TP-LinkメーカーTL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452の使用説明書/サービス説明書
ページ先へ移動 of 199
TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452 Gigabit Smart Switch REV1.3.0 191001 1017.
I COPYRIGHT & TRADEMARKS S pecifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., L TD. Other brands and product names are trademarks or registered trademarks of t heir respective holders.
II CONTENTS Preface ………………………………………………………………………………….1 Chapter 1 Using the CLI ....................................................................................... 3 1.1 Accessin g the CLI .
III voice vlan priority ............................................................................................................ ....... 24 voice vlan ma c-address ...................................................................................
IV Chapter 8 SSH Comm ands................................................................................. 47 ip ssh serv er .................................................................................................................. ........ 47 ip ssh version .
V ip address-al loc dhcp .......................................................................................................... .. 68 ip address-al loc bootp .........................................................................................
VI show storm- control ............................................................................................................. ... 90 show band width ...............................................................................................
VII access-list extende d ........................................................................................................... .1 1 3 rule .........................................................................................................
VIII spanning-tree co mmon-conf ig ............................................................................................. 133 spanning-tree mode....................................................................................................
IX show ip igmp s nooping interf ace ......................................................................................... 156 show ip igmp snooping vl an ............................................................................................
X lldp rece ive ................................................................................................................... ....... 181 lldp trans mit ............................................................................................
1 Preface This Guide is intended for network administrator to provide referenced information about CLI (Command Line Interface). The device mentioned in this Guide stands for TL-SG2210P/TL-SG2216/TL-SG2424/TL-SG2424P/TL-SG2452 Gigabit Smart Switch. The five devices of TL-SG2210P/TL-SG2216/ TL-S G2424/TL-SG2424P/TL-SG2452 are sharing this Guide.
2 Chapter 1 1: S ystem Configuration Commands Provide information about the commands used for configuring the Sy stem information and System IP, reboot and reset the switch, upgrade the sw itch system and comm ands used for device diagnose, including loopback test and cable test.
3 Chapter 1 Using the CLI 1.1 Accessing the CLI Y ou can log on to the switch and access the CLI by logging on to the switch remotely by a T elnet or SSH connection through an Ethernet port. 1.1.1. Logon by Telnet T o log on to the switch by a T elnet connection, please take the following step s: 1.
4 1.1.2. Logon by SSH T o log on by SSH, a Putty client software is recommended. There are tw o authentication modes to set up an SSH connection: Password Authentication Mode : It requires username and password, which are both admin by default.
5 Figure 1-5 SSH Connection Config 2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password to log on the switch, and then en ter enable to enter Privileged EXEC Mode, so you can continue to c onfigure the switch.
6 Key Authentication Mode 1. Select the key type and key length, and gene rate SSH key . Figure 1-7 Generate SSH Key Note: 1. The key length is in the range of 256 to 3072 bits. 2. During the key gene ration, randoml y moving the mouse quickly can accelerat e the key generation.
7 2. After the key is successfully generated, pleas e save the public key and private key to a TFTP server . Figure 1-8 Save the Generated Key 3. Log on to the switch by T elnet and downlo ad the publ.
8 Figure 1-9 Download the Public Key Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupt ed. 4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login.
9 Figure 1-10 SSH Connection Config 5. Click Browse to download the private key file to SSH client software and click Open . Figure 1-1 1 Download the Private Key.
10 6. After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates t hat the key has been successfully downloaded.
11 Mode Accessing Path Prompt Logout or Access the next mode Privileged EXEC Mode Use the enable command to ente r this mode from User EXEC mode. TL- SG2424# Enter the disable or the exit command to return to User EXEC mode. Enter configure command to access Global Configuration mode.
12 Interface Configuration Mode : In this mode, users can c onfigure one or several ports, different ports corresponds to dif ferent commands a). Interface gigabitEthernet: Configure parameters for an Ethernet port, such as Duplex-mode, flow control status.
13 1.4 Conventions 1.4.1 Format Conventions The following conventions are used in this Guide: Items in square brackets [ ] are optional Items in braces { } are required Alternative items are grouped in braces and se parated by vertical bars.
14 Chapter 2 User Interface enable Description The enable command is used to access Privileged EXEC Mode from User EXEC Mode. Synt ax enable Command Mode User EXEC Mode Example If you have set the pas.
15 Example Set the super password as admin to a ccess Privileged EXEC Mode from User EXEC Mode: TL-SG2424(config)# enable pass w ord admin disable Description The disable command is used to return to User EXEC Mode from Privileged EXEC Mode.
16 exit Description The exit command is used to return to t he previous Mode from the current Mode. Synt ax exit Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Return to Global .
17 Command Mode Privileged EXEC Mode and any Configuration Mod e Example Show the commands you have ent ered in the current mode: TL-SG2424 (config)# history 1 history history clear Description The hi.
18 Chapter 3 IEEE 802.1Q VLAN Commands VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly . Hosts in the same VLAN can communicate with each other , regardless of their physical locations.
19 Parameter vlan-id —— S pecify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Example Create VLAN Interface 2: TL-SG2424(config)# interface vlan 2 name Description The name command is used to assign a description to a VLAN.
20 Parameter vlan-list —— S pecify IEEE 802.1Q VLAN ID list, ranging from 2 to 4094, in the format of 2-3, 5. It is multi-optional. tagged | untagged —— Egress rule ， unt agged or tagged. T agged: All pa ckets forwarded by the port are tagged.
