Managed Layer 2 Switch TL-SG3109
High-performance and maximizing compatibility features Multiple network management, provide high network security Advanced enterprise functions

Discription

Overview
TP-LINKs TL-SG3109 is a high-performance, managed layer 2 switch that provides an ideal solution for workgroups and departments.
High-Performance, High Availability L2 Switching
The TL-SG3109 8+1G Gigabit Managed Switch fully complies with IEEE 802.3/802.3u/802.3ab/802.3z Ethernet standards. It provides 8 10/100/1000Mbps and 1 SFP independence expansion slot supporting SFP module. Its high-performance and maximizing compatibility features such as, Spanning Tree (802.1d), QoS, VLAN (802.1Q), and network management (SNMP/RMON/Telnet/Web) will leverage your existing investment in a multi-vendor environment. The TL-SG3109 robust support of standards-based network management protocols (SNMP/RMON/ Telnet/Web/TFTP) and port mirroring enables the TL-SG3109 to be easily integrated into many third-party network management packages.
Advanced Enterprise Features
The TL-SG3109 brings advanced enterprise functions to a more affordable level while supporting advanced features: 802.1x (Port-based Authentication), IGMP snooping, 802.1d (Classic Spanning Tree), 802.1w (Rapid Spanning Tree), 802.1s (Multiple Spanning Tree group), 802.3ad (Link Aggregation), and 802.1Q (VLANs). Management ACLs can be configured based on: IP address, VLAN, LAG, port. These features facilitate the deployment of enterprise applications such as: VoIP, IPTV, streaming media, and multicast content delivery (IP video conferencing and software deployment).

Features

- Fully complies with IEEE 802.3, 802.3u, 802.3ab, 802.3x, 802.3z, 802.1x, 802.1d, 802.1s, 802.1w, 802.1q, 802.1p and 802.3ad standards - Supports SNMP, SSL, SSH, Web and Telnet/Console management - Supports SNMPv1, SNMPv2c, SNMPv3 - Supports SNMP MIB-II, Ethernet-like MIB and Bridge MIB - Supports RMON, four RMON groups 1, 2, 3, 9 (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis - Supports IEEE 802.1X Port-Based Network Access Control protocol and connect to RADIUS - Management ACL: Based on IP address/VLAN/LAG/port - TACACS+ and RADIUS supported - Supports port security, MAC address binding and MAC address filtering - Broadcast, multicast and unknown unicast storm control - Supports 9 Port-Based VLANs and 256 IEEE 802.1Q Tag VLANs, full 4K VID - Supports GARP and GVRP - Supports IEEE 802.3ad port trunk with LACP - Supports Static MAC address and filtering MAC address management - Supports Static Port Priority and IEEE 802.1p Priority , supports 4 Priority Queues - Supports the configuration function of Port Security, Broadcast Storm Control and Port Mirroring - Supports IEEE 802.1d Spanning Tree protocol, IEEE 802.1s Multiple Spanning tree protocol and IEEE 802.1w Rapid Spanning tree protocol - Supports IGMP Snooping function - Supports firmware upgrade, configuration backed up and restored - Rack-mountable steel case - Internal power supply

www.tp-link.com

Technical Specifications

Product specifications

TL-SG3109 MAC Address Table Switch Fabric Transmission Method Cable Type (8) ports 10/100/1000BASE-T + 1 Gigabit SFP port 8K 18Gbps Store-and-Forward UTP CAT 5 or better for 10BASE-T/100BASE-TX UTP CAT 5e or better for 1000BASE-T RS-232 DB9 Male Console Cord
Network Protocols and Standards
IEEE 802.3, IEEE 802.3u, IEEE 802.3ad, IEEE 802.3z IEEE 802.1d Classic Spanning Tree, IEEE 802.1w Rapid Spanning Tree, IEEE 802.1s Multiple Spanning Tree IEEE 802.1p Priority IEEE IEEE 802.1Q VLAN IEEE 802.3ad Link Aggregation Control IEEE 802.3x Flow Control IEEE 802.1x Port-based Network Access Control RFC 1157 SNMP RFC 1757 RMON (4 Groups) IETF RFC 1493 Bridge MIB RFC 1213 MIB II RFC 1643 Ethernet-like MIB RFC 2674 802.1p, IF MIB

