TP-Link TL-SG2216 User manual

TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452
Gigabit Smart Switch
REV2.0.0
191001
1094

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or
registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright © 2014 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com
I

CONTENTS
Preface .............................................................................................................. 1
Chapter 1 Using the CLI ....................................................................................... 4
1.1 Accessing the CLI ............................................................................................................... 4
1.1.1. Logon by Telnet ................................................................................................... 4
1.1.2. Logon by SSH ..................................................................................................... 5
1.2 CLI Command Modes........................................................................................................11
1.3 Security Levels.................................................................................................................. 13
1.4 Conventions ...................................................................................................................... 13
1.4.1 Format Conventions ............................................................................................... 13
1.4.2 Special Characters.................................................................................................. 14
1.4.3 Parameter Format................................................................................................... 14
Chapter 2 User Interface .................................................................................... 15
enable...................................................................................................................................... 15
service password-encryption .................................................................................................. 15
enable password ..................................................................................................................... 16
enable secret........................................................................................................................... 17
disable ..................................................................................................................................... 18
configure.................................................................................................................................. 18
exit........................................................................................................................................... 18
end........................................................................................................................................... 19
history...................................................................................................................................... 19
history clear............................................................................................................................. 20
Chapter 3 IEEE 802.1Q VLAN Commands ........................................................ 21
vlan.......................................................................................................................................... 21
interface vlan........................................................................................................................... 21
name ....................................................................................................................................... 22
switchport general allowed vlan.............................................................................................. 22
switchport pvid ........................................................................................................................ 23
show vlan summary ................................................................................................................ 23
show vlan brief ........................................................................................................................ 24
show vlan ................................................................................................................................ 24
show interface switchport........................................................................................................ 25
Chapter 4 Voice VLAN Commands .................................................................... 26
II

voice vlan ................................................................................................................................ 26
voice vlan aging time............................................................................................................... 26
voice vlan priority .................................................................................................................... 27
voice vlan mac-address .......................................................................................................... 27
switchport voice vlan mode..................................................................................................... 28
switchport voice vlan security ................................................................................................. 29
show voice vlan....................................................................................................................... 29
show voice vlan oui................................................................................................................. 30
show voice vlan switchport ..................................................................................................... 30
Chapter 5 Etherchannel Commands ................................................................. 32
channel-group ......................................................................................................................... 32
port-channel load-balance ...................................................................................................... 33
lacp system-priority ................................................................................................................. 33
lacp port-priority ...................................................................................................................... 34
show etherchannel .................................................................................................................. 34
show etherchannel load-balance ............................................................................................ 35
show lacp ................................................................................................................................ 35
show lacp sys-id...................................................................................................................... 36
Chapter 6 User Management Commands ......................................................... 37
user name (password) ............................................................................................................ 37
user name (secret).................................................................................................................. 38
user access-control ip-based .................................................................................................. 39
user access-control mac-based.............................................................................................. 40
user access-control port-based............................................................................................... 40
user max-number .................................................................................................................... 41
user idle-timeout...................................................................................................................... 42
show user account-list............................................................................................................. 42
show user configuration .......................................................................................................... 43
Chapter 7 System Log Commands.................................................................... 44
logging buffer........................................................................................................................... 44
logging file flash ...................................................................................................................... 45
logging file flash frequency ..................................................................................................... 45
logging file flash level.............................................................................................................. 46
clear logging............................................................................................................................ 46
logging host index ................................................................................................................... 47
show logging local-config........................................................................................................ 48
III

show logging loghost............................................................................................................... 48
show logging buffer ................................................................................................................. 49
show logging flash................................................................................................................... 49
Chapter 8 SSH Commands................................................................................. 51
ip ssh server............................................................................................................................ 51
ip ssh version .......................................................................................................................... 51
ip ssh timeout.......................................................................................................................... 52
ip ssh max-client ..................................................................................................................... 52
ip ssh download ...................................................................................................................... 53
show ip ssh.............................................................................................................................. 53
Chapter 9 SSL Commands ................................................................................. 56
ip http secure-server ............................................................................................................... 56
ip http secure-server download certificate .............................................................................. 56
ip http secure-server download key ........................................................................................ 57
show ip http secure-server...................................................................................................... 58
Chapter 10 MAC Address Commands................................................................. 59
mac address-table static ......................................................................................................... 59
mac address-table aging-time................................................................................................. 60
mac address-table filtering...................................................................................................... 60
mac address-table max-mac-count......................................................................................... 61
show mac address-table ......................................................................................................... 62
show mac address-table aging-time ....................................................................................... 62
show mac address-table max-mac-count interface gigabitEthernet ...................................... 63
show mac address-table interface gigabitEthernet................................................................. 63
show mac address-table count ............................................................................................... 64
show mac address-table address ........................................................................................... 64
show mac address-table vlan ................................................................................................. 65
Chapter 11 System Commands ........................................................................... 66
system-time manual ................................................................................................................ 66
system-time ntp....................................................................................................................... 66
system-time dst predefined..................................................................................................... 68
system-time dst date ............................................................................................................... 68
system-time dst recurring........................................................................................................ 69
hostname................................................................................................................................. 71
location .................................................................................................................................... 71
IV

