TP-Link TL-SL5428 User manual

TL-SL5428
24-Port 10/100 + 4-Port Gigabit Managed Switch
Rev: 1.0.0
1910010123

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.
®is a registered
trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names
are trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used
to make any derivative such as translation, transformation, or adaptation without
permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2008 TP-LINK
TECHNOLOGIES CO., LTD. All rights reserved.
http://www.tp-link.com

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to part 15 of the FCC Rules. These limits are designed to
provide reasonable protection against harmful interference in a residential installation.
This equipment generates, uses and can radiate radio frequency energy and, if not
installed and used in accordance with the instructions, may cause harmful
interference to radio communications. However, there is no guarantee that
interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by
turning the equipment off and on, the user is encouraged to try to correct the
interference by one or more of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and receiver.
•Connect the equipment into an outlet on a circuit different from that to which
the receiver is connected.
•Consult the dealer or an experienced radio/ TV technician for help.
This device complies with part 15 of the FCC Rules. Operation is subject to the
following two conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference that
may cause undesired operation.
Any changes or modifications not expressly approved by the party responsible for
compliance could void the user’s authority to operate the equipment.
CE Mark Warning
This is a class A product. In a domestic environment, this product may cause radio
interference, in which case the user may be required to take adequate measures.

i
Contents
Chapter 1: Introduction 1-1
Key Features 1-1
Description of Software Features 1-2
System Defaults 1-6
Chapter 2: Initial Configuration 2-1
Connecting to the Switch 2-1
Configuration Options 2-1
Required Connections 2-2
Remote Connections 2-3
Basic Configuration 2-3
Console Connection 2-3
Setting Passwords 2-4
Setting an IP Address 2-4
Manual Configuration 2-4
Dynamic Configuration 2-5
Enabling SNMP Management Access 2-6
Community Strings (for SNMP version 1 and 2c clients) 2-6
Trap Receivers 2-7
Configuring Access for SNMP Version 3 Clients 2-8
Saving Configuration Settings 2-8
Managing System Files 2-9
Chapter 3: Configuring the Switch 3-1
Using the Web Interface 3-1
Navigating the Web Browser Interface 3-2
Home Page 3-2
Configuration Options 3-3
Panel Display 3-3
Main Menu 3-4
Basic Configuration 3-12
Displaying System Information 3-12
Displaying Switch Hardware/Software Versions 3-13
Displaying Bridge Extension Capabilities 3-15
Setting the Switch’s IP Address 3-16
Manual Configuration 3-17
Using DHCP/BOOTP 3-18
Enabling Jumbo Frames 3-19
Managing Firmware 3-19
Downloading System Software from a Server 3-20

Contents
ii
Saving or Restoring Configuration Settings 3-21
Downloading Configuration Settings from a Server 3-22
Console Port Settings 3-23
Telnet Settings 3-25
Configuring Event Logging 3-28
Displaying Log Messages 3-28
System Log Configuration 3-28
Remote Log Configuration 3-30
Simple Mail Transfer Protocol 3-31
Resetting the System 3-33
Setting the System Clock 3-34
Setting the Time Manually 3-34
Configuring SNTP 3-34
Configuring NTP 3-35
Setting the Time Zone 3-37
Simple Network Management Protocol 3-38
Setting Community Access Strings 3-40
Specifying Trap Managers and Trap Types 3-41
Enabling SNMP Agent Status 3-42
Configuring SNMPv3 Management Access 3-43
Setting the Local Engine ID 3-43
Specifying a Remote Engine ID 3-45
Configuring SNMPv3 Users 3-45
Configuring Remote SNMPv3 Users 3-47
Configuring SNMPv3 Groups 3-48
Setting SNMPv3 Views 3-50
User Authentication 3-51
Configuring User Accounts 3-52
Configuring Local/Remote Logon Authentication 3-54
Configuring Encryption Keys 3-58
AAA Authorization and Accounting 3-59
Configuring AAA RADIUS Group Settings 3-60
Configuring AAA TACACS+ Group Settings 3-60
Configuring AAA Accounting 3-61
AAA Accounting Update 3-63
AAA Accounting 802.1X Port Settings 3-63
AAA Accounting Exec Command Privileges 3-64
AAA Accounting Exec Settings 3-66
AAA Accounting Summary 3-66
Authorization Settings 3-68
Authorization EXEC Settings 3-69
Authorization Summary 3-69
Configuring HTTPS 3-70
Replacing the Default Secure-site Certificate 3-71
Configuring the Secure Shell 3-72