Network Management

In Band & Out of Band Telnet, CLI/Console, SSH v1/v2, SSL, RMON (4 Groups), Web-based HTTP, SNMPv1/v2c/v3 Compatible & Port Mirroring 802.1x RADIUS and TACACS + Authentication(port-based) Supports 9 Port-Based VLANs and 256 IEEE 802.1Q Tag VLANs full 4K VID (Port-based, 802.1Q and GARP/GVRP) Port locks down to MAC Address, MAC address binding and filtering Management Access Control based on MAC address/port/VLAN IEEE 802.1p, 4 queues 802.1d STP, 802.1w RSTP and 802.1s MSTP 802.3ad LACP supported Broadcast, Multicast, and Unknown Unicast IGMP(V1/V2) snooping, supports up to 128 L2 Multicast Groups

Network Security

IEEE 802.1x VLAN Port Security Management Access Control

Network QoS

Priority Spanning Tree Support Link Aggregation Storm Control IGMP Snooping
Electrical & Emissions Summary
Emissions Power Supply Safety CE & FCC 100-240V AC, 50/60 Hz internal universal power RoHS compliant 11.6 7.1 1.7 in.(44 mm ) 1U 2.975 kg Operating: Storage: Operating: Storage: 0C ~ 40C (32F ~ 104F) -40C ~ 70C (-40F ~ 158F) 10%~90% Non-Condensing 5% to 90% RH, Non-Condensing
Safety Agency Certifications and Environmental Physical Specifications
Dimensions (W x D x H) Height Weight Temperature Humidity

Topology Diagram:

Internet

100Mbps 1000Mbps

TL-SG3109

Managed Gigabit Switch

TL-SG2224WEB / TL-SG2248WEB TL-SG1024 / TL-SG1048 TG-3269
TG-3201 / TG-3269 TG-3201 / TG-3269 TG-3201 / TG-3269
Specifications are subject to change without notice. is a registered trademark of TP-LINK Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specificationsmay be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK Technologies Co., Ltd. Copyright 2008 TP-LINK Technologies Co., Ltd. All rights reserved.

4.5.3.3 Configuring an Initial Telnet Password..38. 4.5.3.4 Configuring an Initial SSH password..38 4.5.3.5 Configuring an Initial HTTP Password..39. 4.5.3.6 Configuring an initial HTTPS Password..39 4.6 Startup Procedures...39 4.6.1 Software Download [Option 1]...41 4.6.1.1 Software Download through TFTP Server..42 4.6.2 Erasing the Flash File [Option 2]..46 4.6.3 Password Recovery [Option 3]...46. 4.6.4 Enter Diagnostic Mode [Option4]...47 4.6.5 Set Terminal Baud-Rate [Option5]...47
TL-SG3109/TL-SL3428/TL-SL3452
Gigabit Managed Switch Family Installation Guide

Package contents

The following contents should be found in your box: The device An AC power cable Console cable with DB-9 connector This "Installation Guide", the "Embedded Web System User Guide" and documentation CD Two mounting brackets and other fittings
Note: If any of the listed contents are damaged or missing, please contact the retailer from whom you purchased the TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch for assistance.

Section 1: Introduction

Thanks for choosing the TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family! The switch family provides a friendly management interface and excellent performance.

1.1 Intended Audience

This guide is intended for network administrators familiar with IT concepts and network terminology.

1.2 Agreement

Due to the similarity in function of the TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family, this installation guide will illustrate the general usage of this switch family. The switch referred in this guide indicates the TLSG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family.

1.3 Guide Overview

This installation guide is divided into the following sections to provide concise information for configuring, and managing the TP-Link device: Section 1: Introduction. Section 2: Device Description -- Provides an overview about the switch family. Section 3: Mounting Device -- Describes the mounting procedure of the switch. Section 4: Starting and Configuring the Device -- Describes the initial device configuration.
Section 2. Device Description
The TP-Link devices offer switching systems that combine versatility with ease of management. Management can be performed through an Embedded Web System (EWS) or for the more advanced users, a Command Line Interface (CLI) system. The device configuration is performed via a DB-9 RS-232 interface. There are a range of devices which offer variable solutions for specific requirements. The offering includes the following devices: 10/100/1000 devices (GE devices) TP-Link TL-SG10/100/1000Base-TX ports and 1 SFP TP-Link TL-SL10/100Base-TX ports and 4 Giga ports(2 x Copper and 2 x SFP) TP-Link TL-SL10/100Base-TX ports and 4 Giga ports (2 x Copper and 2 x SFP) 10/100 devices (FE devices)

