![TP-Link T2600G-52TS (TL-SG3452) | Switch | 48x RJ45 1000Mb/s, 4x SFP, Managed Ilość portów LAN48x [10/100/1000M (RJ45)]](https://www.batna24.com/img2/500/182283_1.webp?20989284220)
TP-LINK JetStream T2600G-52TS is a managed switch equipped with 48 10/100/1000 Mb/s ports and 4 Gigabit SFP sockets. The switch provides high performance, advanced QoS support, threat protection strategy and layer 2 and 2+ network management. Additionally, the switch has 4 SFP ports for more universal use of the switch in the network. The device is a cost-effective solution for small and medium businesses. T2600G-52TS supports network traffic management and network protection against threats. The IP-MAC-Port-VID binding and access control lists (ACL, L2 to L4) protect the network against threats such as broadcast storm, ARP and DoS (Denial-of-Service) attacks etc. The Quality of Service function (QoS, L2 to L4) ensures smooth and faster data transmission. The switch has an intuitive management interface available through a web browser, CLI console or use of SNMP and RMON protocols. Thanks to this we have a simple installation and configuration of settings. The L2 T2600G-52TSManageable Switch is an ideal solution for teams and branches of companies that require an economical solution for gigabit data transmission.
T2600G-52TS switch has many functions such as: IP-MAC-Port-VID, port protection, Storm Control, DHCP Snooping and IP Source Guard, which protect our network against ARP attacks, broadcast storm etc. We even have the ability to define typical DoS attacks that our switch will detect. This solution gives us more effective protection than ever before. The use of access control lists (ACL, L2 to L4) prevents access to certain network resources; the refusal to send packets can be set for certain source or destination MAC addresses, IP addresses, TCP/UDP ports and even VLAN identifiers. Additionally, the switch uses advanced 802.1X encryption, combined with RADIUS server functions. The hardware provides the ability to connect users who do not support 802.1X protocol to network resources data - as VLAN guests.
The T2600G-52TS, with support for advanced QoS function options, guarantees better audio, data and video transmission over the network. The administrator has the ability to prioritize network traffic, e.g. for individual IP addresses, MAC addresses, TCP or UDPport, etc. Thanks to such a solution we have a smooth, clean and delay-free audio and video transmission. Moreover, the support of voice transmission in virtual local networks makes the applications using these functions work more smoothly and efficiently.
T2600G-52TS supports layer 2 switch functions, i.e. VLAN tagging (according to 802.1Q standard), Port Mirroring, support for STP/RSTP/MSTP and LACP protocols, and data flow functions (according to 802.3x standard). Additionally, the switch supports advanced network security functions, i.e. feedback loop detection, cable diagnostics or IGMP Snooping. The IGMP snopping technique provides the ability to switch multicast frames only for selected users, while the IGMP throttling & filtering function limits access to resources to individual users at the port level.
The T2600G-52TS switch is easy to use and manage. The device can be managed in various ways, e.g. through an intuitive graphical user interface in a web browser (GUI) or a command line interface (CLI). Packet transfer can be protected with SSL or SSH encryption. Support for SNMP (1/2/3) and RMON protocols allows the switch to transmit relevant status information and capture unexpected events.
