TP-Link TL-SG2216 Instruction Manual

TL-SG2216/TL-SG2424
Gigabit Smart Switch
Rev: 1.0.0
1910010667

I
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or
registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2012 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com

II
CONTENTS
Preface .............................................................................................................. 1
Chapter 1 Using the CLI ....................................................................................... 3
1.1 Accessing the CLI..............................................................................................................3
1.2 CLI Command Modes........................................................................................................4
1.3 Security Levels ..................................................................................................................6
1.4 Conventions ......................................................................................................................7
1.4.1 Format Conventions ................................................................................................7
1.4.2 Special Characters ..................................................................................................7
1.4.3 Parameter Format.................................................................................................7
Chapter 2 User Interface ...................................................................................... 8
enable......................................................................................................................................8
enable password .....................................................................................................................8
disable .....................................................................................................................................9
configure..................................................................................................................................9
exit...........................................................................................................................................9
end ........................................................................................................................................10
Chapter 3 IEEE 802.1Q VLAN Commands .........................................................11
vlan database ........................................................................................................................ 11
vlan........................................................................................................................................ 11
interface vlan .........................................................................................................................12
description .............................................................................................................................12
switchport type ......................................................................................................................13
switchport allowed vlan..........................................................................................................13
switchport pvid.......................................................................................................................14
switchport general egress-rule ..............................................................................................14
show vlan ..............................................................................................................................15
show interface switchport ......................................................................................................15
Chapter 4 LAG Commands ................................................................................ 16
interface link-aggregation ......................................................................................................16
interface range link-aggregation ............................................................................................16
link-aggregation.....................................................................................................................17
link-aggregation hash-algorithm ............................................................................................18
description .............................................................................................................................18

III
show interface link-aggregation.............................................................................................19
Chapter 5 User Manage Commands.................................................................. 20
user add ................................................................................................................................20
user remove ..........................................................................................................................21
user modify status .................................................................................................................21
user modify type ....................................................................................................................22
user modify password............................................................................................................22
user access-control disable ...................................................................................................23
user access-control ip-based.................................................................................................23
user access-control mac-based.............................................................................................24
user access-control port-based .............................................................................................24
user max-number ..................................................................................................................25
user idle-timeout....................................................................................................................25
show user account-list...........................................................................................................26
show user configuration.........................................................................................................26
Chapter 6 Log Commands ................................................................................. 28
logging local buffer ................................................................................................................28
logging local flash..................................................................................................................29
logging clear ..........................................................................................................................29
logging loghost ......................................................................................................................30
show logging local-config ......................................................................................................31
show logging loghost.............................................................................................................31
show logging buffer level .......................................................................................................32
show logging flash level.........................................................................................................32
Chapter 7 Address Commands.......................................................................... 34
bridge address port-security ..................................................................................................34
bridge address static .............................................................................................................35
bridge aging-time...................................................................................................................36
bridge address filtering ..........................................................................................................36
show bridge port-security ......................................................................................................37
show bridge address .............................................................................................................37
show bridge aging-time .........................................................................................................38
Chapter 8 System Commands ........................................................................... 39
system-descript .....................................................................................................................39
system-time manual ..............................................................................................................39

IV
system-time dst predefined ...................................................................................................40
system-time dst date .............................................................................................................41
system-time dst recurring ......................................................................................................42
ip address..............................................................................................................................43
ip management-vlan ..............................................................................................................43
ip dhcp-alloc ..........................................................................................................................44
ip bootp-alloc .........................................................................................................................44
reset ......................................................................................................................................45
reboot ....................................................................................................................................45
user-config backup ................................................................................................................45
user-config load.....................................................................................................................46
user-config save ....................................................................................................................46
firmware upgrade ..................................................................................................................47
ping .......................................................................................................................................47
tracert ....................................................................................................................................48
loopback ................................................................................................................................49
show system-info...................................................................................................................49
show ip address ....................................................................................................................49
show system-time..................................................................................................................50
show system-time dst............................................................................................................50
show system-time source ......................................................................................................51
show system-time mode........................................................................................................51
Chapter 9 Ethernet Configuration Commands ................................................. 52
interface ethernet ..................................................................................................................52
interface range ethernet ........................................................................................................52
description .............................................................................................................................53
shutdown ...............................................................................................................................53
flow-control ............................................................................................................................54
negotiation.............................................................................................................................54
storm-control .........................................................................................................................55
storm-control disable bc-rate .................................................................................................56
storm-control disable mc-rate ................................................................................................56
storm-control disable ul-rate ..................................................................................................57
port rate-limit .........................................................................................................................57
port rate-limit disable ingress.................................................................................................58
port rate-limit disable egress .................................................................................................58
show interface configuration..................................................................................................59

