User Guide
Page 2
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Table of Contents Section 1. AAA Commands 17 aaa authentication login ...17 aaa authentication enable...19 login authentication ...21 enable authentication...22 ip http authentication...23 ip https authentication ...24 show bridge multicast filtering 44 Page 1 Using the CLI...10 1.1 CLI Command Modes...10 1.1.1 Introduction...
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Table of Contents Section 1. AAA Commands 17 aaa authentication login ...17 aaa authentication enable...19 login authentication ...21 enable authentication...22 ip http authentication...23 ip https authentication ...24 show bridge multicast filtering 44 Page 1 Using the CLI...10 1.1 CLI Command Modes...10 1.1.1 Introduction...
User Guide
Page 9
......312 Section 26. 802.1x Commands 313 aaa authentication dot1x...313 dot1x system-auth-control 314 dot1x port-control ...315 dot1x re-authentication ...316 Page 8 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide end...281 help...282 terminal data-dump ...283 show history ...284 show privilege ...285 Section...
......312 Section 26. 802.1x Commands 313 aaa authentication dot1x...313 dot1x system-auth-control 314 dot1x port-control ...315 dot1x re-authentication ...316 Page 8 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide end...281 help...282 terminal data-dump ...283 show history ...284 show privilege ...285 Section...
User Guide
Page 25
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide ip https authentication The ip https authentication Global Configuration mode command specifies authentication methods for authentication.... Uses no ip https authentication Parameters • method1 [method2...] - This has the same effect as the final method in the command line. Console(config)# ip https authentication radius local Page 24...
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide ip https authentication The ip https authentication Global Configuration mode command specifies authentication methods for authentication.... Uses no ip https authentication Parameters • method1 [method2...] - This has the same effect as the final method in the command line. Console(config)# ip https authentication radius local Page 24...
User Guide
Page 118
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show ip interface The show ip interface [ethernet interface-number | vlan vlan-id | port-channel port-channel number.] Parameters • interface-... this command. Valid Ethernet port. • vlan-id - Console# show ip interface Gateway IP Address 10.7.1.1 Type -----Static Activity status Active IP address 10.7.1.192/24 10.7.2.192/24 Interface --------VLAN 1 VLAN 2 Type ------Static DHCP Page 117
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show ip interface The show ip interface [ethernet interface-number | vlan vlan-id | port-channel port-channel number.] Parameters • interface-... this command. Valid Ethernet port. • vlan-id - Console# show ip interface Gateway IP Address 10.7.1.1 Type -----Static Activity status Active IP address 10.7.1.192/24 10.7.2.192/24 Interface --------VLAN 1 VLAN 2 Type ------Static DHCP Page 117
User Guide
Page 287
Command Mode Global Configuration mode User Guidelines There are no default configuration. Example The following example enters the VLAN database mode. Syntax vlan database Default Configuration This command has no user guidelines for this command. Console(config)# vlan database Console(config-vlan)# Page 286 VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 24.
Command Mode Global Configuration mode User Guidelines There are no default configuration. Example The following example enters the VLAN database mode. Syntax vlan database Default Configuration This command has no user guidelines for this command. Console(config)# vlan database Console(config-vlan)# Page 286 VLAN Commands vlan database The vlan database Global Configuration mode command enters the VLAN Configuration mode. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 24.
User Guide
Page 2
Installation Guide TL-SG3109 9-port Gigabit Managed Switch TL-SL3428 24+4G Gigabit Managed Switch TL-SL3452 48+4G Gigabit Managed Switch
Installation Guide TL-SG3109 9-port Gigabit Managed Switch TL-SL3428 24+4G Gigabit Managed Switch TL-SL3452 48+4G Gigabit Managed Switch
User Guide
Page 6
...3.2 Installing the Device 17 3.2.1 Desktop or Shelf Installation 18 3.2.2 Rack Installation 18 3.3 Connecting the Device 20 3.3.1 Connecting the Switch to a Terminal 20 3.3.2 AC Power Connection 21 Section 4. Starting and Configuring the Device 22 4.1 Configuring the Terminal 22 ...4.2 Installation Procedure 23 4.2.1 Device Port Default Settings 24 4.3 Booting the Device 24 4.4 Configuration Overview 26 4.4.1 Initial Configuration 27 4.4.1.1 Static IP Address and Subnet Mask 28 4.4.1.2 Assigning Static IP ...
