TP-Link TL-SL5428 User manual

TL-SL5428

24-Port 10/100 + 4-Port Gigabit Managed Switch

Rev: 1.0.0

1910010123

Specifications are subject to change without notice.

®is a registered

trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names

are trademarks or registered trademarks of their respective holders.

No part of the specifications may be reproduced in any form or by any means or used

to make any derivative such as translation, transformation, or adaptation without

http://www.tp-link.com

FCC STATEMENT

This equipment has been tested and found to comply with the limits for a Class A

digital device, pursuant to part 15 of the FCC Rules. These limits are designed to

provide reasonable protection against harmful interference in a residential installation.

This equipment generates, uses and can radiate radio frequency energy and, if not

installed and used in accordance with the instructions, may cause harmful

interference to radio communications. However, there is no guarantee that

interference will not occur in a particular installation. If this equipment does cause

harmful interference to radio or television reception, which can be determined by

turning the equipment off and on, the user is encouraged to try to correct the

interference by one or more of the following measures:

•Reorient or relocate the receiving antenna.

•Increase the separation between the equipment and receiver.

•Connect the equipment into an outlet on a circuit different from that to which

the receiver is connected.

•Consult the dealer or an experienced radio/ TV technician for help.

This device complies with part 15 of the FCC Rules. Operation is subject to the

following two conditions:

1) This device may not cause harmful interference.

2) This device must accept any interference received, including interference that

may cause undesired operation.

Any changes or modifications not expressly approved by the party responsible for

compliance could void the user’s authority to operate the equipment.

CE Mark Warning

This is a class A product. In a domestic environment, this product may cause radio

interference, in which case the user may be required to take adequate measures.