contact-info.............................................................................................................................. 72
ip management-vlan................................................................................................................ 72
ip address................................................................................................................................ 73
ip address-alloc dhcp .............................................................................................................. 73
ip address-alloc bootp............................................................................................................. 74
reset ........................................................................................................................................ 74
reboot ...................................................................................................................................... 75
copy running-config startup-config.......................................................................................... 75
copy startup-config tftp............................................................................................................ 75
copy tftp startup-config............................................................................................................ 76
firmware upgrade .................................................................................................................... 77
ping.......................................................................................................................................... 77
tracert ...................................................................................................................................... 78
show system-info .................................................................................................................... 79
show running-config ................................................................................................................ 80
show system-time ................................................................................................................... 80
show system-time dst.............................................................................................................. 80
show system-time ntp ............................................................................................................. 81
show cable-diagnostics interface gigabitEthernet .................................................................. 81
Chapter 12 IPv6 Address Configuration Commands ......................................... 83
ipv6 enable.............................................................................................................................. 83
ipv6 address autoconfig .......................................................................................................... 83
ipv6 address link-local............................................................................................................. 84
ipv6 address dhcp ................................................................................................................... 84
ipv6 address ra........................................................................................................................ 85
ipv6 address eui-64................................................................................................................. 86
ipv6 address............................................................................................................................ 86
show ipv6 interface vlan.......................................................................................................... 87
Chapter 13 Ethernet Configuration Commands ................................................. 88
interface gigabitEthernet ......................................................................................................... 88
interface range gigabitEthernet............................................................................................... 88
description............................................................................................................................... 89
shutdown ................................................................................................................................. 89
flow-control.............................................................................................................................. 90
media-type............................................................................................................................... 90
duplex...................................................................................................................................... 91
V

speed....................................................................................................................................... 91
storm-control broadcast .......................................................................................................... 92
storm-control multicast............................................................................................................ 93
storm-control unicast............................................................................................................... 95
storm-control rate.................................................................................................................... 96
bandwidth ................................................................................................................................ 97
clear counters.......................................................................................................................... 97
show interface status .............................................................................................................. 98
show interface counters .......................................................................................................... 98
show interface description ...................................................................................................... 99
show interface flowcontrol....................................................................................................... 99
show interface configuration ................................................................................................. 100
show storm-control................................................................................................................ 100
show bandwidth..................................................................................................................... 101
Chapter 14 QoS Commands............................................................................... 102
qos......................................................................................................................................... 102
qos cos.................................................................................................................................. 102
qos dscp................................................................................................................................ 103
qos queue cos-map............................................................................................................... 104
qos queue dscp-map............................................................................................................. 104
qos queue mode ................................................................................................................... 106
show qos interface ................................................................................................................ 107
show qos cos-map ................................................................................................................ 108
show qos dscp-map .............................................................................................................. 108
show qos queue mode.......................................................................................................... 108
show qos status..................................................................................................................... 109
Chapter 15 Port Mirror Commands ....................................................................110
monitor session destination interface ....................................................................................110
monitor session source interface ...........................................................................................111
show monitor session.............................................................................................................112
Chapter 16 Port Isolation Commands ................................................................113
port isolation...........................................................................................................................113
show port isolation interface ..................................................................................................113
Chapter 17 Loopback Detection Commands.....................................................115
loopback-detection(global).....................................................................................................115
VI

