Home

M4100 Series Managed Switch User Manual

1. 0 cece eee eee e 68 Configure a DHCP L2 Relay VLAN 0 cece I 70 Configure the DHCP L2 Relay Interface 0 eee eee eee eee 71 View DHCP L2 Relay Interface Statistics 0 0 cece eee eee 72 Configure UDP Relay Global Settings 0 cece eee eee eee eee 73 Configure the UDP Relay Interface 0 eee ee 75 Configure the Basic PoE Settings 0 cece cece eee eee eee 76 Configure Advanced POE Settings necp ere ett rocatianamwnne ces 78 Configure a POE POIt sericis boRr RR RR eR RPRPEF ERIT EI RiNS 80 Configure SNMP Community Settings 0 ec cece eee eee 83 Configure an SNMP Tap 20 05 6 cssonennmnnmneseeeden prr e denis 84 Configure Trap Flags 442a bm rro rt had Maid ROI b er br der Chet ed 86 View All MIBs Supported by the Switch 0 cece eee ee eee 87 Configure SNMP v3 Settings for a User 0 cece eee eee eee 88 LLDP OVEIVIEW sc ccececeeb es causing Aniana CURE E EE EE eRe ER AUS A 90 Configure LLDP Global Settings 90 Configure an LEDP Interface 2o recessed aieo ter dee nca esans 91 view IDP SUC eearri ener nta oria inen ele tie e e e RARE 92 View LLDP Local Device Information 95 View LLDP Remote Device Information sssesleeeeeeeeese 96 View LLDP Remote Device INVENTORY uud desunt ete erem 98 Configure LLDP MED Global Settings 0 cece eee ee eee 99 Configure the LLDP MED Interface 0 cece eee
2. Hardware Revision The hardware version of the remote device Firmware Revision The Firmware version of the remote device Software Revision The Software version of the remote device Serial Number The serial number of the remote device Manufacturer Name The manufacturers name of the remote device Model Name The model name of the remote device Asset ID The asset ID of the remote device Location Information Specifies if the location TLV is received in LLDP frames on this port Sub Type The type of location information Location Information The location information as a string for given type of location ID Extended POE Specifies if the remote device is a PoE device Device Type The remote device s PoE device type connected to this port Extended POE PSE Specifies if the extended PSE TLV is received in LLDP frame on this port Available The remote port s PSE power value in tenths of watts Source The remote port s PSE power source Priority The remote port s PSE power priority Extended POE PD Specifies if the extended PD TLV is received in LLDP frame on this port Configure System Information 105 M4100 Series Managed Switch Table 30 LLDP MED remote device information continued Field Description The remote port s PD power requirement The remote port s PD power source The remote port s PD power priority View LLDP MED Remote Device Inventory To view L
3. ISDP Settings Overview You can configure ISDP global settings and the ISDP interface Configure ISDP Global Settings To configure ISDP global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt ISDP gt Basic gt Global Configuration Global Configuration Global Configuration Admin Mode Disable Enable Timer Hold Time Version 2 Advertisements Disable Enable Neighbors table last time changed 2 Days 01 15 07 Device ID 2ER1084000005 Device ID Format Capability Serial Number Host Name Device ID Format Serial Number Configure System Information 107 M4100 Series Managed Switch 8 Use Admin Mode to specify whether the ISDP service is to be Enabled or Disabled The default value is Enabled 9 Use Timer to specify the period of time between sending new ISDP packets The range is 5 to 254 seconds The default value is 30 s
4. Class table Displays the number of configured DiffServ classes out of the total allowed on the switch Class Rule table Displays the number of configured class rules out of the total allowed on the switch Policy table Displays the number of configured policies out of the total allowed on the switch Policy Instance table Displays the number of configured policy class instances out of the total allowed on the switch Configure Quality of Service 246 M4100 Series Managed Switch Table 73 Diffserv Configuration Field Description Policy Attributes table Displays the number of configured policy attributes attached to the policy class instances out of the total allowed on the switch Service table Displays the number of configured services attached to the policies on specified interfaces out of the total allowed on the switch Configure a DiffServ Class You can add a new DiffServ class name or rename or delete an existing class The screen also allows you to define the criteria to associate with a DiffServ class As packets are received these DiffServ classes are used to prioritize packets You can use multiple match criteria in a class The logic is a Boolean logical AND for this criteria After creating a class you can Click the class link to display the Class screen To configure a DiffServ class 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example
5. Enable The privileged EXEC password is used for authentication Line The line password is used for authentication None The user cannot be authenticated RADIUS The user s name and password are authenticated using the RADIUS server instead of local server TACACS The user s name and password are authenticated using the TACACS server Deny Authentication always fails To add a new login list to the switch click the ADD button To remove the selected authentication enable list from the configuration click the DELETE button You can use this button only if you are logged in as admin with Read Write access Click the APPLY button Your settings are saved Manage Device Security 277 M4100 Series Managed Switch Configure a Dot1x Authentication List You can configure a dot1x list A dot1x list specifies the authentication method s used to validate port access for the users associated with the list Only one dot1x method can be supported The default list is dot1 xList To configure a dot1x authentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen display
6. The number of input datagrams discarded because the IP address in their IP header s destination field was not a valid address to be received at this entity This count includes invalid addresses such as 0 0 0 0 and addresses of unsupported classes such as Class E For entities that are not IP gateways and therefore do not forward datagrams this counter includes datagrams discarded because the destination address was not a local address Routing 211 M4100 Series Managed Switch Table 66 IP statistics continued Field Description IpForwDatagrams The number of input datagrams for which this entity was not their final IP destination as a result of which an attempt was made to find a route to forward them to that final destination In entities that do not act as IP gateways this counter includes only those packets that were source routed through this entity and the source route option processing was successful IplnUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol IpinDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing but that were discarded such as for lack of buffer space Note that this counter does not include any datagrams discarded while awaiting re assembly IpinDelivers The total number of input datagrams successfully delivered to IP user p
7. The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt MLD Snooping gt Configuration MLD Snooping Configuration MLD Snooping Configuration MLD Snooping Admin Mode Disable Enable Multicast Control Frame Count 0 Interfaces Enabled for MLD Snooping VLAN IDs Enabled for MLD Snooping Use MLD Snooping Admin Mode to select the administrative mode for MLD snooping for the switch The default is Disable The following table describes the nonconfigurable information displayed on the screen Table 53 MLD Snooping Configuration Fd Demon S O Multicast Control Frame Count The number of multicast control frames that are processed by the CPU Configure Switching Information 174 gt M4100 Series Managed Switch Table 53 MLD Snooping Configuration Field Definition Interfaces Enabled for MLD A list of all the interfaces currently enabled for MLD snooping Snooping VLAN Ids Enabled For MLD Displays VLAN IDs enabled for MLD snooping Snooping Configure MLD Snooping for an Interface To configure MLD snooping for an interface 1 Prepare your computer with a static IP address in the 169 254 100 0 sub
8. You define MAC to VLAN mapping by configuring an entry in the MAC to VLAN table An entry is specified through a source MAC address and the desired VLAN ID The MAC to VLAN configurations are shared across all ports of the device for example system wide table has MAC address to VLAN ID mappings When untagged or priority tagged packets arrive at the switch and entries exist in the MAC to VLAN table the source MAC address of the packet is looked up If an entry is found the corresponding VLAN ID is assigned to the packet If the packet is already priority tagged it maintains this value otherwise the priority is set to zero The assigned VLAN ID is verified against the VLAN table If the VLAN is valid ingress processing on the packet continues otherwise the packet is dropped This implies that the user is allowed to configure a MAC address mapping to a VLAN that has not been created on the system Configure a MAC based VLAN group 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank
9. e M4100 Software Administration Manual When you log into the web management interface online help is available See Online Help on page 15 Register Your Product The first time you log in to the switch you are given the option of registering with NETGEAR Registration confirms that your email alerts work lowers technical support resolution time and ensures that your shipping address accuracy NETGEARE would also like to incorporate your feedback into future product development NETGEAR never sells or rents your email address and you can opt out of communications at any time To register with NETGEAR when you are prompted click the REGISTER NOW button Understanding the User Interfaces The managed switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods e Web user interface e Simple Network Management Protocol SNMP e Command line interface CLI Each of the standards based management methods allows you to configure and monitor the components of the managed switch software The method you use to manage the system depends on your network size and requirements and on your preference The M4100 Series Managed Switch User Manual this book describes how to use the web based interface to manage and monitor the system Get Started 12 M4100 Series Managed Switch Web Management Interface Overview Your managed switch contains
10. the last time the switch was reset Configure System Information 69 M4100 Series Managed Switch Configure a DHCP L2 Relay VLAN To configure a DHCP L2 Relay VLAN 1 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Services gt DHCP L2 Relay gt DHCP L2 Relay Global Configuration DHCP L2 Relay Configuration DHCP L2 Relay Global Configuration Admin Mode Disable Enable DHCP L2 Relay VLAN Configuration VLAN ID Admin Circuit ID Remote ID DONC A LEN ILES d LL Disable Disable Use Admin Mode to enable or disable the DHCP L2 Relay on the switch The default is Disable VLAN ID shows the VLAN ID configured on the switch Use Admin Mode to enable or disable the DHCP L2 Relay on the selected VLAN 10 Use Circuit ID Mode to enable or disable the Circuit ID suboption of DHCP Option 82 11 Use Remote ID String to spe
11. 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure Quality of Service 238 M4100 Series Managed Switch 6 Click the Login button The web management interface menu displays 7 Select QoS gt CoS gt Advanced gt CoS Interface Configuration CoS Interface Configuration CoS Interface Configuration CORE i NENNND o 0 0 0 0 0 0 0 0 0 0 1 LAGS All Go To Interface Go 802 1p 802 1p 802 1p 802 1p 802 1p 802 1p 802 1p 802 1p 802 1p 8 Use Interface to specify all CoS configurable interfaces 9 Use Interface Trust Mode to specify whether to trust a particular packet marking at ingress Interface Trust Mode can be only one of the following e untrusted e trust dotip e trust ip dscp The default value is trust dot1p 10 Use Interface Shaping Rate to specify the maximum bandwidth allowed typically used to shape the outbound transmission rate This value is controlled indepen
12. 10 M4100 Series Managed Switch Protocol Based Port Settings Protocol Based Global Settings Prioritization Type Traffic Class v Class Value 7 Protocol Based Port Settings Q 1 LAGS All Go To Interface Lco EET Auto VoIP Mode Operational Status 0 1 0 2 o 3 UP UP UP UP UP UP UP UP UP m m o momo LE J Use Prioritization Type to specify the type of prioritization It can be Traffic Class or Remark Use Class Value to specify the CoS tag value to be reassigned for packets received on the voice VLAN when Remark CoS is enabled Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure OUI Based Properties To display the OUI properties 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Configure Switching Information 141 gt 10 M4100 Series Managed Switch The default admin user name is adm
13. Last Attempt Time The local date and time UTC that this SNTP server was last queried Configure System Information 44 M4100 Series Managed Switch Table 9 SNTP server status continued Field Description Last Attempt Status The status of the last SNTP request to this server If no packet was received from this server a status of Other is displayed e Other None of the following enumeration values e Success The SNTP operation was successful and the system time was updated e Request Timed Out A directed SNTP request timed out without receiving a response from the SNTP server e Bad Date Encoded The time provided by the SNTP server is not valid e Version Not Supported The SNTP version supported by the server is not compatible with the version supported by the client e Server Unsynchronized The SNTP server is not synchronized with its peers This is indicated through the leap indicator field on the SNTP message Server Kiss Of Death The SNTP server indicated that no further queries were to be sent to this server This is indicated by a stratum field equal to 0 in a message received from a server Requests The number of SNTP requests made to this server since last agent reboot Failed Requests The number of failed SNTP requests made to this server since last reboot Configure Summer Time Settings To configure the summer time settings T Prepare your computer with a static
14. Manage Device Security 294 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Access gt Telnet TELNET Authentication List Login Authentication List networkList e Enable Authentication List enableNetList Inbound Telnet Telnet Server Admin Mode Disable Enable Allow new telnet sessions Disable Enable Session Timeout Minutes Maximum Number of Sessions Current Number of Sessions Outbound Telnet Allow new telnet sessions Disable Enable Session Timeout Minutes 5 Maximum Number of Sessions 5 Current Number of Sessions 0 The Current Number of Sessions field displays the number of current sessions 8 In the Outbound Telnet section select the Allow New Telnet Sessions Disable or Enable radio button The default value is Enable 9 In the Maximum Number of Sessions field specify the maximum number of Outbound Telnet Sessions allowed The default value is 5 The valid range is 0 to 5 10 In the Session Timeout field specify the Outbound Telnet login inactivity time out The default value is 5 The valid range is 1 to 160 Current Number of Sessions Displays the number of cur
15. Manage Device Security 327 M4100 Series Managed Switch The following four controls provide an easy way to enable or disable each type of packets to be rate limited on every port in a global fashion The effective storm control state of each port can be viewed by going to the port configuration screen Global Flow Control IEEE 802 3x Mode Select Disable or Enable The factory default is Disable Select the Broadcast Storm Control All Disable or Enable radio button This enables or disables the Broadcast Storm Recovery mode on all ports When you specify Enable for Broadcast Storm Recovery and the broadcast traffic on any Ethernet port exceeds the configured threshold the switch blocks discards the broadcast traffic The factory default is Enable Select the Multicast Storm Control All Disable or Enable radio button This enables or disables the Multicast Storm Recovery mode on all ports When you specify Enable for Multicast Storm Recovery and the multicast traffic on any Ethernet port exceeds the configured threshold the switch blocks discards the multicast traffic The factory default is Disable Select the Unknown Unicast Storm Control All Disable or Enable radio button This enables or disables the Unicast Storm Recovery mode on all ports When you specify Enable for Unicast Storm Recovery and the unicast traffic on any Ethernet port exceeds the configured threshold the switch blocks discards the unicast traffic The
16. Manage Device Security 337 M4100 Series Managed Switch 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Control gt IP Source Guard gt Binding Configuration To con IP Source Guard Binding Configuration Static Binding Configuration Interface MAC Address IP Address Filter Type Dynamic Binding Configuration 8 To configure static binding specify the following Interface Selects the interface to add a binding into the IPSG database Use MAC Address to specify the MAC address for the binding Use VLAN ID to select the VLAN from the list for the binding rule Use IP Address to specify valid IP address for the binding rule To add IPSG static binding entry into the database click the ADD button To delete selected static entries from the database click the DELETE button 9 Click the CLEAR button to clear all the dynamic binding entries 779207959 The following table describes the nonconfigurable information displayed on the screen Table 91 Dynamic Binding Configuration Fed Description 0000 Interface Displays the interface to add a binding i
17. Total Power RPS Displays the total power provided by the redundant power source Current source of system power Main AC or RPS Threshold Power System can power up one port if consumed power is less than this power That is consumed power can be between Nominal amp Threshold Power values The threshold power value is effected by changing System Usage Threshold Consumed Power Total amount of a power that is currently being delivered to all ports Configure Advanced PoE Settings gt To configure advanced PoE settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt PoE gt Advanced gt PoE Configuration Configure System Information 78 10 11 12 M4100 Series Managed Switch PoE Configuration Unit Selection Unit PoE Configuration Firmware Version Power Status Total Power Main AC Total Power RPS Power Sour
18. i Note To view the rest of the settings in this scren you must scroll to the right pp a n o Bw oO Dow o D a B o o o o D BEN BIN E 8 Use Go To Interface to enter the Interface in slot port format and click the Go button Routing 220 10 11 12 13 14 15 16 17 18 19 20 21 22 M4100 Series Managed Switch The entry corresponding to the specified interface is selected Use Port to select the interface Use Description to enter the description for the interface Use IP Address Configuration Method to enter the method by which an IP address is configured on the interface There are three methods None Manual and DHCP By default the method is None Method None should be used to reset the DHCP method Note When the configuration method is changed from DHCP to None there is a minor delay before the screen refreshes Use IP Address to enter the IP address for the interface Use Subnet Mask to enter the subnet mask for the interface This is also referred to as the subnet network mask and defines the portion of the interface s IP address that is used to identify the attached network Use Routing Mode to enable or disable routing for an interface The default value is enable Use Administrative Mode to enable or disable the administrative mode of the interface The default value is Enable This mode is not supported for Logical VLAN interfaces Use
19. 13 M4100 Series Managed Switch The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Protected Ports Protected Ports Configuration Protected Ports Configuration Group ID Group Name prot porti Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 viv v 49 50 51 52 In the Group ID list select a group of protected ports that can be combined into a logical group Traffic can flow between protected ports belonging to different groups but not within the same group The selection box lists all the possible protected port group IDs supported for the current platform The valid range of the group ID is 0 to 2 Use the optional Group Name field to associate a name with the protected ports group used for identification purposes It can be up to 32 alphanumeric characters long including blanks The default is blank This field is optional Click the orange bar to display the available ports Select the check box below each port to configure it as a protected port The selection list consists of physical ports protected as well as unprotected The protected ports are tick marked to differentiate between th
20. 8 Use ID to enter a whole number in the range of 1 to 511 This number is used to identify the rule 9 In the Action menu select permit or deny to specify what action is taken if a packet matches the rule s criteria 10 Use Assign Queue ID to specify the hardware egress queue identifier used to handle all packets matching this ACL rule The valid range of queue IDs is 0 to 7 11 Mirror Interface to specify the specific egress interface where the matching traffic stream is copied in addition to being forwarded normally by the device Manage Device Security 349 12 13 14 15 16 17 18 M4100 Series Managed Switch This field cannot be set if a redirect interface is already configured for the ACL rule This field is visible for a Permit action Use Redirect Interface to specify the specific egress interface where the matching traffic stream is forced bypassing any forwarding decision normally performed by the device This field cannot be set if a mirror interface is already configured for the ACL rule Use Match Every to specify an indication to match every Layer 2 MAC packet The valid values are as follows e True Every packet must match the selected ACL rule False It is not mandatory for every packet to match the selected ACL rule Use CoS to specify the 802 1p user priority to compare against an Ethernet frame The valid range of values is 0 to 7 Use Destination MAC to specify the destina
21. Configure Switching Information 181 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 55 MLD Snooping Querier VLAN Configuration Fed Deseription 0000 Operational State Specifies the operational state of the MLD snooping querier on a VLAN It can be in any of the following states e Querier The snooping switch is the querier in the VLAN The snooping switch sends out periodic queries with a time interval equal to the configured querier query interval If the snooping switch sees a better querier in the VLAN it moves to non querier mode Non Querier The snooping switch is in non querier mode in the VLAN If the querier expiry interval timer is expired the snooping switch moves into querier mode Disabled The snooping Querier is not operational on the VLAN The snooping querier moves to disabled mode when MLD snooping is not operational on the VLAN or when the querier address is not configured or the network management address is also not configured Operational Version Displays the operational MLD protocol version of the querier Last Querier Address Displays the IP address of the last querier from which a query was snooped on the VLAN Last Querier Version Displays the MLD protocol version of the last querier from which a query was snooped on the VLAN Operational Max Response Time Displays maximum response time to be used in the queries
22. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 188 M4100 Series Managed Switch 7 Select Switching gt MVR gt Advanced gt MVR Statistics Statistics Mvr Statistics IGMP Query Received IGMP Report V1 Received IGMP Report V2 Received IGMP Leave Received IGMP Query Transmitted IGMP Report V1 Transmitted IGMP Report V2 Transmitted IGMP Leave Transmitted IGMP Packet Receive Failures oO 00000000 o0 IGMP Packet Transmit Failures 8 Click the REFRESH button to refresh the screen to show the latest MVR statistics The following table describes the nonconfigurable information displayed on the screen Table 59 MVR Statistics Field Definition IGMP Query Received Displays the number of received IGMP queries IGMP Report V1 Received Displays the number of received IGMP reports V1 IGMP Report V2 Received Displays the number of received IGMP reports V2 IGMP Leave Received Displays the number of received IGMP leaves IGMP Query Tr
23. Forwarded Number of valid ARP packets forwarded by DAI Dropped Number of invalid ARP packets dropped by DAI Access Control List Overview Access control lists ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources ACLs are used to provide traffic flow control restrict contents of routing updates decide which types of traffic are forwarded or blocked and above all provide security for the network The managed switch software supports IPv4 IPv6 and MAC ACLs You first create an IPv4 based or IPv6 based or MAC based ACL ID Then you create a rule and assign it to a unique ACL ID Next you define the rules which can identify protocols source and destination IP and MAC addresses and other packet matching criteria Finally use the ID number to assign the ACL to a port or to a LAG Use the ACL Wizard The ACL Wizard helps you to create a simple ACL and apply it to the selected ports easily and quickly First you must select an ACL type to create an ACL Then add ACL rule to this ACL and apply this ACL on the selected ports The ACL Wizard allows you to create the ACL but doesn t allow you to modify it If you want to modify it go to the ACL configuration screen gt To use the ACL Wizard 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable fr
24. Note Use the horizontal scroll bar at the bottom of the screen to view all the fields on the Port Authentication screen Select the check box next to the port to configure Manage Device Security 303 M4100 Series Managed Switch You can select multiple check boxes to apply the same settings to the selected ports or select the check box in the heading row to apply the same settings to all ports 9 For the selected port s specify the following settings Control Mode This selector lists the options for control mode The control mode is set only if the link status of the port is link up The options are as follows force unauthorized The authenticator port access entity PAE unconditionally sets the controlled port to unauthorized force authorized The authenticator PAE unconditionally sets the controlled port to authorized auto The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server mac based The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server on a per supplicant basis N A The control mode is not applicable Use MAB to enable or disable MAP The default selection is Disable Quiet Period This input field allows the user to configure the quiet period for the se
25. Protocol Address This screen displays an entry for every active trap receiver Specify the Source Interface to be used for SNMP Trap manager Possible values are as follows e Routing interface e Routing VLAN e Routing loopback interface By default VLAN 1 is used as source interface To add a host that receives SNMP traps enter trap configuration information in the available fields described below and then click the ADD button e Community Name Enter the community string for the SNMP trap packet to be sent to the trap manager This can be up to 16 characters and is case sensitive e Version Select the trap version to be used by the receiver SNMP V1 Uses SNMP V1 to send traps to the receiver SNMP V2 Uses SNMP V2 to send traps to the receiver e Protocol Select the protocol to be used by the receiver Select IPv4 if the receiver s address is IPv4 address or IPv6 if the receiver s address is IPv6 e Address Enter the IPv4 address in x x x x format or the IPv6 address in XXXX 2000 XXXX 20000 XXXX XXXX XXXX XXxx format or a host name starting with a letter to receive SNMP traps from this device Length of address can not exceed 158 characters Configure System Information 85 M4100 Series Managed Switch e Status Select the receiver s status from the menu Enable Send traps to the receiver Disable Do not send traps to the receiver 10 To modify information about an existing SNMP recipient select t
26. Upload File To USB File Type Archive Image Name imagel USB File In the File Type list specify what type of file to upload e Archive Specify archive STK code when to retrieve from the operational flash Text Configuration Specify configuration in text mode to retrieve the stored configuration The factory default is Archive In the Image Name list select one of the images e Imaget Specify the code image to retrieve e Image2 Specify the code image to retrieve Maintenance 412 M4100 Series Managed Switch 10 In the USB File name field specify the file name and path for the file You can enter up to 32 characters The factory default is blank 11 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Download Files The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP Download Files gt To download a file 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin
27. When you create a VLAN using this screen its type is always Static A VLAN that is created by GVRP registration initially has atype of Dynamic When configuring a dynamic VLAN you can change its type to Static Reset VLAN Configuration Toreset VLAN configuration 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Configure Switching Information 121 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt VLAN Configuration VLAN Configuration Reset Reset Configuration Internal VLAN Configuration Internal VLAN Allocation Base 4093 Internal VLAN Allocation Policy Q Ascending Descending VLAN Configuration s VLAN ID VLAN Name VLAN Type Make Static apg default Default Disable 8 Select or clear the Reset Configuration check box If you select this check box and confirm your selection on the next
28. e Creates a VLAN and generates a unique name for VLAN e Adds selected ports to the newly created VLAN and removes selected ports from the default VLAN e Creates a LAG adds selected ports to a LAG then adds LAG to the newly created VLAN e Enables tagging on selected ports if the port is in another VLAN Disables tagging if a selected port does NOT exist in another VLAN e Excludes ports NOT selected from the VLAN e Enables routing on the VLAN using the IP address and subnet mask entered To use the VLAN Routing Wizard 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Routing gt VLAN gt VLAN Static Routing Wizard System Switching Routing QoS Security Monitoring Maintenance Help Index Routing Table IP VLAN ARP Router Discovery v VLAN Static VLAN Static Routing Wizard Routing Wizard VLAN Routing VLAN Static Routing Wizard Vlan ID rmm E
29. e Use SSL DH Weak Encryption Parameter PEM File to specify the SSL Diffie Hellman Weak Encryption Parameter File PEM Encoded e Use SSL DH Strong Encryption Parameter PEM File to specify the SSL Diffie Hellman Strong Encryption Parameter File PEM Encoded The factory default is Archive 9 Use Image Name to select one of the images from the list e Image1 Specify the code image1 to retrieve Maintenance 416 M4100 Series Managed Switch e Image2 Specify the code image to retrieve 10 If you are downloading an image Archive select the image on the switch to overwrite This field is visible only when Archive is selected as the File Type Note NETGEAR recommends that you not overwrite the active image The system displays a warning that you are trying to overwrite the active image 11 Click BROWSE to open a file upload window to locate the file to download 12 Use Select File to browse and select the name and the path for the file to download You can enter up to 80 characters The factory default is blank 13 Click the APPLY button The download starts The Download Status field displays the status during transfer file to the switch Note After a file transfer is started wait until the screen refreshes When the screen refreshes the Select File option is blanked out This indicates that the file transfer is done Download a File to a USB Device To download a file to a USB device 1 Prepa
30. such as voice or multimedia Quality of Service QoS can provide consistent predictable data delivery by distinguishing between packets with strict timing requirements from those that are more tolerant of delay Packets with strict timing requirements are given special treatment in a QoS capable network With this in mind all elements of the network must be QoS capable If one node is unable to meet the necessary timing requirements this creates a deficiency in the network path and the performance of the entire packet flow is compromised There are two basic types of QoS Configuration Examples 435 M4100 Series Managed Switch Integrated Services Network resources are apportioned based on request and are reserved resource reservation according to network management policy RSVP for example Differentiated Services Network resources are apportioned based on traffic classification and priority giving preferential treatment to data with strict timing requirements The managed switch support DiffServ The DiffServ feature contains a number of conceptual QoS building blocks you can use to construct a differentiated service network Use these same blocks in different ways to build other types of QoS architectures There are 3 key QoS building blocks needed to configure DiffServ e Class e Policy e Service for example the assignment of a policy to a directional interface Class You can classify incoming packe
31. 1 2 3 and so on to display the physical ports of the selected unit Select LAG to display a list of LAGs only Select CPU to display a list of CPUs only Select VLANs to display a list of available VLANs Select All to display a list of all physical ports LAG CPU and VLANs Select a specific interface by entering its number in the Go To Interface field 9 In the Interface list select an interface to specify the configured port s as mirrored port s Traffic of the configured port s is sent to the probe port 10 In the Direction list select a value to specify the direction of the traffic to be mirrored from the configured mirrored port s If the value is not configured None is displayed The default value is None None The value is not configured e Tx and Rx Monitor transmitted and received packets e Tx Monitor transmitted packets only e Rx Monitor received packets only Note For VLANs only the Tx and Rx and None options are applicable Monitoring the System 396 gt M4100 Series Managed Switch e Tx and Rx Specify VLAN as the source VLAN e None Remove the specified source VLAN If the VLAN is configured as the source VLAN its direction is displayed as a blank field Configure the RSPAN Destination Switch To configure the RSPAN destination switch 1 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect
32. 2 digit hexadecimal numbers separated by colons Destination MAC Mask This is a bit mask in the same format as MAC address indicating which parts of the destination MAC address to use for matching against packet content Protocol Type This lists the keywords for the Layer 4 protocols from which one can be selected The list includes other as an option for the remaining values Source IP Address This is a valid source IP address in the dotted decimal format Source Mask This is a bit mask in IP dotted decimal format indicating which parts of the source IP address to use for matching against packet content Source L4 Port This lists the keywords for the known source Layer 4 ports from which one can be selected The list includes other as an option for the unnamed ports Destination IP Address This is a valid destination IP address in the dotted decimal format DestinationMask This is a bit mask in IP dotted decimal format indicating which parts of the destination IP address to use for matching against packet content Destination L4 Port This lists the keywords for the known destination Layer 4 ports from which one can be selected The list includes other as an option for the unnamed ports IP DSCP This lists the keywords for the known DSCP values from which one can be selected The list includes other as an option for the remaining values Precedence Value This lists the keywords for the IP Precedence value in the range 0
33. 7 Select Maintenance gt Download gt HTTP File Download HTTP File Download HTTP File Download File Type Archive Image Name image1 2 Select File Choose File No file chosen Note To download SSH key files SSH must be administratively disabled and there can be no active SSH sessions Note To download SSL PEM files SSL must be administratively disabled and there can be no active SSH sessions 8 Use File Type to specify what type of file to transfer e Archive Specify archive STK code to upgrade the operational flash e Imaget Specify the code image1 to download Image2 Specify the code image2 to download e CLI Banner Specify CLI Banner when you want a banner to be displayed before the login prompt e Text Configuration Specify configuration in text mode to update the switch s configuration If the file has errors the update is stopped e Use Config Script to specify the script configuration file e Use SSH 1 RSA Key File to specify the SSH 1 Rivest Shamir Adleman RSA Key File e Use SSH 2 RSA Key PEM File to specify the SSH 2 Rivest Shamir Adleman RSA Key File PEM Encoded e Use SSH 2 DSA Key PEM File to specify the SSH 2 Digital Signature Algorithm DSA Key File PEM Encoded e Use SSL Trusted Root Certificate PEM File to specify the SSL Trusted Root Certificate File PEM Encoded e Use SSL Server Certificate PEM File to specify the SSL Server Certificate File PEM Encoded
34. Bridge Priority Bridge Max Age secs Bridge Hello Time secs Bridge Forward Delay secs Spanning Tree Maximum Hops Spanning Tree Tx Hold Count CST Status Bridge Identifier Time Since Topology Change Topology Change Count Topology Change Designated Root Root Path Cost Root Port Identifier Max Age secs Forward Delay secs Hold Time secs CST Regional Root CST Path Cost Port Triggered TC M4100 Series Managed Switch 80 00 2C B0 5D 91 F6 F0 1 day 0 hr 8 min 38 sec 1 False 80 00 00 07 03 05 05 06 40000 80 01 20 15 6 80 00 2C B0 5D 91 F6 F0 0 8 Specify values for CST in the appropriate fields Bridge Priority When switches or bridges are running STP each is assigned a priority After exchanging BPDUs the switch with the lowest priority value becomes the root bridge Specify the bridge priority value for the Common and Internal Spanning Tree CST The valid range is 0 61440 The bridge priority is a multiple of 4096 If you specify a priority that is not a multiple of 4096 the priority is automatically set to the next lowest priority that is a multiple of 4096 For example if the priority is attempted to be set to any value between 0 and 4095 it is set to 0 The default priority is 32768 Bridge Max Age secs Specifies the bridge maximum age time for the Common and Internal Spanning Tree CST which indicates the amount of time in seconds a bridge waits before implementing a topological cha
35. Click the APPLY button Your settings are saved Configure sFlow Interface Settings The sFlow agent collects statistical packet based sampling of switched flows and sends them to the configured receivers A data source configured to collect flow samples is called a sampler sFlow agent also collects time based sampling of network interface statistics and sends them to the configured sFlow receivers A data source configured to collect counter samples is called a poller To configure sFlow interface settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Monitoring the System 402 Ta 10 11 12 M4100 Series Managed Switch Select Monitoring gt sFlow gt Advanced gt sFlow Interface Configuration sFlow Interface Configuration sFlow Interface Configuration o 1 all Go Interface i Sa EN NN Receiver Sampling Maximum ndex a L
36. Click the Login button The web management interface menu displays Routing 229 M4100 Series Managed Switch Select Routing gt ARP gt Advanced gt ARP Table Configuration System Switching Routing QoS Security Monitoring Maintenance Help Index Routing Table IP VLAN ARP i Router Discovery Basic ARP Table Configuration v Advanced ARP Create ARP Table Age Time secs Configuration ARP Table Configuration Response Time secs 10 Retries 10 Cache Size 509 Dynamic Renew Disable Enable Total Entry Count Peak Total Entries Active Static Entries Configured Static Entries Maximum Static Entries Remove From Table To configure the ARP Table do the following Use Age Time to enter the value for the switch to use for the ARP entry ageout time You must enter a valid integer which represents the number of seconds it takes for an ARP entry to age out The range for this field is 15 to 21600 seconds The default value for Age Time is 1200 seconds e Use Response Time to enter the value for the switch to use for the ARP response time out You must enter a valid integer which represents the number of seconds the switch waits for a response to an ARP request The range for this field is 1 to 10 seconds The default value for Response Time is 10 seconds e Use Retries to enter an integer that specifies the maximum number of times an ARP request is retried The range for this field is 0 to 10 The de
37. Click the Login button The web management interface menu displays 7 Select System gt SNMP gt SNMP V1 V2 gt Community Configuration Community Configuration Community Configuration Community Name Client Address Client IP Mask Access Mode Status Read Only Enable Read Write Enable 8 In the Community Name list select an existing community name or select Create to create a new one A valid entry is a case sensitive string of up to 16 characters 9 To denote a range of IP addresses that SNMP clients can use to access this device complete the Client Address field and the Client IP Mask field If either the Client Address or IP Mask value is 0 0 0 0 access is allowed from any IP address Otherwise every client s address is ANDed with the mask as is the Client Address and if the values are equal access is allowed For example if the Client Address and Client IP Mask parameters are 192 168 1 0 255 255 255 0 then any client whose address is 192 168 1 0 through 192 168 1 255 inclusive is allowed access To allow access from only one station use a Client IP Mask value of 255 255 255 255 and use that machine s IP address for the Client Address 10 In the Access Mode list select Read Write or Read Only to specify the access level for this community 11 Use Status to specify the status of this community by selecting Enable or Disable If you select enable the community name must be unique among all valid com
38. Create the Pool Name list displays For a user with read only permission this list shows only the names of the existing pools This field appears when the user with read write permission selects Create in the Pool Name list Specifies the name of the pool to be created Pool Name can be up to 31 characters in length Specifies the type of binding for the pool e Unallocated Dynamic e Manual Specifies the subnet address for a DHCP address of a dynamic pool Network Mask Specifies the subnet number for a DHCP address of a dynamic pool Either Network Mask or Prefix Length can be configured to specify the subnet mask but not both Network Prefix Length Specifies the subnet number for a DHCP address of a dynamic pool Either Network Mask or Prefix Length can be configured to specify the subnet mask but not both The valid range is 0 to 32 Client Name Specifies the client name for DHCP manual pool Hardware Address Hardware Address Type Client ID Specifies the MAC address of the hardware platform of the DHCP client Specifies the protocol of the hardware platform of the DHCP client The valid types are Ethernet and ieee802 The default value is Ethernet Specifies the client Identifier for DHCP manual pool Host Number Host Mask Host Prefix Length Specifies the IP address for a manual binding to a DHCP client The host can be set only if at least one client Identifier or hardware address
39. EAS i Statistics Type Selection DiffServ Counter Mode Selector Octets Packets Configuration Class Configuration Service Statistics IPv6 Class Configuration Search By Interface v GO Policy z T z Garba upation Interface Di n Policy Operational Member Offered Discarded Sent v Name Status Classes Packets Octets Packets Octets Packets Octets Service Interface Configuration Service Statistics Counter Mode Selector specifies the format of the displayed counter values which must be either Octets or Packets The default is Octets Configure Quality of Service 259 M4100 Series Managed Switch The following table describes the information available on the Service Statistics screen Table 76 Service Statistics Fed _ Deseription 0000000 Interface List of all valid slot number and port number combinations in the system with a DiffServ policy currently attached in In direction Direction List of the traffic direction of interface as In Only shows the direction s for which a DiffServ policy is currently attached Policy Name Name of the policy currently attached to the specified interface and direction Operational Status Operational status of the policy currently attached to the specified interface and direction The value is either Up or Down Member Classes List of all DiffServ classes currently defined as members of the selected policy name Choose one member clas
40. Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Routing 210 7 Click Routing gt IP gt IP Statistics IP Statistics IpIni IpInAddrErrors IpForwDatagrams IpInUnknownProtos IpInDiscards IpInDelivers IpOutRequests IpOutDiscards IpReasmTimeout IpReasmReqds IpReasmOKs IpReasmFails IpFragOKs IpFragFails IcmpInDestUnreachs IcmpInTimeExcds IcmpInParmProbs IempInSrcQuenchs IcmpInRedirects IcmpInEchos IcmpInEchoReps IempInTimestamps IcmpInTimestampReps IcmpInAddrMasks IcmpInAddrMaskReps TcmpOutMsgs IcmpOut rrors TempOutSrcQuenchs IcmpOutRedirects IcmpOutEchos IcmpOutEchoReps IcmpOutTimestamps IempOutTimestampReps TempOutAddrMasks IcmpOutAddrMaskReps M4100 Series Managed Switch Basic gt Statistics The following table describes the nonconfigurable information displayed on the screen Table 66 IP statistics Field Description IpInReceives The total number of input datagrams received from interfaces including those received in error IpInHdrErrors The number of input datagrams discarded due to errors in their IP headers including bad checksums version number mismatch other format errors time to live exceeded errors discovered in processing their IP options and so on IpInAddrErrors
