Tenda does not assume any liability that may occur due to the use or application of the product described herein. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information and recommendations in this document do not constitute a warranty of any kind, express or implied.
Page 3
Preface Thank you for choosing Tenda! This user guide helps you configure, manage and maintain switches. This user guide applies to: TEG2205D, TEG2208D, TEG2216D, TEG2224D, TEG2226F, TEG2220P-16- 250W, TEG2228P-25-410W. TEG2220P-16-250W is used for illustration unless otherwise specified. This user guide is for configuration reference only and does not indicate that the product supports all functions described here.
Email address: support@tenda.cn Website: www.tendacn.com Revision history Tenda is constantly searching for ways to improve its products and documentation. The following table indicates any changes that might have been made since the switch was introduced. Version Description Date 1. Added the description of PoE,...
2.3 Device summary 2.4 Port summary Connect to the internet Manage switches on cloud 4.1 Enable cloud management 4.2 Add the switch to Tenda CloudFi Assign VLANs 5.1 Overview 5.2 VLAN configuration 5.3 Example of configuing 802.1Q VLAN Change management IP/VLAN...
Page 6
11.2 Port mirroring 11.3 Port aggregation 11.4 Port statistics 11.5 Loop guard 11.6 Cable testing 11.7 Jumbo frames Network security 12.1 DHCP snooping 12.2 IGMP snooping 12.3 MAC tables 13.1 Port rate limit 13.2 QoS policies Manage PoE 14.1 View PoE budget and comsumption 14.2 Enable PoE schedule 14.3 Change PoE port settings 14.4 Change fan mode...
Document version: 2.0 Log in to web UI This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. Login Connect the computer to any RJ45 port of the switch using an Ethernet cable.
Document version: 2.0 Follow the onscreen instructions and finish logging in. Step 4 − When logging in for the first time, use the default password on the label of the switch if a login password is required. For network security, be sure to change the password after login. −...
Document version: 2.0 Web UI 1.3.1 Web layout The web UI can be divided into four parts: level-1 navigation bar, level-2 navigation bar, tab, and the configuration area. ❸ ❶ ❷ ❹ Name Description ❶ Level-1 navigation bar Used to display menu items in the form of a navigation tree that ❷...
Document version: 2.0 1.3.2 Common buttons The following table describes the common buttons on the switch's web UI. Button Description Used to save and apply the current configuration. Used to restore the original configuration without saving the configuration on the current page. Used to view help information for the function on the current page.
Document version: 2.0 Get device infomation This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. To access the page: On a computer connected to the switch port belonging to the management VLAN, open a Step 1...
Document version: 2.0 Device summary On the Device Summary module of the Home page, you can view a summary of information of the switch. When multiple DHCP servers are detected in the LAN, an alarm will be displayed in the upper right corner of the Device Summary module.
When 802.1Q VLAN is enabled, the management VLAN defaults to VLAN 1. Change the value as required. Specifies whether the switch is connected to Tenda CloudFi Cloud platform. Cloud Management Click the connection status to configure cloud management on the Device Info page.
Page 14
Document version: 2.0 Parameter description Name Description Port Specifies the ID of the port. Status Specifies whether the port is enabled. Mode Specifies the configured connection rate and duplex mode of the port. Specifies the actual connection rate and duplex mode of the port. Port Status Speed/Duplex "--"...
Document version: 2.0 Connect to the internet This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. By default, the switch will automatically obtain an IP address to connect to the internet.
Page 16
Document version: 2.0 *The figure shows an example of configuring the switch to automatically obtain an IP address and DNS server address. ---End...
Page 17
Document version: 2.0 Parameter description Name Description Used to enable or disable the switch to automatically obtain network parameters from the DHCP server. - When enabled, the switch automatically obtains network parameters from the DHCP server. - When disabled, you need to manually configure network parameters for the switch.
Functions available may vary with the product model and firmware version. Please refer to the actual product. Tenda CloudFi is a Tenda company-owned cloud platform where you can manage Tenda devices with cloud management support. Tenda CloudFi is available in mobile app and web versions (https://cloudfi.tendacn.com), and the data is interoperable.
Document version: 2.0 Add the switch to Tenda CloudFi After cloud management is enabled, you can add a switch to Tenda CloudFi through either of two methods below. Once the switch is added, configuration changes can be made either on the Tenda CloudFi cloud platform or the switch's local web UI.
Document version: 2.0 Assign VLANs This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. Overview Virtual Local Area Network (VLAN) is a technology that divides devices in LAN into different logical, instead of physical, network segments to realize virtual working groups.
