TL SG3109 200796032223

200796032223 200796032223 200796032223 software resources static.tp-link.com 3:

200796032223 200796032223 200796032223 software_r static.tp-link.com 3:

User Manual: TL-SG3109

Open the PDF directly: View PDF PDF.
Page Count: 54

DownloadTL-SG3109 200796032223
Open PDF In BrowserView PDF
71035592
E-mail: support@tp-link.com
Website: http://www.tp-link.com
Add: 3/F., Building R1-B, Hi-tech Industrial Park, Shennan Rd., Shenzhen, P.R.China

Rev: 1.0

TP-LINK TECHNOLOGIES CO., LTD.

Installation Guide

TL-SG3109
9-port Gigabit Managed Switch
TL-SL3428
24+4G Gigabit Managed Switch
TL-SL3452
48+4G Gigabit Managed Switch

COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice.

is a

registered trademark of TP-LINK Technologies Co., Ltd. Other brands and
product names are trademarks or registered trademarks of their respective
holders.
No part of the specifications may be reproduced in any form or by any
means or used to make any derivative such as translation, transformation, or
adaptation without permission from TP-LINK Technologies Co., Ltd. Copyright
© 2006 TP-LINK Technologies Co., Ltd. All rights reserved.

FCC STATEMENT
This equipment has been tested and found to comply with the limits for a
class A digital device, pursuant to part 15 of the FCC Rules. These limits are
designed to provide reasonable protection against harmful interference in a
residential installation.
This equipment generates, uses and can radiate radio frequency energy
and, if not installed and used in accordance with the instructions, may cause
harmful interference to radio communications. However, there is no guarantee
that interference will not occur in a particular installation. If this equipment
does cause harmful interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is encouraged to try
to correct the interference by one or more of the following measures:
 Reorient or relocate the receiving antenna.
 Increase the separation between the equipment and receiver.
 Connect the equipment into an outlet on a circuit different from that to

which the receiver is connected.
 Consult the dealer or an experienced radio/TV technician for help.
This device complies with Part 15 of the FCC Rules. Operation is subject to
the following two conditions:
1) This device may not cause harmful interference.
2) This device must accept any interference received, including interference
that may cause undesired operation.

EC DECLARATION OF CONFORMITY (EUROPE)
In compliance with the EMC Directive 89/336/EEC, Low Voltage Directive
73/23/EEC, this product meets the requirements of the following standards:
 EN55022
 EN55024
 EN60950

SAFETY NOTICES
Cautions
Do not use this product near water, for example, in a wet basement or near a
swimming pool.
Avoid using this product during an electrical storm. There may be a remote
risk of electric shock from lightning.

TABLE OF CONTENTS
Package contents..................................................................................1
Section 1: Introduction.........................................................................2
1.1 Intended Audience.........................................................................................2
1.2 Agreement......................................................................................................2
1.3 Guide Overview..............................................................................................2

Section 2. Device Description.............................................................3
2.1 Features.........................................................................................................3
2.2 TP-Link TL-SG3109 Description...................................................................4
2.3 TP-Link TL-SL3428 Description....................................................................6
2.4 TP-Link TL-SL3452 Description....................................................................8
2.5 Back Panel...................................................................................................10
2.6 Device Hardware Interfaces........................................................................10
2.6.1 RJ-45 Base-T Fast Ethernet Ports...........................................................10
2.6.2 SFP Port.................................................................................................... 11
2.6.3 RS-232 DB-9 Console Port......................................................................12
2.7 Cable, Port, and Pinout Information............................................................12
2.7.1 Pin Explain For RJ-45 Connector............................................................12
2.7.2 SFP Connector..........................................................................................14
2.8 Physical Dimensions....................................................................................14

Section 3. Mounting Device...............................................................15
3.1 Preparing for Installation..............................................................................15
3.1.1 Installation Precautions.............................................................................15

3.1.2 Site Requirements....................................................................................16
3.1.3 Unpacking.................................................................................................16
3.1.3.1 Package Contents.................................................................................16
3.1.3.2 Unpacking Essentials............................................................................17
3.2 Installing the Device.....................................................................................17
3.2.1 Desktop or Shelf Installation.....................................................................18
3.2.2 Rack Installation........................................................................................18
3.3 Connecting the Device.................................................................................20
3.3.1 Connecting the Switch to a Terminal........................................................20
3.3.2 AC Power Connection..............................................................................21

Section 4. Starting and Configuring the Device.............................22
4.1 Configuring the Terminal..............................................................................22
4.2 Installation Procedure..................................................................................23
4.2.1 Device Port Default Settings.....................................................................24
4.3 Booting the Device.......................................................................................24
4.4 Configuration Overview...............................................................................26
4.4.1 Initial Configuration...................................................................................27
4.4.1.1 Static IP Address and Subnet Mask.....................................................28
4.4.1.2 Assigning Static IP Addresses on a default VLAN...............................29
4.4.1.3 User Name..............................................................................................30
4.4.1.4 SNMP Community Strings....................................................................31
4.5 Advanced Configuration..............................................................................33
4.5.1 Receiving an IP Address from a DHCP Server.......................................34
4.5.2 Receiving an IP Address from a BOOTP Server.....................................35
4.5.3 Security Management and Password Configuration..............................36
4.5.3.1 Configuring Security Passwords Introduction......................................37
4.5.3.2 Configuring an Initial Console Password..............................................37

4.5.3.3 Configuring an Initial Telnet Password..................................................38
4.5.3.4 Configuring an Initial SSH password....................................................38
4.5.3.5 Configuring an Initial HTTP Password..................................................39
4.5.3.6 Configuring an initial HTTPS Password...............................................39
4.6 Startup Procedures......................................................................................39
4.6.1 Software Download [Option 1].................................................................41
4.6.1.1 Software Download through TFTP Server...........................................42
4.6.2 Erasing the Flash File [Option 2]..............................................................46
4.6.3 Password Recovery [Option 3].................................................................46
4.6.4 Enter Diagnostic Mode [Option4].............................................................47
4.6.5 Set Terminal Baud-Rate [Option5]...........................................................47

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Package contents
The following contents should be found in your box:
 The device
 An AC power cable
 Console cable with DB-9 connector
 This "Installation Guide", the "Embedded Web System User Guide" and
documentation CD
 Two mounting brackets and other fittings

Note:
If any of the listed contents are damaged or missing, please contact the
retailer from whom you purchased the TL-SG3109/TL-SL3428/TL-SL3452
Gigabit Managed Switch for assistance.



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Section 1: Introduction
Thanks for choosing the TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed
Switch Family! The switch family provides a friendly management interface
and excellent performance.

1.1 Intended Audience
This guide is intended for network administrators familiar with IT concepts and
network terminology.

1.2 Agreement
Due to the similarity in function of the TL-SG3109/TL-SL3428/TL-SL3452
Gigabit Managed Switch Family, this installation guide will illustrate the general
usage of this switch family. The “switch” referred in this guide indicates the TLSG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family.