2.1 Features

Compliant with IEEE802.3, IEEE802.3u, IEEE802.3ab and IEEE802.3z Standards. IEEE 802.3x flow control for full-duplex Back pressure flow control for half-duplex Store-and-Forward switching method (0/24/48) 10/100BASE-TX Fast Ethernet ports (Auto MDI/MDI-X support) (8/2/2) 1000BASE-T Gigabit Ethernet ports (Auto MDI/MDI-X support) (1/2/2) SFP ports Support N-Way adaptive mode
Support up 200 meters of Cat. 5 cables at the transmission speed of 10M Support MAC address table of 8K entries Support MAC address learning and aging time Support management through Embedded Web System (EWS) which can be accessed via WEB browser Support management through Command Line Interface (CLI) which can be Accessed via a DB-9 RS-232 interface. Support GARP VLAN Registration Protocol (GVRP) Support 802.1Q VLAN Support strom control Support management ACL, system IP address management, management access control, management interface filtering, port security by number of MACs, guest VLAN and single/multiple host. Support port monitor Support STP, RSTP, MSTP Support Link Aggregation Group (LAG) Support QoS Support static multicast groups and IGMP snooping. Support RMON Support DNS, RADIUS, TACACS+, multilingual, logging file, SNTP, SNMP v1, v2 and v3 Support manual port control Support Virtual Cable Test (VCT) diagnostics
2.2 TP-Link TL-SG3109 Description
The following figure illustrates the TL-SG3109 front panel.

TL-SG3109

10/100/1000Mbps

1000Mbps

Link/Act

System

Link Act 1000M
9-port Gigabit Managed Switch
Figure 2-1: TL-SG3109 Front Panel The TL-SG3109 device front panel is configured as follows: 8 1000Base-T Copper port Copper RJ-45 Gigabit port designated on the device as ports 1-8. 1 1000Base-FX SFP port Fiber Gigabit ports designated on the device as ports SFP. RS-232 DB-9 Console port An asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to the console managing the device. The front panel also contains the following: System LEDs Indicates system hardware status. 10/100/1000 Base-T Port LEDs Indicates the 10/100/1000 Base-T port status. Each port has two LEDs. SFP Port LED Indicates the SFP port status. The port has one LED on the right side of the port.

TL-SG3109 LEDs

The LED indications are described in the following table:

Port LED Indication

Description Off No 10/100/1000Mbps link is established on the port. Solid Green A valid link is established on the port. Flashing Green Packet transmission or reception is occurring on the port. Off No link or a valid 10/100Mbps link is established on the port. Solid Green A valid 1000Mbps link is established on the port. Off No link is established on the port. Solid Green A valid link is established on the port. Flashing Green Packet transmission or reception is occurring on the port. Solid Red Power is supplied to the switch and is operating normally. Off Power is disconnected. Flashing Green Power On Self Test (POST) has passed successfully and the device is operating normally. Solid Green POST failure. A problem has been discovered during the POST.

2-SFP Port

Table 2: TL-SL3428 Port LED Indications
2.4 TP-Link TL-SL3452 Description
The following figure illustrates the TL-SL3452 front panel.

Console

TL-SL3452
48+4G Gigabit Managed Switch
SFP 1 SFP 2 Link/Act SFP 1
Figure 2-3: TL-SL3452 Front Panel The TL-SL3452 device front panel is configured as follows: 48 Fast Ethernet ports RJ-45 ports designated as 10/100Base-T. The RJ-45 ports are designated as ports Ports1-48. The top row of ports are designated odd numbers, and the bottom row are designated even

numbers.

2 1000Base-T Copper port Copper RJ-45 Gigabit port designated on the device as ports GIGA1 and GIGA2. 2 1000Base-FX SFP port Fiber Gigabit ports designated on the device as ports SFP1 and SFP2. RS-232 DB-9 Console port An asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to the console managing the device. The front panel also contains the following: System LEDs Indicates system hardware status. 10/100 Base-T Port LEDs Indicates the 10/100 Base-T port status. Each port has one LED above the port. Giga Port LEDs Indicates the Giga port status. Each port has one LED above the port. SFP Port LEDs Indicates the SFP port status. Each port has one LED on the right side of the port.