...3.2 Installing the Device 17 3.2.1 Desktop or Shelf Installation 18 3.2.2 Rack Installation 18 3.3 Connecting the Device 20 3.3.1 Connecting the Switch to a Terminal 20 3.3.2 AC Power Connection 21 Section 4. Starting and Configuring the Device 22 4.1 Configuring the Terminal 22 ...4.2 Installation Procedure 23 4.2.1 Device Port Default Settings 24 4.3 Booting the Device 24 4.4 Configuration Overview 26 4.4.1 Initial Configuration 27 4.4.1.1 Static IP Address and Subnet Mask 28 4.4.1.2 Assigning Static IP ...
User Guide
Page 10
... management. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide Section 2. The device configuration is performed via a DB-9 RS-232 interface. The offering includes the following devices: 10/100/1000 devices (GE devices) TP-Link TL-SG3109 - 8 10/100/1000Base-TX ports and 1 SFP 10/100 devices (FE devices) TP-Link TL-SL3428 - 24 10/100Base...
... management. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide Section 2. The device configuration is performed via a DB-9 RS-232 interface. The offering includes the following devices: 10/100/1000 devices (GE devices) TP-Link TL-SG3109 - 8 10/100/1000Base-TX ports and 1 SFP 10/100 devices (FE devices) TP-Link TL-SL3428 - 24 10/100Base...
User Guide
Page 13
.... • Flashing Green - The RJ-45 ports are designated as 10/100Base-T. A valid link is configured as follows: 24 Fast Ethernet ports - Table 1: TL-SG3109 Port LED Indications 2.3 TP-Link TL-SL3428 Description The following figure illustrates the TL-SL3428 front panel. 1 3 5 7 TL-SL3428 24+4G Gigabit Managed Switch Power Link 1 3 5 7 9 11 13 15 17 19 21 23 Act 100Mbps System 2 4 6 8 10 12...
.... • Flashing Green - The RJ-45 ports are designated as 10/100Base-T. A valid link is configured as follows: 24 Fast Ethernet ports - Table 1: TL-SG3109 Port LED Indications 2.3 TP-Link TL-SL3428 Description The following figure illustrates the TL-SL3428 front panel. 1 3 5 7 TL-SL3428 24+4G Gigabit Managed Switch Power Link 1 3 5 7 9 11 13 15 17 19 21 23 Act 100Mbps System 2 4 6 8 10 12...
User Guide
Page 14
... LED indications are described in the following : System LEDs - A link is established on the port. • Flashing Green - A valid 100Mbps link is established on the port. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide 2 1000Base-T Copper port - Fiber Gigabit ports designated...port designated on the port. • Off - The front panel also contains the following table: Port LED Indication Top LED 24 10/100M Ports Bottom LED Description • Off - The port is occurring on the device as ports SFP1 and SFP2. ...
... LED indications are described in the following : System LEDs - A link is established on the port. • Flashing Green - A valid 100Mbps link is established on the port. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide 2 1000Base-T Copper port - Fiber Gigabit ports designated...port designated on the port. • Off - The front panel also contains the following table: Port LED Indication Top LED 24 10/100M Ports Bottom LED Description • Off - The port is occurring on the device as ports SFP1 and SFP2. ...