1.3 Guide Overview
This installation guide is divided into the following sections to provide concise
information for configuring, and managing the TP-Link device:
Section 1: Introduction.
Section 2: Device Description -- Provides an overview about the switch family.
Section 3: Mounting Device -- Describes the mounting procedure of the switch.
Section 4: Starting and Configuring the Device -- Describes the initial device
configuration.



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Section 2. Device Description
The TP-Link devices offer switching systems that combine versatility with ease
of management. Management can be performed through an Embedded Web
System (EWS) or for the more advanced users, a Command Line Interface
(CLI) system. The device configuration is performed via a DB-9 RS-232
interface.
There are a range of devices which offer variable solutions for specific
requirements. The offering includes the following devices:
 10/100/1000 devices (GE devices)


TP-Link TL-SG3109 — 8 10/100/1000Base-TX ports and 1 SFP

 10/100 devices (FE devices)


TP-Link TL-SL3428 — 24 10/100Base-TX ports and 4 Giga ports(2 x
Copper and 2 x SFP)



TP-Link TL-SL3452 — 48 10/100Base-TX ports and 4 Giga ports (2 x
Copper and 2 x SFP)

2.1 Features
 Compliant with IEEE802.3, IEEE802.3u, IEEE802.3ab and IEEE802.3z
Standards.
 IEEE 802.3x flow control for full-duplex
 Back pressure flow control for half-duplex
 Store-and-Forward switching method
 (0/24/48) 10/100BASE-TX Fast Ethernet ports (Auto MDI/MDI-X support)
 (8/2/2) 1000BASE-T Gigabit Ethernet ports (Auto MDI/MDI-X support)
 (1/2/2) SFP ports
 Support N-Way adaptive mode



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

 Support up 200 meters of Cat. 5 cables at the transmission speed of 10M
 Support MAC address table of 8K entries
 Support MAC address learning and aging time
 Support management through Embedded Web System (EWS) which can
be accessed via WEB browser
 Support management through Command Line Interface (CLI) which can
be
 Accessed via a DB-9 RS-232 interface.
 Support GARP VLAN Registration Protocol (GVRP)
 Support 802.1Q VLAN
 Support strom control
 Support management ACL, system IP address management,
management access control, management interface filtering, port security
by number of MACs, guest VLAN and single/multiple host.
 Support port monitor
 Support STP, RSTP, MSTP
 Support Link Aggregation Group (LAG)
 Support QoS
 Support static multicast groups and IGMP snooping.
 Support RMON
 Support DNS, RADIUS, TACACS+, multilingual, logging file, SNTP, SNMP
v1, v2 and v3
 Support manual port control
 Support Virtual Cable Test (VCT) diagnostics

2.2 TP-Link TL-SG3109 Description
The following figure illustrates the TL-SG3109 front panel.



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

TL-SG3109

10/100/1000Mbps
1

Power

1

2

3

4

5

6

7

System

8

2

3

4

5

1000Mbps
6

7

8

Link
Act

SFP
Link/Act

1000M

9-port Gigabit Managed Switch

Figure 2-1: TL-SG3109 Front Panel
The TL-SG3109 device front panel is configured as follows:
 8 1000Base-T Copper port — Copper RJ-45 Gigabit port designated on
the device as ports 1-8.
 1 1000Base-FX SFP port — Fiber Gigabit ports designated on the device
as ports SFP.
 RS-232 DB-9 Console port — An asynchronous serial console port
supporting the RS-232 electrical specification. The port is used to connect
the device to the console managing the device.
The front panel also contains the following:
 System LEDs — Indicates system hardware status.
 10/100/1000 Base-T Port LEDs — Indicates the 10/100/1000 Base-T port
status. Each port has two LEDs.
 SFP Port LED — Indicates the SFP port status. The port has one LED on
the right side of the port.

TL-SG3109 LEDs
The LED indications are described in the following table:



Gigabit Managed Switch Family Installation Guide

TL-SG3109/TL-SL3428/TL-SL3452
Port

LED Indication

Description

Top LED

• Off — No 10/100/1000Mbps link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Bottom LED

• Off — No link or a valid 10/100Mbps link is established
on the port.
• Solid Green — A valid 1000Mbps link is established on
the port.

SFP Link/
ACT LED

• Off — No link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Power

• Solid Red — Power is supplied to the switch and is
operating normally.
• Off — Power is disconnected.

System

• Flashing Green — Power On Self Test (POST) has passed
successfully and the device is operating normally.
• Solid Green — POST failure. A problem has been
discovered during the POST.

8 Giga Port
LEDs

SFP Port

System
LEDs

Table 1: TL-SG3109 Port LED Indications

2.3 TP-Link TL-SL3428 Description
The following figure illustrates the TL-SL3428 front panel.
TL-SL3428
1

3

5

7

9

11

13

1

3

5

7

9

11

13

15

17

19

21

23

GIGA 1

2

4

6

8

10

12

14

16

18

20

22

24

GIGA 2

24+4G Gigabit Managed Switch

Power
15

17

19

21 23

Link
Act
100Mbps

SFP 1

SFP 2

Link/Act
2

System

4

6

8

10

12

14

16

18

20

22

24

GIGA1 GIGA2

1000Mbps
Link/Act

Link/Act

Figure 2-2: TL-SL3428 Front Panel
The TL-SL3428 device front panel is configured as follows:
 24 Fast Ethernet ports — RJ-45 ports designated as 10/100Base-T. The
RJ-45 ports are designated as ports Ports1-24.



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

 2 1000Base-T Copper port — Copper RJ-45 Gigabit port designated on
the device as ports GIGA1 and GIGA2.
 2 1000Base-FX SFP port — Fiber Gigabit ports designated on the device
as ports SFP1 and SFP2.
 RS-232 DB-9 Console port — An asynchronous serial console port
supporting the RS-232 electrical specification. The port is used to connect
the device to the console managing the device.
The front panel also contains the following:
 System LEDs — Indicates system hardware status.
 10/100 Base-T Port LEDs — Indicates the 10/100 Base-T port status.
Each port has two LEDs all grouped together on the left side of the device.
 Giga Port LEDs — Indicates the Giga port status. Each port has two LEDs
on the left side of the device.
 SFP Port LEDs — Indicates the SFP port status. Each port has one LED
on the right side of the port.

TL-SL3428 LEDs
The LED indications are described in the following table:
Port

LED Indication

Description

Top LED

• Off — No link is established on the port.
• Solid Green — A link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Bottom LED

• Off — No 100Mbps link is established on the port.
• Solid Green — A valid 100Mbps link is established on
the port.

24 10/100M
Ports



Gigabit Managed Switch Family Installation Guide

TL-SG3109/TL-SL3428/TL-SL3452

Top LED

• Off — No 10/100/1000Mbps link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Bottom LED

• Off — No 1000Mbps link is established on the port.
• Solid Green — A valid 1000Mbps link is established on
the port.