41. Field Description Total Packets Transmitted Octets The total number of octets of data including those in bad packets transmitted on the network excluding framing bits but including FCS octets This value can be used as a reasonable estimate of Ethernet utilization If greater precision is desired the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval Packets Transmitted 64 Octets The total number of packets including bad packets received that were 64 octets in length excluding framing bits but including FCS octets Packets Transmitted 65 127 Octets The total number of packets including bad packets received that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 128 255 Octets The total number of packets including bad packets received that were between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 256 511 Octets The total number of packets including bad packets received that were between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted 512 1023 Octets The total number of packets including bad packets received that were between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted
42. IP ToS i Bit Mask Class Summary Click the class name for an existing class The class configuration fields display Class Name Displays the name for the configured DiffServ class Class Type Displays the DiffServ class type Options All You can select a class type only when you are creating a new class After you create the class this becomes a nonconfigurable field displaying the class type that you selected Define the criteria to associate with a DiffServ class Match Every This adds to the specified class definition a match condition whereby all packets are considered to belong to the class e Reference Class This lists the class es that can be assigned as reference class es to the current class e Class of Service This lists all the values for the class of service match criterion in the range 0 to 7 from which one can be selected e VLAN This is a value in the range of 0 4095 Ethernet Type This lists the keywords for the Ethertype from which one can be selected Source MAC Address This is the source MAC address specified as six 2 digit hexadecimal numbers separated by colons e Source MAC Mask This is a bit mask in the same format as MAC address indicating which parts of the source MAC address to use for matching against packet content Configure Quality of Service 249 12 M4100 Series Managed Switch Destination MAC Address This is the destination MAC address specified as six
43. IPv6 management mode Enabled SNTP client Enabled SNTP server Not configured Global logging Enabled CLI command logging Disabled Console logging Enabled Severity level debug and above RAM logging Enabled Severity level debug and above Persistent FLASH logging Disabled Enabled No servers configured Enabled SNMPv1 SNMPv2 SNMP v3 SNMP Traps Enabled 427 M4100 Series Managed Switch Table 106 Factory default settings continued Feature Default Auto Install Enabled Auto Save Disabled sFlow Enabled ISDP Enabled Versions 1 and 2 RMON Enabled TACACS Not configured RADIUS Not configured SSH SSL Disabled Telnet Enabled Denial of Service Protection Disabled Dot1x Authentication Disabled IEEE 802 1 X MAC Based Port Security All ports are unlocked Access Control Lists ACL None configured IP Source Guard IPSG Disabled DHCP Snooping Disabled Dynamic ARP Inspection Disabled Protected Ports None Private Groups None Flow Control Support Enabled IEEE 802 3x Head of Line Blocking Prevention Disabled Maximum Frame Size 1518 bytes Auto MDI MDIX Support Enabled Auto Negotiation Enabled Advertised Port Speed Maximum Capacity Broadcast Storm Control Enabled Port Mirroring Disabled LLDP Enabled LLDP MED Disabled Default Settings 428 M4100 Series Managed Switch Table 106 Factory
44. In the Count field specify the number of contiguous MVR groups Configure Switching Information 185 M4100 Series Managed Switch It is a service option helping user to create multiple MVR groups through the single click of the ADD button If the field is empty then clicking the button creates only one new group The field is displayed as empty for each particular group The range is from 1 to 256 10 To add a new MVR group click the ADD button 11 To delete a selected MVR group click the DELETE button The following table describes the nonconfigurable information displayed on the screen Table 58 MVR Group Configuration Fes ooon O SOS Status Displays the status of the specific MVR group Members Displays the list of ports that participate in the specific MVR group Configure an MVR Interface To configure an MVR interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web man
45. LAG CPU and VLANs e Select a specific interface by entering its number in the Go To Interface field Select the Admin Mode True enabled or False disabled radio button for the selected Session When a session is enabled True any traffic entering or leaving the source ports of the session is copied mirrored onto the corresponding destination port or a remote switched port analyzer RSPAN VLAN By default Admin Mode is disabled False When disabled port mirroring is not active on the selected port but the mirroring information is retained In the Destination Port field specify the destination interface to which port traffic is to be copied You can configure only one destination port on the system It acts as a probe port and receives all the traffic from configured mirrored port s The default value is blank Select the check box next to an interface to specify the configured port s as mirrored port s Traffic of the configured port s is sent to the probe port Monitoring the System 392 gt 11 12 13 14 M4100 Series Managed Switch In the Direction menu specify the direction of the traffic to be mirrored from the configured mirrored port s If the value is not configured it is shown as None The default value is None The following values are available e None The value is not configured e Tx and Rx Monitors transmitted and received packets e Tx Monitors transmitted packets on
46. Product ID The USB flash drive device product ID USB Memory Statistics Total Size The USB flash device storage size Bytes Used The size of memory used on the USB flash device Bytes Free The size of memory free on the USB flash device USB Directory Details File Name The files stored in the USB flash drive File Size The size of the files stored in the USB flash drive Modification Time The last modification time of the file stored in the USB flash drive Manage Loopback Interfaces You can create configure and remove loopback interfaces gt To configure a loopback interface T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt Loopback Interface Loopback Interface Configuration IPv4 Loopback Interface Configuration Loopback Primary IP Primary IP Subnet Loopback Interface LT p Configure Syste
47. TACACS provides a centralized user management system while still retaining consistency with RADIUS and other authentication processes TACACS provides the following services Authentication Provides authentication during login and through user names and user defined passwords Authorization Performed at login When the authentication session is completed an authorization session starts using the authenticated user name The TACACS server checks the user privileges Manage Device Security 272 M4100 Series Managed Switch The TACACS protocol ensures network security through encrypted protocol exchanges between the device and TACACS server Configure Global TACACS Settings You can view or change the TACACS settings for communication between the switch and the TACACS server you configure through the inband management port To configure global TACACS settings 1 10 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login butto
48. Table 93 Interface Binding Status 324 Field Description Interface The interface of the ACL assigned Direction The selected packet filtering direction for the ACL ACL Type The type of ACL assigned to the selected interface and direction ACL ID The ACL number in the case of IP ACL or ACL name in the case of MAC ACL identifying the ACL assigned to the selected interface and direction Sequence Number The sequence number signifying the order of the specified ACL relative to other ACLs assigned to the selected interface and direction View or Delete MAC Bindings To view or delete MAC bindings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 353 M4100 Series Managed Switch 7 Select Security gt ACL gt Basic gt Binding Table MAC Binding Table MAC Binding Table ACL Sequence M terface oirein sala
49. The following table describes the nonconfigurable information displayed on the screen Table 81 SSH Configuration Field Description Current Number of SSH Sessions Displays the number of SSH connections currently in use in the system Keys Present Displays which keys RSA DSA or both are present if any Manage Device Security 288 Vv M4100 Series Managed Switch Manage Host Keys You can generate or delete RSA and DSA keys To manage Host Keys A Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt SSH gt Host Keys Management Host Keys Management RSA Keys Management Q None Generate RSA Keys Delete RSA Keys DSA Keys Management Q None Generate DSA Keys Delete DSA Keys Host Keys Status Keys Present Key Generation In Progress The Keys Present field displays which keys RSA DSA or both are presen
50. and a size greater than the configured ICMPv4 Pkt Size The factory default is disabled Use Denial of Service Max ICMPv4 Packet Size to specify the Max ICMPv4 Pkt Size allowed If ICMPv4 DoS prevention is enabled the switch drops IPv4 ICMP ping packets with a size greater than the configured Max ICMPv4 Pkt Size Its range is 0 to 16376 The default value is 512 Use Denial of Service ICMPv6 to enable ICMPv6 DoS prevention CMPv6 DoS prevention causes the switch to drop ICMPv6 packets with a type set to ECHO REQ ping and a size greater than the configured ICMPv6 Pkt Size The factory default is disabled Use Denial of Service Max ICMPv6 Packet Size to specify the Max IPv6 ICMP Pkt Size allowed If ICMPv6 DoS prevention is enabled the switch drops IPv6 ICMP ping packets with a size greater than this configured Max ICMPv6 Pkt Size Its range is 0 to 16376 The default value is 512 Manage Device Security 298 13 14 15 16 17 18 19 20 21 22 23 M4100 Series Managed Switch Use Denial of Service First Fragment to enable first fragment DoS prevention First fragment DoS prevention causes the switch to check DoS options on first fragment IP packets when switch are receiving fragmented IP packets Otherwise the switch ignores the first fragment IP packages The factory default is disabled Use Denial of Service ICMP Fragment to enabling ICMP fragment DoS prevention ICMP fragment DoS p
51. and so forth If more than one server is assigned the same priority then the requesting order follows the lexicographical ordering of the entries in this table The allowed range is 1 to 3 The default value is 1 e Version Enter the NTP version running on the server The range is 1 4 The default is 4 9 Click the ADD button 10 Repeat the previous steps to add additional SNTP servers You can configure up to three SNTP servers 11 To remove an SNTP server select the check box next to the configured server to remove and then click the DELETE button The entry is removed and the device is updated 12 To change the settings for an existing SNTP server select the check box next to the configured server and enter new values in the available fields and then click the APPLY button Configuration changes take effect immediately 13 Click the REFRESH button to refresh the screen with the most current data from the switch The SNTP Server Status table at the bottom of the screen displays status information about the SNTP servers configured on your switch The following table displays SNTP Server Status information Table 9 SNTP server status Field Description All the existing server addresses If no server configuration exists a message saying No SNTP server exists flashes on the screen Last Update Time The local date and time UTC that the response from this server was used to update the system clock
52. device e N A Indicates that PoE is not supported by the unit Configure System Information 27 Vv M4100 Series Managed Switch View Switch Statistics To view the switch statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt Switch Statistics Switch Statistics Statistics ifIndex Octets Received Packets Received Without Errors Unicast Packets Received Multicast Packets Received Broadcast Packets Received Receive Packets Discarded Octets Transmitted Packets Transmitted Without Errors Unicast Packets Transmitted Multicast Packets Transmitted Broadcast Packets Transmitted Transmit Packets Discarded Most Address Entries Ever Used Address Entries in Use Maximum VLAN Entries Most VLAN Entries Ever Used Static VLAN Entries Dynamic VLAN Entries VLAN Deletes Time Since Counters Last Cleared
53. factory default is Disable View Storm Control Settings for an Interface To view storm control settings for an interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 328 M4100 Series Managed Switch 7 Select Security gt Traffic Control gt Storm Control gt Storm Control Interface Configuration Port Configuration Port Configuration i All BE Flow Control 0 1 Disable 0 2 Disable 0 3 Disable GoTo Port eo ETT DIET m 77 Recovery Mode Recovery Level Type Recovery Level Control Action Recovery Mode Recovery Level Type Recovery Level Recovery Mode Recovery Level Type Recovery Level Enable Percent RateLimit Disable Percent Disable Percent Enable Percent RateLimit Disable Percent Disable Percent RateLimit Disable Percent The following table describes the nonconfigurable information displayed
54. mspt_api c 318 237 Interface 12 transitioned to root state on message age timer expiry This example indicates a message with severity 7 15 mod 8 debug on a system that is stacked and generated by component MSTP running in thread ID 2110 on Aug 24 05 34 05 by line 318 of file mstp_api c This is the 237th message logged with system IP 0 0 0 0 and task id 1 lt 15 gt Aug 24 05 34 05 STKO MSTP 2110 mspt_api c 318 237 Interface 12 transitioned to root state on message age timer expiry This example indicates a user level message 1 with severity 7 debug on a system that is not stacked and generated by component MSTP running in thread ID 2110 on Aug 24 05 34 05 by line 318 of file mstp_api c This is the 237th message logged Messages logged to a collector or relay through syslog use an identical format to the previous message Total number of Messages For the message log only the latest 200 entries are displayed on the screen Enable the Command Log To enable the command log 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin us
55. that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt Green Ethernet gt Green Ethernet Configuration System Switching Routing QoS Security Monitoring Maintenance Help Device View Services PoE SNMP LLDP ISDP Timer Schedule gt Initial Setup Green Ethernet Configuration gt System Information Switch Statistics Auto Power Down Mode Disable Enable System CPU Status EEE Mode Disable Enable USB Device Information Loopback Interface gt Management Interfaces gt Time gt DNS Green Ethernet Green Ethernet Green Ethernet Configuration Configuration Green Ethernet Interface Configuration 8 Select an Auto Power Down Mode Disable or Enable radio button The factory default is Enable When the port link is down the PHY automatically goes down for short period of time and then wakes up to check link pulses This allows the system to perform autonegotiation and save power consumption when no link partner is present 9 Select the EE Mode Disable or Enable radio button The default is Enable 10 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure Green Ethernet Interface Settings gt To configure green Ethernet in
56. the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Maintenance 425 M4100 Series Managed Switch Select Maintenance gt Troubleshooting gt Traceroute IPv6 Traceroute IPv6 Traceroute IPv6 IPv6 Address Host Name Port Results Use IPv6 Address Hostname to enter the IPv6 address or host name of the station you want the switch to discover path The initial value is blank The IPv6 address or host name you enter is not retained across a power cycle Use Port to enter the UDP Dest port in probe packets The initial value is the default value The port you enter is not retained across a power cycle Maintenance 426 Default Settings This appendix describes the default settings for many of the NETGEAR M4100 Managed Switch software features Factory Default Settings The following table describes the factory default settings for the switch Table 106 Factory default settings IP address 169 254 100 100 Subnetmask 258 255 00 Default gateway Protocol Management VLAN ID Minimum password length Eight characters
57. 0 1 600 450 1800 0 5 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Disable 224 0 0 1 600 450 1800 Go To Interface Go Eo mo Ho Mo Io o 8 Select the Interface check box for the router interface 9 Use Advertise Mode to select Enable or Disable If you select Enable router advertisements are transmitted from the selected interface 10 Use Advertise Address to select Enable or Disable If you select Enable router advertisements are transmitted from the selected interface 11 Use Maximum Advertise Interval to enter the maximum time in seconds allowed between router advertisements sent from the interface 12 Use Minimum Advertise Interval to enter the minimum time in seconds allowed between router advertisements sent from the interface The value must be in the range of 3 to 1800 The default value is 450 000000 13 Use Advertise Lifetime to enter the value in seconds to be used as the lifetime field in router advertisements sent from the interface This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts 14 Use Preference Level to specify the preference level of the router as a default router relative to other routers on the same subnet Higher
58. 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Configure Switching Information 132 M4100 Series Managed Switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt VLAN gt Advanced gt Protocol Based VLAN Group Membership Protocol Based VLAN Group Membership Protocol Based VLAN Group Membership Group ID BE Group Name CURRENT MEMBERS Port 1 23 4 5 6 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 y 5 9 vivid 25 26 27 28 Use Group ID to select the protocol based VLAN group ID Use Port List to add the ports you selected to this protocol based VLAN group A given interface can belong to only one group for a given protocol If you already added a port to a group for IP you cannot add it to another group that also includes IP although you could add it to a new group for IPX The following table describes the nonconfigurable information displayed on the screen Table 41 Protocol Based VLAN Group Membership Field Description Group Name This field identifies the name for
59. 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt Advanced gt Class Configuration Class Name Class Name Co ET 7 VoIP 8 To create a new class enter a class name select the class type and click the ADD button This field also lists all the existing DiffServ class names from which one can be selected Configure Quality of Service 247 M4100 Series Managed Switch The switch supports only the Class Type value All which means all the various match criteria defined for the class should be satisfied for a packet match All signifies the logical AND of all the match criteria You can select a class type only when you are creating a new class After you create the class this becomes a nonconfigurable field displaying the configured class type 9 To rename an existing class select the check box next to the configured class update the name and click the APPLY button 10 To remove a class select the check box b
60. 243 Configure the Global Diffserv Mode cece eee eee eee eee 245 Configure DiffServ Class 2 02e2ddx c3 dut aree iota ppl up Spices 247 Configure the Class Match Criteria 0 0 eee eee 248 Configure a DiffServ IPv6 Class 0 cece ence eee eee 250 Configure the DiffServ Class Match Criteria 0000005 252 Configure DiffServ Polley wi ssi ds dence sderiadackGte cacueaace saan 254 Configure DiffServ Policy Attributes 0 0 esee 255 Configure DiffServ Policy Settings on an Interface 0 257 View Service Statistics isseececseteseeet ewe RR RR a reor iiit 258 Chapter 6 Manage Device Security Management Security Settings ueus emere ws 262 Configure cris MEER CHR A 262 Set the Password fot a USer dx avene omwr e aieiia et pa sewed 263 Enable Password Configuration 0 cece ence eese 264 Configure a Line PassWord 5 aesebenetr er ere drer aes 265 Configure RADIUS Settings cssoeeee mm Ie mtm 266 Configure aRADIUS SSrVer ashes eso eo d ke reet dederis 268 Configure a RADIUS Accounting Server lsssees see eeeess 271 TACAGS oou sete david seen uU DONE USO UU ONE EM RSA 272 Configure Global TACACS Settings esee 273 Configure TACACS Server Settings lleieeseee ee eee eee 274 Set Up a Login Authentication List veo scnso servet etm hr m ne 275 Enable an Authentication List 0 cece cece eee eee aes 276
61. 303 M4100 Series Managed Switch View the Port SUMMARY esene gene he nie estre kesesini 306 Miewsthe Cent Summary a u 00 o Do asi ure lt cecnina top a ad odes 309 Traffic Controls oie ote rr RR RI RER ROI RAD EPSERE PIU aa 310 Configure MAC Filter Settings isses 310 View the MAC Filter Summary sssseeesesseeee ee 312 Configure the Global Port Security Mode 313 Configure Port Security Settings 0 cece eee eee eee 314 Convert a Dynamic MAC Address to a Static Address 315 Configure Static MAC Addresses 0 cece ence eee nee eee 316 Configure Private GROUD acie oo serrer bre ce teti bad a de i dade tendens 317 Configure Private Group Membership 00 e cece eee ees 318 Configure Protected Ports sacsiedctmiadeeicaastwemiondadasededwaed 319 Private VLAN OVGFVIeW i ioecrkes era reae eee ie pele rnan erbe rh ira 321 Configure a Private VLAN Type 2 cece I 321 Configure the Private VLAN Association eese 322 Configure the Private VLAN Port Mode 00sec eee eee eee 323 Configure Private VLAN Host Interface 0 eee 324 Configure Private VLAN Promiscuous Interface Settings 325 StormiControl OVEIVIBW uia cbersernee eot oUURPEOPPPRPChb PH REPE eee RES 327 Configure Storm Control Global Settings 00 eee eee eee 327 View Storm Control Settings for an Interface 0 e eee 328 Co
62. 5 percent of port speed for pps type Multicast Storm Recovery Mode Enable or disable this option by selecting the corresponding line on the entry field When you specify Enable for multicast storm recovery and the multicast traffic on the specified Ethernet port exceeds the configured threshold the switch blocks discards the multicast traffic The factory default is disabled Multicast Storm Recovery Level Type The multicast storm recovery level as a percentage of link speed or as packets per second Multicast Storm Recovery Level The threshold at which storm control activates The factory default is 5 percent of port speed for pps type Unicast Storm Recovery Mode Enable or disable this option by selecting the corresponding line on the entry field When you specify Enable for unicast storm recovery and the unicast traffic on the specified Ethernet port exceeds the configured threshold the switch blocks discards the unicast traffic The factory default is disabled Manage Device Security 329 M4100 Series Managed Switch Table 89 Storm control interface configuration Field Description Unicast Storm Recovery Level Type Specify the unicast storm recovery level as a percentage of link speed or as packets per second Unicast Storm Recovery Level Specify the threshold at which storm control activates The factory default is 5 percent of port speed for pps type Control DHCP Snooping S
63. 7 1 0 5 In Bound MAC ACL macACL O 1 0 9 In Bound MAC ACL macACL 1 To delete a MAC ACL to interface binding select the check box next to the interface and click the DELETE button The following table describes the information displayed in the MAC Binding Table Table 94 MAC Binding Table 324 Field Description The interface of the ACL assigned Direction The selected packet filtering direction for the ACL ACL Type The type of ACL assigned to the selected interface and direction ACL ID The ACL name identifying the ACL assigned to the selected interface and direction Sequence Number The sequence number signifying the order of the specified ACL relative to the other ACLs assigned to the selected interface and direction Configure an IP ACL An IP ACL consists of a set of rules that are matched sequentially against a packet When a packet meets the match criteria of a rule the specified rule action Permit Deny is taken and the additional rules are not checked for a match To configure an IP ACL 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the use
64. Admin Status Enable radio button In the Severity Filter list select a severity level A log records messages equal to or above a configured severity threshold These severity levels are available Emergency 0 The system is unusable Alert 1 Action must be taken immediately e Critical 2 Critical conditions Error 3 Error conditions Warning 4 Warning conditions Monitoring the System 384 M4100 Series Managed Switch e Notice 5 Normal but significant conditions Informational 6 Informational messages Debug 7 Debug level messages Configure the Syslog To configure the syslog T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Logs gt Sys Log Configuration Syslog Configuration Syslog Configuration Admin Status 9 Disable Enable Local UDP Port 514 Messages Received 205 Messages Relayed 0 Messages Ignored 0
65. Burst Size specifies the burst size of the IP ACL rule The valid values are 1 to 128 in Kbytes Time Range Name of the time range associated with the IP ACL rule e Rule Status Displays if the ACL rule is active or inactive Blank means that no timer schedules are assigned to the rule To delete an IP ACL rule select the check box associated with the rule and then click the DELETE button To update an IP ACL rule select the check box associated with the rule update the desired fields You cannot modify the rule ID of an existing IP rule Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Manage Device Security 357 M4100 Series Managed Switch Note To modify an existing IP extended ACL rule click the Rule ID The number is a hyperlink to the Extended ACL Rule Configuration screen Configure IP Extended Rules You can configure the rules for the IP access control lists that you created There is an implicit deny all rule at the end of an ACL list This means that if an ACL is applied to a packet and if none of the explicit rules match then the final implicit deny all rule applies and the packet is dropped To configure IP extended rules 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the s
66. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Manage Device Security 324 M4100 Series Managed Switch 6 Click the Login button The web management interface menu displays 7 Select Security gt Traffic Control gt Private VLAN gt Private VLAN Host Interface Configuration Private VLAN Host Interface Configuration Private VLAN Host Interface Configuration 1 LAGS All Go To Interface G LC EE e Host Primary VLAN Host Secondary VLAN Interf Oo ti I VLAN EDT 2 to 4093 2 to 4093 p s m 0 1 0 2 0 3 0 4 o s 0 6 0 7 0 8 0 9 0 10 0 11 O 0 12 1 LAGS All Go To Interface o m o mo E o mo o EN o mE o IE o EN o LU o o 0 The Interface field displays the selected physical or LAG interface The Operational VLANs fields display the operational VLANs 8 Use Host Primary VLAN to set the primary VLAN ID for Host Association mode The range of the VLAN ID is 2 4093 9 Use Host Secondary VLAN to set the secondary VLAN ID for Host Association mode The range of the VLAN ID is 2 4093 10 To
67. DNS servers click the DELETE button If no DNS server is specified then all the DNS Servers are deleted Configure Host Settings You can manually map host names to IP addresses or view dynamic DNS mappings To configure host settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 49 M4100 Series Managed Switch 7 Select System gt Management gt DNS gt Host Configuration DNS Host Configuration DNS Host Configuration Bl Host Name 1 to 255 characters IP Address Dynamic Host Mapping Host Total Elapsed Addresses 8 Specify the static host name to add Its length cannot exceed 255 characters and it is a mandatory field for the user 9 Specify the IP address in standard IPv4 dot notation to associate with the host name 10 Click the ADD button The entry appears in the list 11 To remove an entry from the sta
68. Enable Enable Auto Unknown Link Down Enable 1518 6 1 0 7 Norma Enable Enable Enable Auto Unknown Link Down Enable 1518 7 1 0 8 Normal Enable Enable Enable Auto Unknown LinkDown Enable 1518 8 1 0 9 Norma Enable Enable Enable Auto Unknown Link Down Enable 1518 9 8 Use Port to select the interface Configure Switching Information 194 10 11 12 13 14 15 M4100 Series Managed Switch Use STP Mode to select the Spanning Tree Protocol administrative mode for the port or LAG The possible values are as follows Enable Select this to enable the Spanning Tree Protocol for this port Disable Select this to disable the Spanning Tree Protocol for this port Use the Admin Mode menu to select the port control administration state You must select Enable if you want the port to participate in the network The factory default is enabled Use LACP Mode to select the Link Aggregation Control Protocol administration state The mode must be enabled in order for the port to participate in link aggregation The factory default is enabled Use the Physical Mode list to select the port s speed and duplex mode If you select auto the duplex mode and speed are set by the autonegotiation process Note that the port s maximum capability full duplex and speed is advertised Otherwise your selection determines the port s duplex mode and transmission rate The factory default is auto Use the Link Trap o
69. Enter the IP address of the switch in the web browser address field Configure Switching Information 152 10 11 12 13 14 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt STP gt Advanced gt CST Port Configuration CST Port Configuration CST Port Configuration 1 2 LAGS All GoTo Interface E Aip External pote Port Pi Admi Port Path icul BPI PI Ri Interface o e dien Suus Hello Timer Port Path External w cen cn Auto Edge wis toop TCN Guard Port Mode Foreant Priority Edge Port Cost Port Path Filter Forwarding Guard Guard Cost Port Path Cost Cost E E von Enable Enabled Enabled Disable Disable Disabled Disable Disable Disable Disable L O wy Enable 0 Enabled Disable Disable Disabled Disable Disable Disable Disable Disabled E uos Enable Enabled Disable Disable Disabled Disable Disable Disable Disabled O vor Enable Enabled Disable Disable Disabled Disable i Disable Disable Disabled E uos Enable Enabled Enabled Disable Disable Disabled Disable Disable Disable Disable Enable Disabled O os Enable Enabled Enabled Disable Disable Disabled Disable Disable Disable Disable Enable Disabled E uo Enabl
70. File Management Overview The system maintains two versions of the managed switch software in permanent storage One image is the active image and the second image is the backup image The active image is loaded during subsequent switch restarts This feature reduces switch down time when upgrading or downgrading the managed switch software Copy a File gt To copy a file 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Maintenance 418 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt File Management gt Copy Copy Copy Source Image image image2 Destination Image imagei image2 Use Source Image to select the image1 or image2 as source image when copy occurs Use Destination Image to select the image1 or image2 as destination image when copy occurs Configure Dual Image Settings The Dual Image feature allows the switch to retain two imag
71. I o X o 9 EN o E o mo Eo ooooooo0oo0oonso o ooooocooodoso coo Use the buttons at the bottom of the screen to perform the following actions e Toclear all the counters for all ports on the switch select the check box in the row heading and click the CLEAR button e To clear the counters for a specific port select the check box associated with the port and click CLEAR Monitoring the System 370 M4100 Series Managed Switch e To refresh the screen and display the current statistics click the REFRESH button The following table describes the port statistics fields Table 99 Port statistics Field Description Interface The interface of the interface table entry associated with this port on an adapter Total Packets Received Without Errors The total number of packets received that were without errors Packets Received With Error The number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol Broadcast Packets Received Packets Transmitted Without Errors Transmit Packet Errors Collision Frames The total number of good packets received that were directed to the broadcast address Note that this does not include multicast packets The number of frames that were transmitted by this port to its segment The number of outbound packets that could not be transmitted because of errors The best estimate of the total n
72. ISDP Advanced Global Configuration Field Description Neighbors table last time changed Displays when the Neighbors table last changed Device ID Displays the device ID of this switch Device ID format capability Displays the device ID format capability Device ID format Displays the device ID format Configure System Information 109 M4100 Series Managed Switch Configure the ISDP Interface To configure the ISDP Interface 1 8 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt ISDP gt Advanced gt Interface Configuration ISDP Interface Configuration Interface Configuration 1 All Go To Port Soj A E 0 ree 0 1 Enable 0 2 Enable 0 3 Enable Enable Enable Enable Enable Enable Enable Enable Enable Enable g 3 o D 1 Select the check box for the port on which the admin mode i
73. Interface to select the physical interface Select All to set the parameters for all ports to same values Select the Administrative Mode Disable or Enable radio button The default value is Disable 10 Use the 2 byte hex Global EtherType as the first 16 bits of the DVlan tag e 802 1Q Tag Commonly used tag representing 0x8100 e vMAN Tag Commonly used tag representing 0x88A8 e Custom Tag Configure the EtherType in any range from 0 to 65535 Configure Switching Information 135 M4100 Series Managed Switch Configure a Voice VLAN You can configure the parameters for a voice VLAN Only a user with Read Write access privileges can change the data on this screen To configure a voice VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt Voice VLAN Configuration Voice VLAN Configuration Voice VLAN Global Admin Ad
74. Manage Device Security 314 M4100 Series Managed Switch 7 Select Security gt Traffic Control gt Port Security gt Interface Configuration Port Security Interface Configuration Interface Configuration 1 2 LAGS All Go To Port 260 Max Allowed 2 a Max Allowed Statically Port Security Mode Dynamically Violation Trap Locked MAC Learned MAC Ot 1 0 1 Disable Disable 1 0 2 Disable Disable 1 0 3 Disable Disable 1 0 4 Disable Disable 1 0 5 Disable Disable 8 Port Selects the interface to be configured 9 Select the check box next to the port or LAG to configure Select multiple check boxes to apply the same setting to all selected interfaces Select the check box in the heading row to apply the same settings to all interfaces 10 Specify the following settings e Security Mode Enables or disables the port security feature for the selected interface e Max Allowed Dynamically Learned MAC Sets the maximum number of dynamically learned MAC addresses on the selected interface Max Allowed Statically Locked MAC Sets the maximum number of statically locked MAC addresses on the selected interface e Violation Traps Enables or disables the sending of new violation traps designating when a packet with a disallowed MAC address is received on a locked port Convert a Dynamic MAC Address to a Static Address You can convert a dynamically learned MAC address to a st
75. Monitoring the System 376 M4100 Series Managed Switch Table 100 Port Detailed Statistics screen fields continued Field Description Total Transmit Packets Discarded The sum of single collision frames discarded multiple collision frames discarded and excessive frames discarded Single Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision Multiple Collision Frames Excessive Collision Frames STP BPDUs Received A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision A count of frames for which transmission on a particular interface fails due to excessive collisions Number of STP BPDUs received at the selected port STP BPDUs Transmitted Number of STP BPDUs transmitted from the selected port RSTP BPDUs Received RSTP BPDUs Transmitted Number of RSTP BPDUs received at the selected port Number of RSTP BPDUs transmitted from the selected port MSTP BPDUs Received Number of MSTP BPDUs received at the selected port MSTP BPDUs Transmitted 802 3x Pause Frames Transmitted GVRP PDUs Received Number of MSTP BPDUs transmitted from the selected port A count of MAC control frames transmitted on this interface with an opcode indicating the PAUSE operation This counter does not incr
76. Number of RSTP BPDUs received at the selected port RSTP BPDUs Transmitted Number of RSTP BPDUs transmitted from the selected port MSTP BPDUs Received Number of MSTP BPDUs received at the selected port MSTP BPDUs Transmitted Number of MSTP BPDUs transmitted from the selected port Configure Switching Information 161 M4100 Series Managed Switch Configure Multicast You can configure bridge multicast forwarding and manage MFBD and IGMP snooping Configure Bridge Multicast Forwarding When you create a VLAN a default multicast forwarding option is assigned You can use the Global Multicast Mode setting to set all VLANs currently configured on the switch to a selected forwarding mode The global setting does not create a default setting for VLANs created subsequently it simply ensures that all existing VLANs are configured with the specified mode You can also configure how the switch forwards multicast packets on an individual or per VLAN basis gt To configure bridge multicast forwarding 1 8 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password T
77. Ping Global s IPv6 Address Host Name Datagram Size Result 8 Use Ping to select either global IPv6 address host name or link local address to ping 9 Use IPv6 Address Hostname to enter the IPv6 address or host name of the station you want the switch to ping T he initial value is blank The IPv6 address or host name you enter is not retained across a power cycle 10 Use Datagram Size to enter the datagram size The valid range is 48 to 2048 Results display after the switch sends a ping IPv6 request to the specified IPv6 address Run Traceroute IPv4 Use this screen to tell the switch to send a traceroute request to a specified IP address or host name You can use this to discover the paths packets take to a remote destination When you click the APPLY button the switch sends a traceroute and the results are displayed on the screen If a reply to the traceroute is received the following messages display 1 x y z w 9869 usec 9775 usec 10584 usec 2 0 0 0 0 0 usec 0 usec 0 usec 3 0 0 0 0 0 usec 0 usec 0 usec Hop Count w Last TTL z Test attempt x Test Success y gt To configure the traceroute settings and send probe packets to discover the route to a host on the network 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a w
78. Port ID 0 12 10 27 34 158 00 06 02 05 06 03 1 0 16 The following table describes the LLDP Remote Device Inventory fields Table 28 LLDP remote device inventory Field Description Port Specifies the list of all the ports on which LLDP frame is enabled Remote Device ID Specifies the remote device ID Management Address Specifies the advertised management address of the remote system MAC Address Specifies the MAC address associated with the remote system System Name Specifies model name of the remote device Remote Port ID Specifies the port component associated with the remote system Configure System Information 98 M4100 Series Managed Switch Configure LLDP MED Global Settings You can specify LLDP MED parameters that are applied to the switch gt To configure LLDP MED global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Se
79. STP RSTP or MSTP send information in configuration messages through bridge protocol data units BPDUS to assign port roles that determine each port s participation in a fully and simply connected active topology based on one or more spanning trees The information communicated is known as the spanning tree priority vector The BPDU structure for each of these different protocols is different A MSTP bridge transmits the appropriate BPDU depending on the received type of BPDU from a particular port An MST region comprises one or more MSTP bridges with the same MST configuration identifier using the same MSTIs and without any bridges attached that cannot receive and transmit MSTP BPDUs The MST configuration identifier has the following components 1 Configuration identifier format selector 2 Configuration name 3 Configuration revision level 4 Configuration digest 16 byte signature of type HMAC MD5 created from the MST Configuration Table a VLAN ID to MSTID mapping As there are multiple instances of Spanning Tree there is an MSTP state maintained on a per port per instance basis or on a per port per VLAN basis as any VLAN can be in one and only one MSTI or CIST For example port A can be forwarding for instance 1 while discarding for instance 2 The port states changed since IEEE 802 1D specification To support multiple spanning trees a MSTP bridge must be configured with an unambiguous assignment of VLAN IDs VIDs to span
80. Server Address field The factory default is IPv4 Use Server Address to enter the IP address or DNS host name of the server in accordance with the format indicated by the server address type The factory default is the IPv4 address 0 0 0 0 Use Remote File Path to enter the path of the file to download You can enter up to 96 characters The factory default is blank Use Remote File Name to enter the name of the file on the TFTP server to download You can enter up to 32 characters The factory default is blank Click the APPLY button The host key file starts downloading Note To download SSH key files SSH must be administratively disabled and there can be no active SSH sessions Manage Device Security 291 M4100 Series Managed Switch Manage Telnet You can configure a Telnet authentication list and manage outbound and inbound Telnet Configure a Telnet Authentication List You can select the login and make the authentication list available The login list specifies the authentication method s used to validate switch or port access for the users associated with the list The enable list specifies the authentication method s used to validate privileged EXEC access for the users associated with the list These lists can be created through the Authentication List link under Management Security gt To configure a Telnet authentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 su
81. Server Name field specify the name of the server e Use Port to specify the UDP port used by this server The valid range is 0 65535 e Secret Configured The secret is applied only if this option is Yes If the option is No anything entered in the Secret field has no effect and is not retained e Use Secret to specify the shared secret for this server e Use Primary Server to set the selected server as a primary or secondary server e Use Message Authenticator to enable or disable the message authenticator attribute for the selected server To add a new server to the switch click the ADD button This button is only available to users with read write permission Manage Device Security 269 M4100 Series Managed Switch 10 To remove the selected server from the configuration click the DELETE button This button is only available to users with Read Write permission 11 Click the APPLY button Your settings are saved 12 To reset the authentication server and RADIUS statistics to their default values click the Clear Counters button The following table describes the RADIUS server statistics available on the screen Table 78 RADIUS Server configuration statistics Fig JDeenpio S O Radius Server Displays the address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed Round Trip Time The time interval in hundredths of a second between the most recent Access Reply Acc
82. Switch Table 66 IP statistics continued Field Description IcmpOutEchoReps The number of ICMP Echo Reply messages sent IcmpOutTimestamps The number of ICMP Timestamp request messages IcmpOutTimestampReps The number of ICMP Timestamp Reply messages sent IcmpOutAddrMasks The number of ICMP Address Mask Request messages sent Configure Advanced IP Settings You can configure routing parameters for the switch as opposed to an interface gt To configure advanced IP settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Routing gt IP gt Advanced gt IP Configuration Routing 214 10 11 12 13 14 M4100 Series Managed Switch System Switching Routing QoS Security Monitoring Maintenance Help Routing Table IP VLAN ARP Router Discovery gt Basic IP Configuration v Advanced IP Configuration IP Conf
83. Table collects routes from multiple sources static routes and local routes The Routing Table can use multiple routes to the same destination from multiple sources The Routing Table lists all routes Configure Basic Routes To configure basic routes 1 10 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Routing gt Routing Table Basic gt Route Configuration Route Configuration Configure Routes Learned Routes Network Address 0 0 0 0 efaul atic vlan 10 130 84 1 10 130 84 0 255 255 255 128 n 10 130 84 37 Use the Route Type field to specify the default or static reject If you are creating a default route all that must be specified is the next hop IP address otherwise each field must be specified Network Address displays the IP route prefix for the destination Subnet Mask indicates the portion of the IP interface address that identifies the attached
84. Trust Mode to enable or disable an interface to be trusted for DHCP L2 Relay Option 82 received Configure System Information 71 M4100 Series Managed Switch View DHCP L2 Relay Interface Statistics To view the DHCP L2 Relay Interface Statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System Services DHCP L2 Relay DHCP L2 Relay Interface Statistics DHCP L2 Relay Interface Statistics DHCP L2 Relay Interface Statistics Q 1 LAGS All Messages With Opt82 Messages With Opt82 Messages Without Opt82 Messages Without Opt82 0 1 0 0 0 0 0 2 0 3 0 4 0 5 0 6 0 8 0 9 0 10 0 11 0 12 i LAGS All EN o m o I o I o I o m EN o E o I o II o I o IE EE o EO No E Oo LN Oo NN 0 0 0 0 0 0 7 0 0 0 0 0 0 Configure System Information 72 M4100 Series Managed Switch The following table describes the DHCP L2 Relay Interfac
85. Up to 32 characters can be entered The factory default is blank Use Remote File Name to enter the name of the file to download from the server You can enter up to 32 characters The factory default is blank Use User Name to enter the user name for remote login to SFTP SCP server where the file resides This field is visible only when the SFTP or SCP transfer mode is selected Use Password to enter the password for remote login to SFTP SCP server where the file resides This field is visible only when the SFTP or SCP transfer mode is selected The last row of the table is used to display information about the progress of the file transfer The screen refreshes automatically until the file transfer completes Download HTTP Files To download a file to the switch by using HTTP 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Maintenance 415 M4100 Series Managed Switch
