TP-Link TL-SG2452 - Manual

Chapter 1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port. 1.1.1. Logon by Telnet To log on to the switch by a Telnet connection, please take the following steps: 1. Click ...

6. After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully downloaded. Figure 1-12 Log on the Switch 1.2 CLI Command Modes The CLI is divided into different command modes: User EXEC Mode...

enable secret Description The enable secret command is used to set a secret password, which is using an MD5 encryption algorithm, for users to access Privileged EXEC Mode from User EXEC Mode. To return to the default configuration, please use no enable secret command. This command uses the MD5 encry...

Command Mode Privileged EXEC Mode and Any Configuration Mode Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode: TL-SG2424(config-if)# exit TL-SG2424(config)#exit TL-SG2424# end Description The end command is used to return to Privi...

1 history history clear Description The history clear command is used to clear the commands you have entered in the current mode, therefore these commands will not be shown next time you use the history command. Syntax history clear Command Mode Privileged EXEC Mode and any Configuration Mode Exampl...

Parameter vlan-id —— Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Example Create VLAN Interface 2: TL-SG2424(config)# interface vlan 2 name Description The name command is used to assign a description to a VLAN. To clear the description, please use no n...

Parameter vlan-list —— Specify IEEE 802.1Q VLAN ID list, ranging from 2 to 4094, in the format of 2-3, 5. It is multi-optional. tagged | untagged —— Egress rule ， untagged or tagged. Tagged: All packets forwarded by the port are tagged. The packets contain VLAN information. Untagged: Packets forward...

Parameter time —— Aging time (in minutes) to be set for the Voice VLAN. It ranges from 1 to 43200 and the default value is 1440. Command Mode Global Configuration Mode Example Set the aging time for the Voice VLAN as 1 minute: TL-SG2424(config)# voice vlan aging time 1 voice vlan priority Descriptio...

Syntax voice vlan mac-address mac-addr mask mask [ description descript ] no voice vlan mac-address mac-addr Parameter mac-addr —— The OUI address of the voice device, in the format of XX:XX:XX:XX:XX:XX. mask —— The OUI address mask of the voice device, in the format of XX:XX:XX:XX:XX:XX. descript —...

Example Display the configuration information of Voice VLAN globally: TL-SG2424(config)# show voice vlan show voice vlan oui Description The show voice vlan oui command is used to display the configuration information of Voice VLAN OUI. Syntax show voice vlan oui Command Mode Privileged EXEC Mode an...

Chapter 5 Etherchannel Commands Etherchannel Commands are used to configure LAG and LACP function. LAG (Link Aggregation Group) is to combine a number of ports together to make a single high-bandwidth data path, which can highly extend the bandwidth. The bandwidth of the LAG is the sum of bandwidth ...

Chapter 6 User Management Commands User Manage Commands are used to manage the user’s logging information by Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. user name (password) Description The user name command is used to add a new user or modify the exi...

User Guidelines 1. If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption , the password in the configuration file will be displayed in the symmetric encrypted form. 2. If you change the password of the current user in a telnet...

Example Configure the number of the users as Admin and Guest logging on as 5 and 3: TL-SG2424(config)# user max-num 5 3 user idle-timeout Description The user idle-timeout command is used to configure the timeout time of the switch. To restore to the default timeout time, please use no user idle-tim...

logging file flash Description The logging file flash command is used to store the log messages in a file in the flash on the switch. To disable the log file flash function, please use no logging file flash command. The log file flash indicates the flash sector for saving system log. The information...

Command Mode Global Configuration Mode Example Specify the log file synchronization frequency as 10 hours: TL-SG2424(config)#logging file flash frequency periodic 10 logging file flash level Description The logging file flash level command is used to specify the system log message severity level. Me...

Syntax clear logging [ buffer | flash ] Parameter buffer | flash —The output channels: buffer and flash. Clear the information of the two channels, by default. Command Mode Global Configuration Mode Example Clear the information in the log file: TL-SG2424(config)# clear logging buffer logging host i...