SFP Link/
ACT LED

• Off — No link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Power

• Solid Red — Power is supplied to the switch and is
operating normally.
• Off — Power is disconnected.

System

• Flashing Green — Power On Self Test (POST) has passed
successfully and the device is operating normally.
• Solid Green — POST failure. A problem has been
discovered during the POST.

Giga Port
LEDs

2-SFP Port

System
LEDs

Table 2: TL-SL3428 Port LED Indications

2.4 TP-Link TL-SL3452 Description
The following figure illustrates the TL-SL3452 front panel.
1

2

1

3

4

3

5

6

5

7

8

7

9

10

9

11

12

11

13

14

13

15

16

15

17

18

17

19

20

19

21

22

21

23

24

23

25

26

25

27

28

27

29

30

29

31

32

31

33

34

33

35

36

35

37

38

37

39

40

39

41

42

41

43

44

43

45

46

45

47

48

47

GIGA1 GIGA2
GIGA1

Console

TL-SL3452
48+4G Gigabit Managed Switch
SFP 1

Power

SFP 2

Link/Act
SFP 1

System

2

4

6

8

10

12

14

16

18

20

22

24

26

28

30

32

34

36

38

40

42

44

46

48

GIGA2

SFP 2

Figure 2-3: TL-SL3452 Front Panel
The TL-SL3452 device front panel is configured as follows:
 48 Fast Ethernet ports — RJ-45 ports designated as 10/100Base-T.
The RJ-45 ports are designated as ports Ports1-48. The top row of ports
are designated odd numbers, and the bottom row are designated even



TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

numbers.
 2 1000Base-T Copper port — Copper RJ-45 Gigabit port designated on
the device as ports GIGA1 and GIGA2.
 2 1000Base-FX SFP port — Fiber Gigabit ports designated on the device
as ports SFP1 and SFP2.
 RS-232 DB-9 Console port — An asynchronous serial console port
supporting the RS-232 electrical specification. The port is used to connect
the device to the console managing the device.
The front panel also contains the following:
 System LEDs — Indicates system hardware status.
 10/100 Base-T Port LEDs — Indicates the 10/100 Base-T port status.
Each port has one LED above the port.
 Giga Port LEDs — Indicates the Giga port status. Each port has one LED
above the port.
 SFP Port LEDs — Indicates the SFP port status. Each port has one LED
on the right side of the port.

TL-SL3452 LEDs
The LED indications are described in the following table:
Port
48 10/100M
Ports

Giga Port
LEDs

LED Indication

Description

Top LED

• Off — No link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port .

Top LED

• Off — No 10/100/1000Mbps link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.



TL-SG3109/TL-SL3428/TL-SL3452

2-SFP Port

Gigabit Managed Switch Family Installation Guide

SFP Link/
ACT LED

• Off — No link is established on the port.
• Solid Green — A valid link is established on the port.
• Flashing Green — Packet transmission or reception is
occurring on the port.

Power

• Solid Red — Power is supplied to the switch and is
operating normally.
• Off — Power is disconnected.

System

• Flashing Green — Power On Self Test (POST) has passed
successfully and the device is operating normally.
• Solid Green — POST failure. A problem has been
discovered during the POST.

System
LEDs

Table 3: TL-SL3452 Port LED Indications

2.5 Back Panel
The following figure illustrates the devices back panel.

Figure 2-4: TL-SG3109 Back Panel

Figure 2-5: TL-SL3428/TL-SL3452 Back Panel
The device back panel is configured as follows:
 Power Connector — AC power supply interface.

2.6 Device Hardware Interfaces
2.6.1 RJ-45 Base-T Fast Ethernet Ports
RJ-45 ports are auto-sensing ports. When inserting a cable into an RJ-45 port,

10

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

the switch automatically ascertains the maximum speed (10 or 100 or 1000
Mbps) and duplex mode (half- or full-duplex) of the attached device. All ports
support only unshielded twisted-pair (UTP) cable terminated with an 8-pin
RJ-45 plug.
To simplify the procedure for attaching devices, all RJ-45 ports support Auto
Uplink. This technology allows attaching devices to the RJ-45 ports with either
straight-through or crossover cables. When inserting a cable into the switch’s
RJ-45 port, the switch automatically:
 Senses whether the cable is a straight-through or crossover cable.
 Determines whether the link to the attached device requires a “normal”
connection (such as when connecting the port to a PC) or an “uplink”
connection (such as when connecting the port to a router, switch, or hub).
 Configures the RJ-45 port to enable communications with the attached
device, without requiring user intervention. In this way, the Auto Uplink
technology compensates for setting uplink connections, while eliminating
concern about whether to use crossover or straight-through cables when
attaching devices.

2.6.2 SFP Port
The GBIC module bays accommodate standard SFP GBIC modules, such as
the TL-SM311LM or TL-SM311LS from TP-LINK, allowing fiber connections
on the network.
The SFP GBIC bay accommodates a standard SFP GBIC module. Small
Form Factor Pluggable (SFP) Optical Transceivers are integrated duplex data
links for bi-directional communication over multimode optical fiber, designed
for high-speed Fibre Channel data links. The SFP port is designated as
1000Base-FX.

11

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

2.6.3 RS-232 DB-9 Console Port
The DB-9 port is an asynchronous serial console port supporting the RS-232
electrical specification. The port is used to connect the device to a console
managing the device. This interface configuration is as follows:
 Eight data bits.
 One stop bit.
 No parity.
 Baud rate is 38400 (default). Possible values of baud rate are 2400, 4800,
9600, 19200, 38400.

2.7 Cable, Port, and Pinout Information
This section describes the devices physical interfaces and provides
information about cable connections. Stations are connected to the device
ports through the physical interface ports on the front panel. For each station,
the appropriate mode (Half/Full Duplex, Auto) is set.

2.7.1 Pin Explain For RJ-45 Connector
The switching port can connect to stations wired in standard RJ-45 Ethernet
station mode using straight cables. Transmission devices connected to each
other use crossed cables. The following figure illustrates the pin allocation:

1234567

8
87 65 43 21

Figure 2-6 RJ-45 connector

12

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

The following shows the way to make the cable use to connect switch to
network adapter, and cable use to connect switch to switch/hub/bridge.
Pin signal allocation for RJ-45 connector
Pin

MDI-II

MDI-X

1

TX+ (send)

RX+ (receive)

2

TX- (send)

RX- (receive)

3

RX+ (receive)

TX+ (send)

4

No use

No use

5

No use

No use

6

RX- (receive)

TX- (send)

7

No use

No use

8

No use

No use

Table 4: RJ-45 Pin Connections for 10/100/1000 Base-T
Straight cable: use to connect switch (uplink port) or network adapter to switch/
hub/other device (normal port).
1 TX+
2 TX-

RX+ 1
RX- 2

3 RX+
6 RX-

TX+ 3
TX- 6

MDI-II

MDI-X
Figure 2-7 straight cable

Crossed cable: use to connect switch (normal port) to switch/hub/other
device(normal port).