Contents

Chapter 1: Introduction 1-1

Key Features 1-1

Description of Software Features 1-2

System Defaults 1-6

Chapter 2: Initial Configuration 2-1

Connecting to the Switch 2-1

Configuration Options 2-1

Required Connections 2-2

Remote Connections 2-3

Basic Configuration 2-3

Console Connection 2-3

Setting Passwords 2-4

Setting an IP Address 2-4

Manual Configuration 2-4

Dynamic Configuration 2-5

Enabling SNMP Management Access 2-6

Community Strings (for SNMP version 1 and 2c clients) 2-6

Trap Receivers 2-7

Configuring Access for SNMP Version 3 Clients 2-8

Saving Configuration Settings 2-8

Managing System Files 2-9

Chapter 3: Configuring the Switch 3-1

Using the Web Interface 3-1

Navigating the Web Browser Interface 3-2

Home Page 3-2

Configuration Options 3-3

Panel Display 3-3

Main Menu 3-4

Basic Configuration 3-12

Displaying System Information 3-12

Displaying Switch Hardware/Software Versions 3-13

Displaying Bridge Extension Capabilities 3-15

Setting the Switch’s IP Address 3-16

Manual Configuration 3-17

Using DHCP/BOOTP 3-18

Enabling Jumbo Frames 3-19

Managing Firmware 3-19

Downloading System Software from a Server 3-20

Contents

Saving or Restoring Configuration Settings 3-21

Downloading Configuration Settings from a Server 3-22

Console Port Settings 3-23

Telnet Settings 3-25

Configuring Event Logging 3-28

Displaying Log Messages 3-28

System Log Configuration 3-28

Remote Log Configuration 3-30

Simple Mail Transfer Protocol 3-31

Resetting the System 3-33

Setting the System Clock 3-34

Setting the Time Manually 3-34

Configuring SNTP 3-34

Configuring NTP 3-35

Setting the Time Zone 3-37

Simple Network Management Protocol 3-38

Setting Community Access Strings 3-40

Specifying Trap Managers and Trap Types 3-41

Enabling SNMP Agent Status 3-42

Configuring SNMPv3 Management Access 3-43

Setting the Local Engine ID 3-43

Specifying a Remote Engine ID 3-45

Configuring SNMPv3 Users 3-45

Configuring Remote SNMPv3 Users 3-47

Configuring SNMPv3 Groups 3-48

Setting SNMPv3 Views 3-50

User Authentication 3-51

Configuring User Accounts 3-52

Configuring Local/Remote Logon Authentication 3-54

Configuring Encryption Keys 3-58

AAA Authorization and Accounting 3-59

Configuring AAA RADIUS Group Settings 3-60

Configuring AAA TACACS+ Group Settings 3-60

Configuring AAA Accounting 3-61

AAA Accounting Update 3-63

AAA Accounting 802.1X Port Settings 3-63

AAA Accounting Exec Command Privileges 3-64

AAA Accounting Exec Settings 3-66

AAA Accounting Summary 3-66

Authorization Settings 3-68

Authorization EXEC Settings 3-69

Authorization Summary 3-69

Configuring HTTPS 3-70

Replacing the Default Secure-site Certificate 3-71

Configuring the Secure Shell 3-72

Contents

iii

Configuring the SSH Server 3-75

Generating the Host Key Pair 3-76

Importing User Public Keys 3-77

Configuring Port Security 3-81

Configuring 802.1X Port Authentication 3-82

Displaying 802.1X Global Settings 3-84

Configuring 802.1X Global Settings 3-84

Configuring Port Settings for 802.1X 3-85

Displaying 802.1X Statistics 3-88

Web Authentication 3-89

Configuring Web Authentication 3-90

Configuring Web Authentication for Ports 3-91

Displaying Web Authentication Port Information 3-92

Re-authenticating Web Authenticated Ports 3-93

Network Access – MAC Address Authentication 3-94

Configuring the MAC Authentication Reauthentication Time 3-95

Configuring MAC Authentication for Ports 3-95

Configuring Port Link Detection 3-97

Displaying Secure MAC Address Information 3-98

MAC Authentication 3-99

Configuring MAC authentication parameters for ports 3-99

Access Control Lists 3-100

Configuring Access Control Lists 3-101

Setting the ACL Name and Type 3-101

Configuring a Standard IP ACL 3-102

Configuring an Extended IP ACL 3-103

Configuring a MAC ACL 3-106

Binding a Port to an Access Control List 3-107

Filtering IP Addresses for Management Access 3-108

Port Configuration 3-111

Displaying Connection Status 3-111

Configuring Interface Connections 3-113

Creating Trunk Groups 3-115