Document version: 2.0 VLAN configuration Enable 802.1Q VLAN Navigate to Basic Function > VLAN. Here you can enable or disable 802.1Q VLAN on the switch. The 802.1Q VLAN function is disabled by default. When it is disabled, the switch is in VLAN transparent transmission mode and can forward all VLAN data.
Document version: 2.0 Configure VLANs When 802.1Q VLAN is enabled, you can achieve VLAN isolation by configuring the port type, PVID, and allowed VLANs of each port on the switch in the Edit Port module. Parameter description Name Description Port Specifies the ID of the port.
Document version: 2.0 Example of configuing 802.1Q VLAN Network requirement The staff in the Finance department and Marketing departments of a company work on the second floor, while the servers for these two departments are on the third floor. Now it is required that internal communication and server access is available within the departments, but the departments cannot communicate with each other.
Page 24
Document version: 2.0 Set VLAN ID to 5. Set VLAN Name to Finance. Repeat step and add another VLAN with the VLAN ID of 7 and VLAN Name of Marketing. Step 5 In the Edit Port module, configure the VLANs. Step 6 Locate the port 5 and click Edit.
Document version: 2.0 Change management IP/VLAN This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. The default management IP address is 10.16.16.168, and there is no management VLAN by default unless VLAN configured.
Document version: 2.0 Change management account This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. To safeguard your network, periodically change the switch management password as follows: On a computer connected to the switch port belonging to the management VLAN, open a Step 1...
Document version: 2.0 Handle maintenance tasks This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. Upgrade firmware After the firmware is upgraded on the switch, your data and settings remain unchanged.
Document version: 2.0 Back up configuration You can back up the switch configuration on the Tenda CloudFi cloud web UI or local computer. 8.2.1 Perform backup on the local computer On a computer connected to the switch port belonging to the management VLAN, open a...
Click OK. Step 4 ---End Wait until cloud backup is successful, and back up the switch configuration to the Tenda CloudFi cloud platform. Restore configuration You can import the previously backed-up configuration file into the switch to restore the switch to the configuration status at that time.
Document version: 2.0 Reboot the switch On a computer connected to the switch port belonging to the management VLAN, open a Step 1 browser and enter the switch management IP address in the address bar. Navigate to Basic Function > Maintenance. Step 2 Click Reboot.
Document version: 2.0 Click OK. Step 4 ---End The switch will be restored to factory settings and rebooted when the progress bar is filled. Hardware reset When the system indicator (SYS) is blinking, press and hold the reset button (RST, Reset, RESET) with a needle-like object for about 7 seconds, and then release it when all indicators are solid on.
To ensure that time-based functions of the switch (such as schedule) operate normally, connect the switch to the Tenda CloudFi cloud platform or synchronize the switch time with the internet. To synchronize the switch system time with the internet: On a computer connected to the switch port belonging to the management VLAN, open a...
Document version: 2.0 Diagnose the network This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. By running Ping tests, you can test the network connectivity and quality.
Document version: 2.0 Configure switching This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. 11.1 Port configuration On the Switching >...
Page 35
Document version: 2.0 Name Description Configured connection speed and duplex mode of the port. Click Edit to change. - Auto: Auto-configure the port's connection rate and duplex mode. - 10M/HDX: Configure the port to 10 Mbps connection rate and half- duplex mode.
Document version: 2.0 Name Description Configured flow control mode of the port. It is disabled by default. No Change indicates that the function status remains unchanged. When flow control is enabled on both the switch and the peer device, if congestion occurs on a port of the switch, the port will send a flow control (Pause) frame to the peer device.
Document version: 2.0 Parameter description Name Description Source Port Specifies the port to be mirrored. Multiple ports can be selected. Specifies the packet type. - Ingress: Packets received by source ports will be copied to the destination port. Mirroring Direction - Egress: Packets transmitted by source ports will be copied to the destination port.
Page 38
Document version: 2.0 traffic load for each other, thus increasing the bandwidth between the switch and peer device. Meanwhile, each member in an aggregation group backs up each other's data dynamically, improving connection reliability. The network topology of port aggregation is shown as follows. - In the same aggregation group, all member ports must be set to the same configurations with respect to QoS, VLAN and port configuration.
Document version: 2.0 Parameter description Name Description Specifies the routing algorithm for the four static aggregation groups: - src-dst-mac-ip-port: Member ports in the aggregation group share the load based on the source MAC address, destination MAC address, source IP address, destination IP address, TCP or UDP source port number and destination port number in the received packet.
Page 40
Document version: 2.0 Parameter description Name Description Port Specifies the ID of the port. Port Rate Specifies the connection rate and duplex mode of the port. Rate Specifies the sending rate of the port. Bytes Specifies the total number of bytes sent by the port. Sent Packets Specifies the total number of packets sent by the port.