13

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

1 RX+
2 RX-

RX+ 1
RX- 2

3 TX+
6 TX-

TX+ 3
TX- 6

MDI-X

MDI-X
Figure 2-8 crossed cable

2.7.2 SFP Connector
The following figure illustrates an SFP connector which is entered into the
device SFP port.

2.8 Physical Dimensions
The TL-SG3109 device has the following physical dimensions:
 Width: 294mm (11.57 inch)
 Depth: 180mm (7.09 inch)
 Height: 44mm (1.73 inch)
The TL-SL3428 and TL-SL3452 described in this Installation Guide have the
following physical dimensions:
 Width: 440 mm (17.32 inch)
 Depth: 430mm (16.93 inch)
 Height: 45 mm (1.77 inch)

14

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Section 3. Mounting Device
3.1 Preparing for Installation
3.1.1 Installation Precautions
Warnings
 The surface on which the switch is placed should be adequately secured
to prevent it from becoming unstable and/or falling over.
 Ensure the power source circuits are properly grounded.
 Observe and follow service markings. Do not service any product except
as explained in your system documentation. Opening or removing
covers marked with a triangular symbol with a lighting bolt may cause
electrical shock. These components are to be serviced by trained service
technicians only.
 Ensure the power cable, extension cable, and/or plug is not damaged.
 Ensure the product is not exposed to water.
 Ensure the device is not exposed to radiators and/or heat sources.
 Do not push foreign objects into the device, as it may cause a fire or
electric shock.
 Use the device only with approved equipment.
 Allow the product to cool before removing covers or touching internal
equipment.
 Ensure the switch does not overload the power circuits, wiring, and overcurrent protection. To determine the possibility of overloading the supply
circuits, add together the ampere ratings of all devices installed on the
same circuit as the device being installed. Compare this total with the
rating limit for the circuit. The maximum ampere ratings are usually printed
on the switch, near their AC power connectors.

15

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Cautions
 Ensure the air flow around the front, sides, and back of the switch is not
restricted.
 Ensure the cooling vents are not blocked.
 Do not install the switch in an environment where the operating ambient
temperature might exceed 40ºC (104ºF).

3.1.2 Site Requirements
The device is placed on a table-top. Before installing the unit, verify that the
location chosen for installation meets the following site requirements.
 General — Ensure that the power supply is correctly installed.
 Power — The unit is installed within 1.5 m (5 feet) of a grounded, easily
accessible outlet 100-240 VAC, 50-60 Hz.
 Clearance — There is adequate frontal clearance for operator access.
Allow clearance for cabling, power connections and ventilation.
 Cabling — The cabling is routed to avoid sources of electrical noise such
as radio transmitters, broadcast amplifiers, power lines and fluorescent
lighting fixtures.
 Ambient Requirements — The ambient unit operating temperature
range is 0 to 40ºC (32 to 104ºF) at a relative humidity of up to 95%, noncondensing. Verify that water or moisture cannot enter the device casing.

3.1.3 Unpacking
3.1.3.1 Package Contents
While unpacking Cedar device, ensure that the following items are included:
 The device
 An AC power cable

16

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

 Console cable with DB-9 connector
 This "Installation Guide", the "Embedded Web System User Guide" and
documentation CD
 Two mounting brackets and other fittings

3.1.3.2 Unpacking Essentials
Note
Before unpacking the device, inspect the package and report any evidence of
damage immediately.
To unpack the device perform the following:
1. It is recommended to put on an ESD wrist strap and attach the ESD clip
to a metal surface to act as ground. An ESD strap is not supplied with the
device.
2. Place the container on a clean flat surface and cut all straps securing the
container.
3. Open the container.
4. Carefully remove the device from the container and place it on a secure
and clean surface.
5. Remove all packing material.
6. Inspect the product for damage. Report any damage immediately.

3.2 Installing the Device
The device can be installed on a flat surface or mounted in a rack. This section
includes the following topics:
 Desktop or Shelf Installation
 Rack Installation

17

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

3.2.1 Desktop or Shelf Installation
When installing the switch on a desktop or shelf, the rubber feet included with
the device should first be attached. Attach these cushioning feet on the bottom
at each corner of the device.
Ensure the surface is be able to support the weight of the device and the
device cables.
To install the device on a surface, perform the following:
1. Attach the rubber feet on the bottom of the device.
2. Set device down on a flat surface, while leaving 2 inches on each side and
5 inches at the back.
3. Ensure that the device has proper ventilation by allowing adequate space
for ventilation between the device and the objects around the device.

3.2.2 Rack Installation
The device can be mounted in an EIA standard-sized, 19-inch rack, which can
be placed in a wiring closet with other equipment. To install, the device the
mounting brackets must first be attached on the devices’s sides.

Note
 Disconnect all cables from the unit before mounting the device in a rack or
cabinet.
 When mounting multiple devices into a rack, mount the devices from the
bottom up.
To install the device in a rack, perform the following:
1. Place the supplied rack-mounting bracket on one side of the device
ensuring the mounting holes on the device line up to the mounting holes

18

Gigabit Managed Switch Family Installation Guide

TL-SG3109/TL-SL3428/TL-SL3452

on the rack mounting bracket. The following figure illustrates where to
mount the brackets.

1

3

5

7

2

4

6

8

9

8

24+4G Gigab

11 13
15 17
19

10 12

14 16
18

21 23

20 22
24

it Mana ged

Link
Act
100Mbps

GIGA1 GIGA2

1

Switc h

3

5

7

9

11

13

15

17

Link/Act RESET

19

21

23

1000Mbp
s

2

4

6

8

10

12

14

GIGA 1

SFP 1

16

18

20

22

24

GIGA 2

SFP 2

Link/Act

Console

TL-SL342

Power

System

Link/Act

Figure 3-1: Attaching the Mounting Brackets
2. Insert the supplied screws into the rack mounting holes and tighten with a
screwdriver.
3. Repeat the process for the rack-mounting bracket on the other side of the
device.
4. Insert the unit into the 19-inch rack ensuring the rack-mounting holes on
the device line up to the mounting hole on the rack. The following figure
illustrates lining up and mounting the device in the rack.

TL-SL 3428

Power

System

24+4G Gigabit

1

3

5

7

9

2

4

6

8

10 12 14
16 18 20
22 24

11 13 15
17 19 21
23

Manage d Switch

1

3

5

7

2

4

6

8

Link
Act
100Mbps

GIGA1 GIGA2

9

11

13

15

10

12

14

16

17

19

21

23

18

20

22

24

Link/Act RESET

GIGA 1

SFP 1

GIGA 2

SFP 2

Link/Act

Console

1000Mbps

Link/Act

Figure 3-2: Mounting Device in a Rack

19

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

5. Secure the unit to the rack with the rack screws (not provided). Fasten the
lower pair of screws before the upper pair of screws. This ensures that the
weight of the unit is evenly distributed during installation. Ensure that the
ventilation holes are not obstructed.