| Features / filters | |
| LAN standard | Gigabit Ethernet 10/100/1000 Mb/s |
| Number of LAN ports | 48x [10/100/1000M (RJ45)] , 4x [1G (SFP)] , |
| Number of PoE ports | No PoE ports |
| 10G support | No |
| AC input frequency | 50/60 |
| AC input voltage | 100 - 240 |
| Access Control List (ACL) | Yes |
| ARP inspection | Yes |
| Auto MDI/MDI-X | Yes |
| Auto-negotiation | Yes |
| Basic switching RJ-45 Ethernet ports quantity | 48 |
| Basic switching RJ-45 Ethernet ports type | Gigabit Ethernet (10/100/1000) |
| Broadcast storm control | Yes |
| Cables included | AC |
| Console port | RJ-45 |
| Copper ethernet cabling technology | 10BASE-T,100BASE-T,100BASE-TX,1000BASE-TX,1000BASE-T |
| Depth | 220 |
| DHCP features | DHCP server |
| Firmware upgradeable | Yes |
| Form factor | 1U |
| Forwarding rate | 77.4 |
| Head-of-line (HOL) blocking | Yes |
| Height | 44 |
| IGMP snooping | Yes |
| Installed SFP modules quantity | 4 |
| Jumbo frames | 9216 |
| Jumbo frames support | Yes |
| LED indicators | Yes |
| Link aggregation | Yes |
| MAC address table | 16000 |
| Management | CLI - Command Line Interface, By web browser, |
| MIB support | Yes |
| Multicast support | Yes |
| Networking standards | IEEE 802.1D,IEEE 802.1Q,IEEE 802.1p,IEEE 802.1s,IEEE 802.1w,IEEE 802.1x,IEEE 802.3ad,IEEE 802.3ba,IEEE 802.3i,IEEE 802.3u,IEEE 802.3x,IEEE 802.3z |
| Number of queues | 8 |
| Operating relative humidity (H-H) | 10 - 90 |
| Operating temperature (T-T) | 0 - 40 |
| Package depth | 336 |
| Package height | 100 |
| Package width | 528 |
| Packet buffer memory | 1.5 |
| Port mirroring | Yes |
| Power connector | DC-in jack |
| Power consumption (max) | 33.52 |
| Power supply included | Yes |
| Product colour | Black |
| Quality of Service (QoS) support | Yes |
| Rack mount kit | Yes |
| Rack mounting | Yes |
| Rate limiting | Yes |
| Security algorithms | 802.1x RADIUS,SSH,SSL/TLS |
| Spanning tree protocol | Yes |
| SSH/SSL support | Yes |
| Static port security | Yes |
| Storage relative humidity (H-H) | 5 - 90 |
| Storage temperature (T-T) | -40 - 70 |
| Switch layer | L2+ |
| Switch type | Managed |
| Switching capacity | 104 |
| Switching layer | 2+ |
| Type of case | Rack (1U) |
| User guide | Yes |
| Virtual LAN features | Private VLAN,Protocol-based VLAN |
| VLAN support | Yes |
| Web-based management | Yes |
| Weight | 4.5 |
| Width | 440 |
| Equipment features | |
| Standards and protocols | IEEE 802.3i, IEEE 802.3u, IEEE 802.3ab, IEEE802.3z, IEEE 802.3ad, IEEE 802.3x, IEEE 802.1d, IEEE 802.1s, IEEE 802.1w, IEEE 802.1q, IEEE 802.1x, IEEE 802.1p, IEEE 802.3az |
| Ports | 48 RJ45 ports 10/100/1000Mbps Automatic negotiation of connection speeds and automatic crossover (Auto-MDI/MDIX) 4 SFP ports 1000Mbps 1 RJ45 console port 1 Micro-USB console port |
| Network cabling | 10BASE-T: Cat 3, 4 or 5 UTP cable (up to 100m) 100BASE-TX/1000Base-T: Cat 5, 5e or higher UTP cable up to 100m 1000BASE-X: MMF, SMF |
| Fanless | Yes |
| Power supply | 100~240VAC, 50/60Hz |
| Power consumption | Maximal: 33.52W (220V/50Hz) |
| Dimensions (S x G x W) | 440*220*44 mm (17.32*8.7*1.73 inches) |
| Installation | For mounting in a cabinet |
| Max. energy consumption | 33.52W (220V/50Hz) |
| Amount of heat generated | 114,37 BTU/h |
| Performance | |
| Switching capacity | 104Gb/s |
| Packet forwarding rate | 77.4Mp/s |