V
show interface status.............................................................................................................59
show interface counters.........................................................................................................60
show storm-control ethernet ..................................................................................................60
show port rate-limit ................................................................................................................61
Chapter 10 QoS Commands................................................................................. 62
qos ........................................................................................................................................62
qos dot1p config ....................................................................................................................62
qos dscp enable ....................................................................................................................63
qos dscp config .....................................................................................................................64
qos scheduler ........................................................................................................................65
show qos port-based .............................................................................................................66
show qos dot1p .....................................................................................................................66
show qos dscp.......................................................................................................................66
show qos scheduler...............................................................................................................67
Chapter 11 Port Mirror Commands ..................................................................... 68
mirror add ..............................................................................................................................68
mirror remove group..............................................................................................................69
mirror remove mirrored..........................................................................................................69
show mirror............................................................................................................................70
Chapter 12 Port Isolation Commands ................................................................. 71
port isolation ..........................................................................................................................71
show port isolation.................................................................................................................71
Chapter 13 MSTP Commands .............................................................................. 73
spanning-tree global ..............................................................................................................73
spanning-tree common-config ...............................................................................................74
spanning-tree region..............................................................................................................75
spanning-tree msti.................................................................................................................76
spanning-tree msti.................................................................................................................77
spanning-tree tc-defend.........................................................................................................78
spanning-tree security ...........................................................................................................78
spanning-tree mcheck ...........................................................................................................79
show spanning-tree global-info..............................................................................................80
show spanning-tree global-config..........................................................................................80
show spanning-tree port-config .............................................................................................80
show spanning-tree region ....................................................................................................81

VI
show spanning-tree msti config .............................................................................................81
show spanning-tree msti port ................................................................................................82
show spanning-tree security tc-defend..................................................................................82
show spanning-tree security port-defend...............................................................................83
Chapter 14 IGMP Commands............................................................................... 84
igmp-snooping global ............................................................................................................84
igmp-snooping config ............................................................................................................84
igmp-snooping vlan-config-add .............................................................................................85
igmp-snooping vlan-config.....................................................................................................86
igmp-snooping multi-vlan-config............................................................................................87
igmp-snooping static-entry-add .............................................................................................88
igmp-snooping filter-add ........................................................................................................89
igmp-snooping filter-config ....................................................................................................89
igmp-snooping filter ...............................................................................................................90
show igmp-snooping global-config ........................................................................................91
show igmp-snooping port-config............................................................................................91
show igmp-snooping vlan-config ...........................................................................................92
show igmp-snooping multi-vlan .............................................................................................92
show igmp-snooping multi-ip-list ...........................................................................................93
show igmp-snooping filter-ip-addr .........................................................................................93
show igmp-snooping port-filter ..............................................................................................93
show igmp-snooping packet-stat ...........................................................................................94
show igmp-snooping packet-stat-clear ..................................................................................94
Chapter 15 SNMP Commands.............................................................................. 95
snmp global ...........................................................................................................................95
snmp view-add ......................................................................................................................96
snmp group-add ....................................................................................................................96
snmp user-add ......................................................................................................................98
snmp community-add ............................................................................................................99
snmp notify-add...................................................................................................................100
snmp-rmon history sample-cfg ............................................................................................101
snmp-rmon history owner ....................................................................................................102
snmp-rmon history enable ...................................................................................................102
snmp-rmon event user.........................................................................................................103
snmp-rmon event description ..............................................................................................103
snmp-rmon event type.........................................................................................................104