3.3 Connecting the Device
This section describes how to connect the device, and includes the following
sections:
 Connecting the Switch to a Terminal
 AC Power Connection

3.3.1 Connecting the Switch to a Terminal
The device is connected to a terminal through an console port on the front
panel, which enables a connection to a terminal desktop system running
terminal emulation software for monitoring and configuring the device.
The terminal must be a VT100 compatible terminal or a desktop or portable
system with a serial port and running VT100 terminal emulation software.
To connect a terminal to the device Console port, perform the following:
1. Connect a cable to the terminal running VT100 terminal emulation software.

2. Ensure that the terminal emulation software is set as follows:
a) Select the appropriate port to connect to the device.
b) Set the data rate to 38400 baud.
c) Set the data format to 8 data bits, 1 stop bit, and no parity.
d) Set flow control to none.
e) Under Properties, select VT100 for Emulation mode.
f)

Select Terminal keys for Function, Arrow and Ctrl keys. Ensure that the

20

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

setting is for Terminal keys (not Windows keys).

Note
When using HyperTerminal with Microsoft® Windows 2000, ensure that you
have Windows 2000 Service Pack 2 or later installed. With Windows® 2000
Service Pack 2, the arrow keys function properly in HyperTerminal’s VT100
emulation. Go to www.microsoft.com for information on Windows 2000 service
packs.
3. Connect the cable to the console port on the device front panel.

3.3.2 AC Power Connection
To connect the power supply perform the following:
1. Using a 5-foot (1.5 m) standard power cable with safety ground connected,
connect the power cable to the AC main socket located on the back panel.
2. Connect the power cable to a grounded AC outlet.
3. Confirm that the device is connected and operating by checking that the
Power Supply LED on the front panel is green.

21

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Section 4. Starting and Configuring the Device
This section describes the initial device configuration and includes the
following topics:
 Configuring the Terminal
 Installation Procedure
 Booting the Device
 Configuration Overview
 Advanced Configuration
 Startup Procedures

4.1 Configuring the Terminal
After completing all external connections, connect a terminal to the device to
monitor the boot and other procedures.
To configure the device, the terminal must be running terminal emulation
software.
Ensure that the terminal emulation software is configured as follows:
1. Connect the Chassis serial port to the switch module. The baud rate
automatically boots up at 38400.
2. Set the data format to 8 data bits, 1 stop bit, and no parity.
3. Set Flow Control to none.
4. Under Properties, select VT100 for Emulation mode.
5. Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that the
setting is for Terminal keys (not Windows keys).

Note
When using HyperTerminal with Microsoft® Windows 2000, make sure that

22

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Windows® 2000 Service Pack 2 or later is installed. With Windows 2000
Service Pack 2, the arrow keys function properly in HyperTerminal’s VT100
emulation. Go to www.microsoft.com for information on Windows 2000 service
packs.

4.2 Installation Procedure
The order of installation and configuration procedures is illustrated in the
following figure. For the initial configuration, the standard device configuration
is performed.
Performing other functions is described later in this section.

23

Gigabit Managed Switch Family Installation Guide

TL-SG3109/TL-SL3428/TL-SL3452

4.2.1 Device Port Default Settings
The following table describes the device port default settings.
Function

Default Settings

Port speed and mode

• 100Mbps Auto-negotiation for 10/100 Base-TX
Ports
• 1000Mbps Auto-negotiation for 10/100/1000
Base-TX Ports

Port forwarding state

Enabled

Head of line blocking prevention

On (Enabled)

Flow Control

Off

Back Pressure

Off

Table 5: Port Default Setting
Note
These default settings can be modified once the device is installed.

4.3 Booting the Device
The assumed bootup information is as follows:
 The device is delivered with an empty configuration.
To boot the device, perform the following steps:
1. Ensure that the device port console is connected to a VT100 terminal
device or VT100 terminal emulator.
2. Connect the device to the AC receptacle.
3. Activate the AC power receptacle (if required).
The device goes through Power On Self Test (POST). POST runs every time
the device is initialized and checks hardware components to determine if

24

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

the device is fully operational before completely booting. If a critical problem
is detected, the program flow stops. If POST passes successfully, a valid
executable image is loaded into RAM.
POST messages are displayed on the terminal and indicate test success or
failure.
As the device boots, the bootup test first counts the device memory availability
and then continues to boot. The following screen is an example of the
displayed POST:
------ Performing the Power-On Self Test (POST) -----UART Channel Loopback Test.............................PASS
Testing the System SDRAM.................................PASS
Boot1 Checksum Test............................................PASS
Boot2 Checksum Test............................................PASS
Flash Image Validation Test.................................PASS

BOOT Software Version 1.0.0.04 Built 29-Nov-2005 11:56:12

TPLink Switch based on 88E6218 with ARM946E-S.
32MByte SDRAM. I-Cache 8 KB. D-Cache 8 KB. Cache Enabled.
Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.
Preparing to decompress...

The boot process runs for approximately 60 seconds.
The auto-boot message displayed at the end of POST (see the last lines)

25

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

indicates that no problems were encountered during boot.
During boot, the Startup menu can be used to run special procedures. To
enter the Startup menu, press  or  within the first two seconds
after the auto-boot message is displayed.
If the system boot process is not interrupted by pressing  or ,
the process continues decompressing and loading the code into RAM. The
code starts running from RAM and the list of numbered system ports.
After the device boots successfully, a system prompt is displayed (console>)
which is used to configure the device. However, before configuring the device,
ensure that the latest software version is installed on the device. If it is not the
latest version, download and install the latest version. For more information on
downloading the latest version, see Software Download [Option 1].

4.4 Configuration Overview
Before assigning a static IP address to the device, obtain the following
information:
 A specific IP address that has been allocated to the device in order for it to
be configured.
 Default route.
 Network mask for the network.
There are two configuration types:
 Initial Configuration — Consists of configuration functions with basic
security considerations.
 Advanced Configuration — Consists of dynamic IP configuration and more
advanced security considerations.

26

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Note
After making any configuration changes, the new configuration must be saved
before rebooting. To save the configuration, enter:
console# copy running-config startup-config

4.4.1 Initial Configuration
Initial configuration, which starts after the device has booted successfully,
includes static IP address and subnet mask configuration, and setting user
name and privilege level to allow remote management. If the device is to be
managed from an SNMP-based management station, SNMP community
strings must also be configured. The following configurations are completed:
The initial simple configuration uses the following assumptions:
 The device was never configured before, and is in the same state as when
it was received.
 The device booted successfully.
 The Serial connection is established and the console prompt is displayed
on the screen of a VT100 terminal device. (Press the  key several
times to verify that the prompt displays correctly.)
 The device is not configured with a default user name and password.
The initial device configuration is through the Serial port. After the initial
configuration, the device can then be managed either from the already
connected Serial port or remotely through an interface defined during the initial
configuration.
The initial configuration consists of the following:

27

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

 Setting a user name and password with the highest privilege level of 15.
 Configuring the static IP address and the default gateway.
 Configuring the SNMP read/write community string.
 Assigning the IP address allocated by the DHCP server.
Before applying the initial configuration procedure to the device, the following
information must be obtained from the network administrator:
 The IP address to be assigned to a VLAN through which the device is
managed.
 The IP subnet mask for the network.
 The default gateway IP address.
 The SNMP community.

