TP-Link TL-SG3109 - Switch User manual

TL-SG3109
Embedded Web System User Guide
TL-SL3428
9-port Gigabit Managed Switch
24+4G Gigabit Managed Switch
TL-SL3452
48+4G Gigabit Managed Switch
Rev: 1.0

COPYRIGHT & TRADEMARKS
Specications are subject to change without notice. is a registered trademark of TP-LINK Technologies
Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as
translation, transformation, or adaptation without permission from TP-LINK Technologies Co., Ltd. Copyright © 2006 TP-LINK
Technologies Co., Ltd. All rights reserved.
FCC STATEMENT
This equipment has been tested and found to comply with the limits for a class A digital device, pursuant to part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the
instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will
not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which
can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one or
more of the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that may cause undesired operation.
EC DECLARATION OF CONFORMITY (EUROPE)
In compliance with the EMC Directive 89/336/EEC, Low Voltage Directive 73/23/EEC, this product meets the requirements of
the following standards:
EN55022
EN55024
EN60950
SAFETY NOTICES
Caution:
Do not use this product near water, for example, in a wet basement or near a swimming pool.
Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightning.








TABLE OF CONTENTS
Preface .............................................................................................................. 1
Guide Overview................................................................................................................................1
Intended Audience ...........................................................................................................................2
Section 1. Getting Started.............................................................................. 3
1.1 Conguring the device to use TP-Link Embedded Web Interface ........................................3
1.2 Starting the TP-Link Embedded Web Interface .....................................................................3
1.3 Understanding the TP-Link Embedded Web Interface..........................................................4
1.3.1 Device Representation .........................................................................................................5
1.3.2 Using the TP-Link Embedded Web Interface Management Buttons.................................5
1.4 Using Screen and Table Options.............................................................................................6
1.4.1 Adding Conguration Information.........................................................................................6
1.4.2 Modifying Conguration Information....................................................................................6
1.5 Deleting Conguration Information .........................................................................................6
1.6 Resetting the Device................................................................................................................7
1.7 Logging Off from the Device....................................................................................................7
Section 2. Dening Device Information ...................................................... 8
Section 3. Setting the System Time ............................................................. 9
3.1 Conguring Daylight Savings Time.........................................................................................9
3.2 Configuring SNTP................................................................................................................. 12
3.2.1 SNTP Overview ................................................................................................................. 12
3.2.1.1 Polling for Unicast Time Information .............................................................................. 12
3.2.1.2 Polling for Anycast Time Information ............................................................................. 12
3.2.1.3 Polling for Broadcast Time Information.......................................................................... 12
3.2.2 Defining SNTP Global Settings......................................................................................... 13
3.2.3 Configuring SNTP Authentication ..................................................................................... 13
3.2.4 Defining SNTP Servers ..................................................................................................... 14
3.2.5 Defining SNTP Interface Settings ..................................................................................... 15
Section 4. Conguring System Logs......................................................... 17
4.1 Defining General Log Properties.......................................................................................... 17
4.2 Viewing Memory Logs .......................................................................................................... 18