86. access lists already assigned to this interface and direction A low number indicates high precedence order If a sequence number is already in use for this interface and direction the specified access list replaces the currently attached access list using that sequence number If you do not specify the sequence number a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used The valid range is 14294967295 Click the appropriate orange bar to expose the available ports or LAGs The Port Selection Table provides a list of all available valid interfaces for ACL binding All nonrouting physical interfaces VLAN interface and interfaces participating in LAGs are listed To add the selected ACL to a port or LAG click the box directly below the port or LAG number so that an X appears in the box e To remove the selected ACL from a port or LAG click the box directly below the port or LAG number to clear the selection An X in the box indicates that the ACL is applied to the interface Manage Device Security 352 M4100 Series Managed Switch 11 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 The following table describes the information displayed in the Interface Binding Status
87. address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Ports gt EAP Statistics EAP Statistics EAP Statistics 1 2 all Go To Interface EAPOL E F Capabilities Recei 1 0 1 Authenticator 0 1 0 2 Authenticator 0 1 0 3 Authenticator 0 1 0 4 Authenticator 0 1 0 5 Authenticator 0 1 0 6 Authenticator 0 1 0 7 Authenticator 0 Authenticator 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 00 00 00 00 00 00 0 3 E I ES oa LESE I oooooonoo ooooso0so o oM Eccc Use the buttons at the bottom of the screen to perform the following actions Toclear all the EAP counters for all ports on the switch select the check box in the row heading and click the CLEAR button e Toclear the counters for a specific port select the check box associated with the port and click the CLEAR button e To refresh the data on the screen and display the most current statistics click the REFRESH button Monitoring the System 378 v M4100 Series Managed Switch The following table describes EAP statistics Tabl
88. address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Routing gt Routing Table gt Advanced gt Route Configuration System Switchin QoS Security Monitorin Maintenance Hel Index Y g g P ing Table IP VLAN ARP Router Discovery gt Basic Route Configuration Advanced i ous Configure Routes Configuration gt Route Preferences Learned Routes Next Route Next Hop Gat ip Type Interface AV vlan 1 rotocol 0 0 0 0 0 0 0 0 Default Static 10 130 84 1 10 130 84 0 255 255 255 128 Local Connected vlan 1 10 130 84 37 8 In the Route Type field select default or static reject If you are creating a default route all that must be specified is the next hop IP address otherwise each field must be specified The fields that you must specify depend on your selections in this screen Network Address displays the IP route prefix for the destination e Subnet Mask indicates the portion of the IP interface address that identifies the attached network This is also referred to as the subnet network mask Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router if any in the path toward the destination The next router is always
89. algorithms can lose track of the number of fragments by combining them as they are received IpFragFails The number of IP datagrams that were successfully fragmented at this entity The number of IP datagrams that were discarded because they needed to be fragmented at this entity but could not be such as because their Don t Fragment flag was set IpFragCreates The number of IP datagram fragments that were generated as a result of fragmentation at this entity IpRoutingDiscards IcmpinMsgs The number of routing entries that were discarded even though they are valid One possible reason for discarding such an entry could be to free up buffer space for other routing entries The total number of ICMP messages that the entity received Note that this counter includes all those counted by icmplnErrors Routing 218 M4100 Series Managed Switch Table 68 IP statistics continued Field Description IcmpInErrors The number of ICMP messages that the entity received but determined as having ICMP specific errors bad ICMP checksums bad length and so on IcmpInDestUnreachs The number of ICMP Destination Unreachable messages received IcmpinTimeExcds IcmpinParmProbs The number of ICMP Time Exceeded messages received The number of ICMP Parameter Problem messages received IcmpinSrcQuenchs The number of ICMP Source Quench messages received IcmpinRedirects IcmpinEchos The numbe
90. are received IpFragOKs The number of IP datagrams that were successfully fragmented at this entity IpFragFails The number of IP datagrams that were discarded because they needed to be fragmented at this entity but could not be such as because their Don t Fragment flag was set Routing 212 M4100 Series Managed Switch Table 66 IP statistics continued Field Description IpFragCreates The number of IP datagram fragments that were generated as a result of fragmentation at this entity IpRoutingDiscards The number of routing entries that were discarded even though they are valid One possible reason for discarding such an entry could be to free up buffer space for other routing entries IcmpinMsgs The total number of ICMP messages that the entity received This counter includes all those counted by icmplnErrors IcmpinErrors The number of ICMP messages that the entity received but determined as having ICMP specific errors bad ICMP checksums bad length and so on IcmpInDestUnreachs IcmpinTimeExcds The number of ICMP Destination Unreachable messages received The number of ICMP Time Exceeded messages received IcmpinParmProbs The number of ICMP Parameter Problem messages received IcmpinSrcQuenchs IcmpinRedirects The number of ICMP Source Quench messages received The number of ICMP Redirect messages received IcmpinEchos The number of ICMP Echo request messag
91. as mapped to a traffic class by the current 802 1p mapping table Alternatively when a port is configured as untrusted it does not trust any incoming packet priority designation and uses the port default priority value instead All packets arriving at the ingress of an untrusted port are directed to a specific CoS queue on the appropriate egress ports in accordance with the configured default priority of the ingress port This process is also used for cases where a trusted port mapping is unable to be honored such as when a non IP packet arrives at a port configured to trust the IP DSCP value Configure Quality of Service 234 M4100 Series Managed Switch Configure CoS To configure CoS 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select QoS gt CoS gt Basic gt CoS Configuration CoS Configuration CoS Configuration Global i Global Trust Mode
92. can connect to the switch using the SNMP v3 protocol but for authentication and encryption the switch supports only one user which is admin therefore only one profile can be created or modified To configure authentication and encryption settings for the SNMP v3 admin profile 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt SNMP gt SNMP v3 gt User Configuration The User Configuration screen displays 8 To enable authentication select an Authentication Protocol option which is either MD5 or SHA 9 To enable encryption select the DES option in the Encryption Protocol menu Then enter an encryption code of eight or more alphanumeric characters in the Encryption Key field 10 Click the APPLY button Your settings are saved To access configuration information for SNMP V1 or SNMP V2 select System gt SNMP gt SNMPv1 v2 and select the screen t
93. computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Troubleshooting gt Ping IPv4 Ping Ipv4 Ping Details IP Address Host Name Count Interval secs Datagram Size Ping Use IP Address Host Name to enter the IP address or host name of the station you want the switch to ping The initial value is blank The IP address or host name that you enter is not retained across a power cycle Optionally configure the following settings Count Enter the number of echo requests to send The count you enter is not retained across a power cycle Maintenance 421 M4100 Series Managed Switch e Interval secs Enter the interval between ping packets in seconds The interval you enter is not retained across a power cycle e Datagram Size Enter the Size of ping packet The size you enter is not retained across a power cycle PING displays the result after the sw
94. creates a deficiency in the network path and the performance of the entire packet flow is compromised Class of Service The Class of Service CoS queueing feature lets you directly configure certain aspects of switch queueing This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required The priority of a packet arriving at an interface can be used to steer the packet to the appropriate outbound CoS queue through a mapping table CoS queue characteristics that affect queue mapping such as minimum guaranteed bandwidth or transmission rate shaping are user configurable at the queue or port level Eight queues per port are supported You can set the Class of Service trust mode of an interface Each port in the switch can be configured to trust one of the packet fields 802 1p or IP DSCP or to not trust any packet s priority designation untrusted mode If the port is set to a trusted mode it uses a mapping table appropriate for the trusted field being used This mapping table indicates the CoS queue to which the packet should be forwarded on the appropriate egress ports Of course the trusted field must exist in the packet for the mapping table to be of any use so there are default actions performed when this is not the case These actions involve directing the packet to a specific CoS level configured for the ingress port as a whole based on the existing port default priority
95. default settings continued Feature Default MAC Table Address Aging 300 seconds Dynamic Addresses DHCP Layer 2 Relay Disabled Default VLAN ID 1 Default VLAN Name Default GVRP Disabled GARP Timers Leave 60 centiseconds Leave All 1000 centiseconds Join 20 centiseconds Voice VLAN Disabled Guest VLAN Disabled RADIUS assigned VLANs Disabled Double VLANs Disabled Spanning Tree Protocol STP Enabled STP Operation Mode IEEE 802 1s Multiple Spanning Tree Optional STP Features Disabled STP Bridge Priority 32768 Multiple Spanning Tree Enabled Link Aggregation No link aggregation groups LAGs configured LACP System Priority 1 Routing Mode Disabled IP Helper and UDP Relay Enabled Tunnel and Loopback Interfaces None DiffServ Enabled Auto VoIP Enabled Auto VoIP Traffic Class 6 Bridge Multicast Filtering Disabled MLD Snooping Disabled IGMP Snooping Disabled IGMP Snooping Querier Disabled GMRP Disabled Default Settings 429 Configuration Examples This appendix contains information about how to configure the following features Virtual Local Area Networks Access Control Lists Differentiated Services DiffServ 802 1X MSTP 430 M4100 Series Managed Switch Virtual Local Area Networks A local area network LAN can generally be defined as a broadcast domain Hubs bridges or switches in the same physical segment or segm
96. delete a static MAC address from the switch click the DELETE button Configure Port Settings You can configure the physical interfaces on the switch gt To configure port settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Ports gt Port Configuration Port Configuration Port Configuration 1 2 LAGS All GoTo Port tid ix LACP F a Port Type STP mode Physical Mode Physical Status Link Status Link Trap ee 1 0 1 Norma Enable Enable Enable Auto 1000 Mbps Link Up Enable 1518 1 0 2 Normal Enable Enable Enable Auto Unknown Link Down Enable 1518 2 1 0 3 Norma Enable Enable Enable Auto Unknown Link Down Enable 1518 3 1 0 4 Normal Enable Enable Enable Auto Unknown Link Down Enable 1518 4 1 0 5 Norma Enable Enable Enable Auto Unknown Link Down Enable 1518 5 1 0 6 Normal Enable
97. eee eee 99 View LLDP MED Local Device Information sss sess 101 View LLDP MED Remote Device Information sisse esses 103 View LLDP MED Remote Device Inventory sssseeeeeeeeeeee 106 ISDP Settings OVerVIeW 26 0 999 S0 PUO devor bebe PEEL ed bug 107 Configure ISDP Global Settings 2n rrr rrr hp navi 107 Configure Advanced Global ISDP Settings 00 eee eee 108 Configure the ISDP Interface 2 23 0 tere meer teh LC RES 110 View ISDP NeighbOfss cse enekrarirhEpbreneth me rs pibeGucacd eat ab es 111 Mew SDP Statistics i c xS E PP P IUE t RU ved reee idii re 112 Configure TIMES eoe rer erre reato red meg RE RE EU ECEV EROR 114 Configure the Global Timer Settings 0 e cece eee eee eee 114 Configure the Timer Schedule 0 cece eee eee eee 115 Chapter 3 Configure Switching Information VEANIOVEIVIEW ci mpsmetece mat RE PERTRPRUQN EN Ne Ri FEvE Tee ah ages 118 Configure a Basic VLAN i 6b xata op epe OH Se tiis 118 Configure an Internal VLAN 00 cece eee eee ene eee eas 119 M4100 Series Managed Switch Adda VEAN 2 sccatekateeet Cos osassSeeacadaest bebinate tess edP 120 Reset VLAN Configurations 664 56 cendres asc 121 Configure Internal VLAN Settings 0 cece eee eee eee ee 122 Configure VLAN TRUNKING zs aa nbn tthis UEFA ERES 123 Configure VLAN Membership 000s ee 125 View VLAN StatUS seio bd Ree bread evo Pp here bcd ie
98. entries 13 Click CLEAR to delete all DHCP snooping binding entries Configure Persistent DHCP Snooping To configure persistent DHCP snooping 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 334 10 11 M4100 Series Managed Switch Select Security gt Control gt DHCP Snooping gt Persistent Configuration DHCP Snooping Persistent Configuration DHCP Snooping Persistent Configuration Store Local Remote Remote IP Address 0 0 0 0 Remote File Name 1 to 32 alphanumeric characters Write Delay 300 15 to 86400 seconds Use Store to select the local store or remote store Selecting Local disables the remote fields like Remote File Name and Remote IP address Use Remote IP Address to configure the remote IP address on which the snooping database is stored when Remote is selected Use Remote File Name to configu
99. extended IP ACL rule e Destination IP Mask Specify the IP mask in dotted decimal notation to be used with the destination IP address value e Destination L4 Port Specify the destination Layer 4 port match conditions for the selected extended IP ACL rule The possible values are DOMAIN ECHO FTP FTPDATA WWW HTTP SMTP SNMP TELNET and TFTP Each of these values translates into its equivalent port number which is used as both the start and end of the port range This is an optional configuration e Service Type Select a service type match condition for the extended IP ACL rule The possible values are IP DSCP IP precedence and IP TOS which are alternative ways of specifying a match criterion for the same Service Type field in the IP header however each uses a different user notation After you make a selection you can specify the appropriate e IP DSCP Specify the IP DiffServ Code Point DSCP field The DSCP is the high order six bits of the service type octet in the IP header This is an optional configuration To specify the IP DSCP select a keyword or select Other and enter an integer from 0 to 63 When you select Other a field displays where you can enter the numeric value of the DSCP IP Precedence The IP Precedence field in a packet is defined as the high order three bits of the service type octet in the IP header This is an optional configuration Enter an integer from O to 7 e IP TOS The IP TOS field in a pack
100. for a Permit action Use Redirect Interface to specify the specific egress interface where the matching traffic stream is forced bypassing any forwarding decision normally performed by the device This field cannot be set if a mirror interface is already configured for the ACL rule This field is visible for a Permit action Use Match Every to select True or False True signifies that all packets match the selected IPv6 ACL and rule and is either permitted or denied In this case since all packets match the rule the option of configuring other match criteria is not offered To configure specific match criteria for the rule remove the rule and re create it or reconfigure Match Every to False for the other match criteria to be visible Protocol There are two ways to configure IPv6 protocol a Specify an integer ranging from 1 to 255 after selecting protocol keyword other This number represents the IP protocol b Select the name of a protocol from the existing list of Internet Protocol IPv6 Transmission Control Protocol TCP User Datagram Protocol UDP and Internet Control Message Protocol ICMPv6 Use Source Prefix Prefix Length to specify IPv6 prefix combined with IPv6 prefix length of the network or host from which the packet is being sent Prefix length can be in the range 0 to 128 Use Source L4 Port to specify a packet s source Layer 4 port as a match condition for the selected IPv6 ACL rule Source port i
101. for the users associated with the list The preconfigured users admin and guest are assigned to a preconfigured list named defaultList which you cannot delete All newly created users are also assigned to the defaultList until you specifically assign them to a different list Two default lists are present DefaultList and networkList gt To set up a login authentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Management Security gt Authentication List gt Login Authentication List Login Authentication List Login Authentication ru DS etes T ed X UE CN EEE 2 a E defaultList Local networkList Local Manage Device Security 275 10 11 12 M4100 Series Managed Switch If you are creating a new login list complete the List Name field The list name can be up to 15 alphanumeric
102. indicating the number of times this rule was hit during the current report interval A fixed 5 minute report interval is used for the entire system A trap is not issued if the ACL rule hit count is zero for the current interval This field is visible for a Deny action Assign Queue ID Specifies the hardware egress queue identifier used to handle all packets matching this IP ACL rule The valid range of queue IDs is 0 to 7 Mirror Interface Specifies the specific egress interface where the matching traffic stream is copied in addition to being forwarded normally by the device This field cannot be set if a redirect interface is already configured for the ACL rule This field is visible for a Permit action Redirect Interface Specifies the specific egress interface where the matching traffic stream is forced bypassing any forwarding decision normally performed by the device This field cannot be set if a mirror Interface is already configured for the ACL rule This field is enabled for a Permit action Match Every Select True or False True signifies that all packets match the selected IP ACL and rule and is either permitted or denied In this case since all packets match the rule the option of configuring other match criteria is not offered To configure specific match criteria for the rule remove the rule and recreate it or reconfigure Match Every to False for the other match criteria to be visible Protocol Type Specify that a packet
103. information T1 through T4 are used to determine server time This is the preferred method for synchronizing device time because it is the most secure method If this method is selected SNTP information is accepted only from SNTP servers defined on the device using the SNTP Server Configuration screen The device retrieves synchronization information either by actively requesting information or at every poll interval Configure SNTP Global Settings You can view and adjust date and time settings SNTP stands for Simple Network Time Protocol As its name suggests it is a less complicated version of Network Time Protocol that is a system for synchronizing the clocks of networked computer systems primarily when data transfer is handled through the Internet To configure SNTP global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure System Information 38 M4100 Series Managed Switch 6 Click the Login button The web ma
104. information displayed on the screen Table 90 DHCP Snooping Statistics Fieis JDesnplon 000000 Interface The untrusted and snooping enabled interface for which statistics are to be displayed MAC Verify Failures Number of packets that were dropped by DHCP snooping as there is no matching DHCP snooping binding entry found Client Ifc Mismatch The number of DHCP messages that are dropped based on source MAC address and client HW address verification DHCP Server Msgs Received The number of server messages that are dropped on an untrusted port Configure an IP Source Guard Interface To configure an IP source guard interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Manage Device Security 336 10 M4100 Series Managed Switch Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt IP Source Guard gt Interface Configuration IP Source Guard Interface Configurat
105. interface on which the neighbor is discovered Address Displays the address of the neighbor Configure System Information 111 M4100 Series Managed Switch Table 34 ISDP Neighbor Field Description Capability Displays the capability of the neighbor These are supported Router Trans Bridge Source Route Switch Host IGMP Repeater Platform Display the model type of the neighbor 0 to 32 Port ID Display the port ID of the neighbor Hold Time Displays the hold time for ISDP packets that the neighbor transmits Advertisement Version Displays the ISDP version sending from the neighbor Entry Last Changed Time Displays the time since last entry was changed Software Version Displays the software version of the neighbor View ISDP Statistics To view ISDP statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configu
106. is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast MLD Snooping gt Querier VLAN Configuration MLD Snooping Querier VLAN Configuration MLD Snooping Querier VLAN Configuration Querier Operational Last Last Election Querier VLAN Operational Operational gt s Max VLAN ID Rie x Querier Querier Participate Address State Version Response Address Version Mode Time Use VLAN ID to specify the VLAN ID on which MLD snooping querier is administratively enabled and a VLAN exists in the VLAN database In the Querier Election Participate Mode list select Enable or Disable This enables or disables the MLD snooping querier participate in election mode When this mode is disabled up on seeing other querier of the same version in the VLAN the snooping querier move to non querier state Only when this mode is enabled does the snooping querier participate in querier election in which the lowest IP address wins the querier election and operates as the querier in that VLAN The other querier moves to non querier state In the Querier VLAN Address field specify the snooping querier address to be used as the source address in periodic MLD queries sent on the specified VLAN
107. must be in the range of 0 to 16 The default value is 16 The currently configured value is shown when the screen is displayed Configure HTTPS Settings Secure HTTP enables the transmission of HTTP over an encrypted Secure Sockets Layer SSL or Transport Layer Security TLS connection When you manage the switch by using a web interface secure HTTP can help ensure that communication between the management system and the switch is protected from eavesdroppers and man in the middle attacks You can configure the settings for HTTPS communication between the management station and the switch gt To configure HTTPS settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Manage Device Security 283 10 11 12 13 M4100 Series Managed Switch The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt HTTPS gt HTTPS Configuration HTTPS Configuration HTTPS Configuration HTTPS Admin M
108. network This is also referred to as the subnet network mask Routing 203 M4100 Series Managed Switch 11 Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router if any in the path toward the destination The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network 12 Preference displays an integer value from 1 to 255 You can specify the preference value sometimes called administrative distance of an individual static route Among routes to the same destination the route with the lowest preference value is the route entered into the forwarding database By specifying the preference of a static route the user controls whether a static route is more or less preferred than routes from dynamic routing protocols The preference also controls whether a static route is more or less preferred than other static routes to the same destination 13 Use Description to specify the description of this route The description must consist of alphanumeric hyphen or underscore characters It can be up to 31 characters in length 14 To add a new static route entry to the switch click the ADD button 15 To delete a static route entry from the switch click the DELETE button Click the REFRESH button to refresh the screen to show the latest learned routes The following table describes the nonconfigurable informati
109. notifications The range is from 5 to 3600 secs The default value is 5 seconds Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure an LLDP Interface To configure an LLDP interface T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 91 M4100 Series Managed Switch 7 Select System gt LLDP gt Interface Configuration LLDP Interface Configuration Interface Configuration 1 all Go To Port E M S j Operational TLV s Transmit Link Port Ed System System Transmit Receive Notify Ca EA Management Status Description Ed Description Capabilities B Information Li ooo L L 1 L 1 L 1 L 1 Enable Enable Down Enable Enable Disable Enable Ena
110. number of the port Port Uptime Since Last Clear Time since the counters were last cleared displayed in Days Hours Counters Minutes and Seconds Port Mode Spanning Tree Protocol Administrative Mode associated with the port or port channel The possible values are Enable or Disable Port Forwarding State The Forwarding State of this port Port Role Each MST bridge port that is enabled is assigned a Port Role for each spanning tree The port role is one of the following values root port designated port alternate port backup port master port or disabled Port Designated Root Root bridge for the selected MST instance It is made up using the bridge priority and the base MAC address of the bridge Designated Cost Path cost offered to the LAN by the designated port Designated Bridge Bridge identifier of the bridge with the designated port It is made up using the bridge priority and the base MAC address of the bridge Designated Port Port Identifier on the designated bridge that offers the lowest cost to the LAN It is made up from the port priority and the interface number of the port View Spanning Tree Statistics You can view information about the number and type of bridge protocol data units BPDUs transmitted and received on each port To view Spanning Tree statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet
111. number of ICMP error packets that are allowed per burst interval By default burst size is 100 packets When the burst interval is 0 then configuring this field is not a valid operation The valid burst size must be in the range 1 to 200 Use Select to configure Global Default Gateway to edit the Global Default Gateway field Use Global Default Gateway to set the global default gateway to the manually configured value A default gateway configured with this command is more preferred than a default gateway learned from a DHCP server Only one default gateway can be configured If you invoke this command multiple times each command replaces the previous value Routing 209 M4100 Series Managed Switch 15 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 View IP Statistics The statistics reported on this screen are as specified in RFC 1213 To view IP statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays
112. numbered addresses are preferred You must enter an integer 15 Click the APPLY button The updated configuration is sent to the switch Routing 232 Configure Quality of Service This chapter covers the following topics e QoS Overview e Class of Service e Differentiated Services 233 M4100 Series Managed Switch QoS Overview You can configure Quality of Service QoS settings on the switch In a typical switch each physical port consists of one or more queues for transmitting packets on the attached network Multiple queues per port are often provided to give preference to certain packets over others based on user defined criteria When a packet is queued for transmission in a port the rate at which it is serviced depends on how the queue is configured and possibly the amount of traffic present in the other queues of the port If a delay is necessary packets get held in the queue until the scheduler authorizes the queue for transmission AS queues become full packets cannot be held for transmission and get dropped by the switch QoS is a means of providing consistent predictable data delivery by distinguishing between packets with strict timing requirements from those that are more tolerant of delay Packets with strict timing requirements are given special treatment in a QoS capable network With this in mind all elements of the network must be QoS capable The presence of at least one node that is not QoS capable
113. numbers separated by colons for example 00 01 23 43 45 67 Then click the GO button If the address exists that entry is displayed An exact match is required The following table describes the nonconfigurable information displayed on the screen Table 50 MFDB table Fed Deseription 00000 MAC Address The multicast MAC address for which you requested data VLAN ID The VLAN ID to which the multicast MAC address is related Type This displays the type of the entry Static entries are those that are configured by the end user Dynamic entries are added to the table as a result of a learning process or protocol Component This is the component that is responsible for this entry in the Multicast Forwarding Database Possible values are IGMP snooping GMRP Static Filtering and MLD snooping Description The text description of this multicast table entry Possible values are Management Configured Network Configured and Network Assisted Forwarding Interfaces The resultant forwarding list is derived from combining all the forwarding interfaces and removing the interfaces that are listed as the static filtering interfaces View MFDB Statistics To view MFDB statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP addr
114. o DO NM EN o E o II o II o I o Io eC NE O NO MIO eC RO GONE o m o E o IX o I o mmo EN o mE o I o I o I o I Eo OC EO EO Lo bn EN o EN o mE o E o E o mE EN o m o E o X o IE o m The following table describes the LLDP Statistics fields Table 25 LLDP statistics Field Description Last Update Specifies the time when an entry was created modified or deleted in the tables associated with the remote system Total Inserts Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point MSAP was inserted into tables associated with the remote systems Configure System Information 93 M4100 Series Managed Switch Table 25 LLDP statistics continued Field Description Total Deletes Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point MSAP was deleted from tables associated with the remote systems Total Drops Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point MSAP could not be entered into tables associated with the remote systems because of insufficient resources Total Age outs Specifies the number of times the complete set of information advertised by a particular MAC Service Access Point MSAP was deleted from tables associated with the remote systems because the information timeliness interval has expired In
115. on IpinAddrErrors The number of input datagrams discarded because the IP address in their IP header s destination field was not a valid address to be received at this entity This count includes invalid addresses such as 0 0 0 0 and addresses of unsupported classes such as Class E For entities that are not IP gateways and therefore do not forward datagrams this counter includes datagrams discarded because the destination address was not a local address IpForwDatagrams The number of input datagrams for which this entity was not their final IP destination as a result of which an attempt was made to find a route to forward them to that final destination In entities that do not act as IP gateways this counter includes only those packets that were source routed through this entity and the source route option processing was successful IplnUnknownProtos The number of locally addressed datagrams received successfully but discarded because of an unknown or unsupported protocol Routing 217 M4100 Series Managed Switch Table 68 IP statistics continued Field Description IpInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing but that were discarded such as for lack of buffer space Note that this counter does not include any datagrams discarded while awaiting reassembly IpInDelivers IpOutRequests IpOutDiscards
116. on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button Get Started 13 M4100 Series Managed Switch The web management interface menu displays Web Interface Buttons and User Defined Fields The following table shows the command buttons that are used throughout the screens in the web interface Table 1 Web interface command buttons Button Function ADD Clicking the ADD button adds the new item configured in the heading row of a table APPLY Clicking the APPLY button sends the updated configuration to the switch Configuration changes take effect immediately CANCEL Clicking the CANCEL button cancels the configuration on the screen and resets the data on the screen to the previous values of the switch DELETE Clicking the DELETE button removes the selected item fare Clicking the REFRESH button refreshes the screen with the latest information from the device LOGOUT Clicking the LOGOUT button ends the session User defined fields can contain 1 to 159 characters unless otherwise noted on the configuration web screen All characters can be use
117. one of the adjacent neighbors or the IP address of the local interface for a directly attached network Routing 205 M4100 Series Managed Switch e Preference displays an integer value from 1 to 255 You can specify the preference value sometimes called administrative distance of an individual static route Among routes to the same destination the route with the lowest preference value is the route entered into the forwarding database By specifying the preference of a static route the user controls whether a static route is more or less preferred than routes from dynamic routing protocols The preference also controls whether a static route is more or less preferred than other static routes to the same destination 9 In the Description field specify the description of this route The description must consist of alpha numeric hyphen or underscore characters It can be up to 31 characters in length 10 To add a new static route entry to the switch click the ADD button 11 To delete a static route entry from the switch click the DELETE button Click the REFRESH button to refresh the screen to show the latest learned routes The following table describes the nonconfigurable information displayed on the screen Table 65 Route Configuration Learned Routes Table Fieis Deseription 0000000000 Network Address The IP route prefix for the destination Subnet Mask Also referred to as the subnet network mask this indica
118. password 6 Click the Login button The web management interface menu displays Routing 222 M4100 Series Managed Switch 7 Select Routing gt IP gt Advanced gt Secondary IP System Switching Routing QoS Security Monitoring Maintenance Help Index Routing Table IP VLAN ARP Router Discovery Basic Secondary IP Address v Advanced IP Configuration Statistics Interface IP Interface Configuration Secondary IP Address fe Secondary IP VLAN Primary IP Secondary IP Secondary IP ID Address Address Subnet Mask Routing Interface The screen displays the VLAN ID and primary IP address for this interface 8 In the Routing Interface list select the interface 9 In the Secondary IP Address field add a secondary IP address to the selected interface 10 In the Secondary IP Subnet Mask field enter the subnet mask for the interface This is also referred to as the subnet network mask and defines the portion of the interface s IP address that is used to identify the attached network This value is read only once configured 11 To add a secondary IP address for the selected interface click the ADD button 12 To delete the secondary IP address from the selected interface click the DELETE button VLAN Overview You can configure managed switch software with some ports supporting VLANs and some supporting routing You can also configure the software to allow traffic on a VLAN to be treated a
119. port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Port Security gt Port Administration Port Security Configuration Port Security Settings Port Security Mode Disable Enable Port Security Violations 2 Port Last Violation MAC VLAN ID In the Port Security Mode field select the appropriate radio button to enable or disable port security on the switch Manage Device Security 313 M4100 Series Managed Switch The Port Security Violations table shows information about violations that occurred on ports that are enabled for port security The following table describes the fields in the Port Security violations table Table 86 Port Security Configuration Field Description Displays the physical interface Last Violation MAC Displays the source MAC address of the last packet that was discarded at a locked port VLAN ID Displays the VLAN ID corresponding to the last violation MAC address Configure Port Security Settings A MAC address can be defined as allowable by one of two methods dynamical
120. refresh the switch information click the REFRESH button The following table describes the Device Status information Table 4 Device status Field Description Firmware Version Boot Version CPLD Version The release version maintenance number of the code currently running on the switch For example if the release was 1 the version was 2 and the maintenance number was 4 the format would be 1 2 4 The version of the boot code that is in the flash memory to load the firmware into the memory The version of the software for CPLD Serial Number The serial number of this switch AC Remote Indicates the status of the appropriate power module in each unit Status can be any of the following OK Power module is present and functioning properly e Not Present Power module is not present in the slot e No power Power module is present but not connected to the power source e Not powering Power module is present and connected but the switch uses another power source e Incompatible Power module is present but incompatible Failed Power module is present but power cable is not plugged in or a bad cable is plugged n PoE Version Version of the PoE controller FW image MAX PoE Indicates the status of maximum PoE power available on the switch as follows e ON Indicates less than 7W of PoE power available for another device e OFF Indicates at least 7W of PoE power available for another
121. returns a response 10 Select the Accounting Mode Disable or Enable radio button This specifies whether the RADIUS accounting mode is enabled or disabled on the current server 11 Select the RADIUS attribute 4 Disable or Enable radio button to enable or disable RADIUS attribute 4 The default value is Disable The Radius Attribute 4 Value is an optional field and can be seen only when Radius attribute 4 Mode is enabled It takes an IP address value in the format Xx Xx Xx xx The following table describes the nonconfigurable information displayed on the screen Table 77 RADIUS Configuration Field Description Current Server Address The address of the current server This field is blank if no servers are configured Number of Configured Displays the number of configured authentication RADIUS servers The Authentication Servers value can range from 0 to 32 Number of Configured Accounting Displays the number of RADIUS accounting servers configured The Servers value can range from 0 to 32 Number of Named Authentication Displays the number of named RADIUS server authentication groups Server Groups configured Number of Named Accounting Displays the number of Named RADIUS server accounting groups Server Groups configured Configure a RADIUS Server You can view and configure various settings for the current RADIUS server configured on the system gt To configure a RADIUS server 1 Prepare your comp
122. round trip delay and local clock offset relative to the server Broadcast SNTP operates in the same manner as multicast mode but uses a local broadcast address instead of a multicast address The broadcast address was a single subnet scope while a multicast address has Internet wide scope The default value is Disable 10 Use Port to specify the local UDP port to listen for responses or broadcasts The allowed range is 1 to 65535 The default value is 123 11 Specify the Source Interface to be used for SNTP Client Possible values are as follows Routing interface Routing VLAN Configure System Information 39 12 13 14 15 16 17 18 M4100 Series Managed Switch e Routing loopback interface By default VLAN 1 is used as the source interface Use Unicast Poll Interval to specify the number of seconds between unicast poll requests expressed as a power of two when configured in unicast mode The allowed range is 6 to 10 The default value is 6 Use Broadcast Poll Interval to specify the number of seconds between broadcast poll requests expressed as a power of two when configured in broadcast mode Broadcasts received prior to the expiry of this interval are discarded The allowed range is 6 to 10 The default value is 6 Use Unicast Poll Timeout to specify the number of seconds to wait for an SNTP response when configured in unicast mode The allowed range is 1 to 30 The default value is
123. screen all VLAN configuration parameters are reset to their factory default values Also all VLANs except for the default VLAN are deleted The factory default values are as follows e All ports are assigned to the default VLAN of 1 e All ports are configured with a PVID of 1 e All ports are configured to an Acceptable Frame Types value of Admit All Frames All ports are configured with ingress filtering disabled e All ports are configured to transmit only untagged frames e GVRP is disabled on all ports and all dynamic entries are cleared Configure Internal VLAN Settings You can view the allocation base and the allocation mode of internal VLAN The internal VLAN is reserved by port based routing interface and invisible to the end user Once these internal VLANs are allocated by port based routing interface they cannot be assigned to a routing VLAN interface gt To configure internal VLAN settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure Switching Information 122 M4100 Series Managed Switch 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user n
124. selected interface and direction Sequence Number The sequence number signifying the order of specified ACL relative to other ACLs assigned to the selected interface and direction View or Delete IP ACL Bindings To view or delete the IP ACL bindings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Manage Device Security 366 6 Lf 8 M4100 Series Managed Switch Click the Login button The web management interface menu displays Select Security gt ACL gt Advanced gt Binding Table IP ACL Binding Table IP ACL Binding Table ACL Sequence Interf Directi ACL T 1 0 8 In Bound IP ACL To delete an IP ACL to interface binding select the check box next to the interface and click the DELETE button The following table describes the information displayed in the IP ACL Binding Table Table 97 IP ACL Binding Table Field Description Interface The selected interface Direction The selected packe
125. selected interface cannot exceed the defined maximum 100 e Use Scheduler Type to specify the type of scheduling used for this queue Options are Weighted and Strict Defining on a per queue basis allows the user to create the desired service characteristics for different types of traffic e Weighted Weighted round robin associates a weight to each queue This is the default e Strict Services traffic with the highest priority on a queue first Queue Management Type displays the Queue depth management technique used for queues on this interface This is used only if the device supports independent settings per queue Queue Management Type can only be tailDrop All packets on a queue are safe until congestion occurs At this point any additional packets queued are dropped 10 Click the APPLY button Your changes are applied to the system Differentiated Services The QoS feature contains Differentiated Services DiffServ support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per hop behaviors Standard IP based networks are designed to provide best effort data delivery service Best effort service implies that the network delivers the data in a timely fashion although this can depend on the environment During times of congestion packets might be delayed sent sporadically or dropped For typical Internet applications such as email and file transfer a slight degr
126. setting for that port s VLAN membership properties A U for a given port means that packets leaving the switch from that port are untagged Inversely a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port The example given in this section comprises numerous steps to illustrate a wide range of configurations to help provide an understanding of tagged VLANs VLAN Example Configuration This example demonstrates several scenarios of VLAN use and describes how the switch handles tagged and untagged traffic In this example you create two new VLANs change the port membership for default VLAN 1 and assign port members to the two new VLANs 1 In the Basic VLAN Configuration screen create the following VLANs e A VLAN with VLAN ID 10 e A VLAN with VLAN ID 20 S See Configure a Basic VLAN on page 118 In the VLAN Membership screen specify the VLAN membership as follows e For the default VLAN with VLAN ID 1 specify the following members port 7 U and port 8 U e For the VLAN with VLAN ID 10 specify the following members port 1 U port 2 U and port 3 T e For the VLAN with VLAN ID 20 specify the following members port 4 U port 5 T and port 6 U See Configure VLAN Membership on page 125 In the Port PVID Configuration screen specify the PVID for ports g1 and g4 so that packets entering these ports are tagged with the port VLAN
127. snooping dynamic binding 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button Manage Device Security 333 7 8 9 M4100 Series Managed Switch The web management interface menu displays Select Security gt Control gt DHCP Snooping gt Binding Configuration DHCP Snooping Binding Configuration Static Binding Configuration Interface MAC Address VLAN ID IP Address A A Dynamic Binding Configuration The Interface field displays the interface to which a binding entry is associated in the DHCP snooping database Use MAC Address to display the MAC address for the binding in the binding database 10 Use VLAN ID to display the VLAN for the binding entry in the binding database The range of the VLAN ID is 1 to 4093 11 Specify the IP Address This is the IP address for the binding entry in the binding database 12 Lease Time Displays the remaining lease time for the dynamic