4.4.1.1 Static IP Address and Subnet Mask
IP interfaces can be configured on each port of the device. After entering the
configuration command, it is recommended to check if a port was configured
with the IP address by entering the show ip interface command.
The commands to configure the device are port specific.
To manage the switch from a remote network, a static route must be
configured, which is an IP address to where packets are sent when no entries
are found in the device tables. The configured IP address must belong to the
same subnet as one of the device IP interfaces.
To configure a static route, enter the command at the system prompt as
shown in the following configuration example, where 100.1.1.1 is the specific
management station, the IP address is defined on VLAN 1, and the default

28

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

gateway is defined as 100.1.1.10. Note that by default, all ports are members
of VLAN 1, which is the default VLAN.
console# configure
console(config)# interface vlan 1
console(config-if)# ip address 100.1.1.1 255.255.255.0
console(config-if)# exit
console# ip default-gateway 100.1.1.10

Confirm that the IP address has been correctly configured as follows:
console# show ip interface
Proxy ARP is disabled
IP Address		
I/F		
-----------------		
-----------		
100.1.1.1/24 		
vlan 1 		

Type
----------------static

4.4.1.2 Assigning Static IP Addresses on a default VLAN
This example uses the following assumptions:
 The IP address to be assigned to the VLAN interface is 192.168.1.123
 The IP subnet mask for the network is 255.255.255.0
 The IP address of the default route is 192.168.1.1
 The read/write SNMP community string is "private"
console> enable
console# configure
console(config)# username admin password admin level 15
console(config)# interface VLAN 1
console (config-if) # ip address 192.168.1.123 255.255.255.0
console (config-if) # exit
console (config) # ip default-gateway 192.168.1.1
console (config) # snmp-server community private rw
console(config)# exit
console#

29

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Verifying the IP and Default Gateway Addresses
Ensure that the IP address and the default gateway were properly assigned by
executing the following command and examining its output:
Gateway IP Address
Activity status
-------------------------------------------------------------			
--192.168.1.1		
Active
IP address		
-------------------		
192.168.1.123/24		

Interface		
---------------VLAN 1		

Type
-------Static

4.4.1.3 User Name
A user name is used to manage the device remotely, for example through
SSH, Telnet, or the Web interface. To gain complete administrative (super-user)
control over the device, the highest privilege (15) must be specified.

Note
Only the administrator (super-user) with the highest privilege level (15) is
allowed to manage the device through the Web browser interface.
For more information about the privilege level, see the CLI Reference Guide.
The configured user name is entered as a login name for remote management
sessions. To configure user name and privilege level, enter the command at
the system prompt as shown in the configuration example:
console> enable
console# configure
console(config)# username admin password admin level 15

30

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

4.4.1.4 SNMP Community Strings
Simple Network Management Protocol (SNMP) provides a method for
managing network devices. Devices supporting SNMP run a local software
(agent). The SNMP agents maintain a list of variables, used to manage the
device. The variables are defined in the Management Information Base (MIB).
The MIB presents the variables controlled by the agent. The SNMP agent
defines the MIB specification format, as well as the format used to access the
information over the network.
Access rights to the SNMP agents are controlled by access strings and SNMP
community strings.
The device is SNMP-compliant, and contain an SNMP agent that support a
set of standard and private MIB variables. Developers of management stations
require the exact structure of the MIB tree and receive the complete private
MIBs information before being able to manage the MIBs.
All parameters are manageable from any SNMP management platform,
except the SNMP management station IP address and community (community
name and access rights). The SNMP management access to the switch is
disabled if no community strings exist.

Note
The device switch is delivered with no community strings configured.
The community-string, community-access, and IP address can be configured
through the local terminal during the initial configuration procedure.
The SNMP configuration options are:

31

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

 Community string
– Access rights options: ro (read only), rw (read-and-write) or su (super).
– An option to configure IP address or not: If an IP address is not
configured, it means that all community members having the same
community name are granted the same access rights.
Common practice is to use two community strings for the switch one (public
community) with read-only access and the other (private community) with
read-write access. The public string allows authorized management stations
to retrieve MIB objects, while the private string allows authorized management
stations to retrieve and modify MIB objects.
During initial configuration, it is recommended to configure the device
according to the network administrator requirements, in accordance with
using an SNMP-based management station. During the initial configuration
procedure the community-string, community-access, and IP address can be
set through the local terminal.
The SNMP configuration options are:
 Community string.
– Read Only—Indicates that the community members can view
configuration information, but cannot change any information.
– Read/Write — Indicates that the community members can view and
modify configuration information.
– Super — Indicates that the community members have administration
access.
 Configurable IP address. If IP address is not configured, all community
members with the same community name are granted the same access
rights.

32

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

To configure SNMP station IP address and community string(s) perform the
following:
1. At the console prompt, enter the command Enable. The prompt is displayed as
#.

2. Enter the command configure and press .
3. In the configuration mode, enter the SNMP configuration command with
the parameters including community name (private), community access
right (read and write) and IP address, as shown in the following example:
console# configure
console(config)# snmp-server community private rw 11.1.1.2
console(config)# end
console# show snmp
Community-String
Community-Access		
IP address
---------------------------------------------------------------------------------------private		
readWrite			
11.1.1.2
Traps are enabled.
Authentication-failure trap is enabled.
Trap-Rec-Address
--------------------------------

Trap-Rec-Community
----------------------------------

Version
----------------------

System
Contact:
System Location:

This completes the initial configuration of the device from a local terminal. The
configured parameters enable further device configuration from any remote
location.

4.5 Advanced Configuration
This section provides information about dynamic allocation of IP addresses
and security management based on the authentication, authorization, and

33

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

accounting (AAA) mechanism, and includes the following topics:
 Receiving an IP Address from a DHCP Server
 Receiving an IP Address from a BOOTP Server
 Security Management and Password Configuration
When configuring or receiving IP addresses through DHCP and BOOTP, the
configuration received from these servers includes the IP address, and may
include a subnet mask and default gateway.