4.3 Viewing Flash Logs............................................................................................................... 18
4.4 Defining System Log Servers............................................................................................... 19
Section 5. Conguring Device Security .................................................... 21
5.1 Configuring Management Security ...................................................................................... 21
5.1.1 Configuring Authentication Methods................................................................................. 21
5.1.1.1 Defining Access Profiles.................................................................................................. 21
5.1.1.2 Defining Profile Rules..................................................................................................... 23
5.1.1.3 Defining Authentication Profiles ..................................................................................... 24
5.1.1.4 Mapping Authentication Profiles..................................................................................... 25
5.1.1.5 Defining TACACS+ Host Settings.................................................................................. 27
5.1.1.6 Defining RADIUS Server Settings ................................................................................. 28
5.1.2 Configuring Passwords...................................................................................................... 30
5.1.2.1 Defining Local Users....................................................................................................... 30
5.1.2.2 Defining Line Passwords................................................................................................ 31
5.1.2.3 Defining Enable Passwords ........................................................................................... 31
5.2 Configuring Network Security............................................................................................... 31
5.2.1 Network Security Overview ............................................................................................... 32
5.2.1.1 Port-Based Authentication ............................................................................................. 32
5.2.1.2 Advanced Port-Based Authentication ............................................................................ 32
5.2.2 Defining Network Authentication Properties..................................................................... 32
5.2.2.1 Defining Port Authentication Properties......................................................................... 33
5.2.2.2 Configuring Multiple Hosts ............................................................................................. 34
5.2.2.3 Defining Authentication Hosts ........................................................................................ 35
5.2.3 Configuring Traffic Control................................................................................................. 36
5.2.3.1 Managing Port Security.................................................................................................. 36
5.2.3.2 Enabling Storm Control .................................................................................................. 37
Section 6. Dening IP Addresses............................................................... 39
6.1 Defining IP Addressing ......................................................................................................... 39
6.1.1 Defining IP Addresses ....................................................................................................... 39
6.1.2 Defining the Default Gateway ........................................................................................... 40
6.1.3 Defining DHCP Addresses ................................................................................................ 40
6.1.4 Defining ARP...................................................................................................................... 41
6.2 Defining Domain Name System........................................................................................... 42
6.2.1 Defining DNS Servers ....................................................................................................... 42
6.2.2 Configuring Host Mapping................................................................................................. 43

Section 7. Conguring Interfaces............................................................... 45
7.1 Configuring Ports .................................................................................................................. 45
7.2 Configuring LAGs.................................................................................................................. 47
7.2.1 Defining LAG Members..................................................................................................... 47
7.2.2 Configuring LACP .............................................................................................................. 48
7.3 Configuring VLANs ............................................................................................................... 49
7.3.1 Defining VLAN Properties ................................................................................................. 49
7.3.2 Defining VLAN Membership.............................................................................................. 50
7.3.3 Defining VLAN Interface Settings ..................................................................................... 51
7.3.4 Configuring GARP ............................................................................................................. 52
7.3.4.1 Defining GARP................................................................................................................ 52
7.3.5 Defining GVRP................................................................................................................... 53
Section 8. Dening the Forwarding Database.......................................... 55
8.1 Configuring Static Addresses ............................................................................................... 55
8.2 Configuring Dynamic Forwarding Addresses...................................................................... 56
Section 9. Conguring the Spanning Tree Protocol................................ 58
9.1 Configuring the Classic STP ................................................................................................ 58
9.1.1 Defining STP Properties.................................................................................................... 58
9.1.2 Defining STP Interface Settings ........................................................................................ 59
9.2 Configuring the Rapid STP................................................................................................... 61
9.3 Configuring the Multiple STP................................................................................................ 62
9.3.1 Defining MSTP Properties................................................................................................. 62
9.3.2 Configuring MSTP Instances ............................................................................................ 63
9.3.3 Configuring MSTP VLAN Instances ................................................................................. 64
9.3.4 Configuring MSTP Interface Settings ............................................................................... 64
Section 10. Conguring Multicast Forwarding......................................... 66
10.1 Configuring Multicast Forwarding ...................................................................................... 66
10.2 Defining Multicast Bridging Groups.................................................................................... 67
10.3 Defining Multicast Forward All Parameters........................................................................ 69
Section 11. Conguring SNMP Management ........................................... 70
11.1 SNMP v1 and v2c ............................................................................................................... 70
11.2 SNMP v3 ............................................................................................................................. 70
11.3 Defining SNMP Security ..................................................................................................... 70