21 Synt ax show vlan summary Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the summarized inform ation of IEEE 802.1Q VLAN: TL-SG2424(config)# show vlan summary show vlan brief Description The show vlan brief command is used to display the brief information of IEEE 802.
22 Example Display the information of vlan 5: TL-SG2424(config)# show vlan id 5 show interface switchport Description The show interface switchport command is used to display the IEEE 802.1Q VLAN configuration information of the specified port or all ports.
23 Chapter 4 Voice VLAN Commands V oice VLANs are configured spec iall y for voice data stream. By configuring V oice VLANs and adding the ports with voice devic es attached to voice VLANs, you can perform QoS-related configuration for voice data, ens uring the transmission priority of voice data stream and voice quality .
24 Parameter time —— Aging time (in minutes) to be set for the V oice VLAN. It ranges from 1 to 43200 and the default value is 1440. Command Mode Global Configuration Mode Example Set the aging ti.
25 Synt ax voice vlan mac-address mac-addr mask mask [ description descript ] no voice vlan mac-address mac-addr Parameter mac-addr —— The OUI address of the voic e device, in the format of XX:XX:XX:XX:XX :XX. mask —— The OUI address mask of the voice device, in the format of XX:XX:XX:XX:XX :XX.
26 Example Configure the port 3 to operate in the auto voice VLAN mode: TL-SG2424(config)# interface gigabitEthernet 1/0/3 TL-SG2424(config-if)# switchport voice vlan mode auto switchport voice vlan security Description The s w itchport voice vlan security command is used to enable the V oice VLAN security feature.
27 Example Display the configuration inform ation of V oice VLAN globally: TL-SG2424(config)# show voice vlan show voice vlan oui Description The show voice vlan oui command is used to display the configura tion information of V oice VLAN OUI.
28 Display the V oice VLAN configur atio n information of port 2: TL-SG2424(config)# show voice vlan switchport gigabitEthernet 1/0/2.
29 Chapter 5 Etherchannel Commands Etherchannel Commands are used to c onfigure LAG and LACP function. LAG (Link Aggregation Group) is to combine a number of ports together to make a single high-bandwidth data path, which can highly exte n d the bandwidth.
30 port-channel load-balance Description The port-channel load-balance command is used to c onfigure the Aggregate Arithmetic for LAG . T o return to the default configur ations, please use no port-channel load-balance command.
31 Command Mode Global Configuration Mode Example Configure the LACP system priority as 1024 globally: TL-SG2424(config)# lacp system-priority 1024 lacp port-priority Description The lacp port-priority command is used to configure the LACP port priority for specified ports.
32 Synt ax show etherchannel [ channel-group-n um ] { detail | summary } Parameter channel-group-num —— The EtherChannel G roup number , ranging from 1 to 6. By default, it is empty , and will displa y the information of all EtherChannel Groups. detail —— The detailed information of EtherChan nel.
33 Parameter channel-group-num —— The EtherChannel G roup number , ranging from 1 to 6. By default, it is empty , and will displa y the information of all LACP groups. internal —— The internal LACP information. neighbor —— The neighbor LACP information.
34 Chapter 6 User Management Commands User Management Commands are us ed to configure the user name and password for users to log on to the Web management p age with a certain access level so as to protect the settings of the switch from being randomly changed .
35 Example Add and enable a new admin user named tplink, of which the pa ssword is password: TL-SG2424(config)# user name tplink p assw ord password ty pe admin st atu s enable user access-control ip-based Description The user access-control ip-based command is used to limit the IP-range of the users for login.
36 is allowed to login. T o cancel the user access limit, please use no user access-control command. Synt ax user access-control mac-based mac-addr no user access-control Parameter mac-addr —— The source MAC address. Only the user with this MAC address is allowed to login.
37 Example Configure that o nly the users c onnected to po rts 2-6 are allowed to logi n: TL-SG2424(config)# user access-control port-based interfa ce range gigabitEthernet 1/0/2-6 user max-number Description The user max-number command is used to configur e the number of the users logging on at the same time.
38 Synt ax user idle-timeout minutes no user idle-timeout Parameter minutes ——The timeout time, ranging from 5 to 30 in minutes. By default, the value is 10.
39 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the security configurat ion information of the users: TL-SG2424(config)# show user configuration.
40 Chapter 7 System Log Commands The log information will record the settings and oper ation of the switch re spectively for you to monitor operation status and diagnose malfunction. logging buffer Description The logging buffer command is used to configure the severity level and the status of the configuration input to the log buf fer .
41 logging file flash Description The logging file flash command is used to store the log messages in a file in the flash on the switch. T o disable t he log file flash f unction, please use no logging file flash command. The log file flash i ndicates the flash sector for saving system log.
42 Command Mode Global Configuration Mode Example S pecify the log file synchroni zation frequency as 10 hours: TL-SG2424(config)#logging file flash frequency periodic 10 logging file flash level Description The logging file flash level command is used to s pecify the system log message severity level.
43 Synt ax clear logging [ buf fer | flash ] Parameter buffer | flash —The output channels: buffer and flash. Clear the information of the two channels, by default.
44 Example Enable log host 2 and set its IP addr ess as 192.168.0.148, the level 5: TL-SG2424(config)# logging host index 2 192.168.0.148 5 show logging local-config Description The show logging local-config command is used to display the configuration of the Local Log including t he log buffer and the log file.
45 show logging buffer Description The show logging buffer command is used to display the log information in the log buffer according to the severity level. Synt ax show logging buffer [ level level ] Parameter leve l —— Severity level. There are 8 severi ty levels marked with values 0-7.