VII
snmp-rmon event owner......................................................................................................105
snmp-rmon event enable.....................................................................................................105
snmp-rmon alarm config......................................................................................................106
snmp-rmon alarm owner......................................................................................................107
snmp-rmon alarm enable.....................................................................................................108
show snmp global-config .....................................................................................................108
show snmp view ..................................................................................................................109
show snmp group ................................................................................................................109
show snmp user ..................................................................................................................109
show snmp community........................................................................................................ 110
show snmp destination-host ................................................................................................ 110
show snmp-rmon history ..................................................................................................... 110
show snmp-rmon event ....................................................................................................... 111
show snmp-rmon alarm ....................................................................................................... 111

1
Preface
This Guide is intended for network administrator to provide referenced information about CLI
(Command Line Interface). The device mentioned in this Guide stands for TL-SG2216/TL-SG2424
Gigabit Smart Switch.
Overview of this Guide
Chapter 1: Using the CLI
Provide information about how to use the CLI, CLI Command Modes, Security Levels and some
Conventions.
Chapter 2: User Interface
Provide information about the commands used to switch between five CLI Command Modes.
Chapter 3: IEEE 802.1Q VLAN Commands
Provide information about the commands used for configuring IEEE 802.1Q VLAN.
Chapter 4: LAG Commands
Provide information about the commands used for configuring LAG (Link Aggregation Group).
Chapter 5: User Manage Commands
Provide information about the commands used for user management.
Chapter 6: Log Commands
Provide information about the commands used for configuring system log.
Chapter 7: Address Commands
Provide information about the commands used for Address configuration.
Chapter 8: System Commands
Provide information about the commands used for configuring the System information and System
IP, reboot and reset the switch, upgrade the switch system and other operations.
Chapter 9: Ethernet Configuration Commands
Provide information about the commands used for configuring the Bandwidth Control, Negotiation
Mode, and Storm Control for Ethernet ports.
Chapter 10: QoS Commands
Provide information about the commands used for configuring the QoS function.
Chapter 11: Port Mirror Commands
Provide information about the commands used for configuring the Port Mirror function.
Chapter 12: Port Isolation Commands
Provide information about the commands used for configuring the Port Isolation function.

2
Chapter 13: MSTP Commands
Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree
Protocol).
Chapter 14: IGMP Commands
Provide information about the commands used for configuring the IGMP Snooping (Internet Group
Management Protocol Snooping).
Chapter 15: SNMP Commands
Provide information about the commands used for configuring the SNMP (Simple Network
Management Protocol) functions.

3
Chapter 1 Using the CLI
1.1 Accessing the CLI
You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet
through an Ethernet port. To log on to the switch by a Telnet connection, please take the following
steps:
1. Make sure the switch and the PC are in the same LAN.
2. Click Start →Run to open the Run window.
Figure 1-1 Open the Run window
3. Type cmd in the prompt Run window as Figure 1-2 and click OK.
Figure 1-2 Run Window

4
4. Type telnet 192.168.0.1 in the command prompt shown as Figure 1-3, and press the Enter
button.
Figure 1-3 Connecting to the Switch
5. Type the User name and Password (the factory default value for both of them is admin) and
press the Enter button, then you can use the CLI now, which is shown as Figure1-4.
Figure 1-4 Log in the Switch
1.2 CLI Command Modes
The CLI is divided into different command modes: User EXEC Mode, Privileged EXEC Mode,
Global Configuration Mode, Interface Configuration Mode and VLAN Database (VLAN
Configuration Mode). Interface Configuration Mode can also be divided into Interface Ethernet,
Interface link-aggregation and some other modes, which is shown as the following diagram.