4.5.1 Receiving an IP Address from a DHCP Server
When using the DHCP protocol to retrieve an IP address, the device acts as
a DHCP client. To receive an IP address from a DHCP server, perform the
following steps:
1. Select and connect any port to a DHCP server or to a subnet that has a
DHCP server on it, in order to retrieve the IP address.
2. Enter the following commands to use the selected port for receiving the IP
address. In the following example, the commands are based on the port
type used for configuration.
console# configure
console(config)# interface vlan 1
console(config-if)# ip address dhcp hostname admin-host
console(config-if)# exit
console(config)#

3. To verify the IP address, enter the show ip interface command at the
system prompt as shown in the following example.

34

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

console# show ip interface
IP Address		
I/F		
--------------------		
--------------100.1.1.1/24		
vlan 1		

Type
-------------dynamic

Note
 The device configuration does not have to be deleted to retrieve an IP
address for the DHCP server.
 When copying configuration files, avoid using a configuration file that
contains an instruction to enable DHCP on an interface that connects to
the same DHCP server, or to one with an identical configuration.As a result
of the copying configuration, the switch retrieves the new configuration file
and boots from it. The device then enables DHCP as instructed in the new
configuration file, and the DHCP instructs it to reload the same file.

4.5.2 Receiving an IP Address from a BOOTP Server
The standard BOOTP protocol is supported and enables the switch to
automatically download its IP host configuration from any standard BOOTP
server in the network. In this case, the device acts as a BOOTP client.
To receive an IP address from a BOOTP server:
1. Select and connect any port to a BOOTP server or subnet containing such
a server.
2. At the system prompt, enter the delete startup configuration command to
delete the startup configuration from flash.
The device reboots with no configuration and in 60 seconds starts sending
BOOTP requests. The device receives the IP address automatically.

35

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

Note
When the device reboot begins, any input at the ASCII terminal or keyboard
automatically cancels the BOOTP process before completion, and the device
does not receive an IP address from the BOOTP server.
The following example illustrates the process:
console> enable
console# delete startup-config
Startup file was deleted
console# reload
You haven’t saved your changes. Are you sure you want to continue (Y/N)[N]?
This command will reset the whole system and disconnect your current
session. Do you want to continue (Y/N)[N]?
***************************************************
***************** SYSTEM RESET *****************
***************************************************

3. To verify the IP address, enter the show ip interface command. The
device is now configured with an IP address.

4.5.3 Security Management and Password Configuration
System security is handled through the AAA (Authentication, Authorization,
and Accounting) mechanism that manages user access rights, privileges, and
management methods. AAA uses both local and remote user databases. Data
encryption is handled through the SSH mechanism.
The system is delivered with no default password configured; all passwords
are user-defined. If a user-defined password is lost, a password recovery
procedure can be invoked from the Startup menu. The procedure is applicable
for the local terminal only and allows a one-time access to the device from the
local terminal with no password entered.

36

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

4.5.3.1 Configuring Security Passwords Introduction
The security passwords can be configured for the following services:
 Console
 Telnet
 SSH
 HTTP
 HTTPS

Note
 Passwords are user-defined.
 When creating a user name, the default priority is "1," which allows
access but not configuration rights. A priority of "15" must be set to enable
access and configuration rights to the device. Although user names can
be assigned privilege level 15 without a password, it is recommended to
always assign a password. If there is no specified password, privileged
users can access the Web interface with any password.

4.5.3.2 Configuring an Initial Console Password
To configure an initial console password, enter the following commands:
console(config)# aaa authentication login default line
console(config)# aaa authentication enable default line
console(config)# line console
console(config-line)# login authentication default
console(config-line)# enable authentication default
console(config-line)# password george

When initially logging on to a device through a console session, enter george
at the password prompt.

37

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

When changing a device mode to enable, enter george at the password
prompt.

4.5.3.3 Configuring an Initial Telnet Password
To configure an initial Telnet password, enter the following commands:
console(config)# aaa authentication login default line
console(config)# aaa authentication enable default line
console(config)# line telnet
console(config-line)# login authentication default
console(config-line)# enable authentication default
console(config-line)# password bob

When initially logging onto a device through a Telnet session, enter bob at the
password prompt.
When changing a device mode to enable, enter bob.

4.5.3.4 Configuring an Initial SSH password
To configure an initial SSH password, enter the following commands:
console(config)# aaa authentication login default line
console(config)# aaa authentication enable default line
console(config)# line ssh
console(config-line)# login authentication default
console(config-line)# enable authentication default
console(config-line)# password jones

When initially logging onto a device through a SSH session, enter jones at the
password prompt.
When changing a device mode to enable, enter jones.

38

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

4.5.3.5 Configuring an Initial HTTP Password
To configure an initial HTTP password, enter the following commands:
console(config)# ip http authentication local
console(config)# username admin password user1 level 15

4.5.3.6 Configuring an initial HTTPS Password
To configure an initial HTTPS password, enter the following commands:
console(config)# ip https authentication local
console(config)# username admin password user1 level 15

Enter the following commands once when configuring to use a console, a
Telnet, or an SSH session to use an HTTPS session.
In the Web browser enable SSL 2.0 or greater for the content of the page to
appear.
console(config)# crypto certificate 2 generate key_generate
console(config)# ip https server

When initially enabling an http or https session, enter admin for user name
and user1 for password.

Note
HTTP and HTTPS services require level 15 access and connect directly to the
configuration level access.

4.6 Startup Procedures

39

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

The procedures called from the Startup menu cover software download, flash
handling, and password recovery. The diagnostics procedures are for use by
technical support personnel only and are not disclosed in this document.
The Startup menu can be entered when booting the device. A user input must
be entered immediately after the POST test.
To enter the Startup menu:
1. Turn the power on and watch for the auto-boot message.
------ Performing the Power-On Self Test (POST) -----UART Channel Loopback Test.............................PASS
Testing the System SDRAM.................................PASS
Boot1 Checksum Test............................................PASS
Boot2 Checksum Test............................................PASS
Flash Image Validation Test.................................PASS

BOOT Software Version 1.0.0.04 Built 29-Nov-2005 11:56:12

TPLink Switch based on 88E6218 with ARM946E-S.
32MByte SDRAM. I-Cache 8 KB. D-Cache 8 KB. Cache Enabled.
Autoboot in 2 seconds - press RETURN or Esc. to abort and enter prom.

2. When the auto-boot message appears, press  to display the
Startup menu.

40

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

[1] Download Software
[2] Erase Flash File
[3] Password Recovery Procedure
[4] Enter Diagnostic Mode
[5] Set Terminal Baud-Rate
[6] Back
Enter your choice or press 'ESC' to exit:

The Startup menu procedures can be performed using the ASCII terminal or
Windows HyperTerminal. The following sections describe the available Startup
menu options.

Note
When selecting an option from the Startup menu, time must be taken into
account. If no selection is made within 35 seconds (default), the device times
out. This default value can be changed through the CLI.
Only technical support personnel can use Diagnostics Mode. For this reason,
Diagnostics Mode is not described in this guide.

4.6.1 Software Download [Option 1]
The software download procedure is performed when a new version must be
downloaded to replace corrupted files, or when the system software must be
upgraded. To download software from the Startup menu:
1. From the Startup menu, press [1]. The following prompt appears:
Downloading code using XMODEM

2.

When using HyperTerminal, click Transfer on the HyperTerminal Menu
Bar.