46 Example Display the log information with t he level marked 0~3 in the log file: TL-SG2424(config)# show logging flash level 3.
47 Chapter 8 SSH Commands SSH (Security Shell) can prov ide the unsecured remote management with security and powerful authentication to ensure the security of the management information. ip ssh server Description The ip ssh server command is used to enable SSH function.
48 Example Enable SSH v2: TL-SG2424(config)# ip ssh version v2 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. T o restore to the fact ory defaults, please use ip ssh timeout command. Synt ax ip ssh timeout value no ip ssh timeout Parameter value —— The Idle-timeout time.
49 Command Mode Global Configuration Mode Example S pecify the maximum number of the c onnections to the SSH server as 3: TL-SG2424(config)# ip ssh max-client 3 ip ssh download Description The ip ssh download command is used to download the SSH key file from TFTP server .
50 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the global conf iguration of SSH: TL-SG2424(config)# show ip ssh.
51 Chapter 9 SSL Commands SSL (Secure Sockets Layer), a security protocol, is to provide a secure connection for the application layer protocol (e.g. HTTP) based on TCP . Adopting asymmetrical encryptio n technology , SSL uses key pair to encrypt/decrypt information.
52 Parameter ssl-cert —— The name of the SSL certificate wh ich is selected to download to the switch. The length of the name ranges from 1 to 25 characters. The Certificate must be BASE64 encoded. ip-addr —— The IP address of the TFTP server .
53 show ip http secure-server Description The show ip http secure-server command is used to display the gl obal configuration of SSL. Synt ax show ip http secure-server Command Mode Privileged EXEC Mo.
54 Chapter 10 MAC Address Commands MAC Address configuration can improve the network security by conf iguring the Port Security and maintaining the address information by managing the Address T able. mac address-table static Description The mac address-table st atic command is used to add the static MAC address entry .
55 mac address-table aging-time Description The mac address-t able aging-time command is used to configure aging ti me for the dynamic address. T o return to the default configur ation , please use no mac address-t able agin g-time command.
56 Command Mode Global Configuration Mode Example Add a filtering address entry of which VLAN ID is 1 and MAC address is 00:1e:4b:04:01:5d: TL-SG2424(config)# mac address-table filtering mac 00:1e:4b:04:01:5d vid 1 mac address-table max-mac-count Description The mac address-t able max-mac-co unt command is used to configure the Port Security .
57 status —— Enable or disable the Port Securi ty function for a specified port. By default, this function is disabled. Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / inte.
58 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the Aging T ime of the MAC address: TL-SG2424(config)# show mac address-table aging-time show mac address-table max-mac.
59 Synt ax show mac address-t able interface gigabitEthernet port Parameter port —— The Ethernet port number . Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the add.
60 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the information of the MAC address 00:00:00:00:23:00: TL-SG2424(config)#show mac address-t able mac 00:00:00: 00:23:00 .
61 Chapter 11 System Commands System Commands can be used to configure the System informat ion and System IP , reboot and reset the switch, upgrade the swit ch system and other operations. system-time manual Description The system-time manual command is used to configure the system time manually .
62 UTC-09:00 —— T imeZone for Alaska. UTC-08:00 —— TimeZone for Pacific T ime(US Canada). UTC-07:00 —— TimeZone for Mountain T ime(US Canada). UTC-06:00 —— TimeZone for Central Time(US Cana da). UTC-05:00 —— TimeZone for Eastern T ime(US Canad a).
63 Command Mode Global Configuration Mode Example Configure the system time mode as NT P , the time zone is UTC-12:00, the primary NTP server is 133.100.9. 2 and the secondary NTP server is 139.78.100.163, the fetchi ng-rate is 1 1 hours: TL-SG2424(config)# s ystem-t ime ntp UTC-12:00 133.
64 system-time dst date Description The system-time dst date command is used to configure the one-off daylight saving time. The start date is in the current year by default. The time range of the daylight saving time must shorter than one year , but you can configure it spanning years.
65 system-time dst recurring Description The system-time dst recurring command is used to configure the recurri ng daylight saving time. It can be confi gured spanning years.
66 TL-SG2424(config)# system-time dst recurring first Sun May 02:00 last Sun Oct 02:00 45 hostname Description The hostname command is used to configure t he system name. T o clear the system name information, please use no hostname command. Synt ax hostname hostname no hostname Parameter hostname —— System Name.
67 Example Configure the system location as SHENZHEN: TL-SG2424(config)# location SHENSHEN contact-info Description The cont ac t-info command is used to configure the system cont act information. T o clear the system contac t information, please use no contact-info command.
68 Example Set the VLAN 6 as IP ma nagement VLAN: TL-SG2424(config)# ip management-vlan 6 ip address Description The ip address command is used to configure the system IP address, Subnet Mask and Default Gateway . T o restore to the factory defa ults, please use no ip address command.
69 Synt ax ip address-alloc dhcp Command Mode Interface Configurati on Mode (interface vlan) Example Enable the DHCP Client f unction when the management VL AN of the switch is VLAN1: TL-SG2424(config.
70 Command Mode Privileged EXEC Mode Example Reset the software of the switch: TL-SG2424# reset reboot Description The reboot command is used to reboot the Switch.
71 copy startup-config tftp Description The copy startup-config t ftp command is used to backup the configuration file to TFTP server . Synt ax copy st artup-config t ftp ip-address ip-addr filename name Parameter ip-addr —— IP address of the TFTP server .