loopback-detection interval ....................................................................................................115
loopback-detection recovery-time..........................................................................................116
loopback-detection(interface).................................................................................................116
loopback-detection config ......................................................................................................117
loopback-detection recover....................................................................................................118
show loopback-detection global.............................................................................................118
show loopback-detection interface ........................................................................................119
Chapter 18 ACL Commands............................................................................... 120
access-list create .................................................................................................................. 120
mac access-list...................................................................................................................... 120
access-list standard .............................................................................................................. 121
access-list extended.............................................................................................................. 122
rule......................................................................................................................................... 123
access-list policy name ......................................................................................................... 123
access-list policy action......................................................................................................... 124
access-list bind(interface) ..................................................................................................... 125
access-list bind(vlan)............................................................................................................. 125
show access-list .................................................................................................................... 126
show access-list policy.......................................................................................................... 126
show access-list bind ............................................................................................................ 127
Chapter 19 DHCP Filtering Commands............................................................. 128
ip dhcp filtering ...................................................................................................................... 128
ip dhcp filtering trust.............................................................................................................. 128
show ip dhcp filtering............................................................................................................. 129
show ip dhcp filtering interface.............................................................................................. 129
Chapter 20 PoE Commands............................................................................... 130
power inline consumption (global) ........................................................................................ 130
power profile.......................................................................................................................... 130
power time-range .................................................................................................................. 131
power holiday ........................................................................................................................ 132
absolute................................................................................................................................. 133
periodic.................................................................................................................................. 133
holiday................................................................................................................................... 134
power inline consumption (interface).................................................................................... 135
power inline priority ............................................................................................................... 135
power inline supply................................................................................................................ 136
VII

power inline profile ................................................................................................................ 136
power inline time-range......................................................................................................... 137
show power inline.................................................................................................................. 138
show power inline configuration interface............................................................................. 138
show power inline information interface................................................................................ 138
show power profile ................................................................................................................ 139
show power holiday............................................................................................................... 139
show power time-range......................................................................................................... 140
Chapter 21 MSTP Commands ............................................................................ 141
spanning-tree(global) ............................................................................................................ 141
spanning-tree(interface)........................................................................................................ 141
spanning-tree common-config .............................................................................................. 142
spanning-tree mode .............................................................................................................. 143
spanning-tree mst configuration............................................................................................ 144
instance ................................................................................................................................. 144
name ..................................................................................................................................... 145
revision .................................................................................................................................. 145
spanning-tree mst instance ................................................................................................... 146
spanning-tree mst ................................................................................................................. 146
spanning-tree priority ............................................................................................................ 147
spanning-tree tc-defend ........................................................................................................ 148
spanning-tree timer ............................................................................................................... 148
spanning-tree hold-count ...................................................................................................... 149
spanning-tree max-hops ....................................................................................................... 150
spanning-tree bpdufilter ........................................................................................................ 150
spanning-tree bpduguard...................................................................................................... 151
spanning-tree guard loop ...................................................................................................... 151
spanning-tree guard root....................................................................................................... 152
spanning-tree guard tc .......................................................................................................... 152
spanning-tree mcheck........................................................................................................... 153
show spanning-tree active .................................................................................................... 153
show spanning-tree bridge.................................................................................................... 154
show spanning-tree interface................................................................................................ 154
show spanning-tree interface-security .................................................................................. 155
show spanning-tree mst........................................................................................................ 156
Chapter 22 IGMP Snooping Commands ........................................................... 157
VIII

ip igmp snooping(global)....................................................................................................... 157
ip igmp snooping(interface)................................................................................................... 157
ip igmp snooping immediate-leave ....................................................................................... 158
ip igmp snooping drop-unknown........................................................................................... 158
ip igmp snooping vlan-config ................................................................................................ 159
ip igmp snooping multi-vlan-config ....................................................................................... 160
ip igmp snooping filter add-id................................................................................................ 161
ip igmp snooping filter(global)............................................................................................... 162
ip igmp snooping filter(interface)........................................................................................... 162
ip igmp snooping filter maxgroup.......................................................................................... 163
ip igmp snooping filter mode................................................................................................. 163
show ip igmp snooping.......................................................................................................... 164
show ip igmp snooping interface........................................................................................... 164
show ip igmp snooping vlan.................................................................................................. 165
show ip igmp snooping multi-vlan......................................................................................... 166
show ip igmp snooping groups ............................................................................................. 166
show ip igmp snooping filter.................................................................................................. 167
Chapter 23 MLD Snooping Commands............................................................. 169
ipv6 mld snooping ................................................................................................................. 169
ipv6 mld snooping router-aging-time .................................................................................... 169
ipv6 mld snooping member-aging-time................................................................................. 170
ipv6 mld snooping report-suppression.................................................................................. 170
ipv6 mld snooping unknown-filter.......................................................................................... 171
ipv6 mld snooping last-listener query-inteval........................................................................ 171
ipv6 mld snooping last-listener query-count ......................................................................... 172
ipv6 mld snooping multicast-vlan .......................................................................................... 172
ipv6 mld snooping multicast-vlan vlan-id .............................................................................. 173
ipv6 mld snooping vlan.......................................................................................................... 173
ipv6 mld snooping vlan router-aging-time............................................................................. 174
ipv6 mld snooping vlan member-aging-time......................................................................... 174
ipv6 mld snooping vlan immediate-leave.............................................................................. 175
ipv6 mld snooping vlan mrouter............................................................................................ 175
ipv6 mld snooping vlan static ................................................................................................ 176
ipv6 mld snooping querier vlan ............................................................................................. 176
ipv6 mld snooping querier vlan max-response-time ............................................................. 177
ipv6 mld snooping querier vlan query-interval ...................................................................... 178
ipv6 mld snooping querier vlan query-source....................................................................... 178
IX