| MAC address table | 16k |
| Package buffer | 9216 Bytes |
| Jumbo frames | 9216 Bytes |
| Software functions | |
| Quality of Service function | Prioritization of CoS/DSCP traffic based on the IEEE 802.1p standard 8 queues Setting the queue of priorities: SP, WRR, SP+WRR Limitation of transmission depending on port, data flow Voice VLAN |
| L2 and L2+ functions | Static Routing DHCP Relay IGMP Snooping V1/V2/V3 802.3ad LACP (Up to 14 aggregation groups, containing 8 ports per group) Spanning Tree STP/RSTP/MSTP BPDU Filtering/Guard TC/Root Protect Loopback detection 802.3x Flow Control L2PT |
| Features of the layer 2 switch | IGMP Snooping V1/V2/V3 LACP support (according to 802.3ad standard (up to 14 groups, maximum 8 ports per group) Spanning Tree STP/RSTP/MSTP BPDU filtering/protection TC/Root Protect Feedback loop detection Data flow control (802.3x) L2TP |
| VLANs | Support for IEEE802.1Q, up to 4096 VLAN and 4096 VLAN identifiers Port/MAC/Protocol/Private VLAN GARP/GVRP |
| Access control lists | Packet filtering based on source and destination MAC addresses L2～L4 IP address, TCP/UDP ports, 802.1p, DSCP, protocol and VLAN ID Limited in time |
| Transmission security | IP-MAC-Port-VID binding AAA* Authentication based on IEEE 802.1X standard, Radius Protection against DoS attacks Dynamic protection against ARP (DAI) attacks SSH v1/v2 SSL v2/v3/TLSv1 Port security Broadcast/Multicast/Unknown-unicast Storm Control |
| IPv6 | Dual IPv4/IPv6 stack MLD Snooping IPv6 ND MTU detection ICMPv6 TCPv6/UDPv6 |
| IPv6 applications | DHCPv6 customer Ping6 Tracert6 Telnet(v6) IPv6 SNMP IPv6 SSH IPv6 SSL Http/Https IPv6 TFTP IPv6 access control list* IPv6 interface* Routing IPv6* DHCPv6 relay* DHCPv6 Snooping* |
| Management | GUI browser interface, CLI command line interface SNMP v1/v2c/v3, compatible with TP-LINK public and private MIB libraries RMON (groups 1, 2, 3, 9) sFlow* PPPoE Circuit ID* DHCP Relay* DHCP Server* Customer DHCP/BOOTP, DHCP Snooping, DHCP Option82 CPU monitoring Port Mirroring SNTP time synchronization Firmware update: via TFTP protocol and web browser Diagnostics: VCT test System logos, MIB public libraries Password recovery* |
| Other | |
| Certificates | CE, FCC, RoHS |
| Package contents | The switch; Power cable; Quick Installation Guide; CD; Mounting elements (for mounting in racks); Rubber coasters |
| System requirements | Microsoft® Windows® 98SE, NT, 2000, XP, Vista™ or Windows 7, MAC® OS, NetWare®, UNIX® or Linux. |
| Working environment | Operating temperature: 0℃~40℃ (32℉~104℉); Storage temperature: -40℃~70℃ (-40℉~158℉) Operating humidity: 10%~90%, non-condensing Storage humidity: 5%~90%, non-condensing |
In the network, we want to block an unwanted client whose IP address is 172.30.30.105/24, but we do not know which port this illegal client connects to the switch.
Step 1. ACL
Configuration
Create an Extend ACL ID between 200 and 299.
.
In Extend-IP ACL, select the ACL ID created in step 1, create a rule with the following parameters:
"Operation" =rejection;
"S-IP" =172.30.30.105 "Mask" =255.255.255.255.255.255;
Step 2. Configure rules
In "Policy Config"-"Policy Create"-"Policy Crate", create a policy name, for example "block".
Step 3. Binding rules
When selecting "block", the rule will apply to all 24 ports, so for the port range, fill in "1-24". Then click on "Bind".