128. snooping querier Only a user with Read Write access privileges can change the data on this screen To configure the MLD snooping querier 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 179 M4100 Series Managed Switch 7 Select Switching gt Multicast gt MLD Snooping gt Querier Configuration MLD Snooping Querier Configuration MLD Snooping Querier Configuration Querier Admin Mode Disable Enable Querier Address MLD Version Query Interval secs Querier Expiry Interval secs VLAN Ids Enabled for MLD Snooping Querier 8 Select the Querier Admin Mode Disable or Enable radio button This specifies the administrative mode for MLD snooping for the switch The default is Disable 9 Inthe Querier Address field specify the snooping querier address to be used as source address in periodic MLD queries This add
129. switch Configure Auto Install gt To configure Auto Install 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field Maintenance 405 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Maintenance gt Save Config gt Auto Install Configuration System Switching Routing QoS Security Monitoring Maintenance Help Index onfig Reset Upload Download File Management Troubleshooting Save Configuration Auto Install Configuration v Auto Install Configuration Auto Install Configuration AutoInstall Mode Stop Y AutoInstall Persistent Mode Enabled AutoSave Mode Disabled AutoInstall Retry Count 3 AutoInstall State AutoInstall is completed 8 Use Auto Install to select the start stop auto install mode on the switch 9 Use Autolnstall Persistent Mode to enable disable Autolnstall persistent mode 10 In the AutoSave Mode to select Enabled or Disabled and click the APP
130. switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 34 M4100 Series Managed Switch 7 Select System gt Management gt Management Interfaces gt IPv6 Network Neighbor Table IPv6 Network Interface Neighbor Table IPv6 Network Interface Neighbor Table Neighbor Last IPv6 Address MAC Address State Updated The following table displays IPv6 Network Interface Neighbor Table information Table 7 IPv6 Network Interface Neighbor Table Field Description IPv6 address The Ipv6 address of a neighbor switch visible to the network interface MAC address The MAC address of a neighbor switch IsRtr True 1 if the neighbor machine is a router false 2 otherwise Neighbor State The state of the neighboring switch reachable 1 The neighbor is reachable by this switch stale 2 Information about the neighbor is scheduled for deletion delay 3 No information was been received from neighbor during delay period probe 4 Switch is attempting to probe for this neighbor unknown 6 Unknown status Last Updated The last sysUpTime that this neighbor was updated Configure an IPv4 Ma
131. switch is 169 254 100 100 The Login screen displays Monitoring the System 393 10 M4100 Series Managed Switch Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Mirroring gt RSPAN VLAN System Switching Routing Security Monitoring Maintenance Help Index gt Multiple Port RSPAN VLAN Mirroring RSPAN VLAN RSPAN VLAN ener vrani admin Mode NW Switch Configuration OE ESSE SSS SL gt RSPAN Destination 1 Disable Switch Configuration The VLAN ID column lists all VLANs on the device Select the VLAN to use as the RSPAN VLAN In the Admin Mode list select to Enable or Disable RSPAN support on the corresponding VLAN The default value is Disable Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure an RSPAN Source Switch To configure the RSPAN source switch 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the swit
132. that are sent by the snooping querier Configure MVR Toconfigure MVR 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button Configure Switching Information 182 gt 7 go o M4100 Series Managed Switch The web management interface menu displays Select Switching gt MVR gt Basic gt MVR Configuration MVR Configuration MVR Configuration MVR Running Disable Enable MVR Multicast Vlan 1 1 to 4094 MVR Max Multicast Groups 256 MVR Current Multicast Groups 0 MVR Global query response time I5 1 to 100 MVR Mode compatible dynamic Select the MVR Running Enable or Disable radio button The factory default is Disable In the MVR multicast field specify the VLAN on which MVR multicast data is received All source ports belong to this VLAN The value can be set in a range of 1 to 4093 The default value is 1 The following table describes the nonconfigurable inform
133. the IPv6 Network Neighbor Table 00 0 022 34 Configure an IPv4 Management VLAN sssssss e 35 View or Set the System Time 0 00 37 Configure SNTP Global Settings 0c cece eee eee eee nee 38 View the SNTP GlobaliStatus o50 0 ostrea ehe hehe ree eem 40 Configure SNIP Servers 22 4 2224 IOVPaCEO PUR UPC tettiin iha 43 Configure Summer Time Settings 0 cece eee eee eee ees 45 Configure DNS ceisvaeeda perro Rb aES IER AREE ee buses PU RE ET ER ee 47 Configure Host Settings a used Pede e Rte hee rep P PE Rd 49 Configure Green Ethernet Settings 0 cece eee eee eee eee 50 Configure Green Ethernet Interface Settings 0 eee 51 Configure Port Green Mode Statistics 0 00 c cece eee eens 53 View the Green Mode Statistics Summary 0 02 eee eee 55 View the Port Green Mode EEE History eee eee eee 57 M4100 Series Managed Switch Configure the DHCP Serveis soos ogncnnanas ad Rr RR rr RR Ute eo 58 Exclude an Address from the DHCP Server ssssesseeeseeesee 59 Configure the DHCP Pool reset re b bero aree LR RORUS 60 Configure the DHCP Pool Options 00 cece eee eee eee 63 Mew DHCP Server StatstCsin so 52c 4 ons etae ER ORO dU POSEEN eane 64 View DHCP Bindings Information orem kR rre rez hebes 66 View DHCP Conflicts Information 0 0 cece e cee ee eee 67 Configure the DHCP Relay
134. the controlled port mode 3 In the Guest VLAN field for ports 1 0 5 1 0 8 enter 150 to assign these ports to the guest VLAN Configuration Examples 441 M4100 Series Managed Switch You can configure additional settings to control access to the network through the ports See Port Security Interface Configuration on page 287 for information about the settings 4 Click the APPLY button 5 From the 802 1X Configuration screen set the Port Based Authentication State and Guest VLAN Mode to Enable and then click the APPLY button Ssee Port Security Configuration on page 286 This example uses the default values for the port authentication settings but there are several additional settings that you can configure For example the EAPOL Flood Mode field allows you to enable the forwarding of EAPoL frames when 802 1X is disabled on the device 6 From the RADIUS Server Configuration screen configure a RADIUS server with the following settings Server Address 192 168 10 23 e Secret Configured Yes e Secret secret123 e Active Primary For more information see RAD US on page 245 7 Click the ADD button 8 From the Authentication List screen configure the default List to use RADIUS as the first authentication method Ssee Set Up a Login Authentication List on page 275 This example enables 802 1X based port security on managed switch and prompts the hosts connected on ports g5 98 for an 802 1X based authentic
135. the following MAC addresses e 00 00 00 00 00 00 e 01 80 C2 00 00 00 to 01 80 C2 00 00 0F e 01 80 C2 00 00 20 to 01 80 C2 00 00 21 e FE FF FF FF FF FF 11 Use Source Port Members to list the ports you want included in the inbound filter If a packet with the MAC address and VLAN ID you selected is received on a port that is not in the list it is dropped Manage Device Security 311 M4100 Series Managed Switch 12 Use Destination Port Members to list the ports to be included in the outbound filter Packets with the MAC address and VLAN ID you selected is transmitted only out of ports that are in the list Destination ports can be included only in the multicast filter 13 To delete a configured MAC filter select it from the menu and then click the DELETE button 14 Click the APPLY button Your settings are applied to the system View the MAC Filter Summary You can view the MAC filters that are configured on the system To view the MAC filter summary 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name
136. the nonconfigurable information displayed on the screen Table 43 Advanced STP Configuration Field Description Configuration Digest Key Identifier used to identify the configuration currently being used MST ID Table consisting of the MST instances including the CST and the corresponding VLAN IDs associated with each of them VID ID Table consisting of the VLAN IDs and the corresponding FID associated with each of them FID ID Table consisting of the FIDs and the corresponding VLAN IDs associated with each of them Configure Common Spanning Tree You can configure Common Spanning Tree CST and Internal Spanning Tree on the switch To configure CST 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 150 7 Select Switching gt STP gt Advanced gt CST Configuration CST Configuration CST Configuration
137. the protocol based VLAN you selected It can be up to 32 alphanumeric characters long including blanks Current Members This button can be click to show the current numbers in the selected protocol based VLAN group Configure Switching Information 133 M4100 Series Managed Switch Configure an IP Subnet Based VLAN IP Subnet to VLAN mapping is defined by configuring an entry in the IP Subnet to VLAN table An entry is specified through a source IP address network mask and the desired VLAN ID The IP subnet to VLAN configurations are shared across all ports of the device To configure an IP subnet based VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7T Select Switching VLAN Advanced IP Subnet Based VLAN IP Subnet Based VLAN Configuration IP Subnet Based VLAN Configuration COE 192 168 10 0 255 255 255 0 8 Us
138. the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Configure Quality of Service 242 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt DiffServ Wizard Diffserv Wizard Diffserv Wizard Traffic Type VOIP m Committed Rate Kbps lo Policing Outbound Priority Medium 8 Use Traffic Type to define the DiffServ Class The traffic type options are VOIP HTTP FTP Telnet and Every The ports that can be configured to support a DiffServ policy display The DiffServ policy is added to the selected ports 9 Use Policing to add policing to the DiffServ Policy The policing rate is applied 10 Specify the Committed Rate e When Policing is enabled the committed rate is applied to the policy and the policing action is set to conform e When Policing is disabled the committed rate is not applied and the policy is set to markdscp 11 Specify the Outbound Priority e When Policing is enabled Outbound Priority defines the type of policing conform action where High sets action to markdscp ef Med sets action to markdscp af31 and Low sets action to send When Policing is disabled Outbound Priority
139. the value of the parameter for the CST Auto Calculated External Port Path Displays whether the external path cost is automatically calculated Cost Enabled or not Disabled External Path cost is calculated based on the link speed of the port if the configured value for external port path cost is zero BPDU Guard Effect The BPDU guard effect disables the edge ports that receive BPDU packets The possible values are Enable or Disable Port Forwarding State The forwarding state of this port View Spanning Tree CST Port Status gt To view the Spanning Tree CST port status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure Switching Information 154 M4100 Series Managed Switch 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt STP gt Advanced gt CST Port Status CST Port Status CST Port Status 1 2 LAGS All Port Up Topolo GST Time T Transitions
140. those ports 1 From the MAC ACL screen create an ACL with the name Sales ACL for the Sales department of your network See Create a MAC ACL on page 347 By default this ACL is bound on the inbound direction which means the switch examines traffic as it enters the port 2 From the MAC Rules screen create a rule for the Sales ACL with the following settings e ID 1 Configuration Examples 433 M4100 Series Managed Switch Action Permit e Assign Queue ID 0 e Match Every False e CoS 0 Destination MAC 01 02 1A BC DE EF Destination MAC Mask 00 00 00 00 FF FF e EtherType User Value e Source MAC 02 02 14 A BC DE EF e Source MAC Mask 00 00 00 00 FF FF e VLAN ID 2 For more information about MAC ACL rules see Configure MAC Rules on page 349 3 From the MAC Binding Configuration screen assign the Sales ACL to the interface gigabit ports 6 7 and 8 and then the click the APPLY button See Configure ACL MAC Binding on page 351 You can assign an optional sequence number to indicate the order of this access list relative to other access lists if any are already assigned to this interface and direction 4 The MAC Binding Table displays the interface and MAC ACL binding information See View or Delete MAC Bindings on page 353 The ACL named Sales ACL looks for Ethernet frames with destination and source MAC addresses and MAC masks defined in the rule Also the frame must be tagged with VLAN ID 2 w
141. time have no effect The factory default is Disable 10 In the Port GMRP Mode field select Disable or Enable This specifies the GARP Multicast Registration Protocol administrative mode for the port If you select disable the protocol is not active and the join time leave time and leave all time have no effect The factory default is Disable 11 In the Join Time centiseconds field specify the time between the transmission of GARP PDUs registering or reregistering membership for a VLAN or multicast group in centiseconds Enter a number between 10 and 100 0 1 to 1 0 seconds The factory default is 20 centiseconds 0 2 seconds An instance of this timer exists for each GARP participant for each port 12 In the Leave Time centiseconds field specify the time to wait after receiving an unregister request for a VLAN or multicast group before deleting the associated entry in centiseconds This allows time for another station to assert registration for the same attribute in order to maintain uninterrupted service Enter a number between 20 and 600 0 2 to 6 0 seconds The factory default is 60 centiseconds 0 6 seconds An instance of this timer exists for each GARP participant for each port 13 In the Leave All Time centiseconds field specify how frequently LeaveAll PDUs are generated A LeaveAll PDU indicates that all registrations are due to be deregistered soon Participants need to rejoin in order to maintain registra
142. time when configuring RADIUS maximum retransmits and RADIUS time outs If multiple RADIUS servers are configured the maximum retransmit value on each is exhausted before the next server is attempted A retransmit does not occur until the configured time out value on that server has passed without a response from the RADIUS server Therefore the maximum delay in receiving a response from the RADIUS application equals retransmit times time out for all configured servers If the RADIUS request was generated by a user login attempt all user interfaces are blocked until the RADIUS application returns a response In the Timeout Duration field specify the time out value in seconds for request retransmissions Manage Device Security 267 M4100 Series Managed Switch The valid range is 1 30 The default value is 5 Give consideration to maximum delay time when configuring RADIUS maximum retransmits and RADIUS time outs If multiple RADIUS servers are configured the maximum retransmit value on each is exhausted before the next server is attempted A retransmit does not occur until the configured time out value on that server has passed without a response from the RADIUS server Therefore the maximum delay in receiving a response from the RADIUS application equals the retransmit times time out for all configured servers If the RADIUS request was generated by a user login attempt all user interfaces are blocked until the RADIUS application
143. to 7 IP ToS Configure the IP ToS field e ToS Bits This is the Type of Service octet value in the range 0x00 to OxFF to compare against e ToS Mask This indicates which ToS bits are subject to comparison against the Service Type value Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure a DiffServ IPv6 Class You can add a new IPv6 DiffServ class name or rename or delete an existing class The screen also allows you to define the criteria to associate with a DiffServ class As packets are received these DiffServ classes are used to prioritize packets You can use multiple match criteria in a class The logic is a Boolean logical AND for this criteria After creating a Class you can click the class link to display the Class screen Configure Quality of Service 250 M4100 Series Managed Switch gt To configure a DiffServ class 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank t
144. to include the system description TLV in LLDP frames e Use System Capabilities to include the system capability TLV in LLDP frames 15 Use Transmit Management Information to specify whether the management address is transmitted in LLDP frames for the selected interface View LLDP Statistics Toview LLDP statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure System Information 92 M4100 Series Managed Switch 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt LLDP gt Statistics LLDP Statistics LLDP Statistics Last Update 0 Days 00 01 33 Total Inserts 1 Total Deletes 0 Total Drops 0 Total Ageouts 0 LLDP Statistics otertace Tear yoran Piseards Errors ARCOM cards Unnowns MED a02 a02 3 0 1 173 175 0 0 0 0 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 11 0 12 0 0 0 0 0 0 0 0 0 0 0 0 EN o mM Oo MIO EI o DJ o M EN o mM o NO II
145. to specify a dynamic binding The following table describes the DHCP Conflicts Information fields Table 19 DHCP conflicts information Field Description IP Address Specifies the IP Address of the host as recorded on the DHCP server Detection Method Specifies the manner in which the IP address of the hosts were found on the DHCP server Detection Time Specifies the time when the conflict was detected in N days NNh NNm NNs format with respect to the system up time Configure the DHCP Relay To configure the DHCP relay 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure System Information 68 7 10 11 M4100 Series Managed Switch Select System gt Services gt DHCP Relay DHCP Relay DHCP Relay Maximum Hop Count Admin Mode Disable Enable Minimum Wait Time secs 0 Circuit ID Option Mode Disable Enable DH
146. to the same destination Metric Administrative cost of the path to the destination If no value is entered default is 1 The range is 0 255 Configure Route Preferences Use this panel to configure the default preference for each protocol such as 60 for static routes 120 for RIP These values are arbitrary values in the range of 1 to 255 and are independent of route metrics Most routing protocols use a route metric to determine the shortest path known to the protocol independent of any other protocol The best route to a destination is chosen by selecting the route with the lowest preference value When there are multiple routes to a destination the preference values are used to determine the preferred route If there is still a tie the route with the best route metric is chosen To avoid problems with mismatched metrics for example RIP and OSPF metrics are not directly comparable you must configure different preference values for each of the protocols To configure route preferences 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and passwor
147. to the switch Configuration changes take effect immediately Configure MVR Group Membership gt To configure MVR group membership 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field Configure Switching Information 187 10 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt MVR gt Advanced gt MVR Group Membership MVR Group Membership MVR Group Membership In the Group IP list specify the IP multicast address of the MVR group Use the Port List to show the configured list of members of the selected MVR group You can use this port list to add the ports you selected to this MVR group Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately View MVR Statistics To view MVR statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201
148. trustdotip v Interface Interface Trust Mode Use Global to specify all CoS configurable interfaces The option Global represents the most recent global configuration settings Use Interface to specify CoS configuration settings based on the interface Use Global Trust Mode to specify whether to trust a particular packet marking at ingress Global Trust Mode can be only one of the following e untrusted e trust dotip e trust ip dscp The default value is trust dot1p Use Interface Trust Mode to specify whether to trust a particular packet marking at ingress Interface Trust Mode can only be only one of the following e untrusted e trust dotip e trust ip dscp Configure Quality of Service 235 M4100 Series Managed Switch The default value is untrusted 12 Click the APPLY button The updated configuration is sent to the switch Map 802 1p Priorities to Queues To map 802 1p priorities to queues 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is
149. up using the bridge priority and the base MAC address of the bridge Time since topology change The time in seconds since the topology of the CST last changed Topology change count Number of times topology has changed for the CST Topology change The value of the topology change parameter for the switch indicating if a topology change is in progress on any port assigned to the CST It takes a value if True or False Designated root The bridge identifier of the root bridge It is made up from the bridge priority and the base MAC address of the bridge Root Path Cost Path cost to the designated root for the CST Root Port Identifier Port to access the designated root for the CST Max Age secs Path cost to the designated root for the CST Forward Delay secs Derived value of the root port bridge forward delay parameter Hold Time secs Minimum time between transmission of configuration BPDUs CST Regional Root Priority and base MAC address of the CST regional root CST Path Cost Path cost to the CST tree regional root Configure CST Ports You can configure the Common Spanning Tree CST and Internal Spanning Tree ona specific port on the switch To configure CST ports 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4
150. used by 802 1X 8 Select the Administrative Mode Disable or Enable radio button This enables or disables e 802 1X administrative mode on the switch Enable 802 1X is permitted on the switch Note If 802 1X is enabled authentication is performed by a RADIUS server This means that the primary authentication method must be RADIUS To set the method select Security gt Management Security gt Authentication List and select RADIUS as method 1 for defaultList For more information see Configure a RADIUS Server on page 268 e Disable The switch does not check for 802 1X authentication before allowing traffic on any ports even if the ports are configured to allow only authenticated users Default value 9 Select the VLAN Assignment Mode Disable or Enable radio button The default value is Disable 10 Select the EAPOL Flood Mode Disable or Enable radio button The default value is Disable 11 In the Monitor Mode field select Enable or Disable The default value is Disable The feature monitors the dot1x authentication process and helps in diagnosis of the authentication failure cases 12 In the Users list select the user name that uses the selected login list for 802 1x port security 13 In the Login list select the login list to apply to the specified user All configured login lists are listed in this menu Manage Device Security 301 M4100 Series Managed Switch Configure 802 1X Settings You can enable or
151. 0 Click the REFRESH button to update the screen to show the latest information 11 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately View the MFDB Table The Multicast Forwarding Database holds the port membership information for all active multicast address entries The key for an entry consists of a VLAN ID and MAC address pair Entries can contain data for more than one protocol To view the MFDB table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 163 M4100 Series Managed Switch 7 Select Switching gt Multicast gt MFDB gt MFDB Table MFDB Table MFDB Table Search By MAC Address GO VLAN epee Forwarding 8 Use Search by MAC Address to enter a MAC address whose MFDB table entry you want displayed Enter six two digit hexadecimal
152. 0 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button Configure System Information 21 10 11 12 13 14 M4100 Series Managed Switch The web management interface menu displays Select System gt Management gt Initial Setup The Initial Setup screen displays Scroll down to display the Management VLAN Configuration section Management VLAN Configuration Managemen tVLANID 1 Routing Mode Enable O Disable IPv4 Address Assignment DHCP Static IP Address 10 130 83 152 Subnet Mask 255 255 255 128 Gateway 0 0 0 0 Specify the Management VLAN ID of the switch The management VLAN is used for management of the switch The VLAN ID can be any value from 1 to 4093 The default value is VLAN 1 Select the Routing Mode Enable or Disable radio button This sets the global IPv4 Routing Mode on the device The default is Enable Select the IPv4 Address Assignment DHCP or Static radio button This specifies the method for getting IPv4 network parameters IPv4 address
153. 0 130 83 152 The screen displays the agent version and agent address Monitoring the System 398 M4100 Series Managed Switch Agent Version Uniquely identifies the version and implementation of this MIB The version string must use the following structure MIB Version Organization Software Revision where MIB Version 1 3 the version of this MIB Organization NETGEAR Inc Revision 1 0 Agent Address The IP address associated with this agent In the Source Interface list select the management interface to be used for sFlow Agent Possible values are as follows None e Routing interface Routing VLAN e Routing loopback interface Tunnel interface e Service port By default VLAN 1 is used as source interface Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 To refresh the screen click the REFRESH button to show the latest sFlow agent information Configure an sFlow Agent To configure an sFlow agent 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The defau
154. 00 30 to 36000 Max Samples to keep 168 1 to 168 Percentage LPI time per Stack 39319264 Time Since Percentage Time spent Percentage Time spent Sample No The Sample in LPI mode in LPI mode since Was Recorded since last sample last reset Select the Interface check box Specify the Sampling Interval Configure System Information 57 M4100 Series Managed Switch This is the Interval at which EEE LPI data is collected This is a global setting and is applied to all interfaces The range is 30 to 36000 The default value is 3600 10 In the Max Samples to keep field enter a value This is a global setting and is applied to all interfaces The range is 1 to 168 The default value is 168 11 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 12 Click the REFRESH button to refresh the screen with the most current data from the switch The following table describes the Port GreenMode EEE History nonconfigurable fields Table 15 Port GreenMode EEE History Fed _ beseription S O Percentage LPI time per Stack Time spent in LPI mode per stack since EEE counters were last cleared Sample No Sample Index Time Since The Sample Was Each time the screen is refreshed this field shows a different time Recorded because it reflec
155. 00 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance Upload File Upload File Upload File Upload File Type Image Name Transfer Mode Server Address Type Server Address Remote File Path Remote File Name Use File Type to specify what type of file to upload e Archive Specify archive STK code to retrieve from the operational flash Image Name Select one of the images from the list Maintenance 409 10 11 12 13 14 15 16 M4100 Series Managed Switch e imaget Select image1 to upload image1 e image2 Select image2 to upload image2 e CLI Banner CLI Banner when you want retrieve the CLI banner file e Text Configuration Specify configuration in text mode to retrieve the stored configuration Script File The Script file to retrieve the stored configuration Error Log The Error log to retrieve the system error persistent log sometimes referred to as the event log e Buffered Log The Buffered Log to retriev
156. 00 Series Managed Switch 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt Time gt Time Configuration The Time Configuration screen displays 8 Scroll down to view the SNTP Global Status SNTP Global Status Version 4 Supported Mode Unicast and Broadcast Last Update Time Jan 1 00 00 00 1970 UTC 0 00 Last Attempt Time Jan 1 00 00 00 1970 UTC 0 00 Last Attempt Status Other Server IP Address Address Type Unknown Server Stratum 0 Reference Clock Id Server Mode Unicast Server Max Entries Unicast Server Current Entries Broadcast Count The following table describes the SNTP Global Status fields Table 8 SNTP Global Status Field Description Version Specifies the SNTP version the client supports Supported Mode Specifies the SNTP modes the client supports Multiple modes can be supported by a client Last Update Time Specifies the local date and time UTC the SNTP client last updated the system clock Last Attempt Time Specifies the local date and time UTC of the last SNTP request or receipt of an unsolicited message Configure
157. 1024 1518 Octets The total number of packets including bad packets received that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets Packets Transmitted gt 1518 Octets The total number of packets transmitted that were longer than 1518 octets excluding framing bits but including FCS octets and were otherwise well formed This counter has a max increment rate of 815 counts per sec at 10 Mb s Maximum Frame Size The maximum Ethernet frame size the interface supports or is configured to be including Ethernet header CRC and payload of 1518 to 9216 The default maximum frame size is 1518 Total Packets Transmitted Successfully The number of frames that were transmitted by this port to its segment Unicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a subnetwork unicast address including those that were discarded or not sent Multicast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to a multicast address including those that were discarded or not sent Broadcast Packets Transmitted The total number of packets that higher level protocols requested be transmitted to the broadcast address including those that were discarded or not sent Total Transmit Errors The sum of single multiple and excessive collisions
158. 12 To create an entry in UDP Relay Table with the specified configuration click the ADD button 13 To remove all entries or a specified one from the UDP Relay Table click the DELETE button The Hit Count field displays the number of UDP packets hitting the UDP port Configure System Information 74 M4100 Series Managed Switch Configure the UDP Relay Interface To configure the UDP Relay Interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Services gt UDP Relay gt UDP Relay Interface Configuration UDP Relay Interface Configuration UDP Relay Interface Configuration Interf Server UDP Port UDP Port Discard Hit nterface o sca E Address Other Value Count L 4 OO gg LN 27 BW Use Interface to select an Interface to be enabled for the UDP Relay Use Server Address to specify the UDP relay server address in x x x x format Use U
159. 144 M4100 Series Managed Switch Your settings are saved View the Auto VoIP Status 8 gt To display the Auto VolP status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Auto VoIP gt Auto VoIP Status System Switching Routing QoS Security Monitoring Maintenance Help VLAN STP Multicast MVR Address Table Ports LAG gt Protocol based Auto VoIP Status OUI based v Auto VoIP Status Auto VoIP Status I Auto VoIP VLAN ID Maximum Number of Voice Channels Supported Number of Voice Channels Detected To refresh the screen click the REFRESH button Spanning Tree Protocol Overview The Spanning Tree Protocol STP provides a tree topology for any arrangement of bridges STP also provides one path between end stations on a network eliminating loops Spanning tree versions supported include Common STP Multiple STP and Rapid STP Classic STP pro
160. 24 00031 00239 00031 00536 00031 0060 00031 00247 00031 0 148 17 00031 00 1210 00031 00045 00031 00148 00031 00340 You can use the buttons at the bottom of the screen to perform the following actions To clear the messages out of the event log click the CLEAR button e To refresh the screen and display the current statistics click the REFRESH button Table 104 Event Logs Field Description Entry The sequence number of the event Type The type of the event File Name The file in which the event originated Line The line number of the event Task Id The task ID of the event Code The event code Time The time this event occurred Configure Persistent Logs A persistent log is a log that is stored in persistent storage Persistent storage survives across platform reboots The first log type is the system startup log The system startup log stores the first N messages received after system reboot The second log type is the system Monitoring the System 389 M4100 Series Managed Switch operation log The system operation log stores the last N messages received during system operation To configure persistent logs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of th
161. 30 Changing the value does not change the configuration until the APPLY button is clicked e Maximum Requests This input field allows the user to enter the maximum requests for the selected port The maximum requests value is the maximum number of times the authenticator state machine on this port retransmits an EAPOL EAP Request Identity before timing out the supplicant The maximum requests value must be in the range of 1 to 10 The default value is 2 Changing the value does not change the configuration until the APPLY button is clicked e PAE Capabilities This field selects the port access entity PAE functionality of the selected port Possible values are Authenticator or Supplicant e Periodic Reauthentication This select field allows the user to enable or disable reauthentication of the supplicant for the specified port The selectable values are enable or disable If the value is enable reauthentication occurs Otherwise reauthentication is not allowed The default value is Disable Changing the selection does not change the configuration until the APPLY button is clicked e Reauthentication Period This input field allows the user to enter the reauthentication period for the selected port The reauthentication period is the value in seconds of the timer used by the authenticator state machine on this port to determine when reauthentication of the supplicant takes place The reauthentication period must be a value in the range o
162. 5 Use Unicast Poll Retry to specify the number of times to retry a request to an SNTP server after the first time out before attempting to use the next configured server when configured in unicast mode The allowed range is 0 to 10 The default value is 1 When using SNTP NTP time servers to update the switch s clock the time data received from the server is based on Coordinated Universal Time UTC that is the same as Greenwich Mean Time GMT This cannot be the time zone in which the switch is located Use Time Zone Name to specify the time zone name The time zone can affect the display of the current system time The default value is UTC Use Offset Hours to specify the number of hours difference from UTC You can configure a time zone specifying the number of offset hours and optionally the number of offset minutes that the switch s time zone is different from UTC The allowed range is 24 to 24 The default value is 0 Use Offset Minutes to specify the number of minutes that the switch s time zone is different from UTC The allowed range is 0 to 59 The default value is 0 View the SNTP Global Status gt To view the SNTP global status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Configure System Information 40 M41
163. 5 STKO MSTP 2110 mspt_api c 318 237 Interface 12 transitioned to root state on message age timer expiry This example indicates a user level message 1 with severity 7 debug on a system that is not stacked and generated by component MSTP running in thread ID 2110 on Aug 24 05 34 05 by line 318 of file mstp_api c This is the 237th message logged Messages logged to a collector or relay through a syslog use a format identical to this message Port Mirroring Overview Port mirroring selects the network traffic for analysis by a network analyzer This is done for specific ports of the switch As such many switch ports are configured as source ports and one switch port is configured as a destination port You can configure how traffic is mirrored on a source port Packets that are received on the source port which are transmitted on a port or are both received and transmitted can be mirrored to the destination port The packet that is copied to the destination port is in the same format as the original packet on the wire This means that if the mirror is copying a received packet the copied packet is VLAN tagged or untagged as it was received on the source port If the mirror is copying a transmitted packet the copied packet is VLAN tagged or untagged as it is being transmitted on the source port Configure Port Mirroring gt To configure port mirroring 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet fo
164. 53 3929228 33757 5532 23710 4515 0 14036105 126647 5658 120979 1 day 5 hr 41 min 4 sec 8 Click the CLEAR button to clear all the counters resetting all switch summary and detailed statistics to default values The discarded packets count cannot be cleared Configure System Information 28 M4100 Series Managed Switch The following table describes Switch Statistics information Table 5 Switch Statistics Field Description iflndex Octets Received Packets Received Without Errors The iflndex of the interface table entry associated with the processor of this switch The total number of octets of data received by the processor excluding framing bits but including FCS octets The total number of packets including broadcast packets and multicast packets received by the processor Unicast Packets Received The number of subnetwork unicast packets delivered to a higher layer protocol Multicast Packets Received The total number of packets received that were directed to a multicast address Note that this number does not include packets directed to the broadcast address Broadcast Packets Received The total number of packets received that were directed to the broadcast address Note that this does not include multicast packets Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being deliverable to a hi
165. 54 Configure Rules for anm IP ACL 2cesesesecr mr erret rrr thui 355 Configure IP Extended Rules 358 Gonfigure am PYS AC auo roro eco ENED rata nre tre mo qaa 361 Configure IPyb RIes erareco 2 ETAT de yo bie RUP OU CA de Abo 362 Configure ACL Interface Bindings 0 eee eee eee eee 365 M4100 Series Managed Switch View or Delete IP ACL Bindings 0 cece eee eee eee eee View or Delete VLAN ACL Bindings 00 eee eee eee Chapter 7 Monitoring the System View Port Statistics iiis eese e n hr re RR RE E RE EE E View Detailed Port StatistiCS cer rmenbEORDPOR RRERPPU RERCHRREP RE VIeWEAP StdEIS DIOS aces eroe e d testet oed R tuse armes Performia Cable Test 4 42c06c0nb ook eR Oder re Eke PC TCU RARE LOGS OVehVle Wists d VEI aceon Ng di edet ted dpa M tea a View or Configure Buffered Logs 0 cece eee eee eee eee Message Format IML OOS 128 0309 69 03x prid tarkece doa pede h re achers ache Enable the Command Log 43m otro detenta tetendit eden eer REA Configure the Console Log sssseee ee Gonfiguredhe Syslog x22 matas auus rue rd a epCr seers S View Trap LOGS ooiexeerere RR RERO UPPPPPHPPPOCPEDHORUPE S S EVent LOJE 5euaue kd ostende thm n cca a OE RUE QUE p dct bn S PUR Configure Persistent Logs isses Port Mirroring OVerVieW z sesesscacasetsesei s n ER E RE EROR inis Configure Port Mitrorinig occ ror rer mb Rer UP Ero RES Configure an RSPA
166. 6 and 511 octets in length inclusive excluding framing bits but including FCS octets The total number of packets including bad packets received or transmitted that were between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octets The total number of packets including bad packets received or transmitted that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets The total number of packets including bad packets received or transmitted that were between 1519 and 2047 octets in length inclusive excluding framing bits but including FCS octets The total number of packets including bad packets received or transmitted that were between 2048 and 4095 octets in length inclusive excluding framing bits but including FCS octets The total number of packets including bad packets received or transmitted that were between 4096 and 9216 octets in length inclusive excluding framing bits but including FCS octets The total number of octets of data including those in bad packets received on the network excluding framing bits but including FCS octets This svalue can be used as a reasonable estimate of Ethernet utilization If greater precision is desired the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval Packets Received 64 Octets The total number of packets including bad packets receive
167. 8 Use Search By to search by MAC address VLAN ID or port Searched by MAC Address Select MAC address and enter the 6 byte hexadecimal MAC address in two digit groups separated by colons for example 01 23 45 67 89 AB Then click the Go button If the address exists that entry is displayed as the first entry followed by the remaining greater MAC addresses An exact match is required Searched by VLAN ID Select VLAN ID and enter the VLAN ID for example 100 Then click the Go button If the address exists the entry is displayed as the first entry followed by the remaining greater mac addresses Searched by Port Select Port from the list and enter the port ID in Unit Slot Port format for example 2 1 1 Then click the Go button If the address exists the entry is displayed as the first entry followed by the remaining greater MAC addresses Configure Switching Information 191 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 60 MAC Address Table Fed Deseription 000000000 Total MAC Address Displaying the number of total MAC addresses learned or configured MAC Address A unicast MAC address for which the switch has forwarding or filtering information The format is a 6 byte MAC address that is separated by colons for example 01 23 45 67 89 AB The VLAN ID associated with the MAC address Port The port on which this address w
168. 9 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Manage Device Security 332 10 11 12 13 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt DHCP Snooping gt Binding Configuration DHCP Snooping Binding Configuration Static Binding Configuration Interface MAC Address VLAN ID IP Address Dynamic Binding Configuration Select the interface to add a binding into the DHCP snooping database Use MAC Address to specify the MAC address for the binding entry to be added This is the key to the binding database Use VLAN ID to select the VLAN from the list for the binding rule The range of the VLAN ID is 1 to 4093 Use IP Address to specify valid IP address for the binding rule To add DHCP snooping binding entry into the database click the ADD button To delete selected static entries from the database click the DELETE button Configure DHCP Snooping Dynamic Binding To configure DHCP
169. AA LAA E Size m O o2 0 3 0 4 0 5 0 6 0 7 o s m 0 9 0 10 F 0 11 0 12 i All EN o mE o E o EN o Io Oo EN o mm o BI o E o IN o IO IM o Im o IG o IX o Imo Io Ieee 080708998 o0 The Interface field displays the interface for this flow poller and sampler This agent supports physical ports only In the Poller Receiver Index field specify the allowed range for the sFlow receiver associated with this counter poller The allowed range is 1 to 8 In the Poller Interval field specify the maximum number of seconds between successive samples of the counters associated with this data source A sampling interval of 0 disables counter sampling The allowed range is 0 to 86400 secs In the Sampler Receiver Index field specify the sFlow receiver for this flow sampler If set to 0 the sampler configuration is set to the default and the sampler is deleted Only active receivers can be set If a receiver expires then all samplers associated with the receiver also expire The allowed range is 1 to 8 In the Sampling Rate field specify the statistical sampling rate for packet sampling from this source A sampling rate of 1 counts all packets A sampling rate of 0 disables sampling The allowed range is 1024 to 65536 In the Maximum Header Size field specify the maximum number of bytes that should be copied from a sampled packet The allowed range is 20 to 256 Monitoring the System 403 Maintenance Th
170. ACL to interface binding select the check box next to the interface and click the DELETE button 9 Use ACL Type to specify the type of ACL The valid ACL types include IP ACL MAC ACL and IPv6 ACL 10 Use ACL ID to display all the ACLs configured depending on the ACL type selected The following table describes the information displayed in the ACL VLAN Binding Table Table 98 ACL VLAN Binding Table Field Description The packet filtering direction for the ACL VLAN ID The VLAN ID for ACL mapping Sequence Number An optional sequence number can be specified to indicate the order of this access list relative to other access lists already assigned to this VLAN and direction A lower number indicates higher precedence order If a sequence number is already in use for this VLAN and direction the specified access list replaces the currently attached access list using that sequence number If the sequence number is not specified by the user for example the value is 0 a sequence number that is one greater than the highest sequence number currently in use for this VLAN and direction is used The valid range is 1 to 4294967295 Manage Device Security 368 Monitoring the System This chapter covers the following topics View Port Statistics View EAP Statistics Logs Overview Port Mirroring Overview sFlow Overview 369 M4100 Series Managed Switch View Port Statistics You can view a summary of per po
171. AN 300 MST instance 1 to communicate with the hosts on Switch 3 directly The hosts use different instances of MSTP to effectively use the links across the switch The same concept can be extended to other switches and more instances of MSTP Configuration Examples 446