User Guide
Page 15
...8226; Off - Power is supplied to the switch and is disconnected. • Flashing Green - The RJ-45 ports are designated even Table 2: TL-SL3428 Port LED Indications 2.4 TP-Link TL-SL3452 Description The following figure illustrates the TL-SL3452 front panel. Console Power System 1 2... 1 3 4 3 5 6 5 7 8 7 9 10 9 11 12 11 13 14 13 15 16 15 2 4 6 8 10 12 14 16 17 18 17 19 20 19 21 22 21 23 24...
...8226; Off - Power is supplied to the switch and is disconnected. • Flashing Green - The RJ-45 ports are designated even Table 2: TL-SL3428 Port LED Indications 2.4 TP-Link TL-SL3452 Description The following figure illustrates the TL-SL3452 front panel. Console Power System 1 2... 1 3 4 3 5 6 5 7 8 7 9 10 9 11 12 11 13 14 13 15 16 15 2 4 6 8 10 12 14 16 17 18 17 19 20 19 21 22 21 23 24...
User Guide
Page 26
...unit into the rack mounting holes and tighten with a screwdriver. 3. Power 1 3 TL-SL3428 5 7 9 11 13 15 24+4G Gigabit Managed Switch 17 19 21 23 Link Act 1 3 5 7 100Mbps System 2 4 6 8 10 12 14 16 18 20 22 24 GIGA1 GIGA2 Link/Act RESET 1000Mbps 2 4 6 8 9 11 13 15 10 12 14 16 ... the rack-mounting bracket on the rack mounting bracket. Pow er 1 3 TL-SL3428 5 7 9 11 13 15 17 24+4G Gigabit Managed 19 21 23 Link Act Switch 1 3 5 7 System 2 4 6 100Mbps 8 10 12 14 16 18 20 22 24 GIGA1 GIGA2 Link/Act RESET 1000Mbps 2 4 6 8 9 11 13 15 10 12 14...
...unit into the rack mounting holes and tighten with a screwdriver. 3. Power 1 3 TL-SL3428 5 7 9 11 13 15 24+4G Gigabit Managed Switch 17 19 21 23 Link Act 1 3 5 7 100Mbps System 2 4 6 8 10 12 14 16 18 20 22 24 GIGA1 GIGA2 Link/Act RESET 1000Mbps 2 4 6 8 9 11 13 15 10 12 14 16 ... the rack-mounting bracket on the rack mounting bracket. Pow er 1 3 TL-SL3428 5 7 9 11 13 15 17 24+4G Gigabit Managed 19 21 23 Link Act Switch 1 3 5 7 System 2 4 6 100Mbps 8 10 12 14 16 18 20 22 24 GIGA1 GIGA2 Link/Act RESET 1000Mbps 2 4 6 8 9 11 13 15 10 12 14...
User Guide
Page 31
... 24 POST runs every time the device is connected to the AC receptacle. 3. Connect the device to a VT100 terminal device or VT100 terminal emulator. 2. To boot the device, perform the following table describes the device port default settings. The device goes through Power On Self Test (POST). TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch...
... 24 POST runs every time the device is connected to the AC receptacle. 3. Connect the device to a VT100 terminal device or VT100 terminal emulator. 2. To boot the device, perform the following table describes the device port default settings. The device goes through Power On Self Test (POST). TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch...
User Guide
Page 36
...the default route is 192.168.1.1 The read/write SNMP community string is defined as 100.1.1.10. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide gateway is "private" console> enable console# configure console(config)# username admin password admin level 15...that the IP address has been correctly configured as follows: console# show ip interface Proxy ARP is disabled IP Address I/F 100.1.1.1/24 vlan 1 Type static 4.4.1.2 Assigning Static IP Addresses on a default VLAN This example uses the following assumptions: The...
...the default route is 192.168.1.1 The read/write SNMP community string is defined as 100.1.1.10. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide gateway is "private" console> enable console# configure console(config)# username admin password admin level 15...that the IP address has been correctly configured as follows: console# show ip interface Proxy ARP is disabled IP Address I/F 100.1.1.1/24 vlan 1 Type static 4.4.1.2 Assigning Static IP Addresses on a default VLAN This example uses the following assumptions: The...
