User Manual
Table Of Contents
- 8-Port or 16-Port Gigabit Smart Managed Pro Switch with PoE+ and 2 SFP Ports
- Contents
- 1 Get Started
- Available publications
- Switch management and discovery overview
- Change the default IP address of the switch
- Discover or change the switch IP address
- About the user interfaces
- Access the local browser interface
- Change the language of the local browser interface
- Use the Device View of the local browser interface
- Interface naming conventions
- Configure interface settings
- Context–sensitive help and access to the support website
- Access the user manual online
- Register your product
- 2 Configure System Information
- View or define system information
- Configure the IP network settings for management access
- Configure the time settings
- Configure denial of service settings
- Configure the DNS settings
- Configure green Ethernet settings
- Use the Device View
- Configure Power over Ethernet
- Configure SNMP
- Configure LLDP
- Configure a DHCP L2 relay, DHCP snooping, and dynamic ARP inspection
- Set up PoE timer schedules
- 3 Configure Switching
- Configure the port settings
- Configure link aggregation groups
- Configure VLANs
- Configure a voice VLAN
- Configure Auto-VoIP
- Configure Spanning Tree Protocol
- Configure multicast
- Manage IGMP snooping
- Configure IGMP snooping
- Configure IGMP snooping for interfaces
- View, search, or clear the IGMP snooping table
- Configure IGMP snooping for VLANs
- Modify IGMP snooping settings for a VLAN
- Disable IGMP snooping on a VLAN and remove it from the table
- Configure one or more IGMP multicast router interfaces
- Configure an IGMP multicast router VLAN
- IGMP snooping querier overview
- Configure an IGMP snooping querier
- Configure an IGMP snooping querier for a VLAN
- Display the status of the IGMP snooping querier for VLANs
- Manage MLD snooping
- Enable MLD snooping
- Configure MLD snooping for interfaces
- Configure the MLD VLAN settings
- Modify the MLD snooping settings for a VLAN
- Remove MLD snooping from a VLAN
- Configure one or more MLD multicast router interfaces
- Configure an MLD multicast router VLAN
- Configure an MLD snooping querier
- Configure the MLD snooping querier VLAN settings
- Configure multicast VLAN registration
- View, search, and manage the MAC address table
- Configure Layer 2 loop protection
- 4 Configure Routing
- 5 Configure Quality of Service
- 6 Manage Device Security
- Change the device password for the local browser interface
- Manage the RADIUS settings
- Configure the TACACS+ settings
- Configure authentication lists
- Manage the Smart Control Center Utility
- Configure management access
- Control access with profiles and rules
- Configure port authentication
- Set up traffic control
- Configure access control lists
- Use the ACL Wizard to create a simple ACL
- Configure a MAC ACL
- Configure MAC ACL rules
- Configure MAC bindings
- View or delete MAC ACL bindings in the MAC binding table
- Configure a basic or extended IPv4 ACL
- Configure rules for a basic IPv4 ACL
- Configure rules for an extended IPv4 ACL
- Configure an IPv6 ACL
- Configure rules for an IPv6 ACL
- Configure IP ACL interface bindings
- View or delete IP ACL bindings in the IP ACL binding table
- Configure VLAN ACL bindings
- 7 Monitor the Switch and the Traffic
- 8 Maintain or Troubleshoot the Switch
- A Configuration Examples
- B Specifications and Default Settings
8-Port or 16-Port Gigabit Smart Managed Pro Switch Model GS418TPP, GS510TLP, and GS510TPP
Manage Device Security User Manual383
• Greater Than. The IPv6 ACL rule matches if the Layer 4 destination port
number is greater than the specified port number.
• Not Equal. The IPv6
ACL rule matches only if the Layer 4 destination port
number is not equal to the specified port number or port protocol.
- If you select the Range radio button, the IPv6 ACL rule matches only if the
Layer 4 destination port number is within the specified port range.
The starting
port, ending port, and all ports in between are a part of the Layer 4 port range.
The Start Port and End Port fields identify the first and last ports that are part of
the port range. They values can range from 0 to 65535.
Y
ou can either enter the port range yourself or select one of the following
protocols from the menu:
• The destination IP TCP port protocols are domain, echo, ftp, ftpdata,
www-http, smtp, telnet, pop2, pop3, and bgp.
• The destination IP UDP port protocols are domain, echo, snmp, ntp, rip,
time, who, and tftp.
Each of these values translates into its equivalent port number, which is used as
both the start and end of the port range.
Select Other from the menu to enter port numbers. If you select Other from the
menu but leave the fields blank, it means any.
• ICMPv6. Select either the Type
or Message radio button:
- If you select the Type
radio button, note the following:
• The Type and Message
fields are enabled only if the protocol is ICMPv6. Use
these fields to specify a match condition for ICMPv6 packets.
• The IPv6 ACL rule matches the specified ICMPv6 message type. Possible
type numbers are in the range from 0 to 255.
• If you specify information in the Message
field, the IPv6 ACL rule matches the
specified ICMPv6 message code. Possible values for code can be in the
range from 0 to 255.
• If these fields are left empty, it means
any.
- If you select the Message radio button, select the type of the ICMPv6 message to
match with the selected IPv6 ACL rule. Specifying a type of message implies that
both the ICMPv6 type and ICMPv6 code are specified.
The ICMPv6 message is
decoded into the corresponding ICMPv6 type and ICMPv6 code within the ICMP
type.
The ICMPv6 message types are destination-unreachable, echo-reply,
echo-request, header, hop-limit, mld-query, mld-reduction, mld-report,
nd-na, nd-ns, next-header, no-admin, no-route, packet-too-big,
port-unreachable, router-solicitation, router-advertisement,
router-renumbering, time-exceeded, and unreachable.