72 TL-SG2424# copy t ftp st artup-config ip-address 192.168.0.148 filename config firmware upgrade Description The firmware upgrade command is used to upgrade the switch system file via the TFTP server . Synt ax firmware upgrade ip-address ip-addr filename name Parameter ip-addr —— IP address of the TFTP server .
73 count (-i) —— The interval to send ICMP request pa ckets. It ranges from 100 to 1000 milliseconds. By default, this value is 1000. Command Mode User EXEC Mode and Privileged EXEC Mode Example T o test the connectivity between the swit ch and the network device with the IP 192.
74 loopback interface gigabitEthernet Description The loopback interface gigabitEthernet command is used to test whether the port is available or not. Synt ax loopback interface gigabitEthernet { port } { internal | external } Parameter port —— The Gigabit Ethern et port number .
75 show running-config Description The show running-config command is used to display the current operating configuration of the system or of a specified port. Synt ax show running-config [ interface gigabitEthernet port ] Parameter port —— The Gigabit Ethernet port number .
76 Synt ax show system-time dst Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the DST time information of the switch TL-SG2424# show system- time dst show system-time ntp Description The show system-time ntp command is used to display the NTP mode configuration information.
77 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Show the cable-diagnostics of port 3: TL-SG2424# show cable-diagnostics interface gigabitEthernet 1/0/3.
78 Chapter 12 Ethernet Configuration Commands Ethernet Configuration Commands can be used to configure the B andwidth Control, Negotiation Mode and S torm Control for Ethernet ports.
79 User Guidelines Command in the Interface Range gigabitEthernet Mode is executed independently on all ports in the range. It does not affect the execution on the other ports at all if the command results in an error on one port.
80 Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Disable port 3: TL-SG2424(config)# interface gigabitEthernet 1/0/3 TL-SG2424(config-if)# shutdo w n flow-control Description The flow-control command is used to enable the flow -control function for a port.
81 Parameter rj45 | sfp —— Media type. Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Configure the media type of Combo port 22 as.
82 Synt ax speed { 10 | 100 | 1000 | auto } no speed Parameter 10 | 100 | 1000 | auto —— The speed mode of the Ethernet port. There are four options: 10Mbps, 100Mbp s, 1000Mbps and Auto negotiation mode (default).
83 Example Enable the broadcast cont rol function for port 5: TL-SG2424(config)# interface gigabitEthernet 1/0/5 TL-SG2424(config-if)# storm-control broadcast For TL-SG2452: Description The storm-control broadcast command is used to enable the broadcast control function.
84 Synt ax storm-control multicast no storm-control multicast Parameter rate —— S pecify the bandwidth for receivi ng multicast packets on the port. The packet traf fic exceeding the bandwidth will be discarded. The va lue of it can be 128k | 256k| 512k|1m | 2m | 4m | 5m | 10m | 20m | 40m | 50m in bps.
85 storm-control unicast For TL-SG2210P/TL-SG2216/TL-SG2424/TL-SG2424P: Description The storm-control unicast command is used to enable the unicast control function. T o disable the unicast control functi on, please use no storm-control unicast command.
86 no storm-control unicast Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable the unicast cont rol function for port 5: TL-SG2452(config)# interface gigabitEthernet 1/0/5 TL-SG2452(config-if)# storm-control unicast storm-control rate This command is supported only on TL-SG2452.
87 bandwidth Description The bandwid th command is used to configure the bandwidth limit for an Ethernet port. T o disable t he bandwidth limit, please use no bandwid th command.
88 show interface status Description The show interface status command is used to display the connective-st atus of an Ethernet port. Synt ax show interface [ gigabitEthernet port ] status Parameter port —— The Ethernet port number .
89 show interface description Description The show interface description command is used to display the description of all ports or an Ethernet port. Synt ax show interface [ gigabitEthernet port ] description Parameter port —— The Ethernet port number .
90 show interface configuration Description The show interface configuration command is used to display the configurations of all ports or an Ethernet port, including Port-status, Flow Control, Negotiation Mode and Port-description. Synt ax show interface [ gigabitEthernet port ] configuration Parameter port —— The Ethernet port number .
91 TL-SG2424(config)# show storm-control interface range gigabitEthernet 1/0/4-7 show bandwidth Description The show bandwidth command is used to display the bandwidth-limit information of Ethernet ports. Synt ax show bandwidth [ interface { gigabi tEthernet port | range gigabitEthernet port-list }] Parameter port —— The Ethernet port number .
92 Chapter 13 QoS Commands QoS (Quality of Service) function is used to optimiz e the network performance. It provides you with network service experience of a better quality . qos For TL-SG2210P: Description The qos command is used to configure the priori ty level of packets from the port.
93 Parameter cos-id —— The priority of port. It ranges from 0 to 7, which represent CoS0-CoS7 respectively . By default, the priority is 0. Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) User Guidelines Port priority is one property of the port.
94 Example Enable the mapping relation between IE EE 802.1P Priority and egress queue: TL-SG2210P(config)# qos cos qos dscp Description The qos dscp command is used to enable the mapping relation between DSCP Priority and CoS value. T o disabl e the mapping relation, please use no qos dscp command.
95 no qos queue cos-map Parameter tag/cos-id —— The 8 priority levels defined by IEEE 802.1P or the priority level the packet s with tag are mapped to, which ranges from 0 to 7 (for TL-SG2210P/ TL-SG2452) or ranges from CoS 0 to CoS 7 (for TL-SG2216/TL-SG2424/ TL-SG2424P) .