Statically Configuring a Trunk 3-116

Enabling LACP on Selected Ports 3-117

Configuring LACP Parameters 3-119

Displaying LACP Port Counters 3-121

Displaying LACP Settings and Status for the Local Side 3-123

Displaying LACP Settings and Status for the Remote Side 3-125

Setting Broadcast Storm Thresholds 3-126

Configuring Port Mirroring 3-128

Configuring Rate Limits 3-129

Rate Limit Configuration 3-129

Showing Port Statistics 3-130

Address Table Settings 3-134

Contents

Setting Static Addresses 3-134

Displaying the Address Table 3-135

Changing the Aging Time 3-137

Spanning Tree Algorithm Configuration 3-137

Configuring Port and Trunk Loopback Detection 3-139

Displaying Global Settings 3-141

Configuring Global Settings 3-143

Displaying Interface Settings 3-147

Configuring Interface Settings 3-149

Configuring Multiple Spanning Trees 3-151

Displaying Interface Settings for MSTP 3-154

Configuring Interface Settings for MSTP 3-156

VLAN Configuration 3-158

IEEE 802.1Q VLANs 3-158

Enabling or Disabling GVRP (Global Setting) 3-161

Displaying Basic VLAN Information 3-162

Displaying Current VLANs 3-162

Creating VLANs 3-164

Adding Static Members to VLANs (VLAN Index) 3-165

Adding Static Members to VLANs (Port Index) 3-167

Configuring VLAN Behavior for Interfaces 3-168

Configuring IEEE 802.1Q Tunneling 3-170

Enabling QinQ Tunneling on the Switch 3-173

Adding an Interface to a QinQ Tunnel 3-175

Private VLANs 3-176

Displaying Current Private VLANs 3-177

Configuring Private VLANs 3-178

Associating VLANs 3-179

Displaying Private VLAN Interface Information 3-180

Configuring Private VLAN Interfaces 3-181

Protocol VLANs 3-182

Protocol VLAN Group Configuration 3-182

Protocol VLAN System Configuration 3-183

Link Layer Discovery Protocol 3-184

Setting LLDP Timing Attributes 3-184

Configuring LLDP Interface Attributes 3-186

Displaying LLDP Local Device Information 3-189

Displaying LLDP Remote Port Information 3-190

Displaying LLDP Remote Information Details 3-191

Displaying Device Statistics 3-192

Displaying Detailed Device Statistics 3-193

Class of Service Configuration 3-194

Layer 2 Queue Settings 3-194

Setting the Default Priority for Interfaces 3-194

Mapping CoS Values to Egress Queues 3-195

Contents

Enabling CoS 3-197

Selecting the Queue Mode 3-198

Setting the Service Weight for Traffic Classes 3-198

Layer 3/4 Priority Settings 3-199

Mapping Layer 3/4 Priorities to CoS Values 3-199

Enabling IP DSCP Priority 3-200

Mapping DSCP Priority 3-201

Quality of Service 3-202

Configuring Quality of Service Parameters 3-203

Configuring a Class Map 3-203

Creating QoS Policies 3-206

Attaching a Policy Map to Ingress Queues 3-209

VoIP Traffic Configuration 3-210

Configuring VoIP Traffic 3-210

Configuring VoIP Traffic Port 3-211

Configuring Telephony OUI 3-213

Multicast Filtering 3-215

Layer 2 IGMP (Snooping and Query) 3-215

Configuring IGMP Snooping and Query Parameters 3-216

Enabling IGMP Immediate Leave 3-218

Displaying Interfaces Attached to a Multicast Router 3-219

Specifying Static Interfaces for a Multicast Router 3-220

Displaying Port Members of Multicast Services 3-221

Assigning Ports to Multicast Services 3-222

IGMP Filtering and Throttling 3-223

Enabling IGMP Filtering and Throttling 3-224

Configuring IGMP Filter Profiles 3-225

Configuring IGMP Filtering and Throttling for Interfaces 3-226

Multicast VLAN Registration 3-228

Configuring Global MVR Settings 3-229

Displaying MVR Interface Status 3-230

Displaying Port Members of Multicast Groups 3-231

Configuring MVR Interface Status 3-232

Assigning Static Multicast Groups to Interfaces 3-234

DHCP Snooping 3-235

DHCP Snooping Configuration 3-236

DHCP Snooping VLAN Configuration 3-236

DHCP Snooping Information Option Configuration 3-237

DHCP Snooping Port Configuration 3-238

DHCP Snooping Binding Information 3-239

IP Source Guard 3-240

IP Source Guard Port Configuration 3-240

Static IP Source Guard Binding Configuration 3-241

Dynamic IP Source Guard Binding Information 3-242

Switch Clustering 3-243

Contents