5
The following table gives detailed information about the Accessing path, Prompt of each mode and
how to exit the current mode and access the next mode.
Mode Accessing Path Prompt Logout or Access the next
mode
User EXEC
Mode
Primary mode once it
is connected with the
switch. TP-LINK>
Use the exit command to disconnect
the switch
Use the enable command to access
Privileged EXEC mode.
Privileged
EXEC Mode
Use the enable
command to enter this
mode from User
EXEC mode. TP-LINK#
Use the exit command to disconnect
the switch
Enter the disable command to return
to User EXEC mode.
Enter configure command to access
Global Configuration mode.
Global
Configuration
Mode
Use the configure
command to enter this
mode from Privileged
EXEC mode. TP-LINK(config)#
Use the exit or the end command or
press Ctrl+Z to return to Privileged
EXEC mode.
Use the interface type number
command to access interface
Configuration mode.
Use the vlan database to access
VLAN Configuration mode.
Interface
Configuration
Mode
Use the interface type
number command to
enter this mode from
Global Configuration
mode.
TP-LINK(config-if)#
Use the end command or press Ctrl+Z
to return to Privileged EXEC mode.
Enter exit command to return to Global
Configuration mode.
A port number must be specified in the
interface command.
VLAN
Configuration
Mode
Use the vlan
database command
to enter this mode
from Global
Configuration mode.
TP-LINK(config-vlan)#
Use the end command or press Ctrl+Z
to return to Privileged EXEC mode.
Enter the exit command to return to
Global configuration mode.
Note:
1. The user is automatically in User EXEC Mode after the connection between the PC and the
switch is established by a telnet connection.
2. Each command mode has its own set of specific commands. To configure some commands,
you should access the corresponding command mode firstly.

6
Global Configuration Mode: In this mode, global commands are provided, such as the
Spanning Tree, Schedule Mode and so on.
Interface Configuration Mode: In this mode, users can configure one or several ports,
different ports corresponds to different commands
a). Interface Ethernet: Configure parameters for an Ethernet port, such as Duplex-mode,
flow control status.
b). Interface range Ethernet: The commands contained are the same as that of the
Interface Ethernet. Configure parameters for several Ethernet ports.
c). Interface link-aggregation: Configure parameters for a link-aggregation, such as
broadcast storm.
d). Interface range link-aggregation: Configure parameters for multi-trunks.
e). Interface vlan: Configure parameters for the vlan-port.
Vlan Configuration Mode: In this mode, users can create a VLAN and add a specified
port to the VLAN.
3. Some commands are global, that means they can be performed in all modes:
show: display all information of switch, for example: statistic information, port information,
VLAN information.
history: Display the commands history.
1.3 Security Levels
This switch’s security is divided into two levels: User level and Admin level.
User level only allows users to do some simple operations in User EXEC Mode; Admin level
allows you to monitor, configure and manage the switch in Privileged EXEC Mode, Global
Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode.
Users get the privilege to the User level once logging in by Telnet. However, Guest users are
restricted to access the CLI.
Users can enter Privileged EXEC mode from User EXEC mode by using the enable command. In
default case, no password is needed. In Global Configuration Mode, you can configure password
for Admin level by enable password command. Once password is configured, you are required to
enter it to access Privileged EXEC mode.

7
1.4 Conventions
1.4.1 Format Conventions
The following conventions are used in this Guide:
Items in square brackets [ ] are optional
Items in braces { } are required
Alternative items are grouped in braces and separated by vertical bars. For example: speed
{10 | 100 | 1000 }
Bold indicates an unalterable keyword. For example: show logging
Normal Font indicates a constant (several options are enumerated and only one can be
selected). For example: switchport type { access | trunk | general }
Italic Font indicates a variable (an actual value must be assigned). For example: bridge
aging-time aging-time
1.4.2 Special Characters
You should pay attentions to the description below if the variable is a character string:
These six characters ” < > , \ & can not be input.
If a blank is contained in a character string, single or double quotation marks should be used,
for example ’hello world’, ”hello world”, and the words in the quotation marks will be identified
as a string. Otherwise, the words will be identified as several strings.
1.4.3 Parameter Format
Some parameters must be entered in special formats which are shown as follows:
MAC Address must be enter in the format of xx:xx:xx:xx:xx:xx
One or several values can be typed for a port-list or a vlan-list using comma to separate. Use
a hyphen to designate a range of values, for instance, 1,3-5,7 indicates choosing 1,3,4,5,7.