96 Parameter dscp-list —— List of DSCP value. One or several DSCP values can be typed using comma to separate. Use a hyphen to designate a range of values, for instance, 1,4-7,1 1 indicates choosing 1,4,5,6,7,1 1. The DSCP value ranges from 0 to 63.
97 Command Mode Global Configuration Mode User Guidelines By default, the mapping relation between tag and the egress queue is: (0-7)-CoS 0, (8-15)-C oS 1, (16-23)-CoS 2, (24-31)-CoS 3, (32-39)- CoS 4, (40-47)-CoS 5, (48-55)-CoS 6, (56-63)-CoS 7.
98 queues, the switch allows TC3 to occ upy the whole bandwidth following the SP mode and the TC0, TC1 and TC2 in the WRR group will take up the bandwidth according to their ratio 1:2:4. equ —— Equal-Mode. In this mode, all the queues occupy the bandwidth equally .
99 Synt ax show qos cos-map Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the configuratio n of IEEE 802.1P Priority and the mapping relation between cos-id and tc-id: TL-SG2424# show qos cos-map show qos dscp-map Description The show qos dscp-map command is used to disp lay the configuration of DSCP Priority .
100 show qos status Description The show qos status command is used to display the status of IEEE 802.1P priority and DSCP priority . Synt ax show qos status Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the status of IEEE 802.
101 Chapter 14 Port Mirror Commands Port Mirror refers to the process of forwarding copies of packets from one port to a monitoring port. Usually , the monitoring port is connected to data diagnose device , which is used to analyze the monitored packet s for monitoring and troubleshooting the netwo rk.
102 monitor session source interface Description The monitor session source interface command is used to configure the monitored port. T o delete the corre sponding monitored port, please use no monitor session source interface command.
103 TL-SG2424(config)# monitor session 1 source interface gigabitEthernet 1/0/4-5,1/0/7 rx Delete port 4 in monitor session 1 and its configuration: TL-SG2424(config)# no monitor session 1 source inte.
104 Chapter 15 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list.
105 Synt ax show port isolation interface [ gigabitEthernet port ] Parameter port —— The number of Ethernet port you want to show its forward port list, in the format of 1/0/2.
106 Chapter 16 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops us ing loopback detection packet s. When a loop is detected, the switch will di splay an alert or further block the corresponding port according to the configuration.
107 Example S pecify the interval -time as 50 seconds: TL-SG2424(config)# loopback-detection interval 50 loopback-detection recovery-time Description The loopback-detection recovery-time command is used to configure the time after which the blocked port would automatically recover to normal status.
108 Example Enable the loopback detection f unction of ports 1-3: TL-SG2424(config)# interface range gigabitEthernet 1/0/1-3 TL-SG2424(Config-if-range)# loopback-detection loopback-detection config De.
109 loopback-detection recover Description The loopback-detection recover command is used to remove the block status of selected ports, recovering the blocked ports to no rmal status, Synt ax loopback.
11 0 show loopback-detection interface Description The show loopback-detection interface command is used to display the configuration of loopback det ection function and the st atus of t he specified Ethernet port. Synt ax show loopback-detection interface [ gigabitEthernet port ] Parameter port —— The Ethernet port number .
111 Chapter 17 ACL Commands access-list create Description The access-list create command is used to create standard-IP ACL a nd extend-IP ACL. Synt ax access-list create access-list-num Parameter access-list-num —— ACL ID, rang ing from 100 to 299.
11 2 TL-SG2424(config)# mac access-list 23 access-list standard Description The access-list standard command is used to add S tandard-IP ACL rule. T o delete the correspondi ng rule, please use no access-list standard command.
11 3 access-list extended Description The acces s-list extended command is used to add Extended-IP ACL rule. T o delete the correspondi ng rule, please use no access-list exten ded command.
11 4 rule Description The rule command is used to configure MAC ACL rule. T o delete the corresponding rule, please use no rule command. Synt ax rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ] [[ dmac destination-mac ] dmask destination-mac-mask ] no rule rule-id Parameter rule-id —— The rule ID.
11 5 Policy is used to control the data p a c kets those match the corresponding ACL rules by configuring ACLs and actions together for effect. The operations here include stream mirror , stream condi tion, QoS Remarking and redirect.
11 6 access-list bind(interface) Description The access- list bind command is used to bind a policy to a specified port. T o cancel the bind re lation, please use no access-list bind command. Synt ax access-list bind policy-name no access-list bind policy-name Parameter policy-name —— The name of the policy desired to bind.
11 7 TL-SG2424(config-if)# access-list bind policy1 show access-list Description The show access-list command is used to display configuration of ACL. Synt ax show access-list acl-id Parameter acl-id —— The ID of the ACL selected to display the configurat ion.
11 8 show access-list bind Description The show access-list bind command is used to displa y the configuration of Policy bind. Synt ax show access-list bind Command Mode Privileged EXEC Mode and Any C.
11 9 Chapter 18 DHCP Filtering Commands DHCP Filtering functions to monitor the process of hosts obt aining IP addresses from DHCP Servers by configuring the desir ed port(s) as Trusted Port(s). Only the ho st s connected to the trusted port(s) can receive DHCP packets from DHCP servers.
120 Example Configure port 1 to be a trusted port: TL-SG2424(config)#interface gigabitEthernet 1/0/1 TL-SG2424(config-if)#ip dhcp filtering trust show ip dhcp filtering Description The show ip dhcp filtering command is used to displa y the running status of DHCP Filtering.