Example Enable log host 2 and set its IP address as 192.168.0.148, the level 5: TL-SG2424(config)# logging host index 2 192.168.0.148 5 show logging local-config Description The show logging local-config command is used to display the configuration of the Local Log including the log buffer and the l...

show logging buffer Description The show logging buffer command is used to display the log information in the log buffer according to the severity level. Syntax show logging buffer [ level level ] Parameter leve l —— Severity level. There are 8 severity levels marked with values 0-7. The information...

Command Mode Global Configuration Mode Example Specify the maximum number of the connections to the SSH server as 3: TL-SG2424(config)# ip ssh max-client 3 ip ssh download Description The ip ssh download command is used to download the SSH key file from TFTP server. Syntax ip ssh download { v1 | v2 ...

mac address-table aging-time Description The mac address-table aging-time command is used to configure aging time for the dynamic address. To return to the default configuration, please use no mac address-table aging-time command. Syntax mac address-table aging-time aging-time no mac address-table a...

Example Display the Aging Time of the MAC address: TL-SG2424(config)# show mac address-table aging-time show mac address-table max-mac-count interface gigabitEthernet Description The show mac address-table max-mac-count interface gigabitEthernet command is used to display the security configuration ...

port —— The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the address configuration of port 1: TL-SG2424(config)# show mac address-table interface gigabitEthernet 1/0/1 show mac address-table count Description The show mac address-table count comm...

Chapter 11 System Commands System Commands can be used to configure the System information and System IP, reboot and reset the switch, upgrade the switch system and other operations. system-time manual Description The system-time manual command is used to configure the system time manually. Syntax s...

Configure the system time mode as NTP, the time zone is UTC-12:00, the primary NTP server is 133.100.9.2 and the secondary NTP server is 139.78.100.163, the fetching-rate is 11 hours: TL-SG2424(config)# system-time ntp UTC-12:00 133.100.9.2 139.79.100.163 11 system-time dst predefined Description Th...

The system-time dst date command is used to configure the one-off daylight saving time. The start date is in the current year by default. The time range of the daylight saving time must shorter than one year, but you can configure it spanning years. To disable DST function, please use no system-time...

hostname Description The hostname command is used to configure the system name. To clear the system name information, please use no hostname command. Syntax hostname hostname no hostname Parameter hostname —— System Name. The length of the name ranges from 1 to 32 characters. By default, it is the d...

ip address Description The ip address command is used to configure the system IP address, Subnet Mask and Default Gateway. To restore to the factory defaults, please use no ip address command. This command should be configured in the Interface Configuration Mode of the management VLAN. Syntax ip add...

Example Enable the DHCP Client function when the management VLAN of the switch is VLAN1: TL-SG2424(config)# interface vlan 1 TL-SG2424(config-if)# ip address-alloc dhcp ip address-alloc bootp Description The ip address-alloc bootp command is used to enable the BOOTP Protocol. When the BOOTP Protocol...

TL-SG2424# reset reboot Description The reboot command is used to reboot the Switch. To avoid damage, please don’t turn off the device while rebooting. Syntax reboot Command Mode Privileged EXEC Mode Example Reboot the Switch: TL-SG2424# reboot copy running-config startup-config Description The copy...

Syntax copy startup-config tftp ip-address ip-addr filename name Parameter ip-addr —— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name —— Specify the name for the configuration file which would be backup. Command Mode Privileged E...

TL-SG2424# copy tftp startup-config ip-address 192.168.0.148 filename config Download the configuration file named as config.cfg to the switch from TFTP server with the IP fe80::1234 TL-SG2424# copy tftp startup-config ip-address fe80::1234 filename config firmware upgrade Description The firmware u...

Chapter 12 IPv6 Address Configuration Commands The IPv6 address configuration commands are provided in the Interface VLAN Mode. Type enable →configure→interface vlan { vlan-id } to enter the Interface Configuration Mode of the management VLAN. By default the management VLAN is VLAN1. You can use the...

address, the manually configured ipv6 link-local address will be deleted when the autoconfigured ipv6 link-local address takes effect. Syntax ipv6 address autoconfig Configuration Mode Interface Configuration Mode (interface vlan) Example Enable the automatic configuration of the ipv6 link-local add...

Description The ipv6 address dhcp command is used to enable the DHCPv6 Client function. When this function is enabled, the switch will try to obtain IP from DHCPv6 server. To delete the allocated IP from DHCPv6 server and disable the DHCPv6 Client function, please use no ipv6 address dhcp command. S...

ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI) in the low-order 64 bits on the interface. Specify only the network prefix. The last 64 bits are automatically computed from the switch MAC address. To remove an ...

User Guidelines Command in the Interface Range gigabitEthernet Mode is executed independently on all ports in the range. It does not affect the execution on the other ports at all if the command results in an error on one port. Example To enter the Interface range gigabitEthernet Configuration Mode,...

Syntax speed { 10 | 100 | 1000 | auto } no speed Parameter 10 | 100 | 1000 | auto —— The speed mode of the Ethernet port. There are four options: 10Mbps, 100Mbps, 1000Mbps and Auto negotiation mode (default). Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range giga...

Example Enable the broadcast control function for port 5: TL-SG2424(config)# interface gigabitEthernet 1/0/5 TL-SG2424(config-if)# storm-control broadcast For TL-SG2452: Description The storm-control broadcast command is used to enable the broadcast control function. To disable the broadcast control...

storm-control unicast For TL-SG2216/TL-SG2424/TL-SG2424P: Description The storm-control unicast command is used to enable the unicast control function. To disable the unicast control function, please use no storm-control unicast command. Unicast control function allows the switch to filter UL frame ...

show interface status Description The show interface status command is used to display the connective-status of an Ethernet port. Syntax show interface [ gigabitEthernet port ] status Parameter port —— The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Dis...

show interface description Description The show interface description command is used to display the description of all ports or an Ethernet port. Syntax show interface [ gigabitEthernet port ] description Parameter port —— The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configur...

show interface configuration Description The show interface configuration command is used to display the configurations of all ports or an Ethernet port, including Port-status, Flow Control, Negotiation Mode and Port-description. Syntax show interface [ gigabitEthernet port ] configuration Parameter...

TL-SG2424(config)# show storm-control interface range gigabitEthernet 1/0/4-7 show bandwidth Description The show bandwidth command is used to display the bandwidth-limit information of Ethernet ports. Syntax show bandwidth [ interface { gigabitEthernet port | range gigabitEthernet port-list }] Para...

Syntax qos cos no qos cos Command Mode Global Configuration Mode User Guidelines IEEE 802.1P gives the Pri field in IEEE 802.1Q tag a recommended definition. When the mapping relation between IEEE 802.1P Priority and TC egress queue is enabled, the data will be classified into the egress queue based...

Display the configuration of QoS for port 5: TL-SG2424# show qos interface gigabitEthernet 1/0/5 Display the configuration of QoS for ports 1-4: TL-SG2424# show qos interface range gigabitEthernet 1/0/1-4 show qos cos-map Description The show qos cos-map command is used to display the configuration ...

Description The show qos queue mode command is used to display the schedule rule of the egress queues. Syntax show qos queue mode Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the schedule rule of the egress queues: TL-SG2424# show qos queue mode show qos status Descri...

monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To delete the corresponding monitored port, please use no monitor session source interface command. Syntax monitor session session_num source interface gigabitEthernet p...

Chapter 16 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list. port isolation Description The port isolation command is used to configure ...

Chapter 17 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the configuration. loopback-detection(global) D...

loopback-detection recover Description The loopback-detection recover command is used to remove the block status of selected ports, recovering the blocked ports to normal status, Syntax loopback-detection recover Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range ...

Chapter 18 ACL Commands access-list create Description The access-list create command is used to create standard-IP ACL and extend-IP ACL. Syntax access-list create access-list-num Parameter access-list-num —— ACL ID, ranging from 100 to 299. The ID range of Standard-IP ACL ranges is 100-199 and the...

TL-SG2424(config)# mac access-list 23 access-list standard Description The access-list standard command is used to add Standard-IP ACL rule. To delete the corresponding rule, please use no access-list standard command. Standard-IP ACLs analyze and process data packets based on a series of match cond...

access-list extended Description The access-list extended command is used to add Extended-IP ACL rule. To delete the corresponding rule, please use no access-list extended command. Syntax access-list extended acl-id rule rule-id { deny | permit } [[ sip source-ip ] smask source-ip-mask ] [[ dip dest...

Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions together for effect. The operations here include stream mirror, stream condition, QoS Remarking and redirect. Syntax access-list policy name name no access-list policy name name Paramet...

system power limit, the PD linked to the port with lower priority will be disconnected. By default, the priority level is “low”. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Example Configure the PoE priority as “low” for port 2: TL-SG2424P(...

Syntax power inline profile name no power inline profile Parameter name —— The name of the PoE profile to be bound to the port. If the name being assigned contains spaces then put it inside double quotes. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitE...

show power inline Description The show power inline command is used to display the global PoE information of the system. Syntax show power inline Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the PoE information of the system: TL-SG2424P# show power inline show power i...

Parameter port —— The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the PoE information of all ports: TL-SG2424P# show power inline information interface show power profile Description The show power profile command is used to display the defined ...

Chapter 21 MSTP Commands MSTP (Multiple Spanning Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. spanning-tree(global) Description The spanning-tree command is used...

revision —— The revision level for MST region identification, ranging from 0 to 65535. Command Mode MST Configuration Mode Example Configure the revision level of MST as 100: TL-SG2424(config)# spanning-tree mst configuration TL-SG2424(config-mst)# revision 100 spanning-tree mst instance Description...

spanning tree instance. You can use this command to configure the parameters of the ports in different instance IDs as well as view status of the ports in the specified instance. Syntax spanning-tree mst instance instance-id {[ port-priority pri ] | [ cost cost ]} no spanning-tree mst instance insta...

show spanning-tree mst Description The show spanning-tree mst command is used to display the related information of MST Instance. Syntax show spanning-tree mst { configuration [ digest ] | instance instance-id [ interface [ gigabitEthernet port ]]} Parameter instance-id —— Instance ID desired to sho...

Chapter 22 IGMP Snooping Commands IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the network. ip igmp snooping(global) Description The ip igmp snooping command is...

Example Specify the operation to process unknown multicast as discard: TL-SG2424(config)# ip igmp snooping drop-unknown ip igmp snooping vlan-config Description The ip igmp snooping vlan-config command is used to enable VLAN IGMP Snooping function or to modify IGMP Snooping parameters, and to create...

leave-time —— Leave Time, which is the interval between the switch receiving a leave message from a host and the switch removing the host from the multicast groups. Leave Time ranges from 1 to 30 in seconds. By default, it is 1. port —— The Ethernet port number. Command Mode Global Configuration Mod...

Syntax ip igmp snooping filter no ip igmp snooping filter Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Example Enable IGMP Snooping filter function for port 3: TL-SG2424(config)# interface gigabitEthernet 1/0/3 TL-SG2424(config-if)# ip igmp ...

Syntax ip igmp snooping filter mode mode Parameter mode —— Action Mode, with refuse and accept options. Refuse indicates only the multicast packets whose multicast IP is not in the IP-range will be processed, while accept indicates only the multicast packets whose multicast IP is in the IP-range wil...

Syntax show ip igmp snooping interface gigabitEthernet [ port | port-list ] { basic-config | filter | packet-stat } Parameter port —— The Ethernet port number. port-list —— The list of Ethernet ports. basic-config | filter | packet-stat —— The related configuration information selected to display. C...

ipv6 mld snooping last-listener query-count Description The ipv6 mld snooping last-listener query-count command is used to specify the numbers of Specific Query Message to be sent. The default value is 2. To restore the default number, please use no ipv6 mld snooping last-listener query-count comman...

ipv6 mld snooping multicast-vlan vlan-id Description The ipv6 mld snooping multicast-vlan vlan-id command is used to specify the multicast VLAN ID. The default multicast VLAN is VLAN1. To restore the default VLAN, please use no ipv6 mld snooping multicast-vlan vlan-id command. Syntax ipv6 mld snoopi...

ipv6 mld snooping vlan router-aging-time Description The ipv6 mld snooping vlan router-aging-time command is used to specify router port aging time for a specified VLAN. If this time is set to 0, then the global router port aging time will be used. The default time is 0. To restore the default timer...

Command Mode Global Configuration Mode Example Configure the gigabitEthernet 1/0/2 as static router port in VLAN 2: TL-SG2424(config)# ipv6 mld snooping vlan 2 mrouter interface gigabitEthernet 1/0/2 ipv6 mld snooping vlan static Description The ipv6 mld snooping vlan static command is used to confi...

