:  Port - Displays the port number for which advanced port-based authentication is enabled.  Multiple Hosts - Indicates whether multiple hosts are enabled. Multiple hosts must be enabled in order to either disable the ingress-filter, or to use port-lock security on the selected port. The possible field values are: - Multiple - Multiple hosts are enabled. - Disable - Multiple hosts are disabled.  Action on Violation - Defines the action to be applied to packets arriving in single-host mode, from a host whose MAC address is not the supplicant MAC address. The possible field values are: - Forward - Forwards the packet. - Discard - Discards the packets. This is the default value. - Shutdown - Discards the packets and shuts down the port. The port remains shut down until reactivated, or until the device is reset.  Traps - Indicates if traps are enabled for Multiple Hosts. The possible field values are: - True - Indicates that traps are enabled for Multiple hosts. - False - Indicates that traps are disabled for Multiple hosts.  Trap Frequency - Defines the time period by which traps are sent to the host. The Trap Frequency (1-1000000) field can be defined only if multiple hosts are disabled. The default is 10 seconds.  Status - Indicates the host status. If there is an asterisk (*), the port is either not linked or is down. The possible field values are: - Unauthorized - Indicates that either the port control is Force Unauthorized and the port link is down, or the port control is Auto but a client has not been authenticated via the port. - Not in Auto Mode - Indicates that the port control is Forced Authorized, and clients have full port access. - Single-host Lock - Indicates that the port control is Auto and a single client has been authenticated via the port. - No Single Host - Indicates that Multiple Host is enabled.  Number of Violations - Indicates the number of packets that arrived on the interface in single-host mode, from a host whose MAC address is not the supplicant MAC address. 2. Click . The Multiple Host Settings Page opens: Figure 47: Multiple Host Settings Page 3. Define the fields. 4. Click . The multiple host settings are saved, and the device is updated. 5.2.2.3 Defining Authentication Hosts The Authenticated Hosts Page contains a list of authenticated users. To define authenticated users: 1. Click System > Network Security > Authentication > Authenticated Hosts. The Authenticated Hosts Page opens: 35