11.3.1 Defining SNMP Global Parameters ................................................................................ 71
11.3.2 Defining SNMP Views...................................................................................................... 71
11.3.3 Defining SNMP Group Profiles........................................................................................ 72
11.3.4 Defining SNMP Group Members .................................................................................... 73
11.3.5 Defining SNMP Communities.......................................................................................... 75
11.3.5.1 SNMP Communities Basic Table ................................................................................. 75
11.3.5.2 SNMP Communities Advanced Table.......................................................................... 75
11.4 Configuring SNMP Notification Settings ............................................................................ 76
11.4.1 Defining SNMP Notification Properties ........................................................................... 76
11.4.2 Defining Notification Filters.............................................................................................. 76
11.4.3 Defining Notification Receivers........................................................................................ 77
11.4.3.1 SNMPv1,2c Notification Recipient ............................................................................... 78
11.4.3.2 SNMPv3 Notification Recipient .................................................................................... 78
Section 12. Conguring Quality of Service............................................... 80
12.1 Quality of Service Overview ............................................................................................... 80
12.1.1 Mapping to Queues ......................................................................................................... 80
12.1.2 QoS Modes...................................................................................................................... 81
12.1.2.1 Basic QoS Mode........................................................................................................... 82
12.1.2.2 Advanced QoS Mode ................................................................................................... 82
12.2 Enabling Quality of Service ................................................................................................ 82
12.2.1 Enabling Quality of Service ............................................................................................. 82
12.2.2 Defining Queues .............................................................................................................. 83
12.3 Mapping Queues ................................................................................................................ 84
12.3.1 Mapping CoS Values to Queues..................................................................................... 84
12.3.2 Mapping QoS Values to Queues .................................................................................... 84
Section 13. Managing System Files........................................................... 86
13.1 Downloading System Files................................................................................................. 86
13.1.1 Download Type ................................................................................................................ 86
13.1.2 Firmware Download......................................................................................................... 87
13.1.3 Configuration Download.................................................................................................. 87
13.2 Uploading System Files...................................................................................................... 87
13.2.1 Upload Type..................................................................................................................... 87
13.2.2 Software Image Upload .................................................................................................. 88
13.2.3 Configuration Upload....................................................................................................... 88
13.3 Activating Image Files......................................................................................................... 88

13.4 Copying System Files......................................................................................................... 88
Section 14. Performing Device Diagnostics ............................................. 90
14.1 Configuring Port Mirroring .................................................................................................. 90
14.2 Viewing Integrated Cable Tests.......................................................................................... 91
14.3 Viewing Optical Transceivers ............................................................................................. 92
Section 15. Viewing Statistics..................................................................... 93
15.1 Viewing Interface Statistics................................................................................................. 93
15.1.1 Viewing Device Interface Statistics ................................................................................. 93
15.1.2 Viewing Etherlike Statistics.............................................................................................. 94
15.1.3 Viewing GVRP Statistics ................................................................................................. 95
15.1.4 Viewing EAP Statistics..................................................................................................... 96
15.2 Managing RMON Statistics................................................................................................ 96
15.2.1 Viewing RMON Statistics ................................................................................................ 97
15.2.2 Configuring RMON History.............................................................................................. 98
15.2.2.1 Defining RMON History Control................................................................................... 98
15.2.2.2 Viewing the RMON History Table ................................................................................ 99
15.2.3 Conguring RMON Events............................................................................................ 100
15.2.3.1 Dening RMON Events Control................................................................................. 100
15.2.3.2 Viewing the RMON Events Logs ............................................................................... 101
15.2.4 Dening RMON Alarms................................................................................................. 101
Glossary ........................................................................................................ 104