Contents
iii
Configuring the SSH Server 3-75
Generating the Host Key Pair 3-76
Importing User Public Keys 3-77
Configuring Port Security 3-81
Configuring 802.1X Port Authentication 3-82
Displaying 802.1X Global Settings 3-84
Configuring 802.1X Global Settings 3-84
Configuring Port Settings for 802.1X 3-85
Displaying 802.1X Statistics 3-88
Web Authentication 3-89
Configuring Web Authentication 3-90
Configuring Web Authentication for Ports 3-91
Displaying Web Authentication Port Information 3-92
Re-authenticating Web Authenticated Ports 3-93
Network Access – MAC Address Authentication 3-94
Configuring the MAC Authentication Reauthentication Time 3-95
Configuring MAC Authentication for Ports 3-95
Configuring Port Link Detection 3-97
Displaying Secure MAC Address Information 3-98
MAC Authentication 3-99
Configuring MAC authentication parameters for ports 3-99
Access Control Lists 3-100
Configuring Access Control Lists 3-101
Setting the ACL Name and Type 3-101
Configuring a Standard IP ACL 3-102
Configuring an Extended IP ACL 3-103
Configuring a MAC ACL 3-106
Binding a Port to an Access Control List 3-107
Filtering IP Addresses for Management Access 3-108
Port Configuration 3-111
Displaying Connection Status 3-111
Configuring Interface Connections 3-113
Creating Trunk Groups 3-115
Statically Configuring a Trunk 3-116
Enabling LACP on Selected Ports 3-117
Configuring LACP Parameters 3-119
Displaying LACP Port Counters 3-121
Displaying LACP Settings and Status for the Local Side 3-123
Displaying LACP Settings and Status for the Remote Side 3-125
Setting Broadcast Storm Thresholds 3-126
Configuring Port Mirroring 3-128
Configuring Rate Limits 3-129
Rate Limit Configuration 3-129
Showing Port Statistics 3-130
Address Table Settings 3-134

Contents
iv
Setting Static Addresses 3-134
Displaying the Address Table 3-135
Changing the Aging Time 3-137
Spanning Tree Algorithm Configuration 3-137
Configuring Port and Trunk Loopback Detection 3-139
Displaying Global Settings 3-141
Configuring Global Settings 3-143
Displaying Interface Settings 3-147
Configuring Interface Settings 3-149
Configuring Multiple Spanning Trees 3-151
Displaying Interface Settings for MSTP 3-154
Configuring Interface Settings for MSTP 3-156
VLAN Configuration 3-158
IEEE 802.1Q VLANs 3-158
Enabling or Disabling GVRP (Global Setting) 3-161
Displaying Basic VLAN Information 3-162
Displaying Current VLANs 3-162
Creating VLANs 3-164
Adding Static Members to VLANs (VLAN Index) 3-165
Adding Static Members to VLANs (Port Index) 3-167
Configuring VLAN Behavior for Interfaces 3-168
Configuring IEEE 802.1Q Tunneling 3-170
Enabling QinQ Tunneling on the Switch 3-173
Adding an Interface to a QinQ Tunnel 3-175
Private VLANs 3-176
Displaying Current Private VLANs 3-177
Configuring Private VLANs 3-178
Associating VLANs 3-179
Displaying Private VLAN Interface Information 3-180
Configuring Private VLAN Interfaces 3-181
Protocol VLANs 3-182
Protocol VLAN Group Configuration 3-182
Protocol VLAN System Configuration 3-183
Link Layer Discovery Protocol 3-184
Setting LLDP Timing Attributes 3-184
Configuring LLDP Interface Attributes 3-186
Displaying LLDP Local Device Information 3-189
Displaying LLDP Remote Port Information 3-190
Displaying LLDP Remote Information Details 3-191
Displaying Device Statistics 3-192
Displaying Detailed Device Statistics 3-193
Class of Service Configuration 3-194
Layer 2 Queue Settings 3-194
Setting the Default Priority for Interfaces 3-194
Mapping CoS Values to Egress Queues 3-195

Contents
v
Enabling CoS 3-197
Selecting the Queue Mode 3-198
Setting the Service Weight for Traffic Classes 3-198
Layer 3/4 Priority Settings 3-199
Mapping Layer 3/4 Priorities to CoS Values 3-199
Enabling IP DSCP Priority 3-200
Mapping DSCP Priority 3-201
Quality of Service 3-202
Configuring Quality of Service Parameters 3-203
Configuring a Class Map 3-203
Creating QoS Policies 3-206
Attaching a Policy Map to Ingress Queues 3-209
VoIP Traffic Configuration 3-210
Configuring VoIP Traffic 3-210
Configuring VoIP Traffic Port 3-211
Configuring Telephony OUI 3-213
Multicast Filtering 3-215
Layer 2 IGMP (Snooping and Query) 3-215
Configuring IGMP Snooping and Query Parameters 3-216
Enabling IGMP Immediate Leave 3-218
Displaying Interfaces Attached to a Multicast Router 3-219
Specifying Static Interfaces for a Multicast Router 3-220
Displaying Port Members of Multicast Services 3-221
Assigning Ports to Multicast Services 3-222
IGMP Filtering and Throttling 3-223
Enabling IGMP Filtering and Throttling 3-224
Configuring IGMP Filter Profiles 3-225
Configuring IGMP Filtering and Throttling for Interfaces 3-226
Multicast VLAN Registration 3-228
Configuring Global MVR Settings 3-229
Displaying MVR Interface Status 3-230
Displaying Port Members of Multicast Groups 3-231
Configuring MVR Interface Status 3-232
Assigning Static Multicast Groups to Interfaces 3-234
DHCP Snooping 3-235
DHCP Snooping Configuration 3-236
DHCP Snooping VLAN Configuration 3-236
DHCP Snooping Information Option Configuration 3-237
DHCP Snooping Port Configuration 3-238
DHCP Snooping Binding Information 3-239
IP Source Guard 3-240
IP Source Guard Port Configuration 3-240
Static IP Source Guard Binding Configuration 3-241
Dynamic IP Source Guard Binding Information 3-242
Switch Clustering 3-243

Contents
vi
Cluster Configuration 3-244
Cluster Member Configuration 3-245
Cluster Member Information 3-246
Cluster Candidate Information 3-247
UPnP 3-248
UPnP Configuration 3-248
Chapter 4: Command Line Interface 4-1
Using the Command Line Interface 4-1
Accessing the CLI 4-1
Console Connection 4-1
Telnet Connection 4-2
Entering Commands 4-3
Keywords and Arguments 4-3
Minimum Abbreviation 4-3
Command Completion 4-3
Getting Help on Commands 4-3
Showing Commands 4-4
Partial Keyword Lookup 4-6
Negating the Effect of Commands 4-6
Using Command History 4-6
Understanding Command Modes 4-6
Exec Commands 4-7
Configuration Commands 4-8
Command Line Processing 4-10
Command Groups 4-11
Line Commands 4-12
line 4-13
login 4-13
password 4-14
timeout login response 4-15
exec-timeout 4-15
password-thresh 4-16
silent-time 4-17
databits 4-17
parity 4-18
speed 4-19
stopbits 4-19
disconnect 4-20
show line 4-20
General Commands 4-21
enable 4-21
disable 4-22
configure 4-23

Contents
vii
show history 4-23
reload 4-24
reload cancel 4-24
show reload 4-25
end 4-25
exit 4-26
quit 4-26
System Management Commands 4-27
Device Designation Commands 4-27
prompt 4-27
hostname 4-28
Banner 4-28
banner configure 4-29
banner configure company 4-30
banner configure dc-power-info 4-31
banner configure department 4-31
banner configure equipment-info 4-32
banner configure equipment-location 4-33
banner configure ip-lan 4-33
banner configure lp-number 4-34
banner configure manager-info 4-35
banner configure mux 4-35
banner configure note 4-36
show banner 4-37
User Access Commands 4-38
username 4-38
enable password 4-39
IP Filter Commands 4-40
management 4-40
show management 4-41
Web Server Commands 4-42
ip http port 4-42
ip http server 4-42
ip http secure-server 4-43
ip http secure-port 4-44
Telnet Server Commands 4-45
ip telnet port 4-45
ip telnet server 4-45
Secure Shell Commands 4-46
ip ssh server 4-48
ip ssh timeout 4-49
ip ssh authentication-retries 4-49
ip ssh server-key size 4-50
delete public-key 4-50
ip ssh crypto host-key generate 4-51