172. AN period for the selected port The guest VLAN period is the value in seconds of the timer used by the GuestVlan authentication The guest VLAN time out must be a value in the range of 1 to 300 The default value is 90 Changing the value does not change the configuration until the APPLY button is clicked Unauthenticated VLAN ID This input field allows the user to enter the unauthenticated VLAN ID for the selected port The valid range is 0 4093 The default Manage Device Security 304 10 11 M4100 Series Managed Switch value is 0 Changing the value does not change the configuration until the Submit button is clicked Enter 0 to clear the unauthenticated VLAN ID on the interface e Supplicant Timeout This input field allows the user to enter the supplicant time out for the selected port The supplicant time out is the value in seconds of the timer used by the authenticator state machine on this port to time out the supplicant The supplicant time out must be a value in the range of 1 to 65535 The default value is 30 Changing the value does not change the configuration until the APPLY button is clicked Server Timeout This input field allows the user to enter the server time out for the selected port The server time out is the value in seconds of the timer used by the authenticator on this port to time out the authentication server The server time out must be a value in the range of 1 to 65535 The default value is
173. Bridged Local Ares Networks Entity MIB Version 2 The Interfaces Group MIB using SMIv2 Defiestices of Managed Objects fce the Ethernet hice Interface Types FASTPATH Switching Layer 2 rst and Sict corfiguraton Port Security MIB LLOP basic MIB Port Access Entity module for managing IEEE 802 1X Broadcom F ast ath Radius MIB RADIUS Accounting Chent MIB RADIUS Authentication Chert MIB FastPath Captive Portal MIB The Broadcom Private MIB for FastPath Mgmt Security The MIB module defines the AddressfamilyNumbers textus convention RIP Version 2 MIB Extension OSPF Version 2 Management Information Base The MIB module to describe traps for the OSPF Version 2 Protocol Definitons of Managed Objects for the Virtual Router Redundancy Protocol FASTPATH Routing Layer 3 FASTPATM Plex QOS Support FASTPATH Flex QOS ACL FASTPATH Flex QOS COS FASTPATH Flex QOS VOIP Management Information Base for the Textual Convenbons used in DIFFSERV MIB Managemert Informaton Base for the Offerentated Sennces Archtecture FASTPATH Flex QOS DiffServ Private MIBs definitions FASTPATH Flex QOS DM Serv Private MIDs definitions 1Pv4 Mukicast Routing MIB MGMO MIB includes IGMPV3 and MLDv2 Protocol Independent Mulbcast MIB Bootstrap Router mechanam for PIM routers Dstance Vector Multicast Routing Protocol MIB IANA IP Route Protocol and 1 MRoute Protocol Textual Convertions The MIB module defines objects to configure Non Stop Forwarding M
174. CP Status Requests Received Requests Relayed Packets Discarded Use Maximum Hop Count to enter the maximum number of hops a client request can take before being discarded The range is 1 to 16 The default value is 4 Select the Admin Mode Disable or Enable radio button When you select Enable DHCP requests are forwarded to the IP address you entered in the Server Address on the UDP Relay Global Configuration screen Use Minimum Wait Time to enter a Minimum Wait Time in seconds This value is compared to the time stamp in the client s request packets that should represent the time since the client was powered up Packets are forwarded only when the time stamp exceeds the minimum wait time The range is 0 to 100 Select the Circuit ID Option Mode Disable or Enable radio button This specifies the Circuit ID Option mode If you select Enable Relay Agent options are added to requests before they are forwarded to the server and removed from replies before they are forwarded to clients The following table describes the DHCP Relay Status fields Table 20 DHCP Relay Status Field Description Requests Received The total number of DHCP requests received from all clients since the Requests Relayed The total number of DHCP requests forwarded to the server since the Packets Discarded The total number of DHCP packets discarded by this Relay Agent since last time the switch was reset last time the switch was reset
175. Certificates Certificate Generation Status Certificate Generation Status No certificate generation in progress The screen displays certificates that are present and the SSL certificate generation status Select a Certificate Present radio button e None There is nothing to be done with respect to certificate management This is the default selection Generate Certificates Begin generating the certificate files Manage Device Security 285 M4100 Series Managed Switch e Delete Certificates Delete the corresponding certificate files if present Download a Certificate You can transfer a certificate file to the switch For the web server on the switch to accept HTTPS connections from a management station the web server needs a public key certificate You can generate a certificate externally for example off line and download it to the switch Before you download a file to the switch the following conditions must be true e The file to download from the TFTP server is on the server in the appropriate directory e The file is in the correct format e The switch has a path to the TFTP server To download a certificate 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser add
176. Configure a Dot1x Authentication List 0 00 esee 278 Configure an HTTP Authentication List 0 0 cece eee eee 279 HTTPS Authentication List cc so eo noh rrt een 280 View LOGIN SESSIONS as 23 4 2 hd sce ee he ep betbbee a soso seadinr 281 Configure Management Access isses nee 282 Configure HTTP Server Settings 0 cece eee eee eee eee 282 Configure HTTPS SENGS csi resi as ttt e ee eR rer art genere eds 283 Manage Certificates oiciccecasc rore rrE RR Rer ERIP EE RIP T EE FERES 285 Download a Certificate oo sare o erroe eaan runner eU ER takers 286 Config re SSH sese ore pe Ere rrt Re hehe enr eee ve dee bU EE UT Te 287 Manage HOoSEKGVS inr rhetor RE ER hPRPEUR PP IHOSm errprb doen 289 DownloadHost Keys e tet tre rre nra npa mmm xen 290 Manage Telnet 225654542991 etos34 5304 QU DROELP PEPPER dese CI 2593 292 Configure a Telnet Authentication List 0 00 cece eee eee 292 Configure Inbound Telnet 2 2 2 mre teh mr me snd adaded doontes 293 Configure Outbound Telnet 2 oaa ome eren trt tere stet 294 Configure the Console POlt ebbe rrr eR ERES 295 Configure Denial of Service Settings eese 297 Port Authentication Overview lseeeeeseeeseee eee 300 Configure Global 802 1X Settlligs esce cues e ertem meh od erii eere 300 Configure 802 1X SettingS eases cese heh RR etr PERI br he EaR 302 Configure 802 1X Settings for Port Authentication
177. Ct sone sno th ther Rhe RR pP RR GRIER ERE eee 12 Understanding the User Interfaces 0 cee cece eee 12 Web Management Interface Overview sse T3 Software Requirements to Use the Web Interface 00005 13 Use a Web Browser to Access the Switch and LogIn 13 Web Interface Buttons and User Defined Fields 00 14 Interface Naming Conventio See cse cs pene eep e rrr chase See adars 14 Online Help cse ebrei renee tee dee n RR RH e eere inh ee 15 Web Management Interface Device View 00 e eee e ee eee 16 USING SNMP scies eet o tessa i e da e dieu ua ee ween umes e ee als Sos 17 Chapter 2 Configure System Information SystemiConfa ration 222 ohesshros e mex aOR EEG 20 Configure Initial Management VLAN Settings cece e ee eee 21 Define System NfOnmMatiOn cs uuo uro no tae alie tote t EER 22 View the Switch Statlis 22 923423352 1 9 ECUONERERPPPPC bade Det a P ga 24 View the Fam Status seosoccusussssocswessseqet pee pbi hens os 24 View the Temperature Status 0 cee eee eee eee 25 View the Device StAtUs cig 2 92 0 USE B hatten DO bu p anna Seius 26 View SWITCH Statistics o set enrkrno Rx du actes edes Pelri inea d Uu dd tag ies 28 View the System CPU Status 00 cece ee 30 View USB Device Information 0 0 cece cence ee 31 Manage Loopback Interfaces cuss c cedo eed e rtr adirar ees 33 View
178. DP Port to specify UDP Destination Port The following ports are supported DefaultSet Relay UDP port 0 packets This is specified if no UDP port is selected when you are creating a Relay server e dhcp Relay DHCP UDP port 67 packets e domain Relay DNS UDP port 53 packets isakmp Relay ISAKMP UDP port 500 packets e mobile ip Relay Mobile IP UDP port 434 packets nameserver Relay IEN 116 Name Service UDP port 42 packets netbios dgm Relay NetBIOS datagram server UDP port 138 packets netbios ns Relay NetBIOS name server UDP port 137 packets e ntp Relay Network Time Protocol UDP port 123 packets pim auto rp Relay PIM auto RP UDP port 496 packets Configure System Information 75 11 12 13 14 M4100 Series Managed Switch e rip Relay RIP UDP port 520 packets e tacacs Relay TACACS UDP port 49 packet e tftp Relay TFTP UDP port 69 packets e time Relay time service UDP port 37 packets e Other If this option is selected the UDP Port Other Value is enabled This option permits you to enter your own UDP port in UDP Port Other Value Use UDP Port Other Value to specify UDP Destination Port that lies between 0 and 65535 Use Discard to enable or disable dropping of matched packets Enable can be selected only when you enter 0 0 0 0 as the IP address Discard mode can be set to Disable when you add a new entry with a non zero IP address sls an entry in the UDP Relay Table with th
179. Device Security 342 M4100 Series Managed Switch Configure a Dynamic ARP Inspection ACL Rule gt To configure a dynamic ARP Inspection ACL rule 1 8 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt Dynamic ARP Inspection gt DAI ACL Rule Configuration Dynamic ARP Inspection ACL Rules Configuration Rules ACL Name DAI Rule Table E3 Source IP Address Source MAC Address The Source IP Address field and the source MAC address field indicate the sender IP address match value and the sender MAC address match value for the DAI ARP ACL Use ACL Name to select the DAI ARP ACL To add a new rule to the selected ACL click the ADD button 10 To remove the currently selected rule from the selected ACL click the DELETE button View DAI Statistics Toview DAI statistics 1 Prepare your computer with a static IP address in th
180. Disable Enable Snooping Querier Address 0 0 0 0 IGMP Version 2 Query Interval secs 60 Querier Expiry Interval secs 125 VLAN IDs Enabled for IGMP Snooping Querier Use Querier Admin Mode to select the administrative mode for IGMP snooping for the switch The default is Disable Use Querier IP Address to specify the snooping querier address to be used as the source address in periodic IGMP queries This address is used when no address is configured on the VLAN on which query is being sent Use IGMP Version to specify the IGMP protocol version used in periodic IGMP queries Use Query Interval secs to specify the time interval in seconds between periodic queries sent by the snooping querier The query interval must be a value in the range of 1 and 1800 The default value is 60 Use Querier Expiry Interval secs to specify the time interval in seconds after which the last querier information is removed Configure Switching Information 171 M4100 Series Managed Switch The querier expiry interval must be a value in the range of 60 and 300 The default value is 125 Table 51 IGMP Snooping Querier Configuration Fig escrito O O VLAN IDs Enabled For IGMP Snooping Querier Displays VLAN IDs enabled for IGMP snooping querier IGMP Snooping Querier VLAN Configuration You can configure IGMP queriers for use with VLANs on the network To configure IGMP queriers for use with VLANs 1 P
181. E button 13 Click the APPLY button Your settings are saved Configure a Private Group gt To configure a private group 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 317 10 11 12 M4100 Series Managed Switch Select Security gt Traffic Control gt Private Group gt Private Group Configuration Private Group Configuration Private Group Configuration pgroupi 1 community In the Group Name field enter the private group name The name can be up to 24 bytes of non blank characters In the optional Group ID field specify the private group identifier The range of group ID is 1 to 192 In the Group Mode menu select isolated or community When in isolated mode the member port in the group cannot forward its egress traffic to any other members in the same group By default the mode is community mode Each member port
182. EENEKEKNKE KAH S o 8 Use VLAN ID to specify the VLAN identifier VID associated with this VLAN Routing 224 V 9 M4100 Series Managed Switch The range of the VLAN ID is 1 to 4093 Use Ports to display selectable physical ports and LAGs if any Selected ports are added to the routing VLAN Each port has three modes e T Tagged Select the ports on which all frames transmitted for this VLAN are tagged The ports that are selected are included in the VLAN U Untagged Select the ports on which all frames transmitted for this VLAN are untagged The ports that are selected are included in the VLAN e BLANK Autodetect Select the ports that can be dynamically registered in this VLAN through GVRP This selection has the effect of excluding a port from the selected VLAN 10 Use the LAG Enabled option to add selected ports to VLAN as a LAG The default is No 11 Use IP Address to define the IP address of the VLAN interface 12 Use Network Mask to define the subnet mask of the VLAN interface Configure VLAN Routing You can configure VLAN Routing interfaces on the system To configure VLAN routing 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field T
183. FTP IP address 10 9 11 20 c 614 1734 yy Spanning Tree Topology Change Received MSTID 0 Unit 1 Siet 0 P 413 JAN 03 22 35 55 10 27 34 52 1 TRAFMGR 1948147584 traputiLc 614 1733 5 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot Port 22 A log that is disabled does not log messages 8 To enable or disable a log select the Disable or Enable radio button Behavior Indicates the behavior of the log when it is full It can either wrap around or stop when the log space is filled 9 To refresh the screen to show the latest messages in the log click the REFRESH button 10 To clear the buffered log in the memory click the CLEAR button Message Format in Logs This topic applies to the format of all logged messages that are displayed for the message log persistent log or console log Messages logged to a collector or relay through syslog use an identical format of either type If system is not stacked lt 15 gt Aug 24 05 34 05 STKO MSTP 2110 mspt api c 318 237 9696 Interface 12 transitioned to root state on message age timer expiry This example indicates a message with severity 7 15 mod 8 debug on a system that is not stacked and generated by component MSTP running in thread ID 2110 on Aug 24 05 34 05 by line 318 of file mstp api c This is the 237th message logged Monitoring the System 382 M4100 Series Managed Switch If the system is stacked lt 15 gt Aug 24 05 34 05 0 0 0 0 1 MSTP 2110
184. Forward Net Directed Broadcasts to select how network directed broadcast packets should be handled If you select Enable network directed broadcasts are forwarded If you select Disable they are dropped The default value is Disable Use Encapsulation Type to select the link layer encapsulation type for packets transmitted from the specified interface The possible values are Ethernet and SNAP The default is Ethernet Use Proxy Arp to disable or enable proxy ARP for the specified interface Use Local Proxy Arp to disable or enable Local Proxy ARP for the specified interface Use Bandwidth to specify the configured bandwidth on this interface This parameter communicates the speed of the interface to higher level protocols OSPF uses bandwidth to compute link cost The valid range is 1 to 10000000 Use ICMP Destination Unreachables to specify the mode of sending ICMP destination unreachables on this interface If this is disabled then this interface does not send ICMP destination unreachables By default the destination unreachables mode is enabled Use ICMP Redirects to enable disable ICMP Redirects mode The router sends an ICMP tedirect on an interface only if tedirects are enabled both globally and on the interface By default ICMP Redirects mode is enabled Routing 221 M4100 Series Managed Switch 23 Use IP MTU to specify the maximum size of IP packets sent on an interface The valid range is 68 bytes to the link M
185. GARP configuration changes to take effect To configure GARP switch settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 137 7 8 M4100 Series Managed Switch Select Switching gt VLAN gt Advanced gt GARP Switch Configuration GARP Switch Configuration GARP Switch Configuration GVRP Mode Disable Enable GMRP Mode Disable Enable Select the GVRP Mode Disable or Enable radio button This sets the GARP VLAN Registration Protocol administrative mode for the switch The factory default is Disable Select the GMRP Mode Disable or Enable radio button This sets the GARP Multicast Registration Protocol administrative mode for the switch The factory default is Disable Configure GARP Port Settings Note It can take up to 10 seconds for GARP configuration changes to take effect To configure GARP port settin
186. Host Configuration o m IP Address Type Host Address Severity Filter To enable the log select the Admin Status Enable radio button When the syslog configuration is enabled messages are sent to configured collector relays using the values configured for each collector relay Setting the Admin Status to Disable stops logging to all syslog hosts No messages are sent to any collector or relay In the Local UDP Port field type the local port number on the local host from which syslog messages are sent Monitoring the System 385 10 11 12 13 M4100 Series Managed Switch The default port is 514 In the IP Address Type list select one of the following e Pv4 e I Pv6 e DNS In the Host Address field type the address of the host configured for syslog In the Port field type the port number on the host to which syslog messages are sent The default port is 514 In the Severity Filter list select a severity level A log records messages equal to or above a configured severity threshold These severity levels are available Emergency 0 The system is unusable Alert 1 Action must be taken immediately e Critical 2 Critical conditions Error 3 Error conditions e Warning 4 Warning conditions e Notice 5 Normal but significant conditions Informational 6 Informational messages Debug 7 Debug level messages View Trap Logs Note You can save the trap logs as a file by usi
187. ID e Port g1 PVID 10 Port g4 PVID 20 See Configure Port PVID on page 128 With the VLAN configuration that you set up the following situations produce results as described e f an untagged packet enters port 1 the switch tags it with VLAN ID 10 The packet has access to port 2 and port 3 The outgoing packet is stripped of its tag to leave port 2 as an untagged packet For port 3 the outgoing packet leaves as a tagged packet with VLAN ID 10 e If atagged packet with VLAN ID 10 enters port 3 the packet has access to port 1 and port 2 If the packet leaves port 1 or port 2 it is stripped of its tag to leave the switch as an untagged packet Configuration Examples 432 M4100 Series Managed Switch e f an untagged packet enters port 4 the switch tags it with VLAN ID 20 The packet has access to port 5 and port 6 The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6 For port 5 the outgoing packet leaves as a tagged packet with VLAN ID 20 Access Control Lists Access control lists ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources ACLs are used to provide traffic flow control restrict contents of routing updates decide which types of traffic are forwarded or blocked and provide security for the network ACLs are normally used in firewall routers that are positioned between the internal
188. IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 45 M4100 Series Managed Switch 7 Select System gt Management gt Time gt Summer Time Configuration Time Configuration Summer Time Configuration Summer Time Disable Recurring Recurring EU Recurring USA Non Recurring Summer Time Status Summer Time Disable Summer Time In Effect No 8 Select a Summer Time radio button Disable This option is used to disable Summer Time e Recurring This option is used to enable Recurring Summer Time e Recurring EU This option is used to enable Recurring EU Summer Time e Recurring USA This option is used to enable Recurring USA Summer Time Non Recurring This option is used to configure Non Recurring Summer Time The fields described in the following table are visible only when Summer Time is Recurring or Recurring EU or Recurring USA Table 10 Summer Time Recurr
189. IPv4 Utility rrr e rrt mere hbro ka M4100 Series Managed Switch Userthe Ping IPVO Utility uero th se rer REA AT ESEE ER RSS 422 RUM Traceroute PV sauer added cud Tac hea b UR GUE E ade 423 Configure Traceroute IPv6 Settings 00 c cece eee eee eee 425 Appendix A Default Settings Factory Default Settings e ReR RR e eR FIT PE RATS 427 Appendix B Configuration Examples Virtual Local Area NeEWOEFKS rererere hp ehh rre cerns TES E PRESS 431 VLAN Exarnple Configukatloli uo onte ence e d hepS ER RR rS RES 432 Access Control LISTS uoo dee uber the me E haee tee bee EET ees 433 MAC ACL Sample Configuration xs ox es cte ene badra iau eee xs 433 Standard IP ACL Example Configuration 00 eese 434 Differentiated Services DiffServ esse 435 GN E E E T Esch ens A nnd wed ret peuples esos aut 436 DiftServ Traffic Clas E negn eee honor erret e 436 Creating Policies scere most t hr a natae edal a dues eds 437 DiffServ Example Configuration 00 cece cece eee eee 438 DO AR emt NR EP TEE 440 802 1X Sample Configuration 0 ccc cece eee ee 441 MSTBP sus ite ag xtee ate Ge ben E Rd dru da NSS aad ecd bo dse qb Swink aide dala 442 MSTP Sample Config ratlor eresie sro ha e EIL RE IP IEEE ERES 444 10 Get Started This chapter provides an overview of starting your NETGEAR Managed Switch and accessing the user interface This chapter contains the following section
190. IcmpOutEchos The number of ICMP Echo request messages sent IcmpOutEchoReps The number of ICMP Echo Reply messages sent IcmpOutTimestamps The number of ICMP Timestamp request messages IcmpOutTimestampReps The number of ICMP Timestamp Reply messages sent Routing 219 M4100 Series Managed Switch Table 68 IP statistics continued Field Description IcmpOutAddrMasks The number of ICMP Address Mask Request messages sent IcmpOutAddrMaskReps The number of ICMP Address Mask Reply messages sent Configure an IP Interface You can update IP interface data for this switch To configure an IP Interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Routing gt IP gt Advanced gt IP Interface Configuration IP Interface Configuration IP Interface Configuration 1 VLANS Al Port Description uration unk Speed Data Rate
191. Information 94 M4100 Series Managed Switch View LLDP Local Device Information To view LLDP local device information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt LLDP gt Local Device Information LLDP Local Device Information LLDP Interface Selection Interface Local Device Information Chassis ID Subtype MAC Address Chassis ID 20 4E 7F 5B 8A 6C Port ID Subtype Local Port ID 0 1 System Name System Description M4100 12GF ProSafe 12 port Gigabit Fiber L2 Managed Switch with PoE 10 15 17 33 B1 0 0 6 Port Description System Capabilities Supported bridge router System Capabilities Enabled bridge Management Address Type IPv4 Management Address 10 130 181 160 8 Use Interface to specify the list of all the ports on which LLDP 802 1AB frames can be transmitted The following table describes the LLDP Local Device Information f
192. L Based on Source IPv4 To create an ACL based on the source IPv4 address and IPv4 address mask e ACL Based on Destination IPv6 To create an ACL based on the destination IPv6 prefix and IPv6 prefix length e ACL Based on Source IPv6 To create an ACL based on the source IPv6 prefix and IPv6 prefix length e ACL Based on Destination IPv4 L4 Port To create an ACL based on the destination IPv4 Layer4 port number e ACL Based on Source IPv4 L4 Port To create an ACL based on the source IPv4 Layer 4 port number Manage Device Security 346 10 11 12 13 14 15 16 M4100 Series Managed Switch e ACL Based on Destination IPv6 L4 Port To create an ACL based on the destination IPv6 Layer 4 port number e ACL Based on Source IPv6 L4 Port To create an ACL based on the source IPv6 Layer 4 port number Use Rule ID to enter a whole number in the range of 1 to 511 This number is used to identify the rule Use Action to specify what action should be taken if a packet matches the rule s criteria The choices are permit or deny Select True or False from the Match Every menu True indicates that all packets match the selected ACL and rule and is either permitted or denied In this case since all packets match the rule the option of configuring other match criteria is not offered To configure specific match criteria for the rule remove the rule and re create it or reconfigure Match Every to False for the other match
193. LDP MED remote device inventory 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt LLDP gt LLDP MED gt Remote Device Inventory LLDP MED Remote Device Inventory LLDP MED Remote Device Inventory Management MAC Add s Model Software Address Wot Revision The following table describes the LLDP MED Remote Device Inventory fields Table 31 LLDP MED remote device inventory Field Definition The list of all the ports on which LLDP MED is enabled Management Address The advertised management address of the remote system Configure System Information 106 M4100 Series Managed Switch Table 31 LLDP MED remote device inventory Field Definition MAC Address The MAC address associated with the remote system System Model The model name of the remote device Software Revision The software version of the remote device
194. LY button Configuration changes you made are saved across a system reboot All changes submitted since the previous save or system reboot are retained by the switch 11 Use Autolnstall Retry Count to specify the number of times the unicast TFTP tries will be made for the DHCP specified file before falling back for broadcast TFTP tries The Autoinstall State field displays the current status of the Autolnstall process Reboot a Switch gt To reboot a switch 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Maintenance 406 M4100 Series Managed Switch Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Reset gt Device Reboot Device Reboot Device Reboot Save prior to reboot Don t save prior to reboot Select a Device Reboot radio button e Save prior to reboot saves the current configuration before the switch reboots Don t save prior to reboot reboots without saving Cli
195. LY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure System Information 52 Vv M4100 Series Managed Switch Configure Port Green Mode Statistics You can configure the Port Green Mode Statistics settings To configure port green mode statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System Management Green Ethernet Green Ethernet Detail System Switching Routing QoS Security Monitoring Maintenance Help Index Device View Services PoE SNMP LLDP ISDP Timer Schedule Initial Setup Port Green Mode Statistics gt System e A EA Local Device Information gt Switch Statistics Interface System CPU Status Cumulative Energy Saved USB Device on this port due Information t
196. LY button Your changes take effect immediately Configure an RSPAN Source Interface gt To configure an RSPAN source interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Monitoring the System 395 M4100 Series Managed Switch Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays System Ports Select Monitoring gt Mirroring gt RSPAN Source Switch Configuration Switching Routing Security Monitoring Maintenance Help Index Logs gt Multiple Port RSPAN Source Switch Configuration Mirroring gt RSPAN VLAN RSPAN Source Switch Configuration RSPAN Source Admin Mode True False Switch Configuration RSPAN Destination Switch Configuration RSPAN Destination VLAN None RSPAN Reflector Port None Y RSPAN Source Interface Configuration 1 LAG CPU VLANS All Go To Interface BT S a 8 Select items in this screen using one of the following methods Select a Unit ID
197. N VLAN o sic rune e o d kr ateasasaaeacdl eene Configure an RSPAN Source Switch sees Configure an RSPAN Source Interface 0 eee Configure the RSPAN Destination Switch eee eee eee SHOW OVEIVIEW oto a D uten died adiri reden is a hunt ons Ra AR b UR OTRAS Configure sFlow Agent Information 00 cece ee eee eee eee Configure an sFlow Agent 0 cece eee e Configure the sFlow Receiver Configure sFlow Interface Settings 0 cc eee cence eee eee Chapter 8 Maintenance Save Conhigifatlofi s sa ncs ia bre Deep dt bp oborta berto brio Configure Auto Install aio terrre mo meat onum t re a c n e nao Reboot SWIECIIoOeoexe 59432913 SO t QU OUR RUP TESI eda dus Reset the Switch to Factory Default Settings 004 Reset All User Passwords to Factory Defaults 000 IplosdPiles aaa qe peqeadcdtua ANENII VER ARES MESE Er dd Upload a File from the Switch to the TFTP Server e eee Upload a n HTTP File opto E EITRueeEp ub rer TIPP donira rori Upload a USB File erem rtm eek mere eeseesees Downoad FJ Flare eer weer ecg rn een wre we peperere ani a et dd qms Downoad Files 2x2 9 d dcdarscito gioca sa rc pede VOR epe eases Download HTTP Files ip dordre rU t pPURPP ERR RRET ed dd Download a File to a USB Device 0 eee eee eee File Management Overview lsessseseeeeee n euge EET Configure Dual Image Settings eese Use tlie Ping
198. NETGEAR M4100 Series Managed Switch User Manual Version 10 0 2 April 2015 202 10967 02 350 East Plumeria Drive San Jose CA 95134 USA M4100 Series Managed Switch Support Thank you for selecting NETGEAR products After installing your device locate the serial number on the label of your product and use it to register your product at https my netgear com You must register your product before you can use NETGEAR telephone support NETGEAR recommends registering your product through the NETGEAR website For product updates and web support visit http support netgear com Phone US amp Canada only 1 888 NETGEAR Phone Other Countries Check the list of phone numbers at http support netgear com general contact default aspx Contact your Internet service provider for technical support Compliance For regulatory compliance information visit http www netgear com about regulatory See the regulatory compliance document before connecting the power supply Trademarks NETGEAR Inc NETGEAR and the NETGEAR logo are trademarks of NETGEAR Inc Any non NETGEAR trademarks are used for reference purposes only Revision History Publication Part Number Publish Date Comments 202 10967 01 November 2011 Original publication 202 10967 02 April 2015 Software version 10 0 2 Contents Chapter 1 Get Started Available Publications and Online Help 0 e eee eee eee ees 12 Register YOUFIPIOdU
199. NG MIB FASTPATH QOS MIB FASTPATH QOS ACL MIB FASTPATH QOS COS MIB FASTPATH QOS AUTOVOLP MIS RFC 3285 DIFFSERV DSCP TC 289 OLFFSERV MIB FASTPATH QOS OTFFSERV EXTENSIONS MIB FASTPATH QOS DIPFSERV PRIVATE MIB RFC 2932 IPMROUTE MIB drot ietf magma mgm mib 03 RFC 5060 PIM STO MIB APC 240 PIM BSR MIB DVMAP STD MIB 1ANA RTPROTO MIB FASTPATH NSF MIB REC 2465 IPV MIB RIC 2466 IPV6 ICMP MIB RFC 3419 TRANSPORT ADORESS MIB FASTPATH ROUTINGS MIB The MIB module for SNMPv2 entities Remote Network Morstoring Management Information Base Broadcom Reference This MIB module defines objects to help support coexistence between SNMPv1 SNMPy2 and SNMPv3 The SNMP Management Architecture MIB The MIS for Message Processing and Dispatching The Notification MIB Module The Target MIB Module The management information definitions for the SNMP User based Security Model The management dormadon defimtions for the View based Access Control Model for SNMP SNMP Research Inc Fastpath Power Ethernet Extensions MIB Poner Ethernet MIB slow MIB Industry Standard Discovery Protocol MIB The Link Aggregation module fce managing IEEE 802 3ad Management Information Base for Network Management of TCP IP based internets MIB II Definitions of Managed Objects for Bridges dotid The Bridge MIB Extension module for managing Priority and Multicast Filtenng defined by IEEE 802 10 1998 The VLAN Bridge MIB module for managing Virtual
200. Name The name for the VLAN that you selected It can be up to 32 alphanumeric characters long including blanks VLAN ID 1 always has a name of Default VLAN Type The type of the VLAN you selected The VLAN type e Default VLAN ID 1 Always present Static A VLAN you configured Dynamic A VLAN created by GVRP registration that you did not convert to static and that GVRP can therefore remove View VLAN Status You can view the status of all currently configured VLANs To view the VLAN status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt VLAN Status VLAN Status VLAN Status VLAN VLAN Routi VLAN Type Scare Member Ports ID Name Interface default Default 0 1 0 12 lag 1 lag 12 Auto VoIP AUTO VoIP 0 1 0 12 lag 1 lag 12 Configure Switching Information 127 M4100 Series Manage
201. P IP address table Configure System Information 113 M4100 Series Managed Switch Configure Timers You can configure global timer settings and set up timer schedules Configure the Global Timer Settings gt To configure the timer global settings 1 10 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Timer Schedule gt Basic gt Global Configuration System Switching Routing QoS Security Monitoring Maintenance Management Device View Services PoE SNMP LLDP ISDP Basic Timer Schedule Global Configuration Global Configuration Timer Schedule Name gt Advanced HIT mE EM M Staten Status The screen displays the timer schedule status as active or inactive In the Timer Schedule Name field type the name of a timer schedule To add a new timer schedule click the ADD button Your change takes effect immediately To delete
202. P v3 Access Mode This indicates the SNMP v3 access privileges for the user account The admin account always has Read Write access and all other accounts use Read Only access Use Authentication Protocol to specify the SNMP v3 Authentication Protocol setting for the selected user account The valid Authentication Protocols are None MD5 or SHA e If you select None the user cannot access the SNMP data from an SNMP browser e If you select MD5 or SHA the user login password are used as the SNMP v3 authentication password and you must therefore specify a password and it must be eight characters long Use Encryption Protocol to specify the SNMP v3 Encryption Protocol setting for the selected user account The valid Encryption Protocols are None or DES If you select the DES Protocol you must enter a key in the Encryption Key field If None is specified for the Protocol the Encryption Key is ignored Enter the Encryption Key If you selected DES in the Encryption Protocol field enter the SNMP v3 Encryption Key here otherwise this field is ignored Valid keys are 0 to 15 characters long The APPLY check box must be selected for you to change the Encryption Protocol and Encryption Key Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure System Information 89 M4100 Series Managed Switch LLDP Overview The IEEE 802 1AB defined standard Lin
203. Packets RX and TX 256 511 Octets 180132 Packets RX and TX 512 1023 Octets 89344 Packets RX and TX 1024 1518 Octets 51297 Packets RX and TX 1519 2047 Octets Packets RX and TX 2048 4095 Octets Packets RX and TX 4096 9216 Octets You can use the buttons at the bottom of the screen to perform the following actions To clear all counters click the CLEAR button This resets all statistics for this port to the default values e To refresh the data on the screen and display the most current statistics click the REFRESH button The following table describes the detailed port information displayed on the screen To view information about a different port select the port number from the Interface menu Table 100 Port Detailed Statistics screen fields Field Description iflndex The iflndex of the interface table entry associated with this port on an adapter Port Type For normal ports this field is normal Otherwise the possible values are as follows e Mirrored This port is a participating in port mirroring as a mirrored port Look at the Port Mirroring screens for more information e Probe This port is a participating in port mirroring as the probe port Look at the Port Mirroring screens for more information e Trunk Member The port is a member of a link aggregation trunk Look at the Port Channel screens for more information Monitoring the System 372 M4100 Series Managed Switch Table 100 Port Detail
204. Policy Instance table Displays the number of configured policy class instances out of the total allowed on the switch Policy Attributes table Displays the number of configured policy attributes attached to the policy class instances out of the total allowed on the switch Service table Displays the number of configured services attached to the policies on specified interfaces out of the total allowed on the switch Configure the Global Diffserv Mode Packets are filtered and processed based on defined criteria The filtering criteria are defined by aclass The processing is defined by a policy s attributes Policy attributes can be defined on a per class instance basis and it is these attributes that are applied when a match occurs The configuration process begins with defining one or more match criteria for a class Then one or more classes are added to a policy Policies are then added to interfaces Packet processing begins by testing the match criteria for a packet The all class type option defines that each match criteria within a class must evaluate to true for a packet to match that class The any class type option specifies that at least one match criteria must evaluate to true for a packet to match that class Classes are tested in the order in which they were added to the policy A policy is applied to a packet when a class match within that policy is found To configure the global DiffServ mode 1 Prepare
205. RES RE 156 View MST Port Status 4 ear deter rro etin PE Eb een aded 158 View Spanning Tree SESEISEICS sque daco pred nkerner rirani anne eg ec 160 Configure Multicast rrr rR RISE RR mne mae E FER EE E ATE AETS 162 Configure Bridge Multicast Forwarding eee eee eee 162 View the MFDB Table endet reme PP Te ERE REUS 163 MiewMEDB StatlStICS i neos patct bao rod td drama be dubbio 164 IGMP Snooping OVervIeW seecececesesiowesveenesesenceterem irs 165 Configure IGMP Snooping Interface Settings eee eee 166 Configure IGMP Snooping Settings for VLANs 2 00 eee 167 Configure IGMP Snooping for a Multicast Router 04 168 Configure IGMP Snooping for a Multicast Router VLAN 169 Configure IGMP Snooping Querier cece eee eee eee eee 170 IGMP Snooping Querier VLAN Configuration 200e 172 Configure MED SHOOPING 4 ouch hp eee ee dun Der sodas 174 Configure MLD Snooping for an Interface 2 eee eee ee ee 175 Configured MED VEAN irruere bR ket rx ER A ra ena 176 Configure a Multicast Router sssssslssssse esee 177 Configure a Multicast Router VLAN 0 0 cece eee eee eee eee 178 Configure the MLD Snooping Querier 200 ce eee eee eee 179 Configure an MLD Snooping Querier VLAN 2 eee eee eee 180 M4100 Series Managed Switch Configure MVR cise ereraeseedsosenreehonenectbe se Seeeee
206. Router Addresses The list of default router addresses for the pool You can specify up to 8 default router addresses in order of preference DNS Server Addresses The list of DNS server addresses for the pool You can specify up to 8 DNS server addresses in order of preference NetBIOS Name Server Addresses The list of NetBIOS name server addresses for the pool You can specify up to 8 NetBIOS name server addresses in order of preference NetBIOS Node Type The NetBIOS node type for DHCP clients e b node Broadcast e p node Peer to Peer e m node Mixed e h node Hybrid Next Server Address The next server address for the pool Domain Name The domain name for a DHCP client The domain name can be up to 255 characters in length Bootfile The name of the default boot image for a DHCP client The file name can be up to 128 characters in length Configure the DHCP Pool Options Toconfigure the DHCP pool options 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Configure System Information 63 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The
207. ST instance View MST Port Status To view the Spanning Tree MST port status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 158 Designated Root 00 01 2C B0 5D 91 F6 FO 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 FO 80 01 2C B0 5D 91 F6 FO 80 01 2C B0 5D 91 F6 FO 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 00 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 80 01 2C B0 5D 91 F6 F0 M4100 Series Managed Switch Designated 7 Select Switching gt STP gt Advanced gt MST Port Status Loop Inconsistent Transitions Into Loop Inconsistent Transitions Out Of Loop Inconsistent Note If no MST instances were conf
208. Switch Use STP Mode to enable or disable the Spanning Tree Protocol administrative mode associated with the LAG The possible values are as follows e Disable Spanning tree is disabled for this LAG e Enable Spanning tree is enabled for this LAG Use Static Mode to select enable or disable When the LAG is enabled it does not transmit or process received LACPDUs for example the member ports do not transmit LACPDUs and all the LACPDUs it can receive are dropped The factory default is disabled Use Link Trap to specify whether a trap is sent when link status changes The factory default is enabled which causes the trap to be sent Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 The following table describes the nonconfigurable information displayed on the screen Table 63 LAG Configuration Field Description LAG Description Enter the description string to be attached to a LAG It can be up to 64 characters in length LAG ID Identification of the LAG Configured Ports Indicate the ports that are members of this port channel Active Ports Indicates the ports that are actively participating in the port channel LAG State Indicates whether the Link is up or down Configure LAG Membership You can select two or more full duple
209. System Information 41 M4100 Series Managed Switch Table 8 SNTP Global Status continued Field Description Last Attempt Status Specifies the status of the last SNTP request or unsolicited message for both unicast and broadcast modes If no message was received from a server a status of Other is displayed These values are appropriate for all operational modes Other None of the following enumeration values Success The SNTP operation was successful and the system time was updated Request Timed Out A directed SNTP request timed out without receiving a response from the SNTP server Bad Date Encoded The time provided by the SNTP server is not valid Version Not Supported The SNTP version supported by the server is not compatible with the version supported by the client Server Unsynchronized The SNTP server is not synchronized with its peers This is indicated through the leap indicator field on the SNTP message Server Kiss Of Death The SNTP server indicated that no further queries were to be sent to this server This is indicated by a stratum field equal to 0 in a message received from a server Server IP Address Specifies the IP address of the server for the last received valid packet If no message was received from any server an empty string is shown Address Type Specifies the address type of the SNTP server address for the last received valid packet Server Stratum Specifies the claimed stratum of the
210. TU The default value is 0 A value of 0 indicates that the IP MTU is unconfigured When the IP MTU is unconfigured the router uses the link MTU as the IP MTU The IP MTU is the maximum frame size minus the length of the Layer 2 header To delete the IP address from the selected interface click the DELETE button Click the REFRESH button to refresh the screen to show the latest IP information The following table describes the nonconfigurable information displayed on the screen Table 69 IP Interface Configuration Field Description VLAN ID Displays the VLAN ID for the interface Link State The state of the specified interface is either Active or Inactive An interface is considered active if it the link is up and it is in the forwarding state Routing Interface Status Indicates whether the link status is up or down Configure a Secondary IP Address To configure a secondary IP address 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a
211. Table 103 Trap Logs Field Description Number of Traps Since Last The number of traps that occurred since the switch last rebooted Reset Trap Log Capacity The maximum number of traps stored in the log If the number of traps exceeds the capacity the entries overwrite the oldest entries Number of Traps since log The number of traps that occurred since the traps were last displayed last viewed Displaying the traps by any method terminal interface display web display upload file from switch and so on causes this counter to be cleared to 0 Log The sequence number of this trap Monitoring the System 387 M4100 Series Managed Switch Table 103 Trap Logs continued Field Description System Up Time The time at which this trap occurred expressed in days hours minutes and seconds since the last reboot of the switch Trap Information identifying the trap Event Logs You can view the event log which contains error messages from the system The event log is not cleared on a system reset To view event logs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Log
212. The total number of input datagrams successfully delivered to IP user protocols including ICMP The total number of IP datagrams that local IP user protocols including ICMP supplied to IP in requests for transmission This counter does not include any datagrams counted in ipForwDatagrams The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination but that were discarded such as for lack of buffer space Note that this counter would include datagrams counted in ipForwDatagrams if any such packets met this discretionary discard criterion IpOutNoRoutes IpReasmTimeout The number of IP datagrams discarded because no route could be found to transmit them to their destination Note that this counter includes any packets counted in ipForwDatagrams that meet this no route criterion Note that this includes any datagrams that a host cannot route because all of its default gateways are down The maximum number of seconds that received fragments are held while they are awaiting reassembly at this entity IpReasmReqds The number of IP fragments received that needed to be reassembled at this entity IpReasmOKs IpReasmFails The number of IP datagrams successfully re assembled The number of failures detected by the IP re assembly algorithm for whatever reason timed out errors and so on This is not necessarily a count of discarded IP fragments since some
213. Transitions ol Designated Designated po ogy Since p into Loop ut OF Loop Port ol rfi Fi i Re T l h Interface orwarding Designated Root m jose Bridge Port Change CST Regional Root at Inconsistent stent consistent State Acknowledge x State gate State Cleared 80 01 Forwarding Root 80 00 00 07 03 05 05 06 20000 80 00 CO 3F 0E 90 29 60 80 08 Disabled True 80 00 C0 3F 0E 90 29 60 0 day Ohr9min tt sec False 80 02 Disabled Disabled 60 00 2C B0 5D 91 F6 F0 0 80 00 2C B0 50 91 F6 FO 00 00 Disabled False 80 00 2C BO SD 91 F6 F0 0 3day 3 hr 25 min 30sec False 80 03 Disabled Disabled 80 00 2C B0 50 91 F6 FO 0 80 00 2C 80 5D 91 F6 F0 00 00 Disabled False 80 00 2C 80 5D 91 F6 F0 0 3 day 3 hr 25 min 30sec False 80 04 Disabled Disabled 80 00 2C 80 5D 91 F6 F0 0 80 00 2C 80 5D 91 F6 FO 00 00 Disabled False 80 00 2C B0 5D 91 F6 F0 0 3day 3hr 25min 30sec False 80 05 Disabled Disabled 80 00 2C B0 50 91 F6 F0 0 80 00 2C 80 5D 91 F6 FO 00 00 Disabled False 80 00 2C 80 50 91 6 F0 0 3 day 3 hr 25 min 30sec False 80 06 Disabled Disabled 80 00 2C 80 5D 91 F6 F0 0 80 00 2C B0 5D 91 F6 F0 00 00 Disabled False 80 00 2C 80 50 91 F6 F0 0 3day 3hr 25 min 30 sec False The following table describes the CST Port Status information displayed on the screen Table 46 CST port status Field Description Interface Identify the physical or port channel interfaces associated with VLANs associated with the CST Port ID The port identifie