Section	Page
Preface	8
Guide Overview	8
Intended Audience	9
Section 1. Getting Started	10
1.1 Configuring the device to use TP-Link Embedded Web Interface	10
1.2 Starting the TP-Link Embedded Web Interface	10
1.3 Understanding the TP-Link Embedded Web Interface	11
1.3.1 Device Representation	12
1.3.2 Using the TP-Link Embedded Web Interface Management Buttons	12
1.4 Using Screen and Table Options	13
1.4.1 Adding Configuration Information	13
1.4.2 Modifying Configuration Information	13
1.5 Deleting Configuration Information	13
1.6 Resetting the Device	14
1.7 Logging Off from the Device	14
Section 2. Defining Device Information	15
Section 3. Setting the System Time	16
3.1 Configuring Daylight Savings Time	16
3.2 Configuring SNTP	19
3.2.1 SNTP Overview	19
3.2.1.1 Polling for Unicast Time Information	19
3.2.1.2 Polling for Anycast Time Information	19
3.2.1.3 Polling for Broadcast Time Information	19
3.2.2 Defining SNTP Global Settings	20
3.2.3 Configuring SNTP Authentication	20
3.2.4 Defining SNTP Servers	21
3.2.5 Defining SNTP Interface Settings	22
Section 4. Configuring System Logs	24
4.1 Defining General Log Properties	24
4.2 Viewing Memory Logs	25
4.3 Viewing Flash Logs	25
4.4 Defining System Log Servers	26
Section 5. Configuring Device Security	28
5.1 Configuring Management Security	28
5.1.1 Configuring Authentication Methods	28
5.1.1.1 Defining Access Profiles	28
5.1.1.2 Defining Profile Rules	30
5.1.1.3 Defining Authentication Profiles	31
5.1.1.4 Mapping Authentication Profiles	32
5.1.1.5 Defining TACACS+ Host Settings	34
5.1.1.6 Defining RADIUS Server Settings	35
5.1.2 Configuring Passwords	37
5.1.2.1 Defining Local Users	37
5.1.2.2 Defining Line Passwords	38
5.1.2.3 Defining Enable Passwords	38
5.2 Configuring Network Security	38
5.2.1 Network Security Overview	39
5.2.1.1 Port-Based Authentication	39
5.2.1.2 Advanced Port-Based Authentication	39
5.2.2 Defining Network Authentication Properties	39
5.2.2.1 Defining Port Authentication Properties	40
5.2.2.2 Configuring Multiple Hosts	41
5.2.2.3 Defining Authentication Hosts	42
5.2.3 Configuring Traffic Control	43
5.2.3.1 Managing Port Security	43
5.2.3.2 Enabling Storm Control	44
Section 6. Defining IP Addresses	46
6.1 Defining IP Addressing	46
6.1.1 Defining IP Addresses	46
6.1.2 Defining the Default Gateway	47
6.1.3 Defining DHCP Addresses	47
6.1.4 Defining ARP	48
6.2 Defining Domain Name System	49
6.2.1 Defining DNS Servers	49
6.2.2 Configuring Host Mapping	50
Section 7. Configuring Interfaces	52
7.1 Configuring Ports	52
7.2 Configuring LAGs	54
7.2.1 Defining LAG Members	54
7.2.2 Configuring LACP	55
7.3 Configuring VLANs	56
7.3.1 Defining VLAN Properties	56
7.3.2 Defining VLAN Membership	57
7.3.3 Defining VLAN Interface Settings	58
7.3.4 Configuring GARP	59
7.3.4.1 Defining GARP	59
7.3.5 Defining GVRP	60
Section 8. Defining the Forwarding Database	62
8.1 Configuring Static Addresses	62
8.2 Configuring Dynamic Forwarding Addresses	63
Section 9. Configuring the Spanning Tree Protocol	65
9.1 Configuring the Classic STP	65
9.1.1 Defining STP Properties	65
9.1.2 Defining STP Interface Settings	66
9.2 Configuring the Rapid STP	68
9.3 Configuring the Multiple STP	69
9.3.1 Defining MSTP Properties	69
9.3.2 Configuring MSTP Instances	70
9.3.3 Configuring MSTP VLAN Instances	71
9.3.4 Configuring MSTP Interface Settings	71
Section 10. Configuring Multicast Forwarding	73
10.1 Configuring Multicast Forwarding	73
10.2 Defining Multicast Bridging Groups	74
10.3 Defining Multicast Forward All Parameters	76
Section 11. Configuring SNMP Management	77
11.1 SNMP v1 and v2c	77
11.2 SNMP v3	77
11.3 Defining SNMP Security	77
11.3.1 Defining SNMP Global Parameters	78
11.3.2 Defining SNMP Views	78
11.3.3 Defining SNMP Group Profiles	79
11.3.4 Defining SNMP Group Members	80
11.3.5 Defining SNMP Communities	82
11.3.5.1 SNMP Communities Basic Table	82
11.3.5.2 SNMP Communities Advanced Table	82
11.4 Configuring SNMP Notification Settings	83
11.4.1 Defining SNMP Notification Properties	83
11.4.2 Defining Notification Filters	83
11.4.3 Defining Notification Receivers	84
11.4.3.1 SNMPv1,2c Notification Recipient	85
11.4.3.2 SNMPv3 Notification Recipient	85
Section 12. Configuring Quality of Service	87
12.1 Quality of Service Overview	87
12.1.1 Mapping to Queues	87
12.1.2 QoS Modes	88
12.1.2.1 Basic QoS Mode	89
12.1.2.2 Advanced QoS Mode	89
12.2 Enabling Quality of Service	89
12.2.1 Enabling Quality of Service	89
12.2.2 Defining Queues	90
12.3 Mapping Queues	91
12.3.1 Mapping CoS Values to Queues	91
12.3.2 Mapping QoS Values to Queues	91
Section 13. Managing System Files	93
13.1 Downloading System Files	93
13.1.1 Download Type	93
13.1.2 Firmware Download	94
13.1.3 Configuration Download	94
13.2 Uploading System Files	94
13.2.1 Upload Type	94
13.2.2 Software Image Upload	95
13.2.3 Configuration Upload	95
13.3 Activating Image Files	95
13.4 Copying System Files	95
Section 14. Performing Device Diagnostics	97
14.1 Configuring Port Mirroring	97
14.2 Viewing Integrated Cable Tests	98
14.3 Viewing Optical Transceivers	99
Section 15. Viewing Statistics	100
15.1 Viewing Interface Statistics	100
15.1.1 Viewing Device Interface Statistics	100
15.1.2 Viewing Etherlike Statistics	101
15.1.3 Viewing GVRP Statistics	102
15.1.4 Viewing EAP Statistics	103
15.2 Managing RMON Statistics	103
15.2.1 Viewing RMON Statistics	104
15.2.2 Configuring RMON History	105
15.2.2.1 Defining RMON History Control	105
15.2.2.2 Viewing the RMON History Table	106
15.2.3 Configuring RMON Events	107
15.2.3.1 Defining RMON Events Control	107
15.2.3.2 Viewing the RMON Events Logs	108
15.2.4 Defining RMON Alarms	108

