TP-Link Easy Smart Switch security question
-
Depend of VLAN configuration & PVID settings if TL-SG108E switch IP is allocated on different subnet than normal clients (vlan);
using a browser, web management interface can't be accessed by clients;
however it can be accessed with Easy Smart Configuration Utility program that allow you also to change the switch IP… for home use is almost ok but not for Office / Enterprise use.A page for Linux users about TL-SG108E:
https://shred.zone/cilla/page/383/setting-up-tp-link-tl-sg108e-with-linux.html -
@http://us.dlink.com/products/business-solutions/dgs-1100-08p/:
The DGS-1100-08P, 10MP, -24P and -26MP comply with the 802.3af/at PoE+ standards, supporting up to 30W on each PoE port, not to exceed the switches specific power budget.
@http://us.dlink.com/products/business-solutions/dgs-1100-08p/#tab-spec:
Power Budget 64W
-
UK market products might be different.
-
@ecfx:
Depend of VLAN configuration & PVID settings if TL-SG108E switch IP is allocated on different subnet than normal clients (vlan);
using a browser, web management interface can't be accessed by clients;
however it can be accessed with Easy Smart Configuration Utility program that allow you also to change the switch IP..FWIW there are 2 versions of the TL-SG108E. Both can be managed by the config utility but only V2 has a browser config interface. Source: I have one of each.
-
Please do not go off-topic as this thread is about security concerns of TP-Link switch series.
-
I tried to use my TP-Link "Easy Smart Switch" in a different deployment and the VLAN1/MGMT issue bothered me again so I submitted some security feedback to them via their "Submit Security Feedback" forum. I outlined the issue the best I could and even linked directly to this forum.
I sure hope they respond, because according to TP-Link:
At TP-Link, customer security comes first. That’s why we work diligently to ensure that our products include the highest level of security features, with firmware and hardware that protect customers and their devices from the very latest threats.
If anyone has some free time to submit similar security feedback, it might help the cause: http://www.tp-link.com/us/security
-
All these "Easy Smart Switch" models have this "feature". I think this is intentionally like this, for very basic home users. To be "easy" to use the GUI…
You have to buy products from their series called "Smart Switches" or "Managed Switches", not the "Easy Smart Switches" series."Smart Switches" and "Managed Switches" don't exhibit these problems. I just deployed a network consisting of about 60 such switches in various sizes, all interconnected with optics and offering 2 dozens of VLANs, no unwanted traffic passing between them. On top of this, 2 CARP-enabled pfSense boxes do all the inter-VLAN traffic.
-
I email their support and technical few times, gave them a link to this thread and never got a response, you get what you pay for I guess.
-
If anyone has some free time to submit similar security feedback, it might help the cause: http://www.tp-link.com/us/security
Ironically, that page isn't available over HTTPS, so the entire form contents are in the clear.
-
It is there via https - just BAD
The certificate is only valid for the following names: *.akamaized.net, *.akamaihd-staging.net, *.akamaized-staging.net, *.akamaihd.net, a248.e.akamai.net
Agree yet another example of not really getting it ;)
-
It is there via https - just BAD
The certificate is only valid for the following names: *.akamaized.net, *.akamaihd-staging.net, *.akamaized-staging.net, *.akamaihd.net, a248.e.akamai.net
Agree yet another example of not really getting it ;)
Those are always there when a site is hosted on akamai but not using https.
-
TP-Link released beta firmware on July 2017 for both SG105E and SG108E, anyone care to try?
Link:
http://static.tp-link.com/TL-SG105E(UN)_V3_170717_Beta.rar
http://static.tp-link.com/TL-SG108E(UN)_V3_170717_Beta.rar -
did they release for v2?
-
Mmm, did they release for anything else? Is there an announcement anywhere?
Steve
-
Not that I could find.. Typical it seems for this company..
-
So my sg108e is directly connected to my cable modem with untagged VLAN x and PVID x.
How worried should I be about the VLAN 1 membership?
Wouldn't an attacker need to be in my cable/wan subnet? -
I would not use that switch on WAN. It's a sketchy enough proposition with a good switch with a proper management VLAN.
-
Security wise for a switch on WAN how about a RADIUS server?
Doesn't pfSense even have a package for that?
Never used it before so might not work at all?
-
What?
-
Will add about security of this devices…
TL-SG1016DE security of changes value without any authentication.
It from testing of my device… VLAN1 is problem.
Now SG1016DE used only internally.