User Guide
Page 37
For more information about the privilege level, see the CLI Reference Guide. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide Verifying the IP and Default Gateway Addresses Ensure that the IP address and... the default gateway were properly assigned by executing the following command and examining its output: Gateway IP Address Activity status ---- --- 192.168.1.1 Active IP address 192.168.1.123/24...
For more information about the privilege level, see the CLI Reference Guide. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide Verifying the IP and Default Gateway Addresses Ensure that the IP address and... the default gateway were properly assigned by executing the following command and examining its output: Gateway IP Address Activity status ---- --- 192.168.1.1 Active IP address 192.168.1.123/24...
User Guide
Page 42
... a BOOTP server or subnet containing such a server. 2. The device receives the IP address automatically. 35 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide console# show ip interface IP Address I/F 100.1.1.1/24 vlan 1 Type dynamic Note The device configuration does not have to be deleted to retrieve an...download its IP host configuration from flash. The device reboots with an identical configuration.As a result of the copying configuration, the switch retrieves the new configuration file and boots from a BOOTP server: 1.
... a BOOTP server or subnet containing such a server. 2. The device receives the IP address automatically. 35 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family Installation Guide console# show ip interface IP Address I/F 100.1.1.1/24 vlan 1 Type dynamic Note The device configuration does not have to be deleted to retrieve an...download its IP host configuration from flash. The device reboots with an identical configuration.As a result of the copying configuration, the switch retrieves the new configuration file and boots from a BOOTP server: 1.
User Guide
Page 4
... Mapping 43 Configuring Device Security 21 5.1 Configuring Management Security 21 5.1.1 Configuring Authentication Methods 21 5.1.1.1 Defining Access Profiles 21 5.1.1.2 Defining Profile Rules...23 5.1.1.3 Defining Authentication Profiles 24 5.1.1.4 Mapping Authentication Profiles 25 5.1.1.5 Defining TACACS+ Host Settings 27 5.1.1.6 Defining RADIUS Server Settings 28 5.1.2 Configuring Passwords...30 5.1.2.1 Defining Local Users...30 5.1.2.2 Defining Line Passwords 31...
... Mapping 43 Configuring Device Security 21 5.1 Configuring Management Security 21 5.1.1 Configuring Authentication Methods 21 5.1.1.1 Defining Access Profiles 21 5.1.1.2 Defining Profile Rules...23 5.1.1.3 Defining Authentication Profiles 24 5.1.1.4 Mapping Authentication Profiles 25 5.1.1.5 Defining TACACS+ Host Settings 27 5.1.1.6 Defining RADIUS Server Settings 28 5.1.2 Configuring Passwords...30 5.1.2.1 Defining Local Users...30 5.1.2.2 Defining Line Passwords 31...
User Guide
Page 29
Figure 24: Access Profile Page The Access Profile Page contains the following fields: Access Profile Name - Removes the selected access profile. Access Profiles cannot be removed ...
Figure 24: Access Profile Page The Access Profile Page contains the following fields: Access Profile Name - Removes the selected access profile. Access Profiles cannot be removed ...
User Guide
Page 31
... Authentication Profiles Page opens: Figure 29: Authentication Profiles Page The Authentication Profiles Page provides the following tables: Login Authentication Profiles Enable Authentication Profiles 24 Defines the action attached to the device. - Permits access to the rule. This is used. Removes the selected rule from the selected access profiles. Click...
... Authentication Profiles Page opens: Figure 29: Authentication Profiles Page The Authentication Profiles Page provides the following tables: Login Authentication Profiles Enable Authentication Profiles 24 Defines the action attached to the device. - Permits access to the rule. This is used. Removes the selected rule from the selected access profiles. Click...