214. Tree Admin Mode Disable or Enable radio button This specifies whether spanning tree operation is enabled on the switch Use Force Protocol Version to specify the Force Protocol Version parameter for the switch The options are IEEE 802 1d IEEE 802 1w and IEEE 802 1s In the Configuration Name field specify an identifier used to identify the configuration currently being used It can be up to 32 alphanumeric characters In the Configuration Revision Level field specify an identifier used to identify the configuration currently being used The values allowed are between 0 and 65535 The default value is 0 Select the Forward BPDU while STP Disabled Disable or Enable radio button This specifies whether spanning tree BPDUs should be forwarded or not while spanning tree is disabled on the switch Select the BPDU Guard Disable or Enable radio button This specifies whether the BPDU guard feature is enabled The STP BPDU guard allows a network administrator to enforce the STP domain borders and keep the active topology consistent and predictable The switches behind the edge ports with STP BPDU guard enabled are not able to influence the overall STP topology At the reception of BPDUs the BPDU guard operation disables the port that is configured with this option and transitions the port into a disabled state This would lead to an administrative disabling of the port Select the BPDU Filter Disable or Enable radio button This specif
215. Type The application type Types of applications are unknown voicesignaling guestvoice guestvoicesignalling softphonevoice videoconferencing streammingvideo and vidoesignalling Each application type that is received has a VLAN ID priority DSCP tagged bit status and unknown bit status A port can receive one or many such application types Only when a network policy TLV was transmitted is this information be displayed Inventory Specifies if the inventory TLV is present in LLDP frames Configure System Information 102 M4100 Series Managed Switch Table 29 LLDP MED local device information continued Field Hardware Revision The hardware version Firmware Revision The Firmware version Software Revision The Software version Serial Number The serial number Manufacturer Name The manufacturers name Model Name The model name Asset ID The asset ID Location Information Specifies if the location TLV is present in LLDP frames Sub Type The type of location information Location Information The location information as a string for a given type of location ID View LLDP MED Remote Device Information To view LLDP MED remote device information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launc
216. VLAN Configuration Dynamic ARP Inspection Configuration Logging Invalid ARP ACL Name pee alee LM 9 VLAN Configuration Disable L N C E Disable Enable Disable Disable Enable Disable Use the VLAN ID check boxes to select the DAI capable VLANs Use Dynamic ARP Inspection to indicate whether the dynamic ARP inspection is enabled on this VLAN If set to Enable dynamic ARP inspection is enabled Use Logging Invalid Packets to indicate whether the dynamic ARP inspection logging is enabled on this VLAN If set to Enable invalid ARP packets information is logged Use ARP ACL Name to specify a name for the ARP access list A VLAN can be configured to use this ARP ACL containing rules as the filter for ARP packet validation The name can contain up to 31 alphanumeric characters Manage Device Security 340 M4100 Series Managed Switch 12 Use Static Flag to determine whether the ARP packet needs validation using the DHCP snooping database in case ARP ACL rules don t match If the flag is enabled then the ARP packet is validated by the ARP ACL rules only If the flag is disabled then the ARP packet needs further validation using the DHCP snooping entries The factory default is Disable Configure a Dynamic ARC Inspection Interface To configure a dynamic ARC inspection interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an E
217. When a packet meets the match criteria of a rule the specified rule action Permit Deny is taken and the additional rules are not checked for a match You can specify or create rules for the IP ACL To configure an Pv6 ACL 1 10 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security ACL Advanced IPv6 ACL IPv6 ACL IPv6 Configuration Current Number of ACL Maximum ACL IPv6 ACL Table saa fees e NN CL ce 1 ipv6ACL IPv6 ACL IPv6 ACL is the IPv6 ACL ID or IPv6 ACL name which is dependent on the IPv6 ACL type IPv6 ACL Name string includes alphanumeric characters only The name must start with an alphabetic character To add a new IPv6 ACL click the ADD button To remove the currently selected IPv6 ACL from the switch configuration click the DELETE button Manage Device Security 361 M4100 Series Managed Switch The f
218. When the burst interval is 0 then configuring this field is not a valid operation The valid burst size is in the range 1 to 200 Use Select to configure Global Default Gateway to edit the Global Default Gateway field Use Global Default Gateway to set the global default gateway to the manually configured value A default gateway configured with this command is more preferred than a default gateway learned from a DHCP server Only one default gateway can be configured If you invoke this command multiple times each command replaces the previous value Routing 215 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 67 IP Configuration Fed Description 0000000 Default Time to Live The default value inserted into the Time To Live field of the IP header of datagrams originated by the switch if a TTL value is not supplied by the transport layer protocol Maximum Next Hops The maximum number of hops supported by the switch This is a compile time constant Maximum Routes The maximum number of routes routing table size supported by the switch This is a compile time constant View IP Statistics The statistics reported on this screen are as specified in RFC 1213 To view the IP statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethern
219. a timer schedule select it and click the DELETE button Your change takes effect immediately Configure System Information 114 M4100 Series Managed Switch Configure the Timer Schedule To configure the timer schedule 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Timer Schedule gt Advanced gt Schedule Configuration Timer Schedule Configuration Timer Schedule Selection Timer Schedule Name Timer Schedule Type Absolute Timer Schedule Entry new Timer Schedule Configuration Time Start Time End Date Start Date End To select a timer schedule or create a new schedule specify the following settings Timer Schedule Name Timer Schedule Type Absolute or Periodic Timer Schedule Entry To configure the timer schedule complete these fields Time Start The time when the schedule operation is started This field is the requi
220. abilities Specifies supported capabilities that were received in MED TLV on this port Enabled Capabilities Specifies enabled capabilities that were received in MED TLV on this port Device Class The device class as advertised by the device remotely connected to the port Network Policy Information Specifies if the network policy TLV is received in the LLDP frames on this port Configure System Information 104 M4100 Series Managed Switch Table 30 LLDP MED remote device information continued Field Media Application Type The application type Types of applications are unknown voicesignaling guestvoice guestvoicesignalling softphonevoice videoconferencing streammingvideo and vidoesignalling Each application type that is received has the VLAN ID priority DSCP tagged bit status and unknown bit status A port can receive one or many such application types Only when a network policy TLV was received on this port is this information displayed VLAN Id The VLAN ID associated with a particular policy type Priority The priority associated with a particular policy type DSCP The DSCP associated with a particular policy type Unknown Bit Status The unknown bit associated with a particular policy type Tagged Bit Status The tagged bit associated with a particular policy type Inventory Information Specifies if the inventory TLV is received in LLDP frames on this port
221. able or Enable radio button This specifies whether the DHCP service is enabled or disabled The default value is Disable 9 Use Ping Packet Count to specify the number of packets a server sends to a pool address to check for duplication as part of a ping operation The default value is 2 The valid range is 0 2 to 10 Setting the value to 0 disables the function 10 Select the Conflict Logging Mode Disable or Enable radio button This specifies whether conflict logging on a DHCP server is enabled The default value is Enable 11 Select the BOOTP Automatic Mode Disable or Enable radio button This specifies whether BOOTP for dynamic pools is enabled The default value is Disable 12 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Exclude an Address from the DHCP Server gt To exclude an address from the DHCP server 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure System Information 59 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the d
222. ace 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Configure Quality of Service 257 M4100 Series Managed Switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt Advanced gt Service Interface Configuration Service Interface Configuration Service Interface Configuration 1 2 LAGS All Go To Interface so NEN _ AEE Name 1 0 1 C 10 2 1 0 3 C 1 o 4 1 0 5 1 0 6 E 1 0 7 1 0 8 1 0 9 Use Interface to select the interface for the DiffServer service 9 Inthe a Policy Name list select a name This list includes all the policy names This field is not shown for Read Write users where inbound service policy attachment is not supported by the platform The following table describes the nonconfigurable information displayed on the screen Table 75 Service Interface Configuration Field Description Shows that the traffic direction of this ser
223. aces the currently attached access list using that sequence number If the sequence number is not specified by the Manage Device Security 365 M4100 Series Managed Switch user a Sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used The valid range is 1 4294967295 10 Click the appropriate orange bar to expose the available ports or LAGs The Port Selection Table specifies list of all available valid interfaces for ACL mapping All non routing physical interfaces and interfaces participating in LAGs are listed To add the selected ACL to a port or LAG click the box directly below the port or LAG number so that an X appears in the box To remove the selected ACL from a port or LAG click the box directly below the port or LAG number to clear the selection An X in the box indicates that the ACL is applied to the interface 11 Click the APPLY button Your settings are saved The following table describes the nonconfigurable information displayed on the screen Table 96 IP Binding Configuration Fed Description 0000000000000 Interface The selected interface Direction The selected packet filtering direction for ACL ACL Type The type of ACL assigned to the selected interface and direction ACL ID Name The ACL number in the case of an IP ACL or ACL name in the case of named IP ACL and IPv6 ACL identifying the ACL assigned to the
224. adation in service is acceptable and in many cases unnoticeable Conversely any degradation of service has undesirable effects on applications with strict timing requirements such as voice or multimedia Defining DiffServ To use DiffServ for QoS you must first define the following categories and their criteria 1 Class Create classes and define class criteria 2 Policy Create policies associate classes with policies and define policy statements 3 Service Add a policy to an inbound interface Packets are classified and processed based on defined criteria The classification criteria are defined by a class The processing is defined by a policy s attributes Policy attributes can be defined on a per class instance basis and it is these attributes that are applied when a match occurs A policy can contain multiples classes When the policy is active the actions taken depend on which class matches the packet Packet processing begins by testing the class match criteria for a packet A policy is applied to a packet when a class match within that policy is found Configure Quality of Service 241 M4100 Series Managed Switch DiffServ Wizard Overview You can use the DiffServ Wizard to enable DiffServ on the switch by creating a traffic class adding the traffic class to a policy and then adding the policy to the ports selected on DiffServ Wizard screen The DiffServ Wizard does the following Creates a DiffServ Class and defi
225. address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure Switching Information 142 M4100 Series Managed Switch 6 Click the Login button The web management interface menu displays 7 Select Switching gt Auto VoIP gt OUI based Port Settings QUI Port Settings OUI Port Settings 1 LAGS All Go To Interface GO Interface Auto VoIP Mode Operational Status 0 1 UP 0 2 UP UP UP UP UP UP UP UP UP UP UP The screen displays the current operational status of the interface 8 Use the Interface check boxes to select the interface 9 In the Auto VoIP Mode menu select Enable or Disable This sets the AutoVoIP mode on the selected interface The default value is Enable 10 In the Go To Interface field type the number of an interface 11 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure the OUI Table gt To configure the OUI table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the
226. age 150 From the CST Port Configuration screen select ports 1 0 1 1 0 8 and select Enable from the STP Status menu See Configure Common Spanning Tree on page 150 Click the APPLY button Select ports 1 0 1 1 0 5 edge ports and select Enable from the Fast Link menu Since the edge ports are not at risk for network loops ports with Fast Link enabled transition directly to the forwarding state Click the APPLY button You can use the CST Port Status screen to view spanning tree information about each port From the MST Configuration screen create an MST instances with the following settings e MST ID 1 e Priority Use the default 32768 e VLAN ID 300 For more information see Configure an MST Instance on page 156 Click the ADD button Create a second MST instance with the following settings e MSTID 2 e Priority 49152 e VLAN ID 500 Configuration Examples 445 M4100 Series Managed Switch 13 Click the ADD button In this example assume that Switch 1 has become the root bridge for MST instance 1 and Switch 2 has become the root bridge for MST instance 2 Switch 3 has hosts in the Sales department ports 1 0 1 1 0 2 and 1 0 83 and in the HR department ports 1 0 4 and 1 0 5 Switches 1 and 2 also use hosts in the Sales and Human Resources departments The hosts connected from Switch 2 use VLAN 500 MST instance 2 to communicate with the hosts on Switch 3 directly Likewise hosts of Switch 1 use VL
227. agement interface menu displays Configure Switching Information 186 7 10 11 12 13 M4100 Series Managed Switch Select Switching gt MVR gt Advanced gt MVR Interface Configuration MVR Interface Configuration MVR Interface Configuration Q 1 AI Go To Interface Go a ee Up L WW N 0 1 Disable none Disab ACTIVE InVLAN 0 2 Disable none Disab INACTIVE InVLAN 0 3 Disable none i ACTIVE InVLAN 0 4 Disable none i INACTIVE InVLAN 0 5 Disable none INACTIVE InVLAN 0 6 Disable none i INACTIVE InVLAN 0 7 Disable none i INACTIVE InVLAN 0 8 Disable none i INACTIVE InVLAN 0 9 Disable none i ACTIVE InVLAN Disable none i INACTIVE InVLAN Disable none i INACTIVE InVLAN Disable none i INACTIVE InVLAN o Li o El o Ll o Li o L1 o O 1 Go To Interface The Status field displays the status for each port Select Interface check boxes for the interface In the Admin Mode list select Enable or Disable This enables or disables MVR on a port The factory default is Disable In the Type list select receiver or sourcet This sets the MVR port as a receiver or source port The default port type is none In the Immediate Leave list select Enable or Disable This sets the Immediate Leave feature of MVR on a port The factory default is Disable Click the REFRESH button to refresh the screen to show the latest MVR interface configuration Click the APPLY button The updated configuration is sent
228. ainst an Ethernet frame The valid range of values is 1 to 4095 Either VLAN Range or VLAN can be configured Logging When set to Enable logging is enabled for this ACL rule subject to resource availability in the device If the Access List Trap flag is also enabled this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval A fixed 5 minute report interval is used for the entire system A trap is not issued if the ACL rule hit count is zero for the current interval This field is supported only for a Deny action Rate Limit Conform Data Rate Value of Rate Limit Conform Data Rate specifies the conforming data rate of MAC ACL rule The valid values are 1 to 4294967295 in Kbps Rate Limit Burst Size Value of Rate Limit Burst Size specifies burst size of MAC ACL rule The valid values are 1 to 128 in Kbytes Time Range Name of time range associated with the MAC ACL rule Use Rule Status Displays if the ACL rule is active or inactive Blank means that no timer schedules are assigned to the rule To delete a rule select the check box associated with the rule and click the DELETE button To change a rule select the check box associated with the rule change the desired fields Click the APPLY button Configuration changes take effect immediately Configure ACL MAC Binding When an ACL is bound to an interface all the rules that were defined are applied to th
229. alue is default value The value you enter is not retained across a power cycle Interval secs Enter the Time between probes in seconds The initial value is default value The interval you enter is not retained across a power cycle Maintenance 424 M4100 Series Managed Switch Port Enter the UDP Dest port in probe packets The initial value is default value The port you enter is not retained across a power cycle e Size Enter the size of probe packets The initial value is default value The size you enter is not retained across a power cycle 10 Click the APPLY button The traceroute initiates The results display in the TraceRoute area Configure Traceroute IPv6 Settings V You can tell the switch to send a traceroute request to a specified IP address or host name You can use this to discover the paths packets take to a remote destination Once you click the APPLY button the switch sends a traceroute and the results are displayed on the screen If a reply to the traceroute is received the following messages display 1 a b c d e f g 9869 usec 9775 usec 10584 usec 2 0 0 0 0 0 0 0 0 0 usec 0 usec 0 usec Hop Count w Last TTL z Test attempt x Test Success y To configure the traceroute IPv6 settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on
230. ame is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt VLAN Configuration VLAN Configuration Reset Reset Configuration Internal VLAN Configuration Internal VLAN Allocation Base 4093 Internal VLAN Allocation Policy Ascending Descending VLAN Configuration fen VLAN ID VLAN Name VLAN Type Make Static Eia default Default Disable 8 Use Internal VLAN Allocation Base to specify the VLAN allocation base for the routing interface The default base of the internal VLAN is 1 to 4093 9 Use the optional Internal VLAN Allocation Policy field to specify a policy for the internal VLAN allocation There are two policies supported ascending and descending Configure VLAN Trunking You can configure switchport mode settings on interfaces The switchport mode defines the purpose of the port based on the type of device it connects to and constrains the VLAN configuration of the port accordingly Assigning the appropriate switchport mode helps simplify VLAN configuration and minimize errors gt To configure VLAN Trunking 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure Switching Information 123 M4100 Series Managed Switch 2 Connect an Ethernet cable from an Ethernet port on your co
231. an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring Mirroring RSPAN Destination Switch Configuration System Switching Routing Security Monitoring Maintenance Help Index Ports Logs sFlow Multiple Port RSPAN Destination Switch Configuration Mirroring z gt RSPAN VLAN RSPAN Destination Switch Configuration RSPAN Source Admin Mode True False Switch Configuration RSPAN Destination Switch RSPAN Source VLAN None Y RSPAN Destination Port None Y Configuration Select the Admin Mode True enabled or False disabled for the selected session When a particular session is enabled any traffic entering or leaving the source ports of the session is copied mirrored onto the corresponding destination port or a remote switched port analyzer RSPAN VLAN By default the Admin Mode is disabled Select the RSPAN Source VLAN from the list of available VLAN IDs 10 Select the RSPAN Destination Port from the list of destination interfaces 11 Click
232. an choose from 1200 2400 4800 9600 19200 38400 57600 and 115200 baud The factory default is 115200 baud In the Login Authentication List menu specify which authentication list to use when you log in through Telnet The default value is defaultList In the Enable Authentication List menu specify which authentication list to use when going into the privileged EXEC mode The default value is enableList Manage Device Security 296 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 82 Console Port Field Description Character Size bits The number of bits in a character This is always 8 Flow Control Whether hardware flow control is enabled or disabled It is always disabled Stop Bits The number of stop bits per character It is always 1 Parity The parity method used on the serial port It is always None Configure Denial of Service Settings To configure denial of service 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin use
233. an embedded web server and management software for managing and monitoring switch functions The managed switch functions as a simple switches without the management software However you can use the management software to configure more advanced features that can improve switch efficiency and overall network performance Web based management lets you monitor configure and control your switch remotely using a standard web browser instead of using expensive and complicated SNMP software products From your web browser you can monitor the performance of your switch and optimize its configuration for your network You can configure all switch features such as VLANs QoS and ACLs by using the web based management interface Software Requirements to Use the Web Interface To access the switch by using a web browser the browser must meet the following software requirements e HTML version 4 0 or later HTTP version 1 1 or later e Java Runtime Environment 1 6 or later Use a Web Browser to Access the Switch and Log In You can use a web browser to access the switch and log in You must be able to ping the IP address of the managed switch management interface from your administrative system for web access to be available gt To use browser based access to log in to the switch 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port
234. anagement Information Base for IP Version 6 Textual Conventions and General Group Management Information Base for IP Version 6 ICMPv6 Group Textus Conventions for Transport Addresses The Broadcom Private MIB for FastPath 1pv6 Routing In the Name field the screen displays the RFC number if applicable and the name of the MIB Configure SNMP v3 Settings for a User gt To configure SNMP v3 settings for a user 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Configure System Information 88 10 11 12 13 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt SNMP gt SNMP V3 gt User Configuration User Configuration User Names User Name User Configuration SNMP v3 Access Mode Read Write Authentication Protocol None MDS SHA Encryption Protocol None DES Use User Name to specify the user account to be configured Select the SNM
235. and network mask for the configured management VLAN interface The default value for VLAN 1 is Static In the IP Address field specify the IP address of the management VLAN interface The factory default value is 169 254 100 100 In the Subnet Mask field specify the IP subneet mask for the management VLAN interface This is also referred to as the subnet or network mask and defines the portion of the interface s IP address that is used to identify the attached network The factory default value is 255 255 0 0 In the Gateway field specify the default gateway for the management VLAN interface The default value is 0 0 0 0 Define System Information gt To define system information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Configure System Information 22 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System Management gt System Information System Switchi
236. anning Tree Protocol The Spanning Tree Configuration Status screen contains fields for enabling STP on the switch To display the Spanning Tree Configuration Status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 146 7 10 11 12 13 14 M4100 Series Managed Switch Select Switching gt STP gt Basic gt STP Configuration STP Configuration STP Configuration Spanning Tree Admin Mode Disable Enable Force Protocol Version IEEE 802 1d IEEE 802 1w IEEE 802 1s Configuration Name 2C B0 5D 91 F6 F0 Configuration Revision Level lo Forward BPDU while STP Disabled Disable Enable BPDU Guard Disable Enable BPDU Filter Disable Enable Configuration Digest Key 0xac36177f50283cd4b83821d8ab26de62 Configuration Format Selector 0 STP Status MST ID VID 2 2 100 Select the Spanning
237. ansmitted Displays the number of transmitted IGMP queries IGMP Report V1 Transmitted Displays the number of transmitted IGMP reports V1 IGMP Report V2 Transmitted Displays the number of transmitted IGMP reports V2 IGMP Leave Transmitted Displays the number of transmitted IGMP leaves IGMP Packet Receive Failures Displays the number of IGMP packet receive failures IGMP Packet Transmit Failures Displays the number of IGMP packet transmit failures Manage MAC Addresses You can view the MAC address table convert dynamic MAC addresses to static addresses and configure static addresses Configure Switching Information 189 M4100 Series Managed Switch View the MAC Address Table This table contains information about unicast entries for which the switch has forwarding or filtering information This information is used by the transparent bridging function in determining how to propagate a received frame To view the MAC Address Table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password
238. as learned Status The status of this entry The meanings of the values are as follows e Static the value of the corresponding instance was added by the System or a user and cannot be relearned e Learned the value of the corresponding instance was learned and is being used e Management the value of the corresponding instance is also the value of an existing instance of dotidStaticAddress Configure Dynamic Addresses Aging Interval You can set the address aging interval for the specified forwarding database To set the address aging interval 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 192 7 8 M4100 Series Managed Switch Select Switching gt Address Table gt Advanced gt Dynamic Addresses Dynamic Address Table Dynamic Address Table Address Aging Timeout seconds Use Address Aging Timeout secon
239. as well as moves and other changes can be dealt with quickly and conveniently from a management interface rather than from the wiring closet e They provide increased performance VLANs free up bandwidth by limiting node to node and broadcast traffic throughout the network e They ensure enhanced network security VLANs create virtual boundaries that can be crossed only through a router So standard router based security measures can be used to restrict access to each VLAN Packets received by the switch are treated in the following way e When an untagged packet enters a port it is automatically tagged with the port s default VLAN ID tag number Each port has a default VLAN ID setting that is user configurable the default setting is 1 The default VLAN ID setting for each port can be changed in the Port PVID Configuration screen See Configure Port PVID on page 128 e When a tagged packet enters a port the tag for that packet is unaffected by the default VLAN ID setting The packet proceeds to the VLAN specified by its VLAN ID tag number e fthe port through which the packet entered is not a member of the VLAN specified by the VLAN ID tag the packet is dropped e If the port is a member of the VLAN specified by the packet s VLAN ID the packet can be sent to other ports with the same VLAN ID Configuration Examples 431 M4100 Series Managed Switch Packets leaving the switch are either tagged or untagged depending on the
240. associated with the group There are three configurable protocols IP IPX ARP IP IP is a network layer protocol that provides a connectionless service for the delivery of data e ARP Address Resolution Protocol ARP is a low level protocol that dynamically maps network layer addresses to physical medium access control MAC addresses e PX The Internetwork Packet Exchange IPX is a connectionless datagram network layer protocol that forwards data over a network 10 Use VLAN ID to select the VLAN ID It can be any number in the range of 1 to 4093 All the ports in the group assign this VLAN ID to untagged packets received for the protocols you included in this group 11 To add a new protocol based VLAN group to the switch click the ADD button 12 To remove the protocol based VLAN group identified by the value in the Group ID field click the DELETE button The following table describes the nonconfigurable information displayed on the screen Table 40 Protocol Based VLAN Group Configuration Field Description Group ID A number used to identify the group created by the user Group IDs are automatically assigned when a group is created by the user Ports Display all the member ports that belong to the group Configure Protocol Based VLAN Group Membership gt To display the protocol based VLAN group membership 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example
241. assword Click the Login button The web management interface menu displays Select Security ACL Advanced IP Rules IP Rules IP Rules ACL ID NAME 10 Basic ACL Rule Table Aciton Lonia Queue Match Mirror Redirect mpi Source IP Rate Limit Conform Rate Limit gg ng Every Interface Interface r Mask Data Rate Burst Size Deny Disable False 192 168 3 1 255 255 255 0 What is shown on this screen varies depending on the current step in the rule configuration process To add an IP ACL rule select the ACL ID to add the rule to complete the fields described in the following list and click the ADD button Displays only for ACL IDs from 1 to 99 e Rule ID Enter a whole number in the range of 1 to 511 This number is used to identify the rule An IP ACL can add up to 511 rules e Action Specify the action to be taken if a packet matches the rule s criteria The choices are permit or deny Manage Device Security 356 10 11 M4100 Series Managed Switch Logging When set to Enable logging is enabled for this ACL rule subject to resource availability in the device If the Access List Trap flag is also enabled this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval A fixed 5 minute report interval is used for the entire system A trap is not issued if the ACL rule hit count is zero for the current interval This fi
242. atically locked address To convert learned MAC addresses 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Manage Device Security 315 10 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Port Security Dynamic MAC Address Dynamic MAC Address Table Port Security Settings Convert Dynamic Address to Static Number Of Dynamic MAC Addresses Learned 0 Dynamic MAC Address Table Port List 1 0 1 s VLAN ID MAC Address To convert a dynamically learned MAC address to a statically locked address select the Convert Dynamic Address to Static check box The dynamic MAC address entries are converted to static MAC address entries ina numerically ascending order until the static limit is reached In the Port List menu select the physical interface The Dynamic MAC Address Table shows the MAC addresses and their associated VLANs
243. ation The switch passes the authentication information to the configured RADIUS server MSTP Spanning Tree Protocol STP runs on bridged networks to help eliminate loops If a bridge loop occurs the network can become flooded with traffic IEEE 802 1s Multiple Spanning Tree Protocol MSTP supports multiple instances of Spanning Tree to efficiently channel VLAN traffic over different interfaces Each instance of the Spanning Tree behaves in the manner specified in IEEE 802 1w Rapid Spanning Tree with slight modifications in the working but not the end effect chief among the effects is the rapid transitioning of the port to the forwarding state The difference between the RSTP and the traditional STP IEEE 802 1D is the ability to configure and recognize full duplex connectivity and ports that are connected to end stations resulting in rapid transitioning of the port to the rorwarding state and the suppression of topology change notification These features are represented by the parameters pointtopoint and edgeport MSTP is compatible to both RSTP and STP It behaves appropriately to STP and RSTP bridges Configuration Examples 442 M4100 Series Managed Switch A MSTP bridge can be configured to behave entirely as a RSTP bridge or a STP bridge So an IEEE 802 1s bridge inherently also supports IEEE 802 1w and IEEE 802 1D The MSTP algorithm and protocol provide simple and full connectivity for frames assigned to any given VLAN
244. ation displayed on the screen Table 56 MVR Configuration Fed Definition o MVR Max Multicast Groups Displays the maximum number of multicast groups that MVR supports MVR Current Multicast Groups Displays current number of the MVR groups allocated 10 In the MVR Global query response time field set the maximum time to wait for the IGMP reports membership on a receiver port This time applies only to receiver port leave processing When an IGMP query is sent from a receiver port the switch waits for the default or configured MVR query time for an IGMP group membership report before removing the port from the multicast group membership The value is equal to the tenths of a second The range is from 1 to 100 tenths The factory default is 5 tenths or one half Select MVR Mode Compatible or Dynamic radio button This specifies the MVR mode of operation The factory default is Compatible Configure Advanced MVR Settings To configure advanced MVR settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure Switching Information 183 10 11 12 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login scree
245. ault IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Configure Switching Information 119 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Basic gt VLAN Configuration VLAN Configuration Reset Reset Configuration Internal VLAN Configuration Internal VLAN Allocation Base 4093 Internal VLAN Allocation Policy Ascending Descending VLAN Configuration vran o vean name vean Type Make Static OC NM ME EN Default Disable Dynamic AUTO VoIP Disable 8 Use Internal VLAN Allocation Base to specify the VLAN allocation base for the routing interface The default base of the internal VLAN is 1 to 4093 9 Use the optional Internal VLAN Allocation Policy field to specify a policy for the internal VLAN allocation Two policies are supported ascending and descending Add a VLAN To add a VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login
246. ault IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Manage Device Security 323 M4100 Series Managed Switch 7 Select Security gt Traffic Control gt Private VLAN gt Private VLAN Port Mode Configuration Private Vlan Port Mode Configuration Private Vlan Port Mode Configuration 1 LAGS All Go To Interface Go 0 1 Genera 0 2 General 0 3 Genera 0 4 General E o s Genera 0 6 General 0 7 Genera 0 8 General 0 9 Genera 0 10 General 0 11 Genera 0 12 General 1 LAGS All Go To Interface 8 Use the Interface check boxes to select the physical or LAG interface 9 Use Switch Port Mode to select the switch port mode The factory default is General e General Sets port in General mode e Host Sets port in Host mode Used for private VLAN configuration e Promiscuous Sets port in Promiscuous mode Used for private VLAN configuration 10 Click the APPLY button The changes are applied to the system Configuration changes take effect immediately Configure Private VLAN Host Interface To configure a private VLAN host interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201
247. bject to determine whether to send a trap when link status changes The factory default is enabled Use Maximum Frame Size to specify the maximum Ethernet frame size the interface supports or is configured for including Ethernet header CRC and payload 1518 to 9216 The default maximum frame size is 1518 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 The following table describes the nonconfigurable information displayed on the screen Table 61 Port Configuration Field Description Port Type For normal ports this field is normal Otherwise the possible values are as follows Mirrored The port is a mirrored port on which all the traffic is copied to the probe port Probe Use this port to monitor mirrored port Trunk Number The port is a member of a link aggregation trunk Look at the LAG screens for more information Physical Status Indicates the port speed and duplex mode Link Status Indicates whether the link is up or down iflndex The iflndex of the interface table entry associated with this port Configure Switching Information 195 M4100 Series Managed Switch Enter a Port Description To specify a port description 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for
248. ble In the Monitor Mode menu select Disable or Enable Manage Device Security 302 v M4100 Series Managed Switch The default value is Disable The feature monitors the dot1x authentication process and helps in diagnosis of the authentication failure cases 12 In the Users list select the user name that uses the selected login list for 802 1x port security 13 In the Login list select the login list to apply to the specified user All configured login lists are displayed Configure 802 1X Settings for Port Authentication You can enable and configure port access control on one or more ports To configure 802 1X settings for the port 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security Port Authentication Advanced Port Authentication Port Authentication Port Authentication I m on zl os o en on on
249. ble Enable Enable Enable Up Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down _ Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Down Enable Enable Disable Enable Enable Enable Enable Enable Go To Port lao 8 Use Go To Port to enter the Port in unit slot port format and click the Go button The entry corresponding to the specified port is selected 9 Use Port to specify the list of ports on which LLDP 802 1AB can be configured 10 Link Status indicates whether the Link is up or down 11 Use Transmit to specify the LLDP 802 1AB transmit mode for the selected interface 12 Use Receive to specify the LLDP 802 1AB receive mode for the selected interface 13 Use Notify to specify the LLDP 802 1AB notification mode for the selected interface 14 Specify optional TLVs Use Port Description to include the port description TLV in LLDP frames e Use System Name to include the system name TLV in LLDP frames e Use System Description
250. bnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt Telnet TELNET Authentication List Login Authentication List networkList Enable Authentication List enableNetList e Inbound Telnet Telnet Server Admin Mode Disable Enable Allow new telnet sessions Disable Enable Session Timeout Minutes 5 Maximum Number of Sessions 5 Current Number of Sessions 0 Outbound Telnet Allow new telnet sessions Disable 9 Enable Session Timeout Minutes Maximum Number of Sessions Current Number of Sessions Manage Device Security 292 M4100 Series Managed Switch 8 In the Login Authentication List menu specify which authentication list to use login through Telnet The default value is networkList 9 In the Enable Authentication List menu specify which authentication list you are using when going into the privileged EXEC mode The default value is enableNetList Configure Inbound Telnet You can re
251. cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Configure Switching Information 160 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt STP gt Advanced gt STP Statistics STP Statistics STP Statistics 1 2 LAGS All STP RSTP MSTP MSTP Interface BPDUs sda tote alt EDAM EPIS BPDUs Transmitted P Transmitted p Received Received Received Transmitted 0 1 0 1 0 0 43128 1 0 2 0 1 0 3 0 1 0 4 0 1 0 5 0 1 0 6 0 1 0 7 0 1 0 8 0 1 0 9 0 1 0 10 0 1 0 11 0 o NM o m Oo NI Oo D Oo nuo o BEN o LU o E o LU o E o fO o IO o IG o I o m o NN o mE o m oO m o n o MN o n o LM o Lo NM The following table describes the information available on the STP Statistics screen Table 49 STP statistics Field Description Interface Selects one of the physical or port channel interfaces of the switch STP BPDUs Received Number of STP BPDUs received at the selected port STP BPDUs Transmitted Number of STP BPDUs transmitted from the selected port RSTP BPDUs Received
252. can forward traffic to other members in the same group but not to members in other groups To create a new private group in the switch click the ADD button To delete a selected private group from the switch click the DELETE button Configure Private Group Membership To configure private group membership 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 318 M4100 Series Managed Switch 7 Select Security gt Traffic Control gt Private Group gt Private Group Membership Private Group Membership Group ID Group Name pgroupi Group Mode Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 vivix 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 8 In the Group ID menu select the group 9 In the Port List menu select the ports for this private group The port list displays when at lea
253. cast router and forwards IGMP packets accordingly It is needed only when you want to make sure that the multicast router always receives IGMP packets from the switch in a complex network Configure Switching Information 169 M4100 Series Managed Switch gt To configure IGMP snooping for a multicast router VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt IGMP Snooping gt Multicast Router VLAN Configuration Multicast Router VLAN Configuration Multicast Router VLAN Configuration Interface 1 0 1 Multicast Router VLAN Configuration ERUTCCHL TIT RR RR RR RN 8 Select one or more Interface check boxes 9 In the VLAN ID list select Enabled or Disabled 10 In the Multicast Router list select Enabled or Disabled for the VLAN ID Configure IGMP Snooping Querier IGMP snooping requires that one central switch o
254. ce by defining the packet type and the rate at which the packets are transmitted Configure Storm Control Global Settings gt To configure storm control global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Traffic Control gt Storm Control gt Storm Control Global Configuration System Switching Routing QoS Security Monitoring Maintenance Help Management Security Access Port Authentication Traffic Contro Control ACL MAC Filter Storm Control gt Port Security Private Group gt Protected Port Global Flow Control IEEE 802 3x Mode Disable Y Private Vlan v Storm Control Storm Contro sioba Unknown Unicast Storm Control All Disable Enable Port Settings Broadcast Storm Control All Disable Enable Multicast Storm Control All Disable O Enable Configuration Storm Control Interface Configuration
255. ce Main AC Threshold Power 135000 mw Consumed Power 12900 mw System Usage Threshold 90 Power Management Mode Dynamic Iz Traps Enable Disable The Unit list displays the current PoE unit To change the PoE unit select another unit from the menu In the System Usage Threshold field enter a number from 1 to 99 This sets the threshold level at which a trap is sent if consumed power is greater than the threshold power Select the Power Management Mode Dynamic or Static radio button This setting describes or controls the power management algorithm used by the PSE to deliver power to the requesting PDs Dynamic The power consumption on each port is measured and calculated in real time Static The power allocated for each port depends on the type of power threshold configured on the port Select the Traps Enable or Disable radio button Enable activates the PoE traps Disable deactivates the PoE traps The default setting is enabled Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure System Information 79 M4100 Series Managed Switch The following table describes the PoE Configuration nonconfigurable fields Table 23 Advanced PoE Configuration Fed Description 00000000 Units Displays the Current PoE Unit You can change the PoE Unit by selecting another unit ID listed here Firmware Version Version of
256. ced class To configure DiffServ you must define service levels namely the forwarding classes PHBs identified by a given DSCP value on the egress interface These service levels are defined by configuring BA classes for each Creating Policies Use DiffServ policies to associate a collection of classes that you configure with one or more QoS policy statements The result of this association is referred to as a policy From a DiffServ perspective there are two types of policies e Traffic Conditioning Policy A policy applied to a DiffServ traffic class e Service Provisioning Policy A policy applied to a DiffServ service level You must manually configure the various statements and rules used in the traffic conditioning and service provisioning policies to achieve the desired Traffic Conditioning Specification TCS and the Service Level Specification SLS operation respectively Traffic Conditioning Policy Traffic conditioning pertains to actions performed on incoming traffic There are several distinct QoS actions associated with traffic conditioning Dropping Drop a packet upon arrival This is useful for emulating access control list operation using DiffServ especially when DiffServ and ACL cannot co exist on the same interface e Marking IP DSCP or IP Precedence Marking re marking the DiffServ code point in a packet with the DSCP value representing the service level associated with a particular DiffServ traffic class Al