Match case Limit results 1 per page

³µ

Figure 46: Multiple Hosts Page

The

Multiple Hosts Page

contains the following ﬁelds:

Port

— Displays the port number for which advanced

port-based authentication is enabled.

Multiple Hosts

— Indicates whether multiple hosts

are enabled. Multiple hosts must be enabled in order

to either disable the ingress-filter, or to use port-lock

security on the selected port. The possible ﬁeld values

are:

–

Multiple

— Multiple hosts are enabled.

–

Disable

— Multiple hosts are disabled.

Action on Violation

— Deﬁnes the action to be applied to packets arriving in single-host mode, from a host whose MAC

address is not the supplicant MAC address. The possible ﬁeld values are:

–

Forward

— Forwards the packet.

–

Discard

— Discards the packets. This is the default value.

–

Shutdown

— Discards the packets and shuts down the port. The port remains shut down until reactivated, or until the

device is reset.

Traps

— Indicates if traps are enabled for Multiple Hosts. The possible ﬁeld values are:

–

True

— Indicates that traps are enabled for Multiple hosts.

–

False

— Indicates that traps are disabled for Multiple hosts.

Trap Frequency

— Deﬁnes the time period by which traps are sent to the host. The Trap Frequency (1-1000000) ﬁeld

can be deﬁned only if multiple hosts are disabled. The default is 10 seconds.

Status

— Indicates the host status. If there is an asterisk (*), the port is either not linked or is down. The possible ﬁeld

values are:

–

Unauthorized

— Indicates that either the port control is Force Unauthorized and the port link is down, or the port

control is Auto but a client has not been authenticated via the port.

–

Not in Auto Mode

— Indicates that the port control is Forced Authorized, and clients have full port access.

–

Single-host Lock

— Indicates that the port control is Auto and a single client has been authenticated via the port.

–

No Single Host

— Indicates that Multiple Host is enabled.

Number of Violations

— Indicates the number of packets that arrived on the interface in single-host mode, from a host

whose MAC address is not the supplicant MAC address.

Click

. The

Multiple Host Settings Page

opens:

Figure 47: Multiple Host Settings Page

Deﬁne the ﬁelds.

Click

. The multiple host settings are saved,

and the device is updated.

5.2.2.3

Deﬁning Authentication Hosts

The

Authenticated Hosts Page

contains a list of

authenticated users.

To deﬁne authenticated users:

Click

System > Network Security > Authentication > Authenticated Hosts

. The

Authenticated Hosts Page

opens:

