TP-Link JetStream TL-SL5428E Instruction Manual

TL-SL5428E
24-Port 10/100Mbps + 4-Port Gigabit
JetStream L2 Managed Switch
REV1.3.0
1910010726

I
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or
registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2013 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com

II
CONTENTS
Preface .............................................................................................................. 1
Chapter 1 Using the CLI ....................................................................................... 4
1.1 Accessing the CLI ...........................................................................................................4
1.1.1 Logon by a console port .......................................................................................4
1.1.2 Logon by Telnet ....................................................................................................6
1.2 CLI Command Modes ...................................................................................................10
1.3 Security Levels .............................................................................................................13
1.4 Conventions..................................................................................................................13
1.4.1 Format Conventions ...........................................................................................13
1.4.2 Special Characters..............................................................................................13
1.4.3 Parameter Format...............................................................................................14
Chapter 2 User Interface .................................................................................... 15
enable....................................................................................................................................15
enable password ...................................................................................................................15
disable...................................................................................................................................16
configure................................................................................................................................16
exit.........................................................................................................................................16
end ........................................................................................................................................17
Chapter 3 IEEE 802.1Q VLAN Commands ........................................................ 18
vlan........................................................................................................................................18
interface vlan .........................................................................................................................18
name .....................................................................................................................................19
switchport mode ....................................................................................................................20
switchport access vlan...........................................................................................................20
switchport trunk allowed vlan.................................................................................................21
switchport general allowed vlan.............................................................................................21
switchport pvid.......................................................................................................................22
show vlan summary...............................................................................................................23
show vlan brief ......................................................................................................................23
show vlan ..............................................................................................................................24
Chapter 4 MAC-based VLAN Commands ......................................................... 25
mac-vlan mac-address ..........................................................................................................25
mac-vlan................................................................................................................................25

III
show mac-vlan ......................................................................................................................26
show mac-vlan interface........................................................................................................27
Chapter 5 Protocol-based VLAN Commands ................................................... 28
protocol-vlan template ...........................................................................................................28
protocol-vlan vlan ..................................................................................................................29
protocol-vlan..........................................................................................................................29
show protocol-vlan template..................................................................................................30
show protocol-vlan vlan .........................................................................................................30
show protocol-vlan interface..................................................................................................31
Chapter 6 VLAN-VPN Commands...................................................................... 32
dot1q-tunnel ..........................................................................................................................32
dot1q-tunnel tpid....................................................................................................................32
dot1q-tunnel mapping............................................................................................................33
switchport dot1q-tunnel mapping...........................................................................................34
switchport dot1q-tunnel mode uplink .....................................................................................34
show dot1q-tunnel .................................................................................................................35
show dot1q-tunnel mapping ..................................................................................................35
show dot1q-tunnel mapping interface....................................................................................36
show dot1q-tunnel uplink.......................................................................................................36
Chapter 7 Voice VLAN Commands.................................................................... 37
voice vlan ..............................................................................................................................37
voice vlan aging time.............................................................................................................37
voice vlan priority...................................................................................................................38
voice vlan mac-address.........................................................................................................38
switchport voice vlan mode ...................................................................................................39
switchport voice vlan security ................................................................................................40
show voice vlan .....................................................................................................................40
show voice vlan oui ...............................................................................................................41
show voice vlan switchport ....................................................................................................41
Chapter 8 Private VLAN Commands ................................................................. 43
private-vlan primary...............................................................................................................43
private-vlan community..........................................................................................................43
private-vlan association.........................................................................................................44
switchport private-vlan...........................................................................................................44
switchport private-vlan host-association ................................................................................45

IV
switchport private-vlan mapping ............................................................................................46
show vlan private-vlan...........................................................................................................46
Chapter 9 GVRP Commands.............................................................................. 48
gvrp .......................................................................................................................................48
gvrp (interface) ......................................................................................................................48
gvrp registration.....................................................................................................................49
gvrp timer ..............................................................................................................................49
show gvrp global ...................................................................................................................50
show gvrp interface ...............................................................................................................51
Chapter 10 Etherchannel Commands ................................................................. 52
channel-group .......................................................................................................................52
port-channel load-balance .....................................................................................................53
lacp system-priority ...............................................................................................................53
lacp port-priority.....................................................................................................................54
show etherchannel ................................................................................................................54
show etherchannel load-balance...........................................................................................55
show lacp ..............................................................................................................................55
show lacp sys-id ....................................................................................................................56
Chapter 11 User Manage Commands.................................................................. 57
user .......................................................................................................................................57
user access-control ip-based.................................................................................................58
user access-control mac-based.............................................................................................58
user access-control port-based .............................................................................................59
user max-number ..................................................................................................................60
user idle-timeout....................................................................................................................60
line.........................................................................................................................................61
password ...............................................................................................................................62
login.......................................................................................................................................62
login local ..............................................................................................................................63
show user account-list...........................................................................................................63
show user configuration.........................................................................................................64
Chapter 12 Binding Table Commands................................................................. 65
ip source binding ...................................................................................................................65
ip dhcp snooping ...................................................................................................................66
ip dhcp snooping global.........................................................................................................67

V
ip dhcp snooping information option......................................................................................68
ip dhcp snooping information strategy ...................................................................................68
ip dhcp snooping information remote-id.................................................................................69
ip dhcp snooping information circuit-id ..................................................................................69
ip dhcp snooping trust ...........................................................................................................70
ip dhcp snooping mac-verify..................................................................................................71
ip dhcp snooping limit rate.....................................................................................................71
ip dhcp snooping decline .......................................................................................................72
show ip source binding ..........................................................................................................72
show ip dhcp snooping ..........................................................................................................73
show ip dhcp snooping information .......................................................................................73
show ip dhcp snooping interface ...........................................................................................74
Chapter 13 ARP Inspection Commands.............................................................. 75
ip arp inspection(global) ........................................................................................................75
ip arp inspection trust ............................................................................................................75
ip arp inspection(interface) ....................................................................................................76
ip arp inspection limit-rate......................................................................................................76
ip arp inspection recover .......................................................................................................77
show ip arp inspection...........................................................................................................78
show ip arp inspection interface ............................................................................................78
show ip arp inspection statistics ............................................................................................79
clear ip arp inspection statistics.............................................................................................79
Chapter 14 IP Verify Source Commands............................................................. 80
ip verify source ......................................................................................................................80
show ip verify source.............................................................................................................80
Chapter 15 DoS Defend Command...................................................................... 82
ip dos-prevent........................................................................................................................82
ip dos-prevent ping-rate.........................................................................................................82
ip dos-prevent syn-rate..........................................................................................................83
ip dos-prevent type................................................................................................................83
ip dos-prevent detect.............................................................................................................84
clear ip dos-prevent detect statistics......................................................................................85
show ip dos-prevent ..............................................................................................................85
Chapter 16 IEEE 802.1X Commands ................................................................... 87
dot1x system-auth-control .....................................................................................................87

VI
dot1x auth-method ................................................................................................................87
dot1x guest-vlan(global) ........................................................................................................88
dot1x quiet-period..................................................................................................................89
dot1x timeout.........................................................................................................................89
dot1x max-reauth-req ............................................................................................................90
dot1x......................................................................................................................................90
dot1x guest-vlan(interface) ....................................................................................................91
dot1x port-control ..................................................................................................................91
dot1x port-method .................................................................................................................92
radius.....................................................................................................................................93
radius server-account............................................................................................................94
show dot1x global..................................................................................................................94
show dot1x interface .............................................................................................................95
show radius accounting .........................................................................................................95
show radius authentication ....................................................................................................96
Chapter 17 System Log Commands.................................................................... 97
logging buffer.........................................................................................................................97
logging file flash.....................................................................................................................97
clear logging ..........................................................................................................................98
logging host index .................................................................................................................99
show logging local-config ......................................................................................................99
show logging loghost...........................................................................................................100
show logging buffer .............................................................................................................100
show logging flash...............................................................................................................101
Chapter 18 SSH Commands................................................................................102
ip ssh server ........................................................................................................................102
ip ssh version ......................................................................................................................102
ip ssh timeout ......................................................................................................................103
ip ssh max-client..................................................................................................................103
ip ssh download...................................................................................................................104
show ip ssh..........................................................................................................................104
Chapter 19 SSL Commands ................................................................................106
ip http secure-server............................................................................................................106
ip http secure-server download certificate ...........................................................................106
ip http secure-server download key.....................................................................................107
show ip http secure-server ..................................................................................................108