Cluster Configuration 3-244

Cluster Member Configuration 3-245

Cluster Member Information 3-246

Cluster Candidate Information 3-247

UPnP 3-248

UPnP Configuration 3-248

Chapter 4: Command Line Interface 4-1

Using the Command Line Interface 4-1

Accessing the CLI 4-1

Console Connection 4-1

Telnet Connection 4-2

Entering Commands 4-3

Keywords and Arguments 4-3

Minimum Abbreviation 4-3

Command Completion 4-3

Getting Help on Commands 4-3

Showing Commands 4-4

Partial Keyword Lookup 4-6

Negating the Effect of Commands 4-6

Using Command History 4-6

Understanding Command Modes 4-6

Exec Commands 4-7

Configuration Commands 4-8

Command Line Processing 4-10

Command Groups 4-11

Line Commands 4-12

line 4-13

password 4-14

timeout login response 4-15

exec-timeout 4-15

password-thresh 4-16

silent-time 4-17

databits 4-17

parity 4-18

speed 4-19

stopbits 4-19

disconnect 4-20

show line 4-20

General Commands 4-21

enable 4-21

disable 4-22

configure 4-23

Contents

vii

show history 4-23

reload 4-24

reload cancel 4-24

show reload 4-25

end 4-25

exit 4-26

quit 4-26

System Management Commands 4-27

Device Designation Commands 4-27

prompt 4-27

hostname 4-28

Banner 4-28

banner configure 4-29

banner configure company 4-30

banner configure dc-power-info 4-31

banner configure department 4-31

banner configure equipment-info 4-32

banner configure equipment-location 4-33

banner configure ip-lan 4-33

banner configure lp-number 4-34

banner configure manager-info 4-35

banner configure mux 4-35

banner configure note 4-36

show banner 4-37

User Access Commands 4-38

username 4-38

enable password 4-39

IP Filter Commands 4-40

management 4-40

show management 4-41

Web Server Commands 4-42

ip http port 4-42

ip http server 4-42

ip http secure-server 4-43

ip http secure-port 4-44

Telnet Server Commands 4-45

ip telnet port 4-45

ip telnet server 4-45

Secure Shell Commands 4-46

ip ssh server 4-48

ip ssh timeout 4-49

ip ssh authentication-retries 4-49

ip ssh server-key size 4-50

delete public-key 4-50

ip ssh crypto host-key generate 4-51

Other manuals for TL-SL5428

Table of contents

Other TP-Link Switch manuals

TP-Link

TP-Link TL-SL1218MP User manual

TP-Link

TP-Link JetStream L2 Lite TL-SG3210 User manual

TP-Link

TP-Link TL-SG2216 User manual

TP-Link

TP-Link JetStream T1500G-10MPS User manual

TP-Link

TP-Link TL-SF1008D User manual

TP-Link

TP-Link TL-SG1005P User manual

TP-Link

TP-Link kasa smart KS200 User manual

TP-Link

TP-Link JetStream T2600G-28TS User manual

TP-Link

TP-Link TL-SF1005D User manual

TP-Link

TP-Link TL-SG1005D User manual

TP-Link

TP-Link TL-SG105E User manual

TP-Link

TP-Link P1201-08 User manual

TP-Link

TP-Link TL-SF1008P User manual

TP-Link

TP-Link TL-SG1008 User manual

TP-Link

TP-Link Jetstream L2 TL-SG5412F User manual

TP-Link

TP-Link UC430 User manual

TP-Link

TP-Link TL-SG1008P User manual

TP-Link

TP-Link JetStream TL-SL3428 User manual

TP-Link

TP-Link TL-SG105E User manual

TP-Link

TP-Link LiteWave LS105G User manual

TP-Link

TP-Link Tapo H100 User manual

TP-Link

TP-Link JetStream TL-SG3424P User manual

TP-Link

TP-Link JetStream T1600G-52TS User manual

TP-Link

TP-Link Jetstream Series User manual

Popular Switch manuals by other brands

URC

URC Total Control MFS-8 installation manual

Azbil

Azbil HPQ-D11 user manual

Sony

Sony DFS-900M operating instructions

SICK

SICK i17S operating instructions

F&F

F&F SZR-277 quick start guide

Shure

Shure UAMS/BK user guide

Dräger

Dräger X-zone Switch Off Instructions for use

Asco

Asco Joucomatic 349 Series manual

BT Mini Hub user guide

D-Link

D-Link DES-1226G manual

Johnson Controls

Johnson Controls FS80-C installation instructions

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Configuration guide

MicroNet

MicroNet SP1200A user manual

Ruijie

Ruijie RG-PF2920 Series Hardware installation and reference guide

Altinex

Altinex DA1914SX user guide

MiLAN

MiLAN MIL-SM2401M user guide

RJM

RJM MASTERMIND PBC/6X user manual

Atlas

Atlas MMK-KVM8 owner's manual