257. cending Descending VLAN Configuration ETONE O a o default Default Disable i 2s Dynamic AUTO VoIP Disable 8 Specify the Reset Configuration setting If you select this check box and click the APPLY button all VLAN configuration parameters are reset to their factory default values Also all VLANs except for the default VLAN are deleted The factory default values are as follows e All ports are assigned to the default VLAN of 1 All ports are configured with a PVID of 1 All ports are configured to an Acceptable Frame Types value of Admit All Frames All ports are configured with ingress filtering disabled All ports are configured to transmit only untagged frames e GVRP is disabled on all ports and all dynamic entries are cleared Configure an Internal VLAN This section displays the allocation base and the allocation mode of internal VLANs The internal VLAN is reserved by a port based routing interface and is invisible to the end user Once these internal VLANs are allocated by port based routing interface they cannot be assigned to a routing VLAN interface To configure an internal VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The def
258. ch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Monitoring the System 394 10 11 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Mirroring gt RSPAN Source Switch Configuration System Switching Routing Security Monitoring Maintenance Help Index Ports Logs Multiple Port RSPAN Source Switch Configuration Mirroring x gt RSPAN VLAN RSPAN Source Switch Configuration RSPAN Source Admin Mode True False Switch RSPAN Destination VLAN None Configuration RSPAN Destination Switch Configuration RSPAN Source Interface Configuration RSPAN Reflector Port None Y 1 LAG CPU VLANS All Go To Interface fe HELT 7IT ERR RN i Select the Admin Mode True enable or False disable radio button for the selected session When a particular session is enabled any traffic entering or leaving the source ports of the session is copied mirrored onto the corresponding destination port or a remote switched port analyzer RSPAN VLAN By default Admin Mode is False disabled In the RSPAN Destination VLAN list select a VLAN ID In the RSPAN Reflector Port list select a reflector port interface Click the APP
259. characters long and is not case sensitive For each of the lists select the methods in the order they will appear in the authentication login list If you select a method that does not time out as the first method such as local no other method is tried even if you specified more than one method The options are as follows Enable The privileged EXEC password is used for authentication Line The line password is used for authentication Local The user s locally stored ID and password is used for authentication None The user cannot be authenticated Radius The user s ID and password are authenticated using the RADIUS server instead of local server Tacacs The user s ID and password are authenticated using the TACACS server If the first method times out the next method is selected To add a new login list to the switch click the ADD button To remove the selected authentication login list from the configuration click the DELETE button You can use this button only if you are logged in as admin with Read Write access Click the APPLY button Your settings are saved Enable an Authentication List You can configure enable lists A enable list specifies the authentication method s you use to validate privileged EXEC access for the users associated with the list The preconfigured users admin and guest are assigned to a preconfigured list named defaultList which you cannot delete All newly created use
260. che Size value is changed Active Static Entries Total number of active static entries in the ARP Table Configured Static Entries Total number of configured static entries in the ARP Table Maximum Static Entries Maximum number of static entries that can be defined Configure Router Discovery gt To configure router discovery 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Routing 231 M4100 Series Managed Switch 7 Select Routing gt Router Discovery Router Discovery Router Discovery Configuration 1 VLANS All Go To Interface a3 landi Advertise Maximum Minimum G ifeti Pref L 1 BERE Advertise Address Advertise Infervand Adueriss Suterval Advertise Lifetime reference Level DNI dH Pg A43 4 To eM 1 0 1 Disable 224 0 0 1 600 450 1800 0 2 Disable 224 0 0 1 600 450 1800 0 3 Disable 224 0 0 1 600 450 1800 Disable 224 0
261. cify the Remote ID when Remote ID mode is enabled Configure System Information 70 M4100 Series Managed Switch Configure the DHCP L2 Relay Interface To configure the DHCP L2 Relay Interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Services gt DHCP L2 Relay gt DHCP L2 Relay Interface Configuration DHCP L2 Relay Configuration DHCP L2 Relay Configuration LAGS All Go To Interface 59 ENE EMEN EE Disable Disable 0 2 Disable Disable 0 3 Disable Disable 0 4 Disable Disable 0 5 Disable Disable 0 6 Disable Disable 0 7 Disable Disable 0 8 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable Go To Interface m o Ll o L1 o Ll o 0 o o L1 Oo O 5 o amp E Use Admin Mode to enable or disable the DHCP L2 Relay on the selected interface The default is disable Use 82 Option
262. ck the APPLY button If the Save option is selected the current configuration is saved The switch reboots Reset the Switch to Factory Default Settings You can reset the system configuration to the factory default values Note If you reset the switch to the default configuration the IP address is reset to 169 254 100 100 and the DHCP client is enabled To reset the switch to the factory default settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Maintenance 407 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Reset gt Factory Default Factory Default Factory Default Check this box and click APPLY below to return all configuration settings to default values Select the check box and click the APPLY button All configuration parameters are reset to their factory default values All changes you made are lost even if you issued a save You are
263. ck the Login button The web management interface menu displays Select Security Management Security TACACS TACACS Server Configuration TACACS Server Configuration TACACS Server Configuration Connection BE TACACS Server Priority 0 to 65535 Port 0 to 65535 Key String neo OE 30 Cd 168 10 115 Co Use TACACS Server to configure the TACACS server IP address Use Priority to specify the order in which the TACACS servers are to be used The range is 0 65535 Use Port to specify the authentication port The range is 0 65535 Use Key String to specify the authentication and encryption key for TACACS communications between the device and the TACACS server The valid range is 0 128 characters The key must match the key used on the TACACS server Use Connection Timeout to specify the amount of time that passes before the connection between the device and the TACACS server time out The range is between 1 30 Manage Device Security 274 M4100 Series Managed Switch 13 To add a new server to the switch click the ADD button This button is available only to users with read write permission 14 To delete the selected server from the configuration click the DELETE button 15 Click the APPLY button Your settings are saved Set Up a Login Authentication List You can configure login lists A login list specifies the authentication method s to be used to validate switch or port access
264. criteria to be visible Use Destination MAC to specify the destination MAC address to compare against an Ethernet frame The valid format is xx xx xx xx xx xx The BPDU keyword can be specified using a destination MAC address of 01 80 C2 xx xx xx Use Destination MAC Mask to specify the destination MAC address mask specifying which bits in the destination MAC to compare against an Ethernet frame The valid format is xx xx xx xx xx xx The BPDU keyword can be specified using a destination MAC mask of 00 00 00 ff ff ff To add a new rule to the ACL click the ADD button To remove the currently selected rule from the ACL click the DELETE button Click the APPLY button Updated configuration is sent to the switch Configuration changes take effect immediately Create a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet When a packet meets the match criteria of a rule the specified rule action Permit Deny is taken and the additional rules are not checked for a match There are multiple steps involved in defining a MAC ACL and applying it to the switch 1 2 3 4 Create the ACL name see the following procedure in this topic Create rules for the ACL see Configure MAC Rules Assign the ACL by its name to a port see Configure ACL MAC Binding Optionally view the configurations see View or Delete MAC Bindings Manage Device Security 347 M4100 Series Managed Switc
265. cs Packets L N NH Rate 1 0 1 Disable Disable N A N A 1 0 2 Disable Disable N A N A 1 0 3 Disable Disable N A N A 1 0 4 Disable Disable N A N A 1 0 5 Disable Disable N A N A Select the interface for which data is to be configured In the Trust Mode menu select Enable or Disable If trust mode is enabled the DHCP snooping application considers the port as trusted The factory default is disabled In the Logging Invalid Packets menu select Enable or Disable If this feature is enabled DHCP snooping application logs invalid packets on this interface The factory default is disabled In the Rate Limit pps field specify rate limit value for DHCP snooping purpose If the incoming rate of DHCP packets exceeds this value for consecutive burst interval seconds the port is shut down If this value is N A then burst interval has no meaning hence it is disabled The default value is N A It can be set to 1 which means N A The range of Rate Limit is O to 300 In the Burst Interval secs field specify the burst interval value for rate limiting purpose on this interface If the rate limit is N A the burst interval has no meaning and it is N A The default value is N A It can be set to value 1 which means N A The range of Burst Interval is 1 to 15 Configure DHCP Snooping Static Binding To configure DHCP snooping static binding 1 Prepare your computer with a static IP address in the 16
266. cs continued Field Description DHCPACK Specifies the number of DHCPACK messages sent by the DHCP server DHCPNAK Specifies the number of DHCPNAK messages sent by the DHCP server View DHCP Bindings Information To view the DHCP Bindings information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System Services DHCP Server DHCP Bindings Information DHCP Bindings Information Reset All Dynamic Bindings O Specific Dynamic Binding DHCP Bindings Information Search By Binding IP Lease Time IP Address Hardware Address Left 8 Select one of the following All Dynamic Bindings to specify all dynamic bindings e Specific Dynamic Binding to specify a dynamic binding Configure System Information 66 M4100 Series Managed Switch The following table describes the DHCP Bindings Information fields Table 18 DHCP Bindings Infor
267. ct a value The admin account requires read write access and all other accounts are assigned read only access The default value is Read Only To add a user click the ADD button To delete the currently selected user account click the DELETE button You cannot delete the admin user Set the Password for a User Tosetthe password for a user 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Manage Device Security 263 10 11 M4100 Series Managed Switch Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security Management Security gt Local User User Password Configuration Password Configuration Password Configuration Password Minimum Length Password Aging days Password History Lockout Attempts Use Password Minimum Length to specify the minimum character length of all new local user passwords Use Password Aging days to specify the maximum time for which the user pass
268. d 6 Click the Login button The web management interface menu displays Manage Device Security 262 T 10 11 12 M4100 Series Managed Switch Select Security gt Management Security gt Local User gt User Management User Management Manage Users P d Confirm Access Lockout g Edit Password Password Expiration Password Mode Status BW SS NN admin Disable eee eee READ we FALSE guest Disable Soiree 6 eec 2 READ ONDE FALSE The screen displays the users and their lockout status If you are creating a new user in the User Name field type the name for a new user You can enter data in this field only when you are creating a new account User names are up to eight characters in length and are not case sensitive Valid characters include all the alphanumeric characters as well as the hyphen and underscore _ characters The user name default is not valid User names once created cannot be changed or modified To edit the password do the following a In the Edit Password list select Enable b In the Password field type a password The password does not display as it is typed only asterisks display Passwords are up to eight alpha numeric characters in length and are case sensitive c In the Confirm Password field type the password again This field does not display the password as it is typed but shows asterisks In the Access Mode list sele
269. d The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Routing 207 M4100 Series Managed Switch 7 Select Routing gt Routing Table Advanced gt Route Preferences Route Preferences Route Preferences Local Static 8 Use Static to specify the static route preference value in the router The default value is 1 The range is 1 to 255 Configure IP Settings You can configure routing parameters for the switch as opposed to an interface gt To change the IP configuration 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Routing 208 10 11 12 13 14 M4100 Series Managed Switch Select Routing gt IP gt Basic gt IP Configuration System Switching Routing QoS Security Monitoring Maintenance Help Ro
270. d 127 Configure Port PVID eaae n tre rtt were ke REER XE TER RES 128 Configure a MAC Based VLAN Group eee eee cece eee eee 130 Configure a Protocol Based VLAN Group 000s eeeee ee eens 131 Configure Protocol Based VLAN Group Membership 132 Configure an IP Subnet Based VLAN 000 c eee cece eee eee 134 Configure Port DVEAN iae robinet bibe dashes gbaleedaeeed dune 135 Configure Voice VIUAIN a utro co a catt enean d Sn uas 136 Configure GARP Switch Settings 0 cece eee eee eee eee es 137 Configure GARP Port Settings 2 asossuepeseret soudewsasewsoae es aes 138 AULO VOIP OVERVIEW Leo eer etd alitda Saree p eke Mee levee hooded 140 Configure Protocol Based Port Settings 000s eee eee eee 140 Configure OUI Based Properties 0 0c eee eee eens 141 Configure OUI Based Port Settings 00 cee eese 142 Configure the OUI Table 2424 vro mrt bk RU t dphde 143 Viewthie AutosVolP Status su ocak dude ta eoo dairies aura eger e eid 145 Spanning Tree Protocol Overview 145 Configure Spanning Tree Protocol cece eee eee eee 146 Configure Advanced STP Settings cece eee eee eee 148 Configure Common Spanning Tree 0c eee eee eee eee eee 150 Configure CST POLLS 4o senses o erus eaten eta udo atus wake we Soa 152 View Spanning Tree CST Port Status iiis er ere ere bh nts 154 Configure amMST Instarice sisi esos ether membre
271. d Switch The following table describes the nonconfigurable information displayed on the screen Table 39 Advanced VLAN Status Fed Definition 00 VLAN ID The VLAN Identifier VID of the VLAN The range of the VLAN ID is 1 to 4093 VLAN Name The name of the VLAN VLAN ID 1 is always named Default VLAN Type The type of the VLAN you selected The VLAN type Default VLAN ID 1 Always present Static A VLAN you configured Dynamic A VLAN created by GVRP registration that you did not convert to static and that GVRP can therefore remove Routing Interface The interface associated with the VLAN in the case that VLAN routing is configured for this VLAN Member Ports The ports that are included in the VLAN Configure Port PVID The Port PVID Configuration screen lets you assign a port VLAN ID PVID to an interface There are certain requirements for a PVID All ports must use a defined PVID f no other value is specified the default VLAN PVID is used Tochange the ports default PVID you must first create a VLAN that includes the port as a member e Use the Port VLAN ID PVID Configuration screen to configure a virtual LAN on a port To configure port PVID 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser E
272. d except for the following unless specifically noted in for that feature User Defined Field Invalid Characters Interface Naming Conventions The managed switch supports physical and logical interfaces Interfaces are identified by their type and the interface number The physical ports are gigabit interfaces and are numbered on the front panel You configure the logical interfaces by using the software Get Started 14 M4100 Series Managed Switch The following table describes the naming convention for all interfaces available on the switch Table 2 Naming conventions for interfaces Interface Description Example Physical The physical ports are gigabit 0 1 0 2 0 3 and so on Ethernet interfaces and are numbered sequentially starting from one Link aggregation group LAG LAG interfaces are logical LAG 1 LAG 2 IAG 3 and so on interfaces that are used only for bridging functions CPU management interface This is the internal switch interface 5 1 responsible for the switch base MAC address This interface is not configurable and is always listed in the MAC Address Table Routing VLAN interfaces This is an interface used for routing VLAN 1 VLAN 2 VLAN 3 and functionality So on Online Help When you log in to the switch every screen contains a link to the online help Help that contains information to assist in configuring and managing the switch The online help
273. d only by systems that are authorized to do so Port access control provides a means of preventing unauthorized access by supplicants to the services offered by a system Control over the access to a switch and the LAN to which it is connected can be desirable in order to restrict access to publicly accessible bridge ports or to restrict access to departmental LANs Access control is achieved by enforcing authentication of supplicants that are attached to an authenticator s controlled ports The result of the authentication process determines whether the supplicant is authorized to access services on that controlled port A port access entity PAE is able to adopt one of two distinct roles within an access control interaction Configuration Examples 440 M4100 Series Managed Switch 1 Authenticator A port that enforces authentication before allowing access to services available through that port 2 Supplicant A port that attempts to access services offered by the authenticator Additionally there exists a third role 3 Authentication server Performs the authentication function necessary to check the credentials of the supplicant on behalf of the authenticator All three roles are required in order to complete an authentication exchange The managed switches support the authenticator role only in which the PAE is responsible for communicating with the supplicant The authenticator PAE is also responsible for submitting the
274. d that were 64 octets in length excluding framing bits but including FCS octets Packets Received 65 127 Octets The total number of packets including bad packets received that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets Packets Received 128 255 Octets The total number of packets including bad packets received that were between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Packets Received 256 511 Octets The total number of packets including bad packets received that were between 256 and 511 octets in length inclusive excluding framing bits but including FCS octets Packets Received 512 1023 Octets The total number of packets including bad packets received that were between 512 and 1023 octets in length inclusive excluding framing bits but including FCS octets Packets Received 1024 1518 Octets The total number of packets including bad packets received that were between 1024 and 1518 octets in length inclusive excluding framing bits but including FCS octets Monitoring the System 374 M4100 Series Managed Switch Table 100 Port Detailed Statistics screen fields continued Field Description Packets Received gt 1518 Octets The total number of packets received that were longer than 1518 octets excluding framing bits but including FCS octets and were otherwise we
275. ddress of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select QoS DiffServ Advanced Policy Class The Policy Class Configuration screen displays Click the name of the policy Configure Quality of Service 255 M4100 Series Managed Switch Policy Class Configuration Class Information Policy Name Policy Type Member Class Name Policy Attribute Policy Attribute Assign Queue 0v Drop Mark VLAN CoS 0v Mark IP Precedence 0 w Mark IP OSCP afii m Simple Policy Color Mode Color Blind Comitted Rate Comitted Burst Size Conform Action Send Drop Mark CoS Mark IP Precedence 0 Mark IP DSCP Violate Action Send Drop Mark CoS O Mark IP Precedence Mark IP DSCP 9 Select the queue to which packets of this policy class are assigned This is an integer value in the range 0 to 7 10 Configure the policy attributes e Drop Select the Drop radio button This flag indicates that the policy attribute is defined to drop every inbound packet e Mark VLAN CoS This is an integer value in the range from 0 to 7 for setting the VLAN priority e Mark IP Precedence This is an IP Precedence value in the range from 0 to 7 e MarkIP DSCP This lists the keywords for the known DSCP values from wh
276. ded ACL IP ACL Name string must use alphanumeric characters only and must start with an alphabetic character Each configured ACL displays the following information e Rules Displays the number of rules currently configured for the IP ACL e Type Identifies the ACL as a basic IP ACL extended IP ACL or named IP ACL To delete an IP ACL select the check box next to the IP ACL ID field then click the DELETE button 10 To add a new IP ACL click the ADD button Configure Rules for an IP ACL You can configure the rules for the IP access control lists ACLs that you created Manage Device Security 355 M4100 Series Managed Switch Note There is an implicit deny all rule at the end of an ACL list This means that if an ACL is applied to a packet and if none of the explicit rules match then the final implicit deny all rule applies and the packet is dropped gt To configure rules for an IP ACL 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a p
277. default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Services gt DHCP Server gt DHCP Pool Options DHCP Pool Options DHCP Pool Options __ Pool Name Option Code Option Type Option Value 8 In the Pool Name field select the Pool Name 9 Option Code specifies the Option Code configured for the selected pool 10 Use Option Type to specify the Option Type against the Option Code configured for the selected pool e ASCII Hex e P Address 11 Option Value specifies the Value against the Option Code configured for the selected pool 12 To add a new Option Code for the selected pool click the ADD button 13 To delete the Option Code for the selected pool click the DELETE button View DHCP Server Statistics To view DHCP server statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Configure System Information 64 M4100 Series Managed Switch The default admin user na
278. default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select QoS gt CoS gt Advanced gt Interface Queue Configuration Interface Queue Configuration Interface Queue Configuration 1 LAGS All Go To Interface iz i Queue Minimum antertace Quee Bandwidth Scheduler Type Queue Management Type Lar T E 1 0 1 Weighted L 1 0 2 Weighted TailDrop 1 0 3 Weighted TailDrop 1 0 4 Weighted TailDrop 1 0 5 Weighted TailDrop C 1 0 6 Weighted TailDrop 1 0 7 Weighted TailDrop Select the check box next to the port or LAG to configure You can select multiple ports and LAGs to apply the same setting to the selected interfaces Select the check box in the heading row to apply a trust mode or rate to all interfaces Configure any of the following settings Queue ID Use the list to select the queue to be configured platform based e Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue Setting this value higher than its corresponding maximum bandwidth automatically increases the maximum to the same value The default value is 0 The Configure Quality of Service 240 M4100 Series Managed Switch valid range is 0 to 100 in increments of 1 The value 0 means no guaranteed minimum The sum of individual Minimum Bandwidth values for all queues in the
279. defines the policy where High sets policy to mark ipdscp ef Med sets policy to mark ipdscp af31 Low set policy to mark ipdscp be Configure DiffServ Packets are filtered and processed based on defined criteria The filtering criteria are defined by a class The processing is defined by a policy s attributes Policy attributes can be defined on a per class instance basis and it is these attributes that are applied when a match occurs The configuration process begins with defining one or more match criteria for a class Then one or more classes are added to a policy Policies are then added to interfaces Configure Quality of Service 243 M4100 Series Managed Switch Packet processing begins by testing the match criteria for a packet The all class type option defines that each match criteria within a class must evaluate to true for a packet to match that class The any class type option specifies that at least one match criteria must evaluate to true for a packet to match that class Classes are tested in the order in which they were added to the policy A policy is applied to a packet when a class match within that policy is found gt To configure DiffServ 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the sw
280. delete the IP subnet based VLAN from the switch click the DELETE button 11 Click the APPLY button The changes are applied to the system Configuration changes take effect immediately Configure Private VLAN Promiscuous Interface Settings gt To configure private VLAN promiscuous interface settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Manage Device Security 325 8 9 10 11 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Private VLAN gt Private VLAN Promiscuous Interface Configuration Private VLAN Promiscuous Interface Configuration Private VLAN Promiscuous Interface Configuration Q 1 LAGS All Go To Interface ssi Promiscuous Primary VLAN Promiscuous Secondary VLAN s Interf oO ti I VLAN E to 4093 poe E 4093 ui s Oe 0 2 Ir 0 3 C 0 4 F o s 0 6 0 7 0 8 7 0 9 EN o mE o E
281. dently of any per queue maximum bandwidth configuration It is effectively a second level shaping mechanism The default value is 0 The valid range is 0 to 100 in increments of 1 The value 0 means that the maximum is unlimited 11 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure an Interface Queue You can define what a particular queue does by configuring switch egress queues User configurable parameters control the amount of bandwidth used by the queue the queue depth during times of congestion and the scheduling of packet transmission from the set of all queues on a port Each port has its own CoS queue related configuration Configure Quality of Service 239 M4100 Series Managed Switch The configuration process is simplified by allowing each CoS queue parameter to be configured globally or per port A global configuration change is automatically applied to all ports in the system To configure an interface queue 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The
282. ding framing bits but including FCS octets Undersize Received The total number of packets received that were less than 64 octets in length with GOOD CRC excluding framing bits but including FCS octets Alignment Errors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had a bad frame check sequence FCS with a nonintegral number of octets Rx FCS Errors The total number of packets received that had a length excluding framing bits but including FCS octets of between 64 and 1518 octets inclusive but had a bad Frame Check Sequence FCS with an integral number of octets Overruns The total number of frames discarded as this port was overloaded with incoming packets and could not keep up with the inflow Total Received Packets Not Forwarded 802 3x Pause Frames Received Unacceptable Frame Type A count of valid frames received which were discarded for example filtered by the forwarding process A count of MAC control frames received on this interface with an opcode indicating the PAUSE operation This counter does not increment when the interface is operating in half duplex mode The number of frames discarded from this port due to being an unacceptable frame type Monitoring the System 375 M4100 Series Managed Switch Table 100 Port Detailed Statistics screen fields continued
283. disable port access control on the system To configure 801 1X settings 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Port Authentication gt Advanced gt 802 1X Configuration 802 1X Configuration 802 1X Configuration Administrative Mode Disable Enable VLAN Assignment Mode Disable Enable EAPOL Flood Mode Disable Enable Dynamic VLAN Creation Mode Disable Monitor Mode Disable Iz Users admin p z Login defaulttist Authentication List dotixList The Authentication List field displays the authentication list that is used by 802 1x Select the Administrative Mode Disable or Enable radio button The default value is Disable Select the VLAN Assignment Mode Disable or Enable radio button The default value is Disable Select the EAPOL Flood Mode Disable or Enable radio button The default value is Disa
284. do not enter a password Click the Login button The web management interface menu displays Select QoS gt CoS gt Advanced gt 802 1p to Queue Mapping 802 1p to Queue Mapping Interface Selection Interface 802 1p to Queue Mapping agn CNET CC ERRN dic 1 v o w o 1 w 2m Ll sw Queue Use Interface to specify CoS configuration settings based on the interface or specify all CoS configurable interfaces Specify which internal traffic class to map the corresponding 802 1p value The queue number depends on the specific hardware The 802 1p Priority row contains traffic class selectors for each of the eight 802 1p priorities to be mapped The priority goes from low 0 to high 3 For example traffic with a priority of 0 is for most data traffic and is sent using best effort Traffic with a higher priority such as 3 might be time sensitive traffic such as voice or video Configure Quality of Service 236 Vv M4100 Series Managed Switch The values in each list represent the traffic class The traffic class is the hardware queue for a port Higher traffic class values indicate a higher queue position Before traffic in a lower queue is sent it must wait for traffic in higher queues to be sent 10 Click the APPLY button Your changes are applied to the system Map IP DSCP Values to Queues You can specify the internal traffic class to map to the corresponding DSCP value To map DSCP valu
285. ds to specify the time out period in seconds for aging out dynamically learned forwarding information 802 1D 1990 recommends a default of 300 seconds The value can be specified as any number between 10 and 1000000 seconds The factory default is 300 Configure a Static MAC Address To configure a MAC address 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Address Table Advanced gt Static MAC Address Static MAC Address Configuration Port List Interface 1 0 1 x Static MAC Address Table a NEN 7 D4 BE D9 3A 90 53 Configure Switching Information 193 M4100 Series Managed Switch 8 Use Interface to select the physical interface or LAG 9 Use the Static MAC Address to input the MAC address 10 Select the VLAN ID associated with the MAC address 11 To add a new static MAC address to the switch click the ADD button 12 To
286. e This is the interface mode for the selected interface for MLD snooping for the switch The default is Disable In the Group Membership Interval secs field specify the amount of time you want the switch to wait for a report for a particular group on a particular interface before it deletes that interface from the group The valid range is from 2 to 3600 seconds The configured value must be greater than Max Response Time The default is 260 seconds In the Max Response Time secs field specify the amount of time you want the switch to wait after sending a query on an interface because it did not receive a report for a particular group on that interface Enter a value greater or equal to 1 and less than the group membership interval in seconds The default is 10 seconds The configured value must be less than the group membership interval In the Present Expiration Time field specify the amount of time you want the switch to wait to receive a query on an interface before removing it from the list of interfaces with multicast routers attached Enter a value between 0 and 3600 seconds The default is 0 seconds A value of zero indicates an infinite time out for example no expiration In the Fast Leave Admin mode list select Disable or Enable This sets the Fast Leave mode for a particular interface from the menu The default is Disable Configure a MLD VLAN To configure a MLD VLAN 1 Prepare your computer with a sta
287. e PortList Bit Offset Displays the bit offset value that corresponds to the port when the MIB object type PortList is used to manage in SNMP iflndex Displays the interface index associated with the port Link Aggregation Group Overview Link aggregation groups LAGs which are also known as port channels allow you to combine multiple full duplex Ethernet links into a single logical link Network devices treat the aggregation as if it were a single link which increases fault tolerance and provides load sharing You assign the LAG VLAN membership after you create a LAG The LAG by default becomes a member of the management VLAN A LAG interface can be either static or dynamic but not both All members of a LAG must participate in the same protocols A static port channel interface does not require a partner system to be able to aggregate its member ports Static LAGs are supported When a port is added to a LAG as a static member it neither transmits nor receives LACPDUs Configure LAG Settings You can use LAGs to group one or more full duplex Ethernet links to be aggregated together to form a link aggregation group which is also known as a port channel The switch treats the LAG as if it were a single link gt To configure LAG settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet p
288. e selected interface You can assign MAC ACL lists to ACL priorities and interfaces gt To configure ACL MAC binding 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field Manage Device Security 351 10 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt ACL gt Basic gt MAC Binding Configuration MAC Binding Configuration Binding Configuration ACL ID meee Direction Port Selection Table BLISS S S HOMAR Interface Binding Status Interface Direction ACL Type ACL ID Sequence Number 1 0 5 Inbound MAC ACL macACL 1 0 9 Inbound MAC ACL macACL Select an existing MAC ACL from the ACL ID menu You can select one and bind it to the interfaces you want The packet filtering direction for ACL is Inbound which means the MAC ACL rules are applied to traffic entering the port Specify an optional sequence number to indicate the order of this access list relative to other
289. e 101 EAP statistics Field Description Port PAE Capabilities EAPOL Frames Received Selects the port to be displayed When the selection is changed a screen refresh occurs causing all fields to be updated for the newly selected port All physical interfaces are valid This displays the PAE capabilities of the selected port This displays the number of valid EAPOL frames of any type that were received by this authenticator EAPOL Frames Transmitted This displays the number of EAPOL frames of any type that were transmitted by this authenticator EAPOL Start Frames Received This displays the number of EAPOL start frames that were received by this authenticator EAPOL Logoff Frames Received EAPOL Last Frame Version EAPOL Last Frame Source EAPOL Invalid Frames Transmitted This displays the number of EAPOL logoff frames that were received by this authenticator This displays the protocol version number carried in the most recently received EAPOL frame This displays the source MAC address carried in the most recently received EAPOL frame This displays the number of EAPOL frames that were received by this authenticator in which the frame type is not recognized EAPOL Length Error Frames Received This displays the number of EAPOL frames that were received by this authenticator in which the frame type is not recognized EAP Response ID Frames Received This displays the number
290. e 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Manage Device Security 343 M4100 Series Managed Switch 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Control gt Dynamic ARP Inspection gt DAI Statistics System Switching Routing QoS Security Monitoring Maintenance Help Index Management Security Access Port Authentication Traffic Control ACL gt DHCP Snooping Dynamic ARP Inspection Statistics gt IP Source Guard Dynamic ARP DAI Statistics Inspection DAI Confi ti VLAN de a pit icd gea aes Forwarded Dropped DUM Aeon Drops Drops Permits IP P DAI VLAN MAC MAC 1 0 0 0 0 0 0 0 0 0 Configuration DAI Interface Configuration DAI ACL Configuration DAI ACL Rule Configuration DAI Statistics Click the REFRESH button to refresh the data on the screen with the latest DAI statistics To clear the DAI statistics click the CLEAR button The following table describes the nonconfigurable information displayed
291. e Enabled Enabled Disable Disable Disabled Disable Disable Disable Disable Enable Disabled Select an Interface check box to select one of the physical or port channel interfaces associated with VLANs associated with the CST Use Port Priority to specify the priority for a particular port within the CST The port priority is set in multiples of 16 For example if the priority is any value between 0 and 15 it is set to O If you try to set it to any value between 16 and 2 16 1 it is set to 16 and so on Use Admin Edge Port to specify if the specified port is an edge port within the CIST It takes a value of TRUE or FALSE where the default value is FALSE Use Port Path Cost to set the path cost to a new value for the specified port in the common and internal spanning tree It takes a value in the range of 1 to 200000000 Use External Port Path Cost to set the external path cost to a new value for the specified port in the spanning tree It takes a value in the range of 1 to 200000000 For BPDU Filter select Enable or Disable This configures the BPDU filter which filters the BPDU traffic on this port when STP is enabled on this port Select the BPDU Flood Disable or Enable radio button Configure Switching Information 153 M4100 Series Managed Switch This setting configures the BPDU flood which floods the BPDU traffic arriving on this port when STP is disabled on this port 15 In the Auto Edge field select Disabl
292. e IP Address to specify a valid IP address bound to the VLAN ID Enter the IP address in dotted decimal notation 9 Use Subnet Mask to specify a valid subnet mask of the IP address Enter the subnet mask in dotted decimal notation 10 Use VLAN ID to specify a VLAN ID in the range of 1 to 4093 11 To add a new IP subnet based VLAN click the ADD button 12 To delete the IP subnet based VLAN selected click the DELETE button Configure Switching Information 134 M4100 Series Managed Switch Configure Port DVLAN To configure port DVLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt VLAN gt Advanced gt Port DVLAN Configuration Port DVLAN Configuration Global Configuration Global EtherType 802 1Q Tag e DVLAN Configuration 1 2 LAGS All Go To Interface uso Disable Disable Disable Disable Disable Use
293. e Identifier of the CST regional root It is made up using the bridge priority and the base MAC address of the bridge CST Path Cost Path cost to the CST rRegional root Port Up Time Since Counters Last Time since the counters were last cleared displayed in days hours Cleared minutes and seconds Loop Inconsistent State This parameter identifies whether the port is in loop inconsistent state or not Transitions Into Loop Inconsistent The number of times this interface has transitioned into loop State inconsistent state Transitions Out Of Loop The number of times this interface has transitioned out of loop Inconsistent State inconsistent state Configure an MST Instance To configure Multiple Spanning Tree MST on the switch 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure Switching Information 156 M4100 Series Managed Switch 6 Click the Login button The web management interface menu displays 7 Sel
294. e Statistics fields Table 21 DHCP L2 Relay Interface Statistics Field Description Interface The interface from which the DHCP messages are received UntrustedServerMsgsWithOpt82 The number of DHCP messages with option82 received from an untrusted server UntrustedClientMsgsWithOpt82 The number of DHCP messages with option82 received from an untrusted client TrustedServerMsgsWithoutOpt82 The number of DHCP messages without option82 received from a trusted server TrustedClientMsgsWithoutOpt82 The number of DHCP messages without option82 received from a trusted client Configure UDP Relay Global Settings gt To configure the UDP Relay global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 73 M4100 Series Managed Switch 7 Select System gt Services gt UDP Relay gt UDP Relay Global Conf
295. e This field displays the user name representing the identity of the supplicant device Supplicant Mac Address This field displays supplicant s device MAC address Session Time This field displays the time since the supplicant as logged in seconds Filter ID This field displays policy filter ID assigned by the authenticator to the supplicant device Vlan ID This field displays VLAN ID assigned by the authenticator to the supplicant device Vlan Assigned This field displays reason for the VLAN ID assigned by the authenticator to the supplicant device Session Timeout This field displays session timeout set by the RADIUS server to the supplicant device Termination Action This field displays termination action set by the RADIUS server to the supplicant device Traffic Control You can configure MAC filters storm control port security and protected port settings To display the screen select Security Traffic Control Configure MAC Filter Settings You can create MAC filters that limit the traffic allowed into and out of specified ports on the system gt To configure MAC filter settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP add
296. e is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt DNS gt DNS Configuration System Switching Device View Initial Setup System Information Switch Statistics System CPU Status USB Device Information Loopback Interface gt Management Interfaces DNS Configuration Routing QoS Security Monitoring Maintenance Help Index Services PoE SNMP LLDP ISDP Timer Schedule DNS Configuration DNS Configuration DNS Status Disable Enable DNS Default Name Retry Number Response Timeout secs Source Interface DNS Server Configuration DNS Server Preference Host Configuration gt Green Ethernet 10 130 138 20 2 10 130 138 21 ELI Lamm EEEEEEEEEEEN Specify whether to enable or disable the administrative status of the DNS client e Enable Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name The default value is Enable e Disable Prevent the switch from sending DNS queries Enter the DNS default domain name to include in DNS queries When the system is performing a lookup on an unqualified host name this field is provided as the domain name for example if the default domain name is netgear com and you enter test then test is changed to test netgear com to resolve the name The length of the name must n
297. e mode takes into consideration the current packet marking when determining the policing outcome An auxiliary traffic class is used in conjunction with the policing definition to specify a value for one of the 802 1p Secondary 802 1p IP DSCP or IP Precedence fields designating the incoming color value to be used as the conforming color The color of exceeding traffic can be optionally specified as well Counting Updating octet and packet statistics to keep track of data handling along traffic paths within DiffServ In this DiffServ feature counters are not explicitly configured by the user but are designed into the system based on the DiffServ policy being created See the Statistics section of this document for more details Assigning QoS Queue Directs traffic stream to the specified QoS queue This allows a traffic classifier to specify which one of the supported hardware queues are used for handling packets belonging to the class Redirecting Forces classified traffic stream to a specified egress port physical or LAG This can occur in addition to any marking or policing action It can also be specified along with a QoS queue assignment DiffServ Example Configuration Tocreate a DiffServ class policy and attach it to a switch interface 1 From the QoS Class Configuration screen create a new class with the following settings e Class Name Class1 e Class Type All For more information see Configure a DiffServ Class on
298. e or Enable This configures the auto edge mode of a port which allows the port to become an edge port if it does not see BPDUs for some duration 16 In the Root Guard field select Disable or Enable This configures the root guard mode which sets a port to discard any superior information received by the port and thus protects the root of the device against changing The port gets put into the discarding state and does not forward any packets 17 Use Loop Guard to configure the loop guard on the port to protect Layer 2 forwarding loops If loop guard is enabled the port moves into the STP loop inconsistent blocking state instead of the listening learning forwarding state 18 Use TCN Guard to configure the TCN guard for a port restricting the port from propagating any topology change information received through that port The possible values are Enable or Disable 19 Use Port Mode to enable or disable Spanning Tree Protocol administrative mode associated with the port or port channel The possible values are Enable or Disable The following table describes the nonconfigurable information displayed on the screen Table 45 CST Port Configuration Fed Description 000000000000 Auto Calculated Port Path Cost Displays whether the path cost is automatically calculated Enabled or not Disabled Path cost is calculated based on the link speed of the port if the configured value for port path cost is zero Hello Timer Displays