ipv6 mld snooping filter(global) ............................................................................................. 179
ipv6 mld snooping filter(interface)......................................................................................... 179
ipv6 mld snooping filter-mode............................................................................................... 180
ipv6 mld snooping filter-id ..................................................................................................... 180
ipv6 mld snooping max-group............................................................................................... 181
clear ipv6 mld snooping statistics ......................................................................................... 181
show ipv6 mld snooping........................................................................................................ 182
show ipv6 mld snooping vlan ................................................................................................ 182
show ipv6 mld snooping static-mcast ................................................................................... 183
show ipv6 mld snooping group ............................................................................................. 183
show ipv6 mld snooping filter................................................................................................ 183
show ipv6 mld snooping interface......................................................................................... 184
show ipv6 mld snooping interface filter................................................................................. 184
show ipv6 mld snooping querier ........................................................................................... 185
show ipv6 mld snooping statistics......................................................................................... 185
Chapter 24 SNMP Commands............................................................................ 186
snmp-server .......................................................................................................................... 186
snmp-server view .................................................................................................................. 186
snmp-server group................................................................................................................ 187
snmp-server user .................................................................................................................. 188
snmp-server community........................................................................................................ 190
snmp-server host .................................................................................................................. 190
snmp-server engineID........................................................................................................... 192
snmp-server traps snmp ....................................................................................................... 193
snmp-server traps link-status................................................................................................ 193
snmp-server traps ................................................................................................................. 194
snmp-server traps mac ......................................................................................................... 195
snmp-server traps vlan.......................................................................................................... 196
rmon history........................................................................................................................... 196
rmon event ............................................................................................................................ 197
rmon alarm ............................................................................................................................ 198
show snmp-server................................................................................................................. 200
show snmp-server view......................................................................................................... 200
show snmp-server group ...................................................................................................... 200
show snmp-server user......................................................................................................... 201
show snmp-server community .............................................................................................. 201
show snmp-server host......................................................................................................... 202
X

show snmp-server engineID ................................................................................................. 202
show rmon history................................................................................................................. 202
show rmon event................................................................................................................... 203
show rmon alarm................................................................................................................... 203
Chapter 25 LLDP Commands............................................................................. 205
lldp ......................................................................................................................................... 205
lldp hold-multiplier ................................................................................................................. 205
lldp timer................................................................................................................................ 206
lldp med-fast-count................................................................................................................ 207
lldp receive ............................................................................................................................ 207
lldp transmit ........................................................................................................................... 208
lldp snmp-trap........................................................................................................................ 208
lldp tlv-select.......................................................................................................................... 209
lldp med-location ................................................................................................................... 210
lldp med-status...................................................................................................................... 210
lldp med-tlv-select ..................................................................................................................211
show lldp ............................................................................................................................... 212
show lldp interface ................................................................................................................ 212
show lldp local-information interface..................................................................................... 213
show lldp neighbor-information interface.............................................................................. 213
show lldp traffic interface....................................................................................................... 214
XI