Document version: 2.0 11.5 Loop guard After loop guard is enabled, the port where the loop occurs will be blocked and no packets will be forwarded if a loop exists on the switch. After the loop is eliminated, the port will automatically return to the forwarding state.
Document version: 2.0 11.7 Jumbo frames Through the jumbo frame function, the data transmission capacity of the port can be increased, thereby improving link utilization and obtaining better network performance. On the Switching > Jumbo Frames page, you can enable or disable jumbo frames on the switch. This function is disabled by default.
Document version: 2.0 Network security This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. 12.1 DHCP snooping After DHCP snooping is enabled on the switch, users can only obtain IP addresses through DHCP...
Page 44
Document version: 2.0 Procedure: On a computer connected to the switch port belonging to the management VLAN, open a Step 1 browser and enter the switch management IP address in the address bar. Navigate to Network Security > DHCP Snooping. Step 2 Enable DHCP Snooping.
Document version: 2.0 Parameter description Name Description A trusted port can forward the received DHCP packets and is used to connect to the authorized DHCP server. When DHCP snooping is enabled, the following situations occur by default: - If the switch obtains an IP address from the DHCP server in the LAN and can ping any website (such as www.google.com), and the port connected to the DHCP server is the same as the port connected to the upstream gateway, this port is marked in green and set as trusted by...
Page 46
Document version: 2.0 IGMP snooping only forwards data to the specific receivers through the layer-2 multicast, providing the following advantages: Reduce broadcast in layer-2 network and saves network bandwidth. − Enhance the security of multicast data. − − Provide convenience for charging management to each host. As shown in the following figure, router A is connected to the multicast source, IGMP snooping is enabled on switch A and switch B, while host A and host C are the receivers of the multicast data.
Document version: 2.0 ◼ Router port On an IGMP-snooping-enabled layer 2 device, the ports toward upstream layer 3 multicast devices are called router ports (Ports A1 and B1 in the above figure). ◼ Member port On an IGMP-snooping-enabled layer 2 device, the ports toward downstream receiver hosts are called host ports (Ports A2, A4 and B2 in the above figure).
Page 48
Document version: 2.0 Parameter description Name Description IGMP Snooping Used to enable or disable IGMP snooping. Used to enable or disable IGMP fast leave. When it is enabled, when the switch receives an IGMP leave group message IGMP Fast Leave from a host to leave a multicast group, it directly deletes the port from the corresponding IGMP snooping multicast forwarding table without waiting for the host port aging time to expire.
Document version: 2.0 Parameter description Name Description IP Address Specifies the IP address of the multicast group. Multicast Forwarding VLAN ID Specifies the VLAN ID of the multicast group. Table Port Specifies the member port of the multicast group. Specifies the type of the routing port of the multicast group. Only dynamic Port Type routing ports are displayed currently.
Page 50
Document version: 2.0 Locate the taget device and click Bind. The following figure is for reference only. Step 3 Select Static MAC or Allowed MAC as required, and click OK. Step 4 ---End 12.3.3 Manually add static MAC addresses On a computer connected to the switch port belonging to the management VLAN, open a Step 1 browser and enter the switch management IP address...
Page 51
Document version: 2.0 ---End After configuration, you can view the static MAC address entries in the MAC table. Parameter description Name Description Specifies the MAC address. MAC Address Format: XX:XX:XX:XX:XX:XX, XXXX-XXXX-XXXX or XXXXXXXXXXXX. VLAN ID Specifies the VLAN to which the MAC address belongs. Port Specifies the physical port of the switch where the MAC address resides.
Page 52
Document version: 2.0 Enter the target MAC address, select ports, and click OK. Step 4 ---End Parameter description Name Description Specifies the MAC address of the client bound to the switch port. MAC Address Format: XX:XX:XX:XX:XX:XX, XXXX-XXXX-XXXX or XXXXXXXXXXXX. Port Specifies the physical port of the switch where the MAC address resides.
Page 53
Document version: 2.0 Query parameters and buttons description Name Description Enter the MAC address to be queried. MAC Address You can fuzzy query for MAC address with at least 2 consecutive bytes. Format: XX-XX, XX: XX or XXXX. VLAN ID Enter the VLAN ID that the MAC address to be queried belongs to.
Page 54
Document version: 2.0 Name Description Used to delete all MAC address entries on the current page. Used to delete all dynamic MAC address entries on the current page. Used to quickly bind the MAC address to the static MAC table allowed table.
Document version: 2.0 This user guide is for configuration reference only and does not indicate that the product supports all functions described here. Functions available may vary with the product model and firmware version. Please refer to the actual product. 13.1 Port rate limit On the QoS >...
Document version: 2.0 Name Description Used to enable or disable unknown unicast suppression. It is disabled by default. Unknown Unicast Suppression No Change indicates that the function status remains unchanged. Used to set the maximum broadcast, multicast or unknown unicast packet allowed to pass through the port per second.
Page 57
Document version: 2.0 ◼ Strict priority Strict priority scheduling algorithm is specially designed for critical service applications. An important feature of critical services is that they demand preferential service in congestion in order to reduce the response delay. In queue scheduling, the packets are sent in queues strictly following the priority order from high to low (Queue 7 >...
Page 58
Document version: 2.0 algorithm is that though the queues are scheduled in turn, the service time for each queue is not fixed, which means if a queue is empty, the next queue will be scheduled immediately. In this way, the bandwidth resources can be fully utilized. Priority This switch supports three priority modes: 802.1P...
Page 59
Document version: 2.0 By default, the 802.1P priority, queues, and key words of this switch are mapped as follows. 802.1P priority Queue Key word best-effort background spare excellent-effort controlled-load video voice network-management ◼ DSCP priority RFC2474 re-defines the Type of Service (ToS) field in the IP message header, which is called the Differentiated Services (DS) field.
Page 60
Document version: 2.0 DSCP priority (decimal) DSCP priority (binary) Key word 010100 af22 010110 af23 011010 af31 011100 af32 011110 af33 100010 af41 100100 af42 100110 af43 001000 010000 011000 100000 101000 110000 111000 000000 be (default) By default, the DSCP priority and queues of this switch are mapped as follows. DSCP priority Queue 0 - 7...
Document version: 2.0 DSCP priority Queue 48 - 55 56 - 63 ◼ Port priority You can manually configure the Class of Service (CoS) priority of physical ports to map the physical ports with queues. The port maps packets to the corresponding queues based on the configured mapping relationship when the following two situations occur: The packets received by the port do not carry the priority tags trusted by the port.
Document version: 2.0 Step Task Description Required. QoS ports Set the priority mode of corresponding ports to 802.1P Trust and configure the CoS priority for all ports. Based on DSCP priority Step Task Description Required. QoS scheduling Select the scheduling mode of the switch based on actual demands. Required.
Page 63
Document version: 2.0 Parameter description Name Description Specifies the QoS scheduling algorithm for the port traffic. - Strict Priority: The switch forwards the packets strictly based on the priority from high to low. The queue packets with the lower priority are forwarded only when the queue with higher priority is empty.
Page 64
Document version: 2.0 Parameter description Name Description Specifies the queue in which the VLAN packets' priority is 0. Specifies the queue in which the VLAN packets' priority is 1. Specifies the queue in which the VLAN packets' priority is 2. Specifies the queue in which the VLAN packets' priority is 3.
Page 65
Document version: 2.0 DSCP On the QoS > QoS Configuration > DSCP page, you can configure the mapping relationship between the DSCP priority and queues. Parameter description Name Description DSCP Specifies the priority level defined by DS field of the IP packet heads. Range: 0-63. Port Queue Specifies the DSCP priority of the queue.
Page 66
Document version: 2.0 Parameter description Name Description Specifies the method which the port uses to process the received packets. - No Trust: All packets received by the port rejoin queues based on the correspondence of the configured CoS priority. - 802.1P Trust: When the port receives VLAN packets, the packets rejoin queues based on the correspondence of the 802.1P.
14.2 Enable PoE schedule To ensure that this function works properly, connect the switch to the Tenda CloudFi to ensure that the switch system time is correctly synchronized. On a computer connected to the switch port belonging to the management VLAN, open a...
Document version: 2.0 - Applied: Select the PoE schedule to apply. ---End If other ports need to apply this PoE schedule policy, make changes on this page or click Edit in Port Settings of the PoE Management > Port Configuration page. 14.3 Change PoE port settings On a computer connected to the switch port belonging to the management VLAN, open a...
Document version: 2.0 ---End Parameter description Name Description When enabled, PoE reboot is performed on th port if no data is transmitted within Enable PoE Watchdog 5 minutes after the port is connected to a powered device. 14.4 Change fan mode Some high-power PoE switches dissipate heat through built-in fans.
Document version: 2.0 Appendix Acronyms and Abbreviations Acronym or Abbreviation Full Spelling Class of Service Central Processing Unit DHCP Dynamic Host Configuration Protocol Domain Name System DSCP Differentiated Services Code Point Identity Document IGMP Internet Group Management Protocol Internet Protocol Medium Access Control Power over Ethernet PVID...
Page 71
Document version: 2.0 Acronym or Abbreviation Full Spelling User Datagram Protocol VLAN Virtual Local Area Network...
Need help?
Do you have a question about the TEG2 Series and is the answer not in the manual?
Questions and answers