Syntax ipv6 mld snooping querier vlan vlan-id no ipv6 mld snooping querier vlan vlan-id Parameter vlan-id —— The VLAN that enables the MLD querier function, ranging from 1 to 4094. Command Mode Global Configuration Mode Example Enable MLD Querier function on VLAN 2: TL-SG2424(config)# ipv6 mld snoop...

ipv6 mld snooping querier vlan query-interval Description The ipv6 mld snooping querier vlan query-interval command is used to specify the interval to send the Query Message. The default value is 25 seconds. To restore the default value, please use no ipv6 mld snooping querier vlan query-interval co...

Command Mode Interface Configuration Mode Example Specify the filter id as 1 and 10 on interface gigabitEthernet 1/0/2: TL-SG2424(config)# interface gigabitEthernet 1/0/2 TL-SG2424(config-if)# ipv6 mld snooping filter-id 1,10 ipv6 mld snooping max-group Description The ipv6 mld snooping max-group co...

Example Clear the statistics of the MLD packets: TL-SG2424(config)# clear ipv6 mld snooping statistics show ipv6 mld snooping Description The show ipv6 mld snooping command is used to display the global configuration of MLD Snooping. Syntax show ipv6 mld snooping Command Mode Privileged EXEC Mode an...

Syntax show ipv6 mld snooping filter Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the filter entries: TL-SG2424(config)# show ipv6 mld snooping filter show ipv6 mld snooping interface Description The show ipv6 mld snooping interface command is used to display the inte...

Example Display all filter ids bounded to all interface: TL-SG2424(config)# show ipv6 mld snooping interface filter show ipv6 mld snooping querier Description The show ipv6 mld snooping querier command is used to display the Querier configuration of VLAN. Syntax show ipv6 mld snooping querier [vlan ...

Chapter 24 SNMP Commands SNMP (Simple Network Management Protocol) functions are used to manage the network devices for a smooth communication, which can facilitate the network administrators to monitor the network nodes and implement the proper operation. snmp-server Description The snmp-server com...

snmp-server community Description The snmp-server community command is used to add Community. To delete the corresponding Community, please use no snmp-server community command. SNMP v1 and SNMP v2c adopt community name authentication. The community name can limit access to the SNMP agent from SNMP ...

Add a Notification entry, and configure the IP Address of the management Host as fe80::1234, the UDP port as 162, the User name of the management station as admin, the Security Model of the management station as v2c, the type of the notifications as inform, the maximum time for the switch to wait as...

snmp-server traps snmp Description The snmp-server traps snmp command is used to enable SNMP standard traps which include four types: linkup, linkdown, warmstart and coldstart. To disable the sending of SNMP standard traps, please use no snmp-server traps snmp command. Syntax snmp-server traps snmp ...

history group is configured, the switch collects network statistics information periodically, based on which the management station can monitor network effectively. Syntax rmon history index interface gigabitEthernet port [ interval seconds ] [ owner owner-name ] no rmon history index Parameter inde...

Parameter index —— The index number of the event entry, ranging from 1 to 12. You can only select one entry for each command. user-name —— The name of the User to which the event belongs, ranging from 1 to 16 characters. By default, it is “public”. descript —— The description of the event, ranging f...

Syntax show snmp-server group Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Group table: TL-SG2424# show snmp-server group show snmp-server user Description The show snmp-server user command is used to display the User table. Syntax show snmp-server user Command Mo...

for each command. By default, the configuration of all history sample entries is displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of all history sample entries: TL-SG2424# show rmon history show rmon event Description The show rmon event comma...

Chapter 25 LLDP Commands Note: Only TL-SG2424P supports LLDP function. LLDP function enables network devices to advertise their own device information periodically to neighbors on the same LAN. The information of the LLDP devices in the LAN can be stored by its neighbor in a standard MIB, so it is p...

show lldp local-information interface Description The show lldp local-information interface command is used to display the LLDP and LLDP-MED local information of the corresponding port. By default, the information of all the ports will be displayed. Syntax show lldp local-information interface [ gig...