TL-SL3452 LEDs

Port 48 10/100M Ports LED Indication Description Off No link is established on the port. Solid Green A valid link is established on the port. Flashing Green Packet transmission or reception is occurring on the port. Off No 10/100/1000Mbps link is established on the port. Solid Green A valid link is established on the port. Flashing Green Packet transmission or reception is occurring on the port.

Top LED

Giga Port LEDs
Off No link is established on the port. Solid Green A valid link is established on the port. Flashing Green Packet transmission or reception is occurring on the port. Solid Red Power is supplied to the switch and is operating normally. Off Power is disconnected. Flashing Green Power On Self Test (POST) has passed successfully and the device is operating normally. Solid Green POST failure. A problem has been discovered during the POST.
Table 3: TL-SL3452 Port LED Indications

2.5 Back Panel

The following figure illustrates the devices back panel.
Figure 2-4: TL-SG3109 Back Panel
Figure 2-5: TL-SL3428/TL-SL3452 Back Panel The device back panel is configured as follows: Power Connector AC power supply interface.
2.6 Device Hardware Interfaces
2.6.1 RJ-45 Base-T Fast Ethernet Ports
RJ-45 ports are auto-sensing ports. When inserting a cable into an RJ-45 port,

the switch automatically ascertains the maximum speed (10 or 100 or 1000 Mbps) and duplex mode (half- or full-duplex) of the attached device. All ports support only unshielded twisted-pair (UTP) cable terminated with an 8-pin RJ-45 plug. To simplify the procedure for attaching devices, all RJ-45 ports support Auto Uplink. This technology allows attaching devices to the RJ-45 ports with either straight-through or crossover cables. When inserting a cable into the switchs RJ-45 port, the switch automatically: Senses whether the cable is a straight-through or crossover cable. Determines whether the link to the attached device requires a normal connection (such as when connecting the port to a PC) or an uplink connection (such as when connecting the port to a router, switch, or hub). Configures the RJ-45 port to enable communications with the attached device, without requiring user intervention. In this way, the Auto Uplink technology compensates for setting uplink connections, while eliminating concern about whether to use crossover or straight-through cables when attaching devices.

2.6.2 SFP Port

The GBIC module bays accommodate standard SFP GBIC modules, such as the TL-SM311LM or TL-SM311LS from TP-LINK, allowing fiber connections on the network. The SFP GBIC bay accommodates a standard SFP GBIC module. Small Form Factor Pluggable (SFP) Optical Transceivers are integrated duplex data links for bi-directional communication over multimode optical fiber, designed for high-speed Fibre Channel data links. The SFP port is designated as 1000Base-FX.
2.6.3 RS-232 DB-9 Console Port
The DB-9 port is an asynchronous serial console port supporting the RS-232 electrical specification. The port is used to connect the device to a console managing the device. This interface configuration is as follows: Eight data bits. One stop bit. No parity. Baud rate is 38400 (default). Possible values of baud rate are 2400, 4800, 9600, 19200, 38400.
2.7 Cable, Port, and Pinout Information
This section describes the devices physical interfaces and provides information about cable connections. Stations are connected to the device ports through the physical interface ports on the front panel. For each station, the appropriate mode (Half/Full Duplex, Auto) is set.
2.7.1 Pin Explain For RJ-45 Connector
The switching port can connect to stations wired in standard RJ-45 Ethernet station mode using straight cables. Transmission devices connected to each other use crossed cables. The following figure illustrates the pin allocation:

1234567

Figure 2-6 RJ-45 connector
The following shows the way to make the cable use to connect switch to network adapter, and cable use to connect switch to switch/hub/bridge.
Pin signal allocation for RJ-45 connector Pin MDI-II TX+ (send) TX- (send) RX+ (receive) No use No use RX- (receive) No use No use MDI-X RX+ (receive) RX- (receive) TX+ (send) No use No use TX- (send) No use No use

Table 4: RJ-45 Pin Connections for 10/100/1000 Base-T Straight cable: use to connect switch (uplink port) or network adapter to switch/ hub/other device (normal port).
1 TX+ 2 TX3 RX+ 6 RXRX+ 1 RX- 2 TX+ 3 TX- 6

MDI-II

Figure 2-7 straight cable
Crossed cable: use to connect switch (normal port) to switch/hub/other device(normal port).