8
Chapter 2 User Interface
enable
Description
The enable command is used to access Privileged EXEC Mode from User
EXEC Mode.
Syntax
enable
Command Mode
User EXEC Mode
Example
If you have set the password to access Privileged EXEC Mode from User EXEC
Mode:
TP-LINK>enable
Enter password：
TP-LINK#
enable password
Description
The enable password command is used to set the password for users to
access Privileged EXEC Mode from User EXEC Mode. To return to the default
configuration, please use no enable password command.
Syntax
enable password password
no enable password
Parameter
password —— super password，which can contains 16 characters at most,
composing digits, English letters and underdashes only. By default, it is empty.
Command Mode
Global Configuration Mode
Example
Set the super password as admin to access Privileged EXEC Mode from User
EXEC Mode:
TP-LINK(config)# enable password admin

9
disable
Description
The disable command is used to return to User EXEC Mode from Privileged
EXEC Mode.
Syntax
disable
Command Mode
Privileged EXEC Mode
Example
Return to User EXEC Mode from Privileged EXEC Mode:
TP-LINK# disable
TP-LINK>
configure
Description
The configure command is used to access Global Configuration Mode from
Privileged EXEC Mode.
Syntax
configure
Command Mode
Privileged EXEC Mode
Example
Access Global Configuration Mode from Privileged EXEC Mode:
TP-LINK# configure
TP-LINK(config)#
exit
Description
The exit command is used to return to the previous Mode from the current
Mode.
Syntax
exit
Command Mode

10
Any Configuration Mode
Example
Return to Global Configuration Mode from Interface Configuration Mode, and
then return to Privileged EXEC Mode:
TP-LINK(config-if)# exit
TP-LINK(config)#exit
TP-LINK#
end
Description
The end command is used to return to Privileged EXEC Mode.
Syntax
end
Command Mode
Any Configuration Mode
Example
Return to Privileged EXEC Mode from Interface Configuration Mode:
TP-LINK(config-if)#end
TP-LINK#

11
Chapter 3 IEEE 802.1Q VLAN Commands
VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into
multiple logical LANs flexibly. Hosts in the same VLAN can communicate with each other,
regardless of their physical locations. VLAN can enhance performance by conserving bandwidth,
and improve security by limiting traffic to specific domains.
vlan database
Description
The vlan database command is used to access VLAN Configuration Mode for
creating, deleting 802.1Q VLAN and other operations.
Syntax
vlan database
Command Mode
Global Configuration Mode
Example
Access VLAN Configuration Mode:
TP-LINK(config)# vlan database
TP-LINK(config-vlan)#
vlan
Description
The vlan command is used to create IEEE 802.1Q VLAN. To delete the IEEE
802.1Q VLAN, please use no vlan command.
Syntax
vlan vlan-id-list
no vlan vlan-id-list
Parameter
vlan-id-list ——VLAN ID, ranging from 2 to 4094.
Command Mode
VLAN Configuration Mode
Example
Create a VLAN, the vid of which is 12:

12
TP-LINK(config)# vlan database
TP-LINK(config-vlan)#vlan 12
interface vlan
Description
The interface vlan command is used to access VLAN Interface Mode to
configure the specified VLAN.
Syntax
interface vlan vlan-id
Parameter
vlan-id ——VLAN ID, ranging from 1 to 4094.
Command Mode
Global Configuration Mode
Example
Configure the VLAN 2:
TP-LINK(config)# interface vlan 2
description
Description
The description command is used to assign a description string to a VLAN. To
clear the description, please use no description command.
Syntax
description descript
no description
Parameter
descript ——String to describe the VLAN, which contains 16 characters at most.
Command Mode
Interface Configuration Mode（interface vlan）
Example
Specify the description string of the VLAN 2 as “vlan2”:
TP-LINK(config)# interface vlan 2