VII
Chapter 20 MAC Address Commands................................................................109
mac address-table static......................................................................................................109
mac address-table aging-time ............................................................................................. 110
mac address-table filtering .................................................................................................. 110
mac address-table max-mac-count ..................................................................................... 111
show mac address-table address........................................................................................ 112
show mac address-table aging-time.................................................................................... 112
show mac address-table max-mac-count interface ............................................................. 113
show mac address-table interface....................................................................................... 113
show mac address-table mac-num...................................................................................... 114
show mac address-table mac.............................................................................................. 114
show mac address-table vlan .............................................................................................. 115
Chapter 21 System Configuration Commands..................................................116
system-time manual ............................................................................................................ 116
system-time ntp ................................................................................................................... 116
system-time dst predefined ................................................................................................. 118
system-time dst date ........................................................................................................... 118
system-time dst recurring .................................................................................................... 119
hostname.............................................................................................................................120
location................................................................................................................................121
contact-info..........................................................................................................................121
reset ....................................................................................................................................122
reboot ..................................................................................................................................122
copy running-config startup-config ......................................................................................122
copy startup-config tftp ........................................................................................................123
copy tftp startup-config ........................................................................................................123
firmware upgrade ................................................................................................................124
ping .....................................................................................................................................125
tracert ..................................................................................................................................125
loopback interface ...............................................................................................................126
show system-time................................................................................................................126
show system-time dst..........................................................................................................127
show system-time ntp..........................................................................................................127
show system-info.................................................................................................................128
show cable-diagnostics interface.........................................................................................128
Chapter 22 Ethernet Configuration Commands ................................................130

VIII
interface fastEthernet ..........................................................................................................130
interface range fastEthernet ................................................................................................130
interface gigabitEthernet......................................................................................................131
interface range gigabitEthernet ...........................................................................................131
description ...........................................................................................................................132
shutdown .............................................................................................................................133
flow-control ..........................................................................................................................133
duplex..................................................................................................................................134
speed...................................................................................................................................134
storm-control broadcast.......................................................................................................135
storm-control multicast ........................................................................................................135
storm-control unicast ...........................................................................................................136
bandwidth ............................................................................................................................137
clear counters......................................................................................................................137
show interface status...........................................................................................................138
show interface counters.......................................................................................................138
show interface description ...................................................................................................139
show interface flowcontrol ...................................................................................................139
show interface configuration................................................................................................140
show storm-control ..............................................................................................................140
show bandwidth...................................................................................................................141
Chapter 23 QoS Commands................................................................................142
qos ......................................................................................................................................142
qos cos................................................................................................................................142
qos dscp..............................................................................................................................143
qos queue cos-map.............................................................................................................144
qos queue dscp-map...........................................................................................................144
qos queue mode..................................................................................................................145
show qos interface ..............................................................................................................146
show qos cos-map ..............................................................................................................147
show qos dscp-map ............................................................................................................147
show qos queue mode ........................................................................................................148
show qos status...................................................................................................................148
Chapter 24 Port Mirror Commands ....................................................................149
monitor session destination interface ..................................................................................149
monitor session source interface.........................................................................................149

IX
show monitor session..........................................................................................................151
Chapter 25 Port isolation Commands ................................................................152
port isolation ........................................................................................................................152
show port isolation...............................................................................................................153
Chapter 26 Loopback Detection Commands.....................................................154
loopback-detection(global) ..................................................................................................154
loopback-detection interval..................................................................................................154
loopback-detection recovery-time........................................................................................155
loopback-detection(interface) ..............................................................................................155
loopback-detection config....................................................................................................156
loopback-detection recover .................................................................................................156
show loopback-detection global ..........................................................................................157
show loopback-detection interface ......................................................................................157
Chapter 27 ACL Commands................................................................................159
time-range ...........................................................................................................................159
absolute...............................................................................................................................159
periodic................................................................................................................................160
holiday.................................................................................................................................161
holiday(global) .....................................................................................................................161
access-list create.................................................................................................................162
mac access-list....................................................................................................................162
access-list standard.............................................................................................................163
access-list extended............................................................................................................164
rule ......................................................................................................................................165
access-list policy name........................................................................................................167
access-list policy action.......................................................................................................167
redirect interface..................................................................................................................168
redirect vlan.........................................................................................................................168
s-condition ...........................................................................................................................169
s-mirror ................................................................................................................................169
qos-remark ..........................................................................................................................170
access-list bind(interface)....................................................................................................171
access-list bind(vlan)...........................................................................................................171
show time-range..................................................................................................................172
show holiday........................................................................................................................172
show access-list ..................................................................................................................172

X
show access-list policy ........................................................................................................173
show access-list bind ..........................................................................................................173
Chapter 28 MSTP Commands .............................................................................174
spanning-tree(global)...........................................................................................................174
spanning-tree(interface) ......................................................................................................174
spanning-tree common-config .............................................................................................175
spanning-tree mode.............................................................................................................176
spanning-tree mst configuration ..........................................................................................176
instantce ..............................................................................................................................177
name ...................................................................................................................................178
revision ................................................................................................................................178
spanning-tree mst instance .................................................................................................179
spanning-tree mst................................................................................................................179
spanning-tree priority...........................................................................................................180
spanning-tree tc-defend.......................................................................................................181
spanning-tree timer..............................................................................................................181
spanning-tree hold-count.....................................................................................................182
spanning-tree max-hops......................................................................................................183
spanning-tree bpdufilter.......................................................................................................183
spanning-tree bpduguard ....................................................................................................184
spanning-tree guard loop.....................................................................................................184
spanning-tree guard root .....................................................................................................185
spanning-tree guard tc.........................................................................................................186
spanning-tree mcheck .........................................................................................................186
show spanning-tree active...................................................................................................187
show spanning-tree bridge ..................................................................................................187
show spanning-tree interface ..............................................................................................187
show spanning-tree interface-security .................................................................................188
show spanning-tree mst ......................................................................................................189
Chapter 29 IGMP Commands..............................................................................190
ip igmp snooping(global) .....................................................................................................190
ip igmp snooping(interface) .................................................................................................190
ip igmp snooping immediate-leave ......................................................................................191
ip igmp snooping drop-unknown..........................................................................................191
ip igmp snooping vlan-config ...............................................................................................192
ip igmp snooping multi-vlan-config ......................................................................................193

XI
ip igmp snooping filter add-id...............................................................................................194
ip igmp snooping filter(global)..............................................................................................195
ip igmp snooping filter(interface) .........................................................................................195
ip igmp snooping filter maxgroup.........................................................................................196
ip igmp snooping filter mode................................................................................................196
show ip igmp snooping........................................................................................................197
show ip igmp snooping interface .........................................................................................197
show ip igmp snooping vlan ................................................................................................198
show ip igmp snooping multi-vlan........................................................................................198
show ip igmp snooping groups ............................................................................................199
show ip igmp snooping filter ................................................................................................199
Chapter 30 SNMP Commands.............................................................................201
snmp-server ........................................................................................................................201
snmp-server view ................................................................................................................201
snmp-server group ..............................................................................................................202
snmp-server user ................................................................................................................203
snmp-server community ......................................................................................................205
snmp-server host.................................................................................................................205
snmp-server engineID .........................................................................................................207
rmon history.........................................................................................................................207
rmon event ..........................................................................................................................208
rmon alarm ..........................................................................................................................209
show snmp-server ............................................................................................................... 211
show snmp-server view ....................................................................................................... 211
show snmp-server group ..................................................................................................... 211
show snmp-server user .......................................................................................................212
show snmp-server community.............................................................................................212
show snmp-server host .......................................................................................................213
show snmp-server engineID................................................................................................213
show rmon history ...............................................................................................................213
show rmon event .................................................................................................................214
show rmon alarm.................................................................................................................214
Chapter 31 LLDP Commands..............................................................................216
lldp.......................................................................................................................................216
lldp hold-multiplier................................................................................................................216
lldp timer..............................................................................................................................217

XII
lldp receive ..........................................................................................................................218
lldp transmit .........................................................................................................................218
lldp snmp-trap......................................................................................................................219
lldp tlv-select........................................................................................................................219
show lldp .............................................................................................................................220
show lldp interface...............................................................................................................221
show lldp local-information interface....................................................................................221
show lldp neighbor-information interface .............................................................................222
show lldp traffic interface .....................................................................................................222
Chapter 32 Cluster Commands...........................................................................224
cluster ndp...........................................................................................................................224
cluster ntdp ..........................................................................................................................225
cluster explore .....................................................................................................................226
cluster..................................................................................................................................226
cluster ip pool ......................................................................................................................227
cluster commander..............................................................................................................227
cluster manage....................................................................................................................228
cluster member....................................................................................................................228
cluster candidate .................................................................................................................229
cluster individual..................................................................................................................229
show cluster ndp..................................................................................................................230
show cluster neighbour........................................................................................................230
show cluster ntdp.................................................................................................................231
show cluster ........................................................................................................................231
show cluster member ..........................................................................................................232
show cluster manage role....................................................................................................232

TL-SL5428E JetStream L2 Managed Switch CLI Guide
1
Preface
This Guide is intended for network administrator to provide referenced information about CLI
(Command Line Interface). The device mentioned in this Guide stands for TL-SL5428E JetStream
L2 Managed Switch.
Overview of this Guide
Chapter 1: Using the CLI
Provide information about how to use the CLI, CLI Command Modes, Security Levels and some
Conventions.
Chapter 2: User Interface
Provide information about the commands used to switch between five CLI Command Modes.
Chapter 3: IEEE 802.1Q VLAN Commands
Provide information about the commands used for configuring IEEE 802.1Q VLAN.
Chapter 4: MAC-based VLAN Commands
Provide information about the commands used for configuring MAC-Based VLAN.
Chapter 5: Protocol-based VLAN Commands
Provide information about the commands used for configuring Protocol-based VLAN.
Chapter 6: VLAN-VPN Commands
Provide information about the commands used for configuring VLAN-VPN (Virtual Private Network)
function.
Chapter 7: Voice VLAN Commands
Provide information about the commands used for configuring Voice VLAN.
Chapter 8: Private VLAN Commands
Provide information about the commands used for configuring Private VLAN.
Chapter 9: GVRP Commands
Provide information about the commands used for configuring GVRP (GARP VLAN registration
protocol).
Chapter 10: EtherChannel Commands
Provide information about the commands used for configuring LAG (Link Aggregation Group) and
LACP (Link Aggregation Control Protocol).
Chapter 11: User Manage Commands
Provide information about the commands used for user management.

TL-SL5428E JetStream L2 Managed Switch CLI Guide
2
Chapter 12: Binding Table Commands
Provide information about the commands used for binding the IP address, MAC address, VLAN
and the connected Port number of the Host together. Besides it also provide information about the
commands used for monitoring the process of the Host obtaining the IP address from DHCP
server, and record the IP address, MAC address, VLAN and the connected Port number of the
Host for automatic binding.
Chapter 13: ARP Inspection Commands
Provide information about the commands used for protecting the switch from the ARP cheating or
ARP Attack.
Chapter 14: IP Verify Source Commands
Provide information about the commands used for guarding the IP Source by filtering the IP
packets based on the IP-MAC Binding entries.
Chapter 15: DoS Defend Command
Provide information about the commands used for DoS defend and detecting the DoS attack.
Chapter 16: IEEE 802.1X Commands
Provide information about the commands used for configuring IEEE 802.1X function.
Chapter 17: System Log Commands
Provide information about the commands used for configuring system log.
Chapter 18: SSH Commands
Provide information about the commands used for configuring and managing SSH (Security
Shell).
Chapter 19: SSL Commands
Provide information about the commands used for configuring and managing SSL (Secure
Sockets Layer).
Chapter 20: MAC Address Commands
Provide information about the commands used for MAC Address configuration.
Chapter 21: System Configuration Commands
Provide information about the commands used for configuring the System information and System
IP, reboot and reset the switch, upgrade the switch system and commands used for device
diagnose, including loopback test and cable test.
Chapter 22: Ethernet Configuration Commands
Provide information about the commands used for configuring the Bandwidth Control, Negotiation
Mode, and Storm Control for ethernet ports.

TL-SL5428E JetStream L2 Managed Switch CLI Guide
3
Chapter 23: QoS Commands
Provide information about the commands used for configuring the QoS function.
Chapter 24: Port Mirror Commands
Provide information about the commands used for configuring the Port Mirror function.
Chapter 25: Port isolation Commands
Provide information about the commands used for configuring the Port isolation function.
Chapter 26: Loopback Detection Commands
Provide information about the commands used for loopback detection.
Chapter 27: ACL Commands
Provide information about the commands used for configuring the ACL (Access Control List).
Chapter 28: MSTP Commands
Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree
Protocol).
Chapter 29: IGMP Commands
Provide information about the commands used for configuring the IGMP Snooping (Internet Group
Management Protocol Snooping).
Chapter 30: SNMP Commands
Provide information about the commands used for configuring the SNMP (Simple Network
Management Protocol) functions.
Chapter 31: LLDP Commands
Provide information about the commands used for configuring the LLDP functions.
Chapter 32: Cluster Commands
Provide information about the commands used for configuring the Cluster Management function.

TL-SL5428E JetStream L2 Managed Switch CLI Guide
4
Chapter 1 Using the CLI
1.1 Accessing the CLI
You can log on to the switch and access the CLI by the following two methods:
1. Log on to the switch by the console port on the switch.
2. Log on to the switch remotely by a Telnet or SSH connection through an Ethernet port.
1.1.1 Logon by a console port
To log on to the switch by the console port on the switch, please take the following steps:
1. Connect the PCs or Terminals to the console port on the switch by a provided cable.
2. Click Start →All Programs →Accessories→Communications →Hyper Terminal to
open the Hyper Terminal as the Figure 1-1 shown.
Figure 1-1 Open Hyper Terminal
3. The Connection Description Window will prompt as Figure 1-2. Enter a name into the
Name field and click OK.

TL-SL5428E JetStream L2 Managed Switch CLI Guide
5
Figure 1-2 Connection Description
4. Select the port to connect in Figure 1-3, and click OK.
Figure 1-3 Select the port to connect
5. Configure the port selected in the step above as the following Figure 1-4 shown. Configure
Bits per second as 38400, Data bits as 8, Parity as None, Stop bits as 1, Flow control as
None, and then click OK.
Figure 1-4 Port Settings

TL-SL5428E JetStream L2 Managed Switch CLI Guide
6
6. The DOS prompt” TL-SL5428E>” will appear after pressing the Enter button as Figure 1-5
shown. It indicates that you can use the CLI now.
Figure 1-5 Log in the Switch
1.1.2 Logon by Telnet
To successfully create Telnet connection, firstly CLI commands about configuring Telnet login
mode, login authentication information and Privileged EXEC Mode password should be configured
through Console connection.
Telnet login has the following two modes, you can choose one according to your needs:
Login Local Mode: It requires username and password, which are both admin by default.
Login Mode: It requires no username and password, but a connection password is required.
Note:
1. Before Telnet login, you are required to configure Telnet login mode and login
authentication information through Console connection. The relevant CLI commands
should be entered in the prompted DOS screen shown in Figure 1-5 Log in the Switch.
2. You will enter to User EXEC Mode after Telnet connection is successfully created, but for
switch security concerns, you are required to set a password which functions to further
access to Privileged EXEC Mode when you configure the login mode.
Login Local Mode:
Firstly, configure the Telnet login mode as “login local” and set the password for entering into the
Privileged EXEC Mode as 123 in the prompted DOS screen shown in Figure 1-5.

TL-SL5428E JetStream L2 Managed Switch CLI Guide
7
Figure 1-6 Configure login local mode
Now, you can logon by Telnet in login local mode.
1. Make sure the switch and the PC are in the same LAN. Click Start →Run to open the Run
window and type cmd in the prompt Run window as Figure 1-7 and click OK.
Figure 1-7 Run Window
2. Open Telnet, then type telnet 192.168.0.1 in the command prompt shown as Figure 1-8, and
press the Enter button.
Figure 1-8 Connecting to the Switch