41

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

3. In the Filename field, enter the file path for the file to be downloaded.
4. Ensure that the Xmodem protocol is selected in the Protocol field.
5. Press Send. The software is downloaded.

Note
After software download, the device reboots automatically.
Software can also be downloaded through a TFTP.

4.6.1.1 Software Download through TFTP Server
This section contains instructions for downloading device software (system
and boot images) through a TFTP server. The TFTP server must be
configured before beginning to download the software. This section contains
the following topics:
 System Image Download
 Boot Image Download
System Image Download
The device boots and runs when decompressing the system image from the
flash memory area where a copy of the system image is stored. When a new
image is downloaded, it is saved in the area allocated for the other system
image copy.
On the next boot, the device decompresses and runs the currently active
system image unless otherwise directed.
To download a system image through the TFTP server:
1. Ensure that an IP address is configured on one of the device ports and
pings can be sent to the TFTP server.

42

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

2. Make sure that the file to be downloaded is saved on the TFTP server (the
arc file).
3. Enter show version to verify which software version is currently running
on the device. The following is an example of the information that appears:
console# show version
SW version 1.0.0.30 ( date 16-Jul-2006 time 09:19:44 )
Boot version 1.0.0.04 ( date 29-Nov-2005 time 11:56:12 )
HW version 01.00.00

4. Enter show bootvar to verify which system image is currently active. The
following is an example of the information that appears:
console# sh bootvar
Images currently available on the FLASH
Image-1 active (selected for next boot)
Image-2 not active
console#

5. Enter copy tftp://{tftp address}/{file name} image to copy a new
system image to the device. When the new image is downloaded, it is
saved in the area allocated for the other copy of system image (image-2,
as given in the example). The following is an example of the information
that appears:
console# copy tftp://176.215.31.3/file1.ros image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Copy: 3172288 bytes copied in 00:01:48 [hh:mm:ss]

Exclamation points indicate that a copying process is in progress. Each
symbol (!) corresponds to 512 bytes transferred successfully. A period
indicates that the copying process timed out. Many periods in a row

43

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

indicate that the copying process failed.
6. Enter the reload command. The following message is displayed:
console# reload
This command will reset the whole system and disconnect your current
session. Do you want to continue (Y/N) [N]?

7. Enter y. The device reboots.
Boot Image Download
Loading a new boot image from the TFTP server and programming it into the
flash updates the boot image. The boot image is loaded when the device is
powered on. A user has no control over the boot image copies.
To download a boot image through the TFTP server:
1. Ensure that an IP address is configured on one of the device ports and
pings can be sent to the TFTP server.
2. Ensure that the file to be downloaded is saved on the TFTP server (the rfb
file).
3.

Enter show version to verify which software version is currently running
on the device. The following is an example of the information that appears:
console# show version
SW version 1.0.0.30 ( date 16-Jul-2006 time 09:19:44 )
Boot version 1.0.0.04 ( date 29-Nov-2005 time 11:56:12 )
HW version 01.00.00

4. Enter copy tftp://{tftp address}/{file name} boot to copy the boot image
to the device. The following is an example of the information that appears:

44

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

console# copy tftp://176.215.31.3/332448-10018.rfb boot
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Copy: 2739187 bytes copied in 00:01:13 [hh:mm:ss]

5. Enter the reload command. The following message is displayed:
console# reload
This command will reset the whole system and disconnect your current
session. Do you want to continue (Y/N) [N]?

6. Enter y. The device reboots.
This section contains instructions for downloading device software (system
and boot images) using XModem, which is a data transfer protocol for
updating backup configuration files.
To download a boot file using XModem:
1. Enter the command copy xmodem: boot.
The device is ready to receive the file via the XModem protocol and
displays text similar to the following:
console# copy xmodem: boot
Please download program using XMODEM.
console#

2. Specify the path of the source file within 20 seconds.
If the path is not specified within 20 seconds, the command times out.
To download a software image file using XModem:
1. Enter the command console# copy xmodem: image.

45

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

The switch is ready to receive the file via the XModem protocol.
2. Specify the path of the source file to begin the transfer process.
The following is an example of the information that appears:
console# copy xmodem: image
Please download program using XMODEM

4.6.2 Erasing the Flash File [Option 2]
In some cases, the device configuration must be erased. If the configuration
is erased, all parameters configured via CLI, EWS, or SNMP must be
reconfigured.
To erase the device configuration:
1.

From the Startup menu, press [2] within two seconds to erase the flash
file. The following message is displayed:
Warning! About to erase a Flash file.
Are you sure (Y/N)? y

2. Press Y. The following message is displayed.
Write Flash file name (Up to 8 characters, Enter for none.):config
File config (if present) will be erased after system initialization
======== Press Enter To Continue ========

3. Enter config as the name of the flash file. The configuration is erased and
the device reboots.
4. Repeat the initial device configuration.

4.6.3 Password Recovery [Option 3]

46

TL-SG3109/TL-SL3428/TL-SL3452

Gigabit Managed Switch Family Installation Guide

If a password is lost, you can perform the password recovery procedure from
the Startup menu. The password recovery procedure enables entry to the
device one time without a password.
To recover a lost password for the local terminal only:
1. From the Startup menu, type [3] and press . The password is
deleted.

Note
To ensure device security, reconfigure passwords for applicable management
methods.

4.6.4 Enter Diagnostic Mode [Option4]
For Technical Support only.

4.6.5 Set Terminal Baud-Rate [Option5]
To set the terminal baud-rate:
1. From the Startup menu, type [5] and press .
2. Enter your choice or press  to exit.
3. Press . The baud-rate is set.

47



Source Exif Data:
File Type                       : PDF
File Type Extension             : pdf
MIME Type                       : application/pdf
PDF Version                     : 1.4
Linearized                      : No
Tagged PDF                      : Yes
XMP Toolkit                     : 3.1-701
Instance ID                     : uuid:e9ec621b-397a-47c9-a393-cbfbaa0d5e17
Document ID                     : adobe:docid:indd:380f1623-1dd6-11db-84c2-fb2f832bdfce
Rendition Class                 : proof:pdf
Derived From Instance ID        : b964d3f2-1d43-11db-bc2e-819cb716c653
Derived From Document ID        : adobe:docid:indd:26b218c7-0bf8-11db-b2bf-fc435ea6ec9c
Create Date                     : 2006:07:28 09:26:23+08:00
Modify Date                     : 2006:07:28 09:29:22+08:00
Metadata Date                   : 2006:07:28 09:29:22+08:00
Creator Tool                    : Adobe InDesign CS2 (4.0)
Thumbnail Format                : JPEG
Thumbnail Width                 : 256
Thumbnail Height                : 256
Thumbnail Image                 : (Binary data 1997 bytes, use -b option to extract)
Format                          : application/pdf
Producer                        : Adobe PDF Library 7.0
Trapped                         : False
Has XFA                         : No
Page Count                      : 54
Creator                         : Adobe InDesign CS2 (4.0)
EXIF Metadata provided by EXIF.tools

Navigation menu