1 RX+ 2 RX3 TX+ 6 TX-

RX+ 1 RX- 2 TX+ 3 TX- 6

Figure 2-8 crossed cable

2.7.2 SFP Connector
The following figure illustrates an SFP connector which is entered into the device SFP port.

2.8 Physical Dimensions

The TL-SG3109 device has the following physical dimensions: Width: 294mm (11.57 inch) Depth: 180mm (7.09 inch) Height: 44mm (1.73 inch) The TL-SL3428 and TL-SL3452 described in this Installation Guide have the following physical dimensions: Width: 440 mm (17.32 inch) Depth: 430mm (16.93 inch) Height: 45 mm (1.77 inch)
Section 3. Mounting Device
3.1 Preparing for Installation
3.1.1 Installation Precautions
Warnings The surface on which the switch is placed should be adequately secured to prevent it from becoming unstable and/or falling over. Ensure the power source circuits are properly grounded. Observe and follow service markings. Do not service any product except as explained in your system documentation. Opening or removing covers marked with a triangular symbol with a lighting bolt may cause electrical shock. These components are to be serviced by trained service technicians only. Ensure the power cable, extension cable, and/or plug is not damaged. Ensure the product is not exposed to water. Ensure the device is not exposed to radiators and/or heat sources. Do not push foreign objects into the device, as it may cause a fire or electric shock. Use the device only with approved equipment. Allow the product to cool before removing covers or touching internal equipment. Ensure the switch does not overload the power circuits, wiring, and overcurrent protection. To determine the possibility of overloading the supply circuits, add together the ampere ratings of all devices installed on the same circuit as the device being installed. Compare this total with the rating limit for the circuit. The maximum ampere ratings are usually printed on the switch, near their AC power connectors.
Cautions Ensure the air flow around the front, sides, and back of the switch is not restricted. Ensure the cooling vents are not blocked. Do not install the switch in an environment where the operating ambient temperature might exceed 40C (104F).

3.1.2 Site Requirements

The device is placed on a table-top. Before installing the unit, verify that the location chosen for installation meets the following site requirements. General Ensure that the power supply is correctly installed. Power The unit is installed within 1.5 m (5 feet) of a grounded, easily accessible outlet 100-240 VAC, 50-60 Hz. Clearance There is adequate frontal clearance for operator access. Allow clearance for cabling, power connections and ventilation. Cabling The cabling is routed to avoid sources of electrical noise such as radio transmitters, broadcast amplifiers, power lines and fluorescent lighting fixtures. Ambient Requirements The ambient unit operating temperature range is 0 to 40C (32 to 104F) at a relative humidity of up to 95%, noncondensing. Verify that water or moisture cannot enter the device casing.

3.1.3 Unpacking

3.1.3.1 Package Contents
While unpacking Cedar device, ensure that the following items are included: The device An AC power cable
Console cable with DB-9 connector This "Installation Guide", the "Embedded Web System User Guide" and documentation CD Two mounting brackets and other fittings
3.1.3.2 Unpacking Essentials
Note Before unpacking the device, inspect the package and report any evidence of damage immediately. To unpack the device perform the following: 1. It is recommended to put on an ESD wrist strap and attach the ESD clip to a metal surface to act as ground. An ESD strap is not supplied with the device. 2. Place the container on a clean flat surface and cut all straps securing the container. 3. Open the container. 4. Carefully remove the device from the container and place it on a secure and clean surface. 5. Remove all packing material. 6. Inspect the product for damage. Report any damage immediately.
3.2 Installing the Device
The device can be installed on a flat surface or mounted in a rack. This section includes the following topics: Desktop or Shelf Installation Rack Installation
3.2.1 Desktop or Shelf Installation
When installing the switch on a desktop or shelf, the rubber feet included with the device should first be attached. Attach these cushioning feet on the bottom at each corner of the device. Ensure the surface is be able to support the weight of the device and the device cables. To install the device on a surface, perform the following: 1. Attach the rubber feet on the bottom of the device. 2. Set device down on a flat surface, while leaving 2 inches on each side and 5 inches at the back. 3. Ensure that the device has proper ventilation by allowing adequate space for ventilation between the device and the objects around the device.

