How to configure Access Control to block users' access to the switch using the new GUI
T1600G-18TS( V2 ) , T1500G-10PS( V2 ) , T1600G-28TS( V3 ) , T2600G-52TS( V3 ) , T1500-28PCT( V3 ) , T2600G-28TS( V3 ) , T2600G-28SQ( V1 ) , T1600G-28PS( V3 ) , T1500G-10MPS( V2 ) , T2600G-28MPS( V3 ) , T1600G-52PS( V3 ) , T1500G-8T( V2 ) , T1600G-52TS( V3 )
Recent updates may have expanded access to feature(s) discussed in this FAQ. Visit your product's support page, select the correct hardware version for your device and check either the Datasheet or the firmware section for the latest improvements added to your product.
Note:The Configuration procedures are the same based on the old Web GUI, although the old Web GUI looks different. The configuration page in the old Web GUI is as the following figure shows.
Introduction:
You can configure Access Control to allow only specific users to access the switch and block the others. Access Control can work in three modes: IP-based Mode, MAC-based Mode and Port-based Mode.
Configuration:
Here, we take the new Web GUI for example.
- IP-based Mode
Choose the menu Security > Access Security > Access Control to load the following page. In the Global Config section, enable Access Control. Select the control mode as IP-based from the drop-down list. Click Apply.
In the Entry Config section, click to load the following page. Select the desired access interface from the drop-down list. For example, if you want to control users’ access to Web GUI, you can select HTTP and HTTPS. Enter the IP address and mask of the users that you want to allow. For example, if you want to allow users only in the subnet of 192.168.1.0/24,specify the IP address as 192.168.1.0 and mask as 255.255.255.0. Click Create. Now, only the users of specific IP address can access the switch.
Note: If you want to allow only one user of specific IP address, enter the desired IP address and specify the mask as 255.255.255.255.
- MAC-based Mode
Choose the menu Security > Access Security > Access Control to load the following page. In the Global Config section, enable Access Control. Select the control mode as MAC-based from the drop-down list. Click Apply.
In the Entry Config section, click to load the following page. Select the desired access interface from the drop-down list. For example, if you want to control users’ access to Web GUI, you can select HTTP and HTTPS. Enter the MAC address of the users that you want to allow. Click Create. Now, only the users of specific MAC address can access the switch.
- Port-based Mode
Choose the menu Security > Access Security > Access Control to load the following page. In the Global Config section, enable Access Control. Select the control mode as Port-based from the drop-down list. Click Apply.
In the Entry Config section, click to load the following page. Select the desired access interface from the drop-down list. For example, if you want to control users’ access to Web GUI, you can select HTTP and HTTPS. Select desired ports. Click Create. Now, only the users that are connected to the specific ports can access the switch.
Is this faq useful?
Your feedback helps improve this site.
What’s your concern with this article?
- Dissatisfied with product
- Too Complicated
- Confusing Title
- Does not apply to me
- Too Vague
- Other
We'd love to get your feedback, please let us know how we can improve this content.
Thank you
We appreciate your feedback.
Click here to contact TP-Link technical support.
Recommend Products
TP-Link Community
Still need help? Search for answers, ask questions, and get help from TP-Link experts and other users around the world.
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
This website uses cookies to improve website navigation, analyze online activities and have the best possible user experience on our website. You can object to the use of cookies at any time. You can find more information in our privacy policy .
Basic Cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems.
TP-Link
SESSION, JSESSIONID, accepted_local_switcher, tp_privacy_base, tp_privacy_marketing, tp_smb-select-product_scence, tp_smb-select-product_scenceSimple, tp_smb-select-product_userChoice, tp_smb-select-product_userChoiceSimple, tp_smb-select-product_userInfo, tp_smb-select-product_userInfoSimple, tp_top-banner, tp_popup-bottom, tp_popup-center, tp_popup-right-middle, tp_popup-right-bottom, tp_productCategoryType
Youtube
id, VISITOR_INFO1_LIVE, LOGIN_INFO, SIDCC, SAPISID, APISID, SSID, SID, YSC, __Secure-1PSID, __Secure-1PAPISID, __Secure-1PSIDCC, __Secure-3PSID, __Secure-3PAPISID, __Secure-3PSIDCC, 1P_JAR, AEC, NID, OTZ
Zendesk
OptanonConsent, __cf_bm, __cfruid, _cfuvid, _help_center_session, _pendo___sg__.<container-id>, _pendo_meta.<container-id>, _pendo_visitorId.<container-id>, _zendesk_authenticated, _zendesk_cookie, _zendesk_session, _zendesk_shared_session, ajs_anonymous_id, cf_clearance
Analysis and Marketing Cookies
Analysis cookies enable us to analyze your activities on our website in order to improve and adapt the functionality of our website.
The marketing cookies can be set through our website by our advertising partners in order to create a profile of your interests and to show you relevant advertisements on other websites.
Google Analytics & Google Tag Manager
_gid, _ga_<container-id>, _ga, _gat_gtag_<container-id>
Google Ads & DoubleClick
test_cookie, _gcl_au