1
Preface
The Embedded Web System (EWS) is a network management system. The TP-Link Embedded Web Interface congures,
monitors, and troubleshoots network devices from a remote web browser. The TP-Link Embedded Web Interface web pages
are easy-to-use and easy-to-navigate. In addition, the TP-Link Embedded Web Inter-face provides real time graphs and
RMON statistics to help system administrators monitor network performance.
This preface provides an overview to the TP-Link Embedded Interface User Guide.
This preface includes the following sections:
Guide Overview
Intended Audience
Guide Overview
This user guide is divided into the following sections to provide concise information for conguring, and managing the TP-Link
device:
Section 1. Getting Started — Provides information about using the EWS, including the TP-Link Embedded Web Interface,
management, and information buttons, as well as information about adding, modifying, and deleting devices.
Section 2. Dening Device Information — Provides information about opening the device zoom view, dening general
system properties, and enabling Jumbo frames.
Section 3. Setting the System Time — Provides information about conguring system time parameters, includ-ing Daylight
Savings Time (DST) and Simple Network Time Protocol (SNTP).
Section 4. Conguring System Logs — Provides information about enabling and dening system logs.
Section 5. Configuring Device Security — Provides information about configuring device security for management
security, trafc control, and network security.
Section 7. Conguring Interfaces — Provides information about conguring system interfaces, ports, port groups (LAGs)
and protocols (LACP). Provides information about conguring and managing VLANs, including VLAN GARP and VLAN
GVRP.
Section 6. Dening IP Addresses — Provides information about dening device IP addresses, ARP, and Domain Name
Servers (DNS).
Section 8. Dening the Forwarding Database — Provides information about conguring and managing both static and
dynamic MAC addresses.
Section 9. Conguring the Spanning Tree Protocol — Provides information about conguring Spanning Tree Protocol
(STP) including the Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP).
Section 10. Conguring Multicast Forwarding — Provides information about Multicast Forwarding.
Section 11. Conguring SNMP Management — Provides information about Simple Network Management Protocol (SNMP)
management, including dening SNMP v1,v2c, and v3, SNMP lters and notications.
Section 12. Conguring Quality of Service — Provides information about conguring Quality of Service parameters on the
device.
Section 13. Managing System Files — Provides information about downloading, uploading, and copying system les.



2
3
Section 14. Performing Device Diagnostics — Provides information about port mirroring conguration, copper and ber
cables testing, and viewing device health information.
Section 15. Viewing Statistics — Provides information about viewing device statistics, including Remote Monitoring On
Network (RMON) statistics, and device history events.
Intended Audience
This guide is intended for network administrators familiar with IT concepts and network terminology.

23
Section 1. Getting Started
This section provides an introduction to the user interface, and includes the following topics:
Conguring the device to use TP-Link Embedded Web Interface
Starting the TP-Link Embedded Web Interface
Understanding the TP-Link Embedded Web Interface
Using Screen and Table Options
Resetting the Device
Logging Off from the Device
1.1 Conguring the device to use TP-Link Embedded Web Interface
When the device is received, the Embedded Web Interface can not be accessed until the device is properly congured. To
use TP-Link Embedded Web Interface, use the console interface to assign an IP address and subnet mask on the default
VLAN, and add a super-user with the highest privilege level (15) which is allowed to log onto the device via Embedded Web
Interface. Below is an example:
console> en
console# config
console(config)# username admin password admin level 15
console(config)# interface vlan 1
console(config-if)# ip address 192.168.1.1 255.255.255.0
console(config-if)# exit
console(config)# exit
console# copy running-config startup-config
01-Jan-2000 01:02:49 %COPY-I-FILECPY: Files Copy - source URL running-config destination URL flash://
startup-config
01-Jan-2000 01:02:50 %COPY-W-TRAP: The copy operation was completed successfully
Copy succeeded
The above example uses the following assumptions:
The user name and password are both "admin"
The IP address assigned to the default VLAN is 192.168.1.1
The subnet mask for the network is 255.255.255.0
Once the device is congured as above, you can open the Embedded Web Interface authentication page by typing the URL
"http://192.168.1.1/" into the location bar of the web browser. And then use "admin" as both the user name and password to
log onto the device.
For more detailed information on how to congure the device via console interface, read "Section 4. Starting and Conguring
the Device" in the TP-Link Installation Guide.
1.2 Starting the TP-Link Embedded Web Interface
This section contains information on starting the TP-Link Embedded Web interface.
Note:
Disable the popup blocker before beginning device conguration using the EWS.