3.2.2 Rack Installation

The device can be mounted in an EIA standard-sized, 19-inch rack, which can be placed in a wiring closet with other equipment. To install, the device the mounting brackets must first be attached on the devicess sides.
Note Disconnect all cables from the unit before mounting the device in a rack or cabinet. When mounting multiple devices into a rack, mount the devices from the bottom up. To install the device in a rack, perform the following: 1. Place the supplied rack-mounting bracket on one side of the device ensuring the mounting holes on the device line up to the mounting holes

on the rack mounting bracket. The following figure illustrates where to mount the brackets.

TL-SL342

24+4G Gigab

it Mana ged

Link Act 100Mbps

Switc h

Link/Act RESET 1000Mbp s
Figure 3-1: Attaching the Mounting Brackets 2. Insert the supplied screws into the rack mounting holes and tighten with a screwdriver. 3. Repeat the process for the rack-mounting bracket on the other side of the device. 4. Insert the unit into the 19-inch rack ensuring the rack-mounting holes on the device line up to the mounting hole on the rack. The following figure illustrates lining up and mounting the device in the rack.

TL-SL 3428

24+4G Gigabit

Manage d Switch

Link Act 100Mbps Link/Act RESET 1000Mbps
Figure 3-2: Mounting Device in a Rack
5. Secure the unit to the rack with the rack screws (not provided). Fasten the lower pair of screws before the upper pair of screws. This ensures that the weight of the unit is evenly distributed during installation. Ensure that the ventilation holes are not obstructed.
3.3 Connecting the Device
This section describes how to connect the device, and includes the following sections: Connecting the Switch to a Terminal AC Power Connection
3.3.1 Connecting the Switch to a Terminal
The device is connected to a terminal through an console port on the front panel, which enables a connection to a terminal desktop system running terminal emulation software for monitoring and configuring the device. The terminal must be a VT100 compatible terminal or a desktop or portable system with a serial port and running VT100 terminal emulation software. To connect a terminal to the device Console port, perform the following:
1. Connect a cable to the terminal running VT100 terminal emulation software.
2. Ensure that the terminal emulation software is set as follows: a) Select the appropriate port to connect to the device. b) Set the data rate to 38400 baud. c) Set the data format to 8 data bits, 1 stop bit, and no parity. d) Set flow control to none. e) Under Properties, select VT100 for Emulation mode. f) Select Terminal keys for Function, Arrow and Ctrl keys. Ensure that the

4.2.1 Device Port Default Settings
The following table describes the device port default settings.
Function Default Settings 100Mbps Auto-negotiation for 10/100 Base-TX Ports 1000Mbps Auto-negotiation for 10/100/1000 Base-TX Ports Enabled On (Enabled) Off Off

Port speed and mode

Port forwarding state Head of line blocking prevention Flow Control Back Pressure
Table 5: Port Default Setting Note These default settings can be modified once the device is installed.

4.3 Booting the Device

The assumed bootup information is as follows: The device is delivered with an empty configuration. To boot the device, perform the following steps: 1. Ensure that the device port console is connected to a VT100 terminal device or VT100 terminal emulator. 2. Connect the device to the AC receptacle. 3. Activate the AC power receptacle (if required). The device goes through Power On Self Test (POST). POST runs every time the device is initialized and checks hardware components to determine if
the device is fully operational before completely booting. If a critical problem is detected, the program flow stops. If POST passes successfully, a valid executable image is loaded into RAM. POST messages are displayed on the terminal and indicate test success or failure. As the device boots, the bootup test first counts the device memory availability and then continues to boot. The following screen is an example of the displayed POST:
------ Performing the Power-On Self Test (POST) -----UART Channel Loopback Test..PASS Testing the System SDRAM..PASS Boot1 Checksum Test..PASS Boot2 Checksum Test..PASS Flash Image Validation Test..PASS
BOOT Software Version 1.0.0.04 Built 29-Nov-2005 11:56:12
TPLink Switch based on 88E6218 with ARM946E-S. 32MByte SDRAM. I-Cache 8 KB. D-Cache 8 KB. Cache Enabled. Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom. Preparing to decompress.
The boot process runs for approximately 60 seconds. The auto-boot message displayed at the end of POST (see the last lines)
indicates that no problems were encountered during boot. During boot, the Startup menu can be used to run special procedures. To enter the Startup menu, press <Esc> or <Enter> within the first two seconds after the auto-boot message is displayed. If the system boot process is not interrupted by pressing <Esc> or <Enter>, the process continues decompressing and loading the code into RAM. The code starts running from RAM and the list of numbered system ports. After the device boots successfully, a system prompt is displayed (console>) which is used to configure the device. However, before configuring the device, ensure that the latest software version is installed on the device. If it is not the latest version, download and install the latest version. For more information on downloading the latest version, see Software Download [Option 1].