121 Chapter 19 PoE Commands Note: Only TL-SG2210P and TL-SG2424P supports PoE function. PoE (Power over Ethernet) technology describes a system to transmit electrical power along with data to remote devices over standard twisted-pair cable in an Ethernet netwo rk.
122 Syntax power profile name [ supply { enable | disable } [ priority { low | middle | high } [ consumption { power-limit | auto | class1 | class2 | class3 | cla ss4 } ] ] ] no power profile name Parameter name —— The PoE profile name, ranging from 1 to 16 characters.
123 absolute, pe riodic and holiday. A PoE time-ra nge can implement mul tiple time-ranges simult aneously as l ong as they d o not conflict with each othe r. To delete the cor responding PoE tim e-range confi guration, pleas e use no power time-range comm and.
124 Example Create a PoE holiday named “Natio nal Da y”, and configure the start date as October 1st and the end date as October 3rd: TL-SG2424P(config)# power holiday NationalDay start-date 10/01 end-date 10/03 absolute Description The absolute command is used to create an absolute mode time-range for the PoE time-range of the switch.
125 periodic time occurs. To delete t he corresponding periodic mode time-range configuration, please use no periodic command. Syntax periodic { [ week-date week-day ] [ time-slice1 time-slice ] [ tim.
126 Command Mode Power Time-range Create Configuration Mode Example Create a holiday mode time-range for the PoE time-range nam ed “tRange3” and configure PoE time-range of the switch excludes the.
127 power inline priority Description The power inline priority command is used to configure the PoE priority for the corresponding port Syntax power inline priority { low | middle | high } Parameter priority ——The PoE priority of the por t. The priority levels include “high”, “middle” and “low” in descending or de r.
128 TL-SG2424P(config)# interface gigabitEthernet 1/0/2 TL-SG2424P(config-if)# power inline supply enable power inline profile Description The power inline profile command is used to bind a Po E profile to the corresponding port. To cancel the bind relation, please use no pow er inline profile command.
129 Command Mode Interface Configuration Mode Example Bind the PoE time-range named “tRange2" to port 2: TL-SG2424P(config)# interface gigabitEthernet 1/0/2 TL-SG2424P(config-if)# power inline time-range tRange2 show power inline Description The show power inline command is used to display the global PoE information of the system.
130 show power inline information interface Description The show pow er inline information command is used to display the PoE information of the certain port. Syntax show power inline information interface [ gigabitEthernet port ] Parameter port —— The Ethernet port number.
131 Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the defined PoE holiday: TL-SG2424P# show pow er holiday show power time-range Description The show pow er time-range command is used to displa y the configuration of PoE time-range.
132 Chapter 20 MSTP Commands MSTP (Multiple S panning T ree Protocol), compat ible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ri ng network. STP is to block redunda nt links and backup links as well as optimize paths. spanning-tree(global) Description The spanning-tree command is used to enable STP function globally .
133 Example Enable the STP function for port 2: TL-SG2424(config)# interface gigabitEthernet 1/0/2 TL-SG2424(config-if)# spanning-tree spanning-tree common-config Description The sp anning-tree common-config command is used to configure the parameters of the port s for comparison in the CIST and the common parameters of all insta nces.
134 point-to-point —— The P2P link status, with auto, open and close options. By default, the option is auto. If the two port s in the P2P link ar e root port or designated port, they can transit their states to forwarding rapidly to reduce the unnecessary forward delay .
135 spanning-tree mst configuration Description The spanning-tree mst configuration command is used to access MST Configuration Mode from Global Confi guration Mode, as to configure the VLAN-Instance mapping, region name and revision level.
136 Example Map the VLANs 1-100 to Instance 1: TL-SG2424(config)# sp anning-tree mst configuration TL-SG2424(config-mst)# instance 1 vlan 1-100 Disable Instance 1, namely remove all the mapping VLANs .
137 Parameters revision —— The revision level for MST region identification, ranging from 0 to 65535. Command Mode MST Configuration Mode Example Configure the revision level of MST as 100: TL-SG2.
138 use no sp anning-tree mst command. A port can play different roles in different spanning tree instance. Y ou can use this command to configur e the parameters of the ports in dif ferent instance IDs as well as view status of the port s in the specified instance.
139 Command Mode Global Configuration Mode Example Configure the bridge priority as 4096: TL-SG2424(config)# sp anning-tree priorit y 4096 spanning-tree tc-defend Description The spanning-tree tc-defend command is used to confi gure the TC Protect of S panning T ree globally .
140 spanning-tree timer Description The spanning-tree timer command is used to configure forward-time, hello-time and max-age of S panning T ree. T o return to the default configurations, please use no sp anning-tree timer command.
141 Synt ax sp anning-tree hold-count value no sp anning-tree hold-count Parameter value —— The maximum number of BPDU packets transmitted per Hello Time interval, ranging from 1 to 20 in pps.
142 spanning-tree bpdufilter Description The sp anning-tree bpdufilter command is used to enable the BPDU filter function for a port. With the function enabled, the port can be prevented from receiving and sending any BPDU packets. T o disable the BPDU filter function, please use no sp anning-tree bpdufilter command.
143 Example Enable the BPDU protect function for port 2: TL-SG2424(config)# interface gigabitEthernet 2 TL-SG2424(config-if)# sp anning-tree bpduguard spanning-tree guard loop Description The spanning-tree guard loop command is used to enable the Loop Protect function for a port.