299. e querier participate mode e Disabled Upon seeing another querier of the same version in the VLAN the snooping querier moves to the non querier state Enabled The snooping querier participates in querier election in which the least IP address operates as the querier in that VLAN The other querier moves to non querier state Snooping Querier VLAN Address Specify the snooping querier IP address to be used as the source address in periodic IGMP queries sent on the specified VLAN 9 Click the APPLY button The new settings are applied to the switch Configuration changes take effect immediately 10 To disable snooping querier on a VLAN select the VLAN ID and click the DELETE button 11 Click the REFRESH button to update the screen with the latest information from the switch The following table describes the nonconfigurable information displayed on the screen Table 52 IGMP Snooping Querier VLAN Configuration Field Description Operational State Displays the operational state of the IGMP snooping querier on a VLAN It can be in any of the following states e Querier The snooping switch is the querier in the VLAN The snooping switch sends out periodic queries with a time interval equal to the configured querier query interval If the snooping switch sees a better querier in the VLAN it moves to non querier mode e Non Querier The snooping switch is in non querier mode in the VLAN If the querier e
300. e specified configuration click the ADD utton To remove all entries or a specified one from the UDP Relay Interface Configuration Table click the DELETE button The Hit Count field displays the number of UDP packets hitting the UDP port Configure the Basic PoE Settings gt To display the Basic PoE Configuration T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 76 T 10 11 12 M4100 Series Managed Switch Select System gt PoE gt Basic gt PoE Configuration PoE Configuration Unit Selection Unit PoE Configuration Firmware Version Power Status Total Power Main AC Total Power RPS Power Source Main AC Threshold Power 135000 mw Consumed Power 14200 mw System Usage Threshold 90 Power Management Mode Dynamic Traps Enable Disable The Unit Selection list displays the current PoE unit To chan
301. e switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Logs gt Persistent Logs Persistent Logs Persistent Logs Admin Mode Disable Enable Behavior Alert v Message Log Total number of Messages 0 Description To enable or disable logging select the Admin Mode Enable or Disable radio button A log that is disabled does not log messages In the Behavior menu select a log severity level A log records messages equal to or above a configured severity threshold These severity levels are available severity levels are available e Emergency 0 The system is unusable Alert 1 Action must be taken immediately e Critical 2 Critical conditions Error 3 Error conditions e Warning 4 Warning conditions Monitoring the System 390 M4100 Series Managed Switch e Notice 5 Normal but significant conditions Informational 6 Informational messages Debug 7 Debug level messages 10 To refresh the screen click the REFRESH button Persistent Log Message Format The total number of messages is the number of persistent log messages displayed on the switch lt 15 gt Aug 24 05 34 0
302. e the system buffered in memory log Trap Log Trap ILg to retrieve the system trap records e Tech Support Tech Support to retrieve the switch information needed for trouble shooting The factory default is Archive Use Transfer Mode to specify what protocol to use to transfer the file e TFTP Trivial File Transfer Protocol e SFTP Secure File Transfer Protocol e SCP Secure Copy Protocol Use Server Address Type to specify either IPv4 IPv6 or DNS to indicate the format of the Server Address field The factory default is IPv4 Use Server Address to enter the IP address of the server in accordance with the format indicated by the server address type The factory default is the IPv4 address 0 0 0 0 Use Remote File Path to enter the path where you want to upload the file The file path can include alphabetic numeric forward slash dot or underscore characters only You can enter up to 160 characters The factory default is blank Use Remote File Name to enter the name of the file to download from the server You can enter up to 32 characters The factory default is blank Use Local File Name to specify the local script file name to upload This field is visible only when File Type is Script File Use User Name to enter the user name for remote login to the SFTP SCP server where the file is sent This field is visible only when the SFTP or SCP transfer mode is selected Use Password to enter the password for remote l
303. eb browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Maintenance 423 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Maintenance gt Troubleshooting gt Traceroute IPv4 TraceRoute IPv4 TraceRoute IPv4 IP Address Hostname Probes Per Hop Max TTL Init TTL MaxFail Interval Results 8 Use IP Address Hostname to enter the IP address or host name of the station you want the switch to discover path The initial value is blank The IP address or host name that you enter is not retained across a power cycle 9 Optionally configure the following settings Probes Per Hop Enter the number of probes per hop The initial value is the default The probes per hop you enter is not retained across a power cycle e MaxTTL Enter the maximum TTL for the destination The initial value is default value The MaxTTL you enter is not retained across a power cycle nitTTL Enter the initial TTL to be used The initial value is default value The InitTTL you enter is not retained across a power cycle e MaxfFail Enter the maximum number of failures allowed in the session The initial v
304. eck boxes to select the interface In the Admin Mode field select Enable or Disable This specifies interface mode for the selected interface for IGMP snooping for the switch The default is Disable In the Group Membership Interval field specify the amount of time you want the switch to wait for a report for a particular group on a particular interface before it deletes that interface from the group Enter a value between 1 and 3600 seconds The default is 260 seconds In the Max Response Time field specify the amount of time the switch waits after sending a query on an interface because it did not receive a report for a particular group on that interface Enter a value greater than or equal to 1 and less than the group membership interval in seconds The default is 10 seconds The configured value must be less than the group membership interval In the Present Expiration Time field specify the amount of time the switch waits to receive a query on an interface before removing it from the list of interfaces with multicast routers attached Enter a value between 0 and 3600 seconds The default is 0 seconds A value of zero indicates an infinite time out for example no expiration For Fast Leave Admin mode select Enable or Disable This applies to the particular interface The default is Disable Click the APPLY button Your settings are applied to the switch Configuration changes take effect immediately Configure IGMP Snoopin
305. econds 10 Use Hold Time to specify the hold time for ISDP packets that the switch transmits The hold time specifies how long a receiving device should store information sent in the ISDP packet before discarding it The range 10 to 255 seconds The default value is 180 seconds 11 Select the Version 2 Advertisements Disable or Enable radio button This enables or disables the sending of ISDP version 2 packets from the device The default value is Enable 12 Click the APPLY button Your settings are saved The following table describes the ISDP Basic Global Configuration fields Table 32 ISDP Basic Global Configuration Field Deseription O O Neighbors table last time changed Specifies the last time the neighbors table changed Device ID Displays the device ID of this switch Device ID format capability Displays the device ID format capability Device ID format Displays the device ID format Configure Advanced Global ISDP Settings To configure global ISDP settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default adm
306. ect Switching gt STP gt Advanced gt MST Configuration MST Configuration MST Configuration deem Topology Li i Root Port MST ID Priority Bridge Identifier Vian Id ce Change ap Designated Root Path sates Topology Change Identifier Count L EN C 00 2C B0 5D 91 F6 F0 1 L 1 1 a hr 10 min 10 sec E a a L 01 80 01 2C B0 5D 91 F6 F0 100 0 day 0 hr 0 min 2 sec i True 80 01 2C B0 5D 91 F6 F0 0 00 00 8 To add an MST instance configure the MST values and click the ADD button e MST ID Specify the ID of the MST to create Valid values for this are between 1 and 4094 e Priority Specifiy the bridge priority value for the MST When switches or bridges are running STP each is assigned a priority After exchanging BPDUS the switch with the lowest priority value becomes the root bridge The bridge priority is a multiple of 4096 If you specify a priority that is not a multiple of 4096 the priority is automatically set to the next lowest priority that is a multiple of 4096 For example if the priority is attempted to be set to any value between 0 and 4095 it is set to 0 The default priority is 32768 The valid range is 0 61440 e VLAN ID This is a combo box of each VLAN on the switch These can be selected or unselected for reconfiguring the association of VLANs to MST instances 9 To delete an MST instance select the check box next to the instance and click the DELETE button 10 To modify an MST instance select the c
307. ed Statistics screen fields continued Field Description Port Channel ID If the port is a member of a port channel the port channel s interface ID and name are shown Otherwise Disable is shown Flow Control Mode LACP Mode Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree The port role is one of the following values Root Designated Alternate Backup Master or Disabled STP Mode The Spanning Tree Protocol administrative mode associated with the port or port channel The possible values are as follows e Enable Spanning tree is enabled for this port Disable Spanning tree is disabled for this port STP State The port s current Spanning Tree state This state controls what action a port takes on receipt of a frame If the bridge detects a malfunctioning port it places that port into the broken state The five states are defined in IEEE 802 1D Disabled e Blocking Listening e Learning e Forwarding e Broken Admin Mode The port control administration state The port must be enabled in order for it to be allowed into the network The factory default is enabled Indicates whether flow control is enabled or disabled for the port This field is not valid for LAG interfaces Indicates the Link Aggregation Control Protocol administration state The mode must be enabled in order for the port to participate in link aggregation Physical Mode Indicates the por
308. efault PVID 1 or a PVID that you specifically assigned to the port using the Port VLAN Configuration screen You define a protocol based VLAN by creating a group Each group has a one to one relationship with a VLAN ID can include one to three protocol definitions and can include multiple ports When you create a group you choose a name and a Group ID is assigned automatically To configure a protocol based VLAN group 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 131 M4100 Series Managed Switch 7 Select Switching gt VLAN gt Advanced gt Protocol Based VLAN Group Configuration Protocol Based VLAN Group Configuration Protocol Based VLAN Group Configuration DZONE 1 0 7 1 0 9 8 Use Group Name to assign a name to a new group You can enter up to 16 characters 9 Use Protocol s to select the protocols to be
309. efault admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Services gt DHCP Server gt DHCP Server Configuration DHCP Server Configuration DHCP Server Configuration Admin Mode Disable Enable Ping Packet Count 2 Conflict Logging Mode Disable Enable Bootp Automatic Mode Disable Enable Excluded Address IP Range From IP Range To eS See In the IP Range From field specify an IP address You can enter the lowest address in a range or a single address to exclude In the IP Range To field specify the highest address in the range To exclude a single address enter the same IP address as specified in the IP Range From field or leave it as 0 0 0 0 10 Click the ADD button 11 To delete the excluded addresses from the switch click the DELETE button Configure the DHCP Pool gt To configure the DHCP pool 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Configure System Information 60 M4100 Series Managed Switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password T
310. efined by a local area network LAN such as Ethernet A station needing to send an IP packet must learn the MAC address of the IP destination or of the next hop router if the destination is not on the same subnet This is achieved by broadcasting an ARP request packet to which the intended recipient responds by unicasting an ARP reply containing its MAC address Once learned the MAC address is used in the destination address field of the Layer 2 header prepended to the IP packet The ARP cache is a table maintained locally in each station on a network ARP cache entries are learned by examining the source information in the ARP packet payload fields regardless of whether it is an ARP request or response Thus when an ARP request is broadcast to all stations on a LAN segment or virtual LAN VLAN all recipients store the sender s IP and MAC address in their respective ARP cache The ARP response being unicast is normally seen only by the requestor who stores the sender information in its ARP cache Newer information always replaces existing content in the ARP cache The number of supported ARP entries is platform dependent Devices can be moved in a network which means that the IP address that was at one time associated with a certain MAC address is now found using a different MAC address or might no longer be in use for example it was reconfigured disconnected or powered off This leads to stale information in the ARP cache unless entr
311. eld is visible for a Deny action e Assign Queue ID Specifies the hardware egress queue identifier used to handle all packets matching this IP ACL rule The valid range of queue IDs is 0 to 7 This field is visible when Permit is chosen as Action Match Every Select True or False True signifies that all packets match the selected IP ACL and rule and is either permitted or denied In this case since all packets match the rule the option of configuring other match criteria is not offered To configure specific match criteria for the rule remove the rule and recreate it or reconfigure Match Every to False for the other match criteria to be visible e Redirect Interface Specifies the specific egress interface where the matching traffic stream is forced bypassing any forwarding decision normally performed by the device This field cannot be set if a mirror interface is already configured for the ACL rule This field is enabled for a Permit action Source IP Address Enter an IP address using dotted decimal notation to be compared to a packet s source IP address as a match criteria for the selected IP ACL rule e Source IP Mask Specify the IP Mask in dotted decimal notation to be used with the Source IP address value Rate Limit Conform Data Rate The value of Rate Limit Conform Data Rate specifies the conforming data rate of IP ACL rule The valid values are 1 to 4294967295 in Kbps e Rate Limit Burst Size The value of Rate Limit
312. em No traffic forwarding is possible between two protected ports If left unconfigured the default state is unprotected Click the REFRESH button to refresh the screen with the most current data from the switch Click the APPLY button The changes are applied to the system Configuration changes take effect immediately Manage Device Security 320 M4100 Series Managed Switch Private VLAN Overview A private VLAN contains switch ports that cannot communicate with each other but can access another network These ports are called private ports Each private VLAN contains one or more private ports and a single uplink port or uplink aggregation group Note that all traffic between private ports is blocked at all layers not just Layer 2 traffic but also traffic such as FTP HTTP and Telnet Configure a Private VLAN Type gt To configure a private VLAN type T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web manag
313. ement interface menu displays Select Security Traffic Control Private VLAN Private VLAN Type Configuration Private VLAN Type Configuration Private VLAN Type Configuration m VLAN ID Private VLAN Type Iii Unconfigured 2 Unconfigured The VLAN ID field displays the VLAN for which private VLAN type is being set The factory default is Unconfigured Use Private VLAN Type to specify the type of private VLAN The factory default is Unconfigured Click the APPLY button The changes are applied to the system Configuration changes take effect immediately Manage Device Security 321 M4100 Series Managed Switch Configure the Private VLAN Association To configure the private VLAN association 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Private VLAN gt Private VLAN Association Configuration P
314. ement when the interface is operating in half duplex mode The count of GVRP PDUs received in the GARP layer GVRP PDUs Transmitted The count of GVRP PDUs transmitted from the GARP layer GVRP Failed Registrations GMRP PDUs Received The number of times attempted GVRP registrations could not be completed The count of GMRP PDUs received from the GARP layer GMRP PDUs Transmitted The count of GMRP PDUs transmitted from the GARP layer GMRP Failed Registrations EAPOL Frames Received EAPOL Frames Transmitted The number of times attempted GMRP registrations could not be completed The number of valid EAPOL frames of any type that were received by this authenticator The number of EAPOL frames of any type that were transmitted by this authenticator Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the statistics for this port were last cleared Monitoring the System 377 M4100 Series Managed Switch View EAP Statistics You can view information about EAP packets received on a specific port gt To view EAP statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP
315. ents connect all end node devices End nodes can communicate with each other without the need for a router Routers connect LANs together routing the traffic to the appropriate port A virtual LAN VLAN is a local area network with a definition that maps workstations on some basis other than geographic location for example by department type of user or primary application To enable traffic to flow between VLANs traffic must go through a router just as if the VLANs were on two separate LANs A VLAN is a group of computers servers and other network resources that behave as if they were connected to a single network segment even though they might not be For example all marketing personnel might be spread throughout a building Yet if they are all assigned to a single VLAN they can share resources and bandwidth as if they were connected to the same segment The resources of other departments can be invisible to the marketing VLAN members accessible to all or accessible only to specified individuals depending on how the IT manager has set up the VLANs VLANs offer a number of advantages e It is easy to do network segmentation Users that communicate most frequently with each other can be grouped into common VLANs regardless of physical location Each group s traffic is contained largely within the VLAN reducing extraneous traffic and improving the efficiency of the whole network e They are easy to manage The addition of nodes
316. er name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Logs gt Command Log Configuration Command Log Configuration Command Log Configuration Admin Status 9 Disable Enable Monitoring the System 383 8 M4100 Series Managed Switch Select the Admin Mode Enable radio button CLI command logging is enabled Configure the Console Log This allows logging to any serial device attached to the host To configure the console log a Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Logs gt Console Log Configuration Console Log Configuration Console Log Configuration Admin Status Disable Enable Severity Filter Error vi A log that is disabled does not log messages 8 To enable the log select the
317. er to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure System Information 87 M4100 Series Managed Switch 7 Select System gt SNMP gt SNMP V1 V2 gt Supported MIBs SNMP Supported MIBS Status RFC 1907 SNMPy2 MIB RPC 2819 amp MON MIB Broadcom REF MIS SNMP COMMUNITY MIB NMP FRAMEWORX MIB SNMP MFO MIB NMP NOTIFICATION MI SNMP TARGET MIB SNMP USER BASEO SM MIB SNMP VIEW BASED ACM MIB USM TARGET TAG MIB FASTPATH POWER ETHERNET MIB POWER ETMERNET MIB SFLOW MIB FASTPATH ISDP MIB 1AG MIB RFC 1213 RFC1213 MIB RIC 1493 BRIDGE MIB RFC 2674 P BRIDGE MIS RPC 2674 Q BRIDGE MID RFC 2737 ENTITY MIS RFC 2843 IF MIB RFC 3635 Etherhke MIS FASTPATH SWITCHING MIB FASTPATH INVENTORY MIS FASTPATH PORTSECURITY PRIVATE MIB TEE Ore 02 148 013 IEEEBO21 PAE MIB FASTPATH RADIUS AUTM CLIENT MIB RADIUS ACC CLIENT MIB RADIUS AUTM CLIENT MIB FASTPATH CAPTIVE PORTAL MIB FASTPATH MGMT SECURITY MIB IANA ADORESS FAMELY NUMBERS MIB RFC 1724 RIPv2 MIB RFC 1850 OSPf MIB RFC 1850 OSPF TRAP MIB RFC 2787 VRRP MIB FASTPATH ROUTI
318. es in permanent storage The user designates one of these images as the active image to be loaded during subsequent switch restarts This feature reduces switch down time when upgrading or downgrading the image To configure dual image settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Maintenance 419 M4100 Series Managed Switch 7 Select Maintenance gt File Management gt Dual Image Configuration Dual Image Configuration Dual Image Configuration N Active ext ae Image Name Active Image Description Image Image 1 imagel False False 9 0 2 18 1 image2 True True 10 15 17 33 8 Use Unit to select the unit 9 Use Next Active Image to make the selected image the next active image for subsequent reboots 10 Use Image Description to specify the description for the image that you selected 11 Click DELETE to delete the selected ima
319. es not power up the PD 11 The Power Limit Type describes or controls the maximum power that a port can deliver Select the type from the following list e Class The port power limit is equal to the class of the PD attached e User The port power limit is equal to the value specified by Power Limit None The port draws up to class 0 maximum power in the case of low power mode and up to class 4 maximum power in the case of high power mode Configure System Information 81 M4100 Series Managed Switch 12 Select the Power Limit to define the maximum power in watts that can be delivered by a port 13 The Detection Type describes a PD detection mechanism performed by the PSE port e pre ieee Only legacy detection is done e ieee 4 Point Resistive Detection is done e auto 4 Point Resistive Detection followed by Legacy Detection is done e 4point and Legacy indicates that the resistive 4 point detection scheme is used and when it fails to detect a connected PD legacy capacitive detection is used 14 The Timer Schedule defines the timer schedule assigned to the port Select None to remove the timer schedule assignment 15 Click Reset to forcibly reset the PSE port 16 Click the APPLY button The updated configuration file is sent to the switch Configuration changes take effect immediately The following table describes the PoE Port Configuration nonconfigurable fields Table 24 PoE Port Configuration Fed Desc
320. es received IcmpInEchoReps IcmpinTimestamps The number of ICMP Echo Reply messages received The number of ICMP Timestamp request messages received IcmpinTimestampReps The number of ICMP Timestamp Reply messages received IcmpinAddrMasks IcmpinAddrMaskReps The number of ICMP Address Mask Request messages received The number of ICMP Address Mask Reply messages received IcmpOutMsgs The total number of ICMP messages that this entity attempted to send Note that this counter includes all those counted by icmpOutErrors IcmpOutErrors The number of ICMP messages that this entity did not send due to problems discovered within ICMP such as a lack of buffers This value does not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram In some implementations there can be no types of error that contribute to this counter s value IcmpOutDestUnreachs The number of ICMP Destination Unreachable messages sent IcmpOutTimeExcds The number of ICMP Time Exceeded messages sent IcmpOutParmProbs The number of ICMP Parameter Problem messages sent IcmpOutSrcQuenchs The number of ICMP Source Quench messages sent IcmpOutRedirects The number of ICMP Redirect messages sent For a host this value is always zero because hosts do not send redirects IcmpOutEchos The number of ICMP Echo request messages sent Routing 213 M4100 Series Managed
321. es to queues 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Quality of Service 237 M4100 Series Managed Switch 7 Select QoS gt CoS gt Advanced gt IP DSCP to Queue Mapping IP DSCP to Queue Mapping IP DSCP to Queue Mapping AA DSCP DSCP DSCP DSCP 0 16 32 48 17 33 18 34 19 35 20 36 21 37 22 38 23 39 24 40 1 2 3 4 5 6 z 8 9 25 41 26 42 27 43 28 44 29 45 30 46 31 47 The IP DSCP field displays an IP DSCP value from 0 to 63 For each DSCP value specify which internal traffic class to map to the corresponding IP DSCP value The queue number depends on the specific hardware Click the APPLY button Your settings are applied to the system Configure CoS Settings for an Interface You can apply an interface shaping rate to all interfaces or to a specific interface To configure CoS settings for an interface
322. eside the class name then click the DELETE button 11 Click the REFRESH button to refresh the screen with the most current data from the switch Configure the Class Match Criteria To configure the class match criteria 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Quality of Service 248 7 10 11 M4100 Series Managed Switch Select QoS gt DiffServ gt Advanced gt Class Configuration Class Configuration Class Information Class Name Class Type DiffServ Class Configuration Match Every Reference Class Class Of Service VLAN Secondary Class of Service Secondary VLAN Ethernet Type Appletalk Source MAC Address Destination MAC Address Protocol Type ICMP Source IP Address Source L4 Port domain ie Destination IP Address Destination L4 Port domain IP DSCP Precedence Value
323. ess You can configure HTTP and Secure HTTP access to the managed switch s management interface Configure HTTP Server Settings To access the switch over a web page you must first configure it with IP information IP address subnet mask and default gateway You can configure the IP information using any of the following e BOOTP e DHCP e Terminal interface through the EIA 232 port After you establish in band connectivity you can change the IP information using a web based management gt To configure HTTP server settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Access gt HTTP gt HTTP Configuration HTTP Configuration HTTP Configuration HTTP Access Disable Enable Java Mode Disable Enable HTTP Session Soft Timeout Minutes 60 HTTP Session Hard Timeout Hours 24 ee Maximum Number of HTTP Sessions 16 Authenticatio
324. ess Challenge and the Access Request that matched it from this RADIUS authentication server Access Requests The number of RADIUS Access Request packets sent to this server This number does not include retransmissions Access Retransmissions The number of RADIUS Access Request packets retransmitted to this server Access Accepts The number of RADIUS Access Accept packets including both valid and invalid packets that were received from this server Access Rejects The number of RADIUS Access Reject packets including both valid and invalid packets that were received from this server Access Challenges The number of RADIUS Access Challenge packets including both valid and invalid packets that were received from this server Malformed Access Responses The number of malformed RADIUS Access Response packets received from this server Malformed packets include packets with an invalid length Bad authenticators or signature attributes or unknown types are not included in malformed access responses Bad Authenticators The number of RADIUS Access Response packets containing invalid authenticators or signature attributes received from this server Pending Requests The number of RADIUS Access Request packets destined for this server that did not yet time out or receive a response Timeouts The number of authentication time outs on this server Unknown Types The number of RADIUS packets of unknown type that were received fro
325. ess of the switch in the web browser address field Configure Switching Information 164 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt MFDB gt MFDB Statistics MFDB Statistics MFDB Statistics Max MFDB Table Entries Most MFDB Entries Since Last Reset Current Entries IGMP Snooping Overview Internet Group Management Protocol IGMP snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch Multicast IP traffic is traffic that is destined to a host group Host groups are identified by class D IP addresses which range from 224 0 0 0 to 239 255 255 255 Based on the IGMP query and report messages the switch forwards traffic only to the ports that request the multicast traffic This prevents the switch from broadcasting the traffic to all ports and possibly affecting network performance A traditional Ethernet network can be separated into different network segments to prevent placing too many devices onto the same shared media Bridges and switches connect these segments When a packet with a broadcast or multicast destination address is received the switch for
326. est failed 1 0 3 No Cable 1 0 4 No Cable 1 0 5 No Cable 1 0 6 No Cable 1 0 7 No Cable i 0 8 No Cable 1 0 9 No Cable 1 0 10 No Cable 7 1 0 11 No Cable 1 0 12 Cable status test failed 1 0 13 No Cable Select the check box for the port to which the cable to be tested is connected Click the APPLY button A cable test is performed on the selected port The cable test might take up to two seconds to complete If the port has an active link the cable status is always Normal The command returns a cable length estimate if this feature is supported by the PHY for the current link speed If the link is down and a cable is attached to a 10 100 Ethernet adapter then the cable status can be Open or Short because some Ethernet adapters leave unused wire pairs unterminated or grounded Monitoring the System 380 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the Cable Test screen Table 102 Cable test Field Description Cable Status This displays the cable status Normal The cable is working correctly Open The cable is disconnected or there is a faulty connector Short There is an electrical short in the cable Cable Test Failed The cable status could not be determined The cable might in fact be working Cable Length The estimated length of the cable in meters The length is displayed as a range between the shortest e
327. et is defined as all eight bits of the service type octet in the IP header The TOS Bits value is a hexadecimal number from 00 to FF The TOS Mask value is a hexadecimal number from 00 to FF The TOS mask denotes the bit positions in the TOS Bits value that are used for comparison against the IP TOS field in a packet For example to check for an IP TOS value having bits 7 and 5 set and bit 1 clear where bit 7 is most significant use a TOS Bits value of OxAO and a TOS Mask of OxFF This is an optional configuration e Rate Limit Conform Data Rate The value of Rate Limit Conform Data Rate specifies the conforming data rate of IP ACL rule The valid values are 1 to 4294967295 in Kbps e Rate Limit Burst Size Value of Rate Limit Burst Size specifies the burst size of the IP ACL rule The valid values are 1 to 128 in Kbytes Time Range Name of time range associated with the IP Extended ACL rule e Rule Status Displays if the ACL rule is active or inactive Blank means that no timer schedules are assigned to the rule 10 To delete an IP ACL rule select the check box associated with the rule and then click the DELETE button 11 To modify an existing IP extended ACL rule click the Rule ID The number is a hyperlink to the Extended ACL Rule Configuration screen Manage Device Security 360 M4100 Series Managed Switch Configure an IPv6 ACL An IPv6 ACL consists of a set of rules that are matched sequentially against a packet
328. et port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Routing gt IP gt Advanced gt IP Statistics Routing 216 M4100 Series Managed Switch IP Statistics IP Statistics IpInReceives IpInHdrErrors IpInAddrErrors IpForwDatagrams IpInUnknownProtos IpInDiscards IpInDelivers IpOutRequests IpOutDiscards IpOutNoRoutes IpReasmTimeout IpReasmReqds IpReasmOKs IpReasmFails IpFragOKs IpFragFails IpFragCreates IpRoutingDiscards IcmpInMsgs IcmpInErrors IcmpInDestUnreachs IcmpInTimeExcds IcmpInParmProbs IcmpInSrcQuenchs The following table describes the nonconfigurable information displayed on the screen Table 68 IP statistics Field Description IpinReceives The total number of input datagrams received from interfaces including those received in error IpinHdrErrors The number of input datagrams discarded due to errors in their IP headers including bad checksums version number mismatch other format errors time to live exceeded errors discovered in processing their IP options and so
329. ettings You can configure the DHCP snooping settings Configure Global DHCP Snooping Settings gt To configure global DHCP snooping settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Control gt DHCP Snooping gt Global Configuration DHCP Snooping Global Configuration DHCP Snooping Global Configuration DHCP Snooping Mode Disable Enable MAC Address Validation Disable Enable VLAN Configuration anm w 8 Use DHCP Snooping Mode to enable or disable the DHCP snooping feature The factory default is disabled Manage Device Security 330 10 11 12 M4100 Series Managed Switch Use MAC Address Validation to enable or disable the validation of sender MAC address for DHCP snooping The factory default is enabled For DHCP snooping VLAN configuration use VLAN ID to enter the VLAN for which t
330. evice The address is six two digit hexadecimal numbers separated by colons for example 00 06 29 32 81 40 Click the REFRESH button to show the latest IP information Routing 227 M4100 Series Managed Switch Configure the Static ARP Cache To configure the static ARP cache 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Routing gt ARP gt Advanced gt ARP Create Static ARP Cache ARP Static Configuration so EEAO ET ARP Cache Add an entry to the Address Resolution Protocol table a Use IP Address to enter the IP address It must be the IP address of a device on a subnet attached to one of the switch s existing routing interfaces b Use MAC Address to specify the unicast MAC address of the device Enter the address as six two digit hexadecimal numbers separated by colons for example 00 06 29 32 81 40 To add a new static ARP entry to
331. ew telnet sessions Disable 9 Enable Session Timeout Minutes Maximum Number of Sessions Current Number of Sessions The Current Number of Sessions field displays the number of current sessions 8 In the Inbound Telnet section select the Allow New Telnet Sessions Disable or Enable radio button The default value is Enable 9 In the Session Timeout field specify how many minutes of inactivity can occur on a Telnet session before the session is logged off You can enter any number from 1 to 160 The factory default is 5 10 In the Maximum Number of Sessions field specify how many simultaneous Telnet sessions are allowed The maximum is 5 which is also the factory default Configure Outbound Telnet You can regulate new outbound Telnet connections If Allow New Telnet Sessions is enabled new outbound Telnet sessions can be established until there are no more sessions available If Allow New Telnet Sessions is disabled no new outbound Telnet sessions are established An established session remains active until the session is ended or an abnormal network error ends the session To configure outbound Telnet 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field
332. ex network To configure IGMP snooping for a multicast router 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt IGMP Snooping gt Multicast Router Configuration Multicast Router Configuration Multicast Router Configuration 2 1 2 LAGS All Go To Interface GO _ Interface Multicast Router Disable Disable Disable Disable Disable Disable Disable Disable 1 0 9 Disable 8 Select one or more Interface check boxes 9 In the Multicast Router list select Enable or Disable for the selected interfaces Configure IGMP Snooping for a Multicast Router VLAN You can configure the interface to forward only the snooped IGMP packets that come from VLAN ID vlanld to the multicast router attached to this interface The configuration is not needed most of the time because the switch automatically detects the presence of a multi
333. example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Ports gt Port Description Port Description Port Description i 2 LAGS All Go To Port Geo PortList rt ti AC A Holl m i indian net d connects to connects to RTR3 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 2C B0 5D 91 F6 F2 oon OU A wn oon nun amp Wn Use Port Description to enter the description string to be attached to a port It can be up to 64 characters in length Configure Switching Information 196 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 62 Port Description Field Description Port Selects the interface MAC Address Displays the physical address of the specified interfac
334. example the RADIUS server that performs the authentication on behalf of the authenticator and indicates whether the user is authorized to access system services Configure Global 802 1X Settings You can use 802 1X to enable or disable port access control on the system gt To configure global 802 1X settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 300 M4100 Series Managed Switch 7 Select Security gt Port Authentication gt Basic gt 802 1X Configuration 802 1X Configuration 802 1X Configuration Administrative Mode Disable Enable VLAN Assignment Mode Disable Enable EAPOL Flood Mode Disable Enable Dynamic VLAN Creation Mode Disable Monitor Mode Disable e Users admin 2 Login defaulttist gt Authentication List dotixList The Authentication List field displays the authentication list that is
335. f 1 to 65535 The default value is 3600 Changing the value does not change the configuration until the APPLY button is clicked User Privileges This select field allows the user to add the specified user to the list of users with access to the specified port or all ports e Max Users This field allows the user to enter the maximum number of supplicants on the specified interface Click the INITIALIZE button to begin the initialization sequence on the selected port This button is clickable only if the control mode is auto Otherwise it is grayed out When this button is clicked the action is immediate Clicking the APPLY button is not required for the action to occur Click the REAUTHENTICATE button to begin the reauthentication sequence on the selected port Manage Device Security 305 M4100 Series Managed Switch This button is only clickable if the control mode is auto Otherwise it is grayed out When this button is clicked the action is immediate Clicking the APPLY button is not required for the action to occur View the Port Summary You can view information about the port access control settings on a specific port To view the port summary 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the sw
336. fault is send each of the Action Selectors one of the following actions can be taken Drop These packets are immediately dropped Mark IP DSCP These packets are marked by DiffServ with the specified DSCP value before being presented to the system forwarding element This selection requires that the DSCP value field be set Mark CoS These packets are marked by DiffServ with the specified CoS value before being presented to the system forwarding element This selection requires that the Mark CoS value field be set Send These packets are presented unmodified by DiffServ to the system forwarding element Mark IP Precedence These packets are marked by DiffServ with the specified IP Precedence value before being presented to the system forwarding element This selection requires that the Mark IP Precedence value field be set 12 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immedi ately The following table describes the nonconfigurable information displayed on the screen Table 74 Policy Class Configuration Field Description Policy Name Displays name of the DiffServ policy Policy Type Displays type of the policy as In Member Class Name Displays name of each class instance within the policy Configure DiffServ Policy Settings on an Interface You can activate a policy on an interface gt To configure DiffServ policy settings on an interf
337. fault value for Retries is 10 e Use Cache Size to enter an integer that specifies the maximum number of entries for the ARP cache The range for this field is 96 to 509 The default value for Cache Size is 509 e Use Dynamic Renew to control whether the ARP component automatically attempts to renew ARP entries of type Dynamic when they age out The default setting is Enable Use Remove from Table to remove certain entries from the ARP Table The choices listed specify the type of ARP entry to be deleted All Dynamic Entries All Dynamic and Gateway Entries e Specific Dynamic Gateway Entry Selecting this allows the user to specify the required IP address e Specific Static Entry Selecting this allows the user to specify the required IP address e None Selected if the user does not want to delete any entry from the ARP Table Use Remove IP Address to enter the IP address against the entry that is to be removed from the ARP Table Routing 230 M4100 Series Managed Switch This appears only if the user selects Specific Dynamic Gateway Entry or Specific Static Entry in the Remove from Table list The following table describes the nonconfigurable information displayed on the screen Table 71 ARP Table Configuration Field Description Total Entry Count Total number of entries in the ARP table Peak Total Entries Highest value reached by Total Entry Count This counter value is restarted whenever the ARP Table Ca
338. fic is balanced on a port channel LAG by selecting one of the links in the channel over which to transmit specific packets The switch selects the link by creating a binary pattern from selected fields in a packet and associating that pattern with a particular link Src MAC VLAN EType i ncoming port Source MAC VLAN EtherType and incoming port associated with the packet e Dest MAC VLAN EType incoming port Destination MAC VLAN EtherType and incoming port associated with the packet Src Dest MAC VLAN EType incoming port Source Destination MAC VLAN EtherType and incoming port associated with the packet Src IP and Src TCP UDP Port Source IP and Source TCP UDP fields of the packet DestIP and Dest TCP UDP Port Destination IP and Destination TCP UDP Port fields of the packet Src Dest IP and TCP UDP Port Source Destination IP and source destination TCP UDP Port fields of the packet e Enhanced hashing mode Features MODULO N operation based on the number of ports in the LAG non unicast traffic and unicast traffic hashing using a common hash algorithm excellent load balancing performance and packet attributes selection based on the packet type e For L2 packets source and destination MAC address are used for hash computation e For L3 packets source IP destination IP address TCP UDP ports are used Configure Switching Information 198 11 12 13 14 M4100 Series Managed
339. field set the value for group membership interval of IGMP snooping for the specified VLAN ID The valid range is Maximum Response Time 1 to 3600 seconds e n the Maximum Response Time field set the value for the maximum response time of IGMP snooping for the specified VLAN ID The valid range is 1 to Group Membership Interval 1 Its value should be greater than group membership interval value Inthe Multicast Router Expiry Time field set the value for multicast router expiry time of IGMP snooping for the specified VLAN ID The valid range is 0 to 3600 seconds To disable IGMP snooping on a VLAN and remove it from the list select the check box next to the VLAN ID and click the DELETE button To modify IGMP snooping settings for a VLAN select the check box next to the VLAN ID update the desired values and click the APPLY button Configure IGMP Snooping for a Multicast Router You can configure the interface as the one the multicast router is attached to All IGMP packets snooped by the switch are forwarded to the multicast router reachable from this interface The configuration is not needed most of the time because the switch automatically detects the presence of the multicast router and forward IGMP packet accordingly It is Configure Switching Information 168 M4100 Series Managed Switch needed only when you want to make sure that the multicast router always receives IGMP packets from the switch in a compl
340. for this switch The maximum number of virtual LANs VLANs allowed on this switch Configure System Information 29 M4100 Series Managed Switch Table 5 Switch Statistics continued Field Description Most VLAN Entries Ever Used The largest number of VLANs that were active on this switch since the last reboot Static VLAN Entries The number of presently active VLAN entries on this switch that were created statically Dynamic VLAN Entries The number of presently active VLAN entries on this switch that were created by GVRP registration VLAN Deletes The number of VLANs on this switch that were created and then deleted since the last reboot Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the statistics for this switch were last cleared View the System CPU Status To display the CPU status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Logi
341. g Settings for VLANs You can configure IGMP snooping settings for VLANs on the system To configure IGMP snooping settings for VLANs T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Configure Switching Information 167 10 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt IGMP Snooping gt IGMP VLAN Configuration IGMP VLAN Configuration IGMP VLAN Configuration Fast os Admin Leave z Maximum Multicast Router VLAN ID Membership s Mode Admin Response Time Expiry Time Mode Interval 7 200 Enable Enable 10 0 To enable IGMP snooping on a VLAN enter the VLAN ID in the appropriate field and configure the IGMP snooping values For Admin Mode select Enable or Disable for IGMP snooping for the specified VLAN ID e For Fast Leave Admin Mode select Enable or Disable for the specified VLAN ID e Inthe Group Membership Interval
342. ge from permanent storage on the switch 12 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Note After activating an image you must perform a system reset of the switch in order to run the new code The following table describes the nonconfigurable information displayed on the screen Table 105 Dual Image Configuration Field Description This displays the image name for the selected unit Active Image Displays the current active image of the selected unit Version Displays the version of the image1 code file Use the Ping IPv4 Utility Use this screen to tell the switch to send a Ping request to a specified IP address You can use this to check whether the switch can communicate with a particular IP station When you click the APPLY button the switch sends specified number of ping requests and the results are displayed If a reply to the ping is not received the following message displays Maintenance 420 M4100 Series Managed Switch e Tx Count Rx 0 Min Max Avg