gateway is defined as 100.1.1.10. Note that by default, all ports are members of VLAN 1, which is the default VLAN.
console# configure console(config)# interface vlan 1 console(config-if)# ip address 100.1.1.1 255.255.255.0 console(config-if)# exit console# ip default-gateway 100.1.1.10
Confirm that the IP address has been correctly configured as follows:
console# show ip interface Proxy ARP is disabled IP Address I/F ----------------- ----------- 100.1.1.1/24 vlan 1
Type ----------------static
4.4.1.2 Assigning Static IP Addresses on a default VLAN
This example uses the following assumptions: The IP address to be assigned to the VLAN interface is 192.168.1.123 The IP subnet mask for the network is 255.255.255.0 The IP address of the default route is 192.168.1.1 The read/write SNMP community string is "private"
console> enable console# configure console(config)# username admin password admin level 15 console(config)# interface VLAN 1 console (config-if) # ip address 192.168.1.123 255.255.255.0 console (config-if) # exit console (config) # ip default-gateway 192.168.1.1 console (config) # snmp-server community private rw console(config)# exit console#
Verifying the IP and Default Gateway Addresses Ensure that the IP address and the default gateway were properly assigned by executing the following command and examining its output:
Gateway IP Address Activity status ------------------------------------------------------------- --192.168.1.1 Active IP address ------------------- 192.168.1.123/24 Interface ---------------- VLAN 1 Type -------Static

4.4.1.3 User Name

A user name is used to manage the device remotely, for example through SSH, Telnet, or the Web interface. To gain complete administrative (super-user) control over the device, the highest privilege (15) must be specified.
Note Only the administrator (super-user) with the highest privilege level (15) is allowed to manage the device through the Web browser interface. For more information about the privilege level, see the CLI Reference Guide. The configured user name is entered as a login name for remote management sessions. To configure user name and privilege level, enter the command at the system prompt as shown in the configuration example:
console> enable console# configure console(config)# username admin password admin level 15
4.4.1.4 SNMP Community Strings
Simple Network Management Protocol (SNMP) provides a method for managing network devices. Devices supporting SNMP run a local software (agent). The SNMP agents maintain a list of variables, used to manage the device. The variables are defined in the Management Information Base (MIB). The MIB presents the variables controlled by the agent. The SNMP agent defines the MIB specification format, as well as the format used to access the information over the network. Access rights to the SNMP agents are controlled by access strings and SNMP community strings. The device is SNMP-compliant, and contain an SNMP agent that support a set of standard and private MIB variables. Developers of management stations require the exact structure of the MIB tree and receive the complete private MIBs information before being able to manage the MIBs. All parameters are manageable from any SNMP management platform, except the SNMP management station IP address and community (community name and access rights). The SNMP management access to the switch is disabled if no community strings exist.

Note The device switch is delivered with no community strings configured. The community-string, community-access, and IP address can be configured through the local terminal during the initial configuration procedure. The SNMP configuration options are:

Community string

Access rights options: ro (read only), rw (read-and-write) or su (super). An option to configure IP address or not: If an IP address is not configured, it means that all community members having the same community name are granted the same access rights. Common practice is to use two community strings for the switch one (public community) with read-only access and the other (private community) with read-write access. The public string allows authorized management stations to retrieve MIB objects, while the private string allows authorized management stations to retrieve and modify MIB objects. During initial configuration, it is recommended to configure the device according to the network administrator requirements, in accordance with using an SNMP-based management station. During the initial configuration procedure the community-string, community-access, and IP address can be set through the local terminal. The SNMP configuration options are: Community string. Read OnlyIndicates that the community members can view configuration information, but cannot change any information. Read/Write Indicates that the community members can view and modify configuration information. Super Indicates that the community members have administration access. Configurable IP address. If IP address is not configured, all community members with the same community name are granted the same access rights.
To configure SNMP station IP address and community string(s) perform the following:
1. At the console prompt, enter the command Enable. The prompt is displayed as #.
2. Enter the command configure and press <Enter>. 3. In the configuration mode, enter the SNMP configuration command with the parameters including community name (private), community access right (read and write) and IP address, as shown in the following example:
console# configure console(config)# snmp-server community private rw 11.1.1.2 console(config)# end console# show snmp Community-String Community-Access IP address -------------------------------- ----------------------------------- ----------------------private readWrite 11.1.1.2 Traps are enabled. Authentication-failure trap is enabled. Trap-Rec-Address -------------------------------- System Contact: System Location: Trap-Rec-Community ---------------------------------- Version ----------------------
This completes the initial configuration of the device from a local terminal. The configured parameters enable further device configuration from any remote location.
4.5 Advanced Configuration

This section provides information about dynamic allocation of IP addresses and security management based on the authentication, authorization, and
accounting (AAA) mechanism, and includes the following topics: Receiving an IP Address from a DHCP Server Receiving an IP Address from a BOOTP Server Security Management and Password Configuration When configuring or receiving IP addresses through DHCP and BOOTP, the configuration received from these servers includes the IP address, and may include a subnet mask and default gateway.
4.5.1 Receiving an IP Address from a DHCP Server
When using the DHCP protocol to retrieve an IP address, the device acts as a DHCP client. To receive an IP address from a DHCP server, perform the following steps: 1. Select and connect any port to a DHCP server or to a subnet that has a DHCP server on it, in order to retrieve the IP address. 2. Enter the following commands to use the selected port for receiving the IP address. In the following example, the commands are based on the port type used for configuration.
console# configure console(config)# interface vlan 1 console(config-if)# ip address dhcp hostname admin-host console(config-if)# exit console(config)#
3. To verify the IP address, enter the show ip interface command at the system prompt as shown in the following example.
console# show ip interface IP Address I/F -------------------- --------------- 100.1.1.1/24 vlan 1
Type -------------dynamic
Note The device configuration does not have to be deleted to retrieve an IP address for the DHCP server. When copying configuration files, avoid using a configuration file that contains an instruction to enable DHCP on an interface that connects to the same DHCP server, or to one with an identical configuration.As a result of the copying configuration, the switch retrieves the new configuration file and boots from it. The device then enables DHCP as instructed in the new configuration file, and the DHCP instructs it to reload the same file.
4.5.2 Receiving an IP Address from a BOOTP Server
The standard BOOTP protocol is supported and enables the switch to automatically download its IP host configuration from any standard BOOTP server in the network. In this case, the device acts as a BOOTP client. To receive an IP address from a BOOTP server: 1. Select and connect any port to a BOOTP server or subnet containing such a server. 2. At the system prompt, enter the delete startup configuration command to delete the startup configuration from flash. The device reboots with no configuration and in 60 seconds starts sending BOOTP requests. The device receives the IP address automatically.

When initially logging onto a device through a Telnet session, enter bob at the password prompt. When changing a device mode to enable, enter bob.
4.5.3.4 Configuring an Initial SSH password
To configure an initial SSH password, enter the following commands:
console(config)# aaa authentication login default line console(config)# aaa authentication enable default line console(config)# line ssh console(config-line)# login authentication default console(config-line)# enable authentication default console(config-line)# password jones
When initially logging onto a device through a SSH session, enter jones at the password prompt. When changing a device mode to enable, enter jones.
4.5.3.5 Configuring an Initial HTTP Password
To configure an initial HTTP password, enter the following commands:
console(config)# ip http authentication local console(config)# username admin password user1 level 15
4.5.3.6 Configuring an initial HTTPS Password
To configure an initial HTTPS password, enter the following commands:
console(config)# ip https authentication local console(config)# username admin password user1 level 15
Enter the following commands once when configuring to use a console, a Telnet, or an SSH session to use an HTTPS session. In the Web browser enable SSL 2.0 or greater for the content of the page to appear.
console(config)# crypto certificate 2 generate key_generate console(config)# ip https server
When initially enabling an http or https session, enter admin for user name and user1 for password.
Note HTTP and HTTPS services require level 15 access and connect directly to the configuration level access.

4.6 Startup Procedures

The procedures called from the Startup menu cover software download, flash handling, and password recovery. The diagnostics procedures are for use by technical support personnel only and are not disclosed in this document. The Startup menu can be entered when booting the device. A user input must be entered immediately after the POST test. To enter the Startup menu: 1. Turn the power on and watch for the auto-boot message.