144 Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable the Root Protec t function for port 2: TL-SG2424(config)# interface gigabitE.
145 Synt ax sp anning-tr ee mcheck Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable mcheck for port 2: TL-SG2424(config)# interfa.
146 Example Display the bridge parameters: TL-SG2424(config)# show spanning-tree bridge show spanning-tree interface Description The show spanning-tree interface command is used to display the spanning-tree information of all ports o r a specified port.
147 Parameter port —— The Ethernet port number . Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the protect information of all ports: TL-SG2424(config)# show spannin.
148 Display all the ports information of MST Inst ance 1: TL-SG2424(config)#show sp anning-tree mst inst ance 1 inte rface.
149 Chapter 21 IGMP Commands IGMP Snooping (Internet Group Management Prot ocol Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the network. ip igmp snooping(global) Description The ip igmp snooping command is used to configure IGMP Snooping globally .
150 Example Enable IGMP Snooping function of port 3: TL-SG2424(config)# interface gigabitEthernet 1/0/3 TL-SG2424(config-if)# ip igmp snooping ip igmp snooping immediate-leave Description The ip igmp snooping immediate-leave command is used to configure the Fast Leave function for port.
151 Example S pecify the operation to proce ss unknown multicast as discard: TL-SG2424(config)# ip igmp snooping drop-unknown ip igmp snooping vlan-config Description The ip igmp snooping v lan-config command is used to enable VLAN IGMP Snooping function or to modify IGMP Snooping parameters, and to create static multicast IP entry .
152 Command Mode Global Configuration Mode Example Enable the IGMP Snooping function and m odify Router Port T ime as 300 seconds, Member Port T ime as 200 sec onds for VLAN 1-3, and set the Leave tim.
153 leave-time —— Leave Time, which is the interval between the switch receiving a leave message from a host and the switch removing the host from the multicast groups. Leave Time ranges from 1 to 30 in seconds. By default, it is 1. port —— The Ethernet port number .
154 Example Bind the filtering address ID 2-6 to port 3: TL-SG2424(config)# interface gigabitEthernet 1/0/3 TL-SG2424(config-if)# ip igmp snooping filter addr-id 2-6 ip igmp snooping filter(global) Description The ip igmp snooping filter command is used to add or modify the multica st filtering IP-range.
155 Synt ax ip igmp snooping filter no ip igmp snooping filter Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable IGMP Snooping fil.
156 Synt ax ip igmp snooping filter mode mode Parameter mode —— Action Mode, with refuse and accept options. Refuse indicates only the multicast packe ts whose multicast IP is not in th e IP-range will be processed, while accept indicates only the multicas t pa ckets whose multicast IP is in the IP-range will be processed.
157 Synt ax show ip igmp snooping interface gigabitEthernet [ port | port-list ] { basic-config | filt er | packet-stat } Parameter port —— The Ethernet port number . port-list —— The list of Ethernet port s. basic-config | filter | pa cket-stat —— The related configuration information selected to display .
158 Example Display the IGMP snooping configur ation information of VLAN 2: TL-SG2424# show ip igmp snooping vlan 2 show ip igmp snooping multi-vlan Description The sho w ip igmp snooping multi-vlan command is used to display the Multicast VLAN configuration.
159 Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display the information of all IGMP snooping groups: TL-SG2424#show ip igmp snooping group s Display all the multicast entries.
160 Example Display all the multicast fi lter address information: TL-SG2424(config)# show ip igmp snooping filter.
161 Chapter 22 SNMP Commands SNMP (Simple Network Management Protocol) func tions are used to manage the network devices for a smooth communication, whic h can facilitate the network administrators to monitor the network nodes and implement the proper operation.
162 mib-oid —— MIB Object ID. It is the Object I dentifier (OID) for the entry of V iew , ranging from 1 to 61 characters. include | exclude —— View T ype, with include and exclude options. They represent the view entry can/cannot be managed by the SNMP management station individually .
163 By default, the Security Level is noAuthN oPriv . T here is no need to configure this in SNMP v1 Mode and SNMP v2c Mode. read-view —— Select the View to be the Read View . The management access is restricted to read-only , and changes cannot be made to the assigned SNMP Vie w .
164 Parameter name —— User Name, ranging from 1 to 16 characters. local | remote —— User T ype, with local and remote options. Local indicates that the user is c onnected to a local SNMP engine, while remote means that the user is connected to a remote SNMP engine.
165 snmp-server community Description The snmp-server community command is used to add Community . T o delete the corresponding Community , please use no snmp-server community command.
166 udp-port —— UDP port, which is used to s end notifications. The UDP por t functions with the IP address for the not ification sending. It ranges from 1 to 65535. user-name —— The User name of the management station. smode —— The Security Model of the mana gement station, with v1, v2c and v3 options.
167 snmp-server engineID Description The snmp-server engineID command is used to configure the local and remote engineID of the switch. T o restore to the default setting, please use no snmp-server engineID command.
168 Synt ax snmp-server traps snmp [ lin kup | linkdown | wa rmstart | coldst art ] no snmp-server traps snmp [ linkup | linkdown | warmst art | coldstart ] Parameter linkup —— Enable linkup trap. It is s ent when port status changes from linkdown to linkup.
169 snmp-server traps Description The snmp-server traps command is used to enable SNMP extended traps. T o disable the sending of SNMP extended trap s, please use no snmp-server trap s command.
170 snmp-server traps mac Description The snmp-server traps mac command is used to enable SNMP extended MAC address-related traps which include four types: new , full, learn-mode-change and max-lear ned. T o disable the sending of SNMP extended MAC address related traps, please use no snmp-server traps mac command.
171 Synt ax snmp-server traps vlan [ create | delete ] no snmp-server traps vlan [create | delete ] Parameter create —— Enable VLAN-created trap. It is sent when new VLAN is created successfully . delete —— Enable VLAN-deleted traps. It is sent when VLAN is deleted successfully .
172 seconds —— The interval to take samplings from the port, ranging from 10 to 3600 in seconds. By default, it is 1800. owner-name —— The owner of the history sample entry , ranging from 1 to 16 characters.
173 Command Mode Global Configuration Mode Example Configure the user name of entry 1, 2, 3 and 4 as user1, the description of the event as description1, the type of event as log and the owner of the .
174 last sampled value from the current val ue, and then comparing the difference in the values with the threshold. By def ault, the Sample T ype is “absolute”. r-hold —— The rising counter value that tr iggers the Rising Threshold alarm, ranging from 1 to 65535.
175 Synt ax show snmp-server Command Mode Privileged EXEC Mode and Any Co nfiguration Mode Example Display SNMP configuration globally: TL-SG2424# show snmp-server show snmp-server view Description The show snmp-server view command is used to display the View t able.
176 show snmp-server user Description The show snmp-server user command is used to display the User table. Synt ax show snmp-server user Command Mode Privileged EXEC Mode and Any Co nfiguration Mode E.
177 Example Display the Host table: TL-SG2424# show snmp-server host show snmp-server engineID Description The show snmp-server engineID command is used to display the engineID of the SNMP .
178 show rmon event Description The show rmon event command is used to displa y the configuration of SNMP-RMON Event. Synt ax show rmon event [ index ] Parameter index —— The index nu mber of the entry sele cted to display the configuration, ranging from 1 to 12, in the format of 1- 3, 5.
179 Chapter 23 LLDP Commands Note: Only TL-SG2210P and TL-SG2424P support LLDP function. LLDP function enables network devic es to advertise their own device information periodically to neighbors on the same LAN.
180 Parameter multiplier —— Configure the Hold Multiplier parameter . It ranges from 2 to 10. By default, it is 4. Command Mode Global Configuration Mode Example S pecify Hold Multiplier as 5: TL-SG2424P(config)# ll d p hold-multiplier 5 lldp timer Description The lldp timer command is used to confi gure the parameters about transmission.
181 be sent out (the number of LLDPDUs equals this para meter). The value ranges from 1 to 10 and the default value is 3. Command Mode Global Configuration Mode Example S pecify the T ransmit Interval.
182 Synt ax lld p receive no lld p receive Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable port 1 to receive LLDPDU: TL-SG2424P(.
183 Synt ax lld p snmp-trap no lld p snmp-trap Command Mode Interface Configuration Mode (interfa ce gigabitEthernet / interface range gigabitEthernet) Example Enable the SNMP notif ication for port 1.
184 lldp med-location Description The lldp med-location command is used to configure the Locat ion Identification TL V's content in outgoing LLDPDU of the port.
185 S tatus will be changed to Tx&Rx. T o disable the LLDP-MED feature for the corresponding port, please use no lldp med-st atu s command. Synt ax lld p med-status no lld p med-st atus Command Mo.
186 show lldp Description The show lldp comman d is used to display t he global configuration of LLDP and LLDP-MED fast start repeat count number . Synt ax show lldp Command Mode Privileged EXEC Mode .
187 show lldp local-information interface Description The show lld p local-information interface command is used to display the LLDP and LLDP-MED local information of the corresponding port. By default, the information of all the ports will be displayed.
188 show lldp traffic interface Description The show lld p traffic interface command is used to display the LLDP statistic information between the local device and neighbo r device of the corresponding port. By default, the LLDP st atistic informat ion of all the ports will be displayed.
デバイスTP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452の購入後に（又は購入する前であっても）重要なポイントは、説明書をよく読むことです。その単純な理由はいくつかあります：
TP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452をまだ購入していないなら、この製品の基本情報を理解する良い機会です。まずは上にある説明書の最初のページをご覧ください。そこにはTP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452の技術情報の概要が記載されているはずです。デバイスがあなたのニーズを満たすかどうかは、ここで確認しましょう。TP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452の取扱説明書の次のページをよく読むことにより、製品の全機能やその取り扱いに関する情報を知ることができます。TP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452で得られた情報は、きっとあなたの購入の決断を手助けしてくれることでしょう。
TP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452を既にお持ちだが、まだ読んでいない場合は、上記の理由によりそれを行うべきです。そうすることにより機能を適切に使用しているか、又はTP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452の不適切な取り扱いによりその寿命を短くする危険を犯していないかどうかを知ることができます。
ですが、ユーザガイドが果たす重要な役割の一つは、TP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452に関する問題の解決を支援することです。そこにはほとんどの場合、トラブルシューティング、すなわちTP-Link TL-SG2210P/TL-SG2216/TL-SG2424/ TL-SG2424P/TL-SG2452デバイスで最もよく起こりうる故障・不良とそれらの対処法についてのアドバイスを見つけることができるはずです。たとえ問題を解決できなかった場合でも、説明書にはカスタマー・サービスセンター又は最寄りのサービスセンターへの問い合わせ先等、次の対処法についての指示があるはずです。