Preface
This Guide is intended for network administrator to provide referenced information about CLI
(Command Line Interface). The device mentioned in this Guide stands for
TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452 Gigabit Smart Switch.
The five devices of TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452 are sharing this Guide. For
simplicity, we will take TL-SG2424 for example throughout this Guide.
Overview of this Guide
Chapter 1: Using the CLI
Provide information about how to use the CLI, CLI Command Modes, Security Levels and some
Conventions.
Chapter 2: User Interface
Provide information about the commands used to switch between five CLI Command Modes.
Chapter 3: IEEE 802.1Q VLAN Commands
Provide information about the commands used for configuring IEEE 802.1Q VLAN.
Chapter 4: Voice VLAN Commands
Provide information about the commands used for configuring Voice VLAN.
Chapter 5: Etherchannel Commands
Provide information about the commands used for configuring LAG (Link Aggregation Group) and
LACP (Link Aggregation Control Protocol).
Chapter 6: User Management Commands
Provide information about the commands used for user management.
Chapter 7: System Log Commands
Provide information about the commands used for configuring system log.
Chapter 8: SSH Commands
Provide information about the commands used for configuring and managing SSH (Security
Shell).
Chapter 9: SSL Commands
Provide information about the commands used for configuring and managing SSL (Secure
Sockets Layer).
Chapter 10: MAC Address Commands
Provide information about the commands used for Address configuration.
1

Chapter 11: System Configuration Commands
Provide information about the commands used for configuring the System information and System
IP, reboot and reset the switch, upgrade the switch system and commands used for cable test.
Chapter 12: IPv6 Address Configuration Commands
Provide information about the commands used for configuring the System IPv6 addresses.
Chapter 13: Ethernet Configuration Commands
Provide information about the commands used for configuring the Bandwidth Control, Negotiation
Mode, and Storm Control for enthernet ports.
Chapter 14: QoS Commands
Provide information about the commands used for configuring the QoS function.
Chapter 15: Port Mirror Commands
Provide information about the commands used for configuring the Port Mirror function.
Chapter 16: Port Isolation Commands
Provide information about the commands used for configuring Port Isolation function.
Chapter 17: Loopback Detection Commands
Provide information about the commands used for configuring the Loopback Detection function.
Chapter 18: ACL Commands
Provide information about the commands used for configuring the ACL (Access Control List).
Chapter 19: DHCP Filtering Commands
Provide information about the commands used for configuring the DHCP Filtering function.
Chapter 20: PoE Commands
Provide information about the commands used for configuring PoE function.
Chapter 21: MSTP Commands
Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree
Protocol).
Chapter 22: IGMP Snooping Commands
Provide information about the commands used for configuring the IGMP Snooping (Internet Group
Management Protocol Snooping).
Chapter 23: MLD Snooping Commands
Provide information about the commands used for configuring the MLD Snooping (Multicast
Listener Discovery Snooping).
Chapter 24: SNMP Commands
Provide information about the commands used for configuring the SNMP (Simple Network
Management Protocol) functions.
2

Chapter 25: LLDP Commands
Provide information about the commands used for configuring LLDP function.
3

Chapter 1 Using the CLI
1.1 Accessing the CLI
You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or
SSH connection through an Ethernet port.
1.1.1. Logon by Telnet
To log on to the switch by a Telnet connection, please take the following steps:
1. Click Start →Run to open the Run window, and type in telnet 192.168.0.1 in the prompt Run
window as Figure 1-1 and click OK.
Figure 1-1 Run Window
2. Type in the User name and Password (the factory default value for both of them are admin)
and press the Enter button to enter User EXEC Mode , which is shown as Figure 1-2.
Figure 1-2 Log in the Switch
3. Type in enable command to enter Privileged EXEC Mode.
Figure 1-3 Enter into Priviledged EXEC Mode
4

1.1.2. Logon by SSH
To log on by SSH, a Putty client software is recommended. There are two authentication modes to
set up an SSH connection:
Password Authentication Mode:It requires username and password, which are both admin by
default.
Key Authentication Mode:It requires a public key for the switch and a private key for the SSH
client software. You can generate the public key and the private key through Putty Key Generator.
Note:
Before SSH login, please follow the steps shown in Figure 1-4 to enable the SSH function through
Telnet connection.
Figure 1-4 Enable SSH function
Password Authentication Mode
1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into
Host Name field; keep the default value 22 in the Port field; select SSH as the Connection
type.
5

Figure 1-5 SSH Connection Config
2. Click the Open button in the above figure to log on to the switch. Enter the login user name
and password to log on the switch, and then enter enable to enter Privileged EXEC Mode, so
you can continue to configure the switch.
Figure 1-6 Log on the Switch
6

Key Authentication Mode
1. Select the key type and key length, and generate SSH key.
Figure 1-7 Generate SSH Key
Note:
1. The key length is in the range of 256 to 3072 bits.
2. During the key generation, randomly moving the mouse quickly can accelerate the key
generation.
7

2. After the key is successfully generated, please save the public key and private key to a TFTP
server.
Figure 1-8 Save the Generated Key
3. Log on to the switch by Telnet and download the public key file from the TFTP server to the
switch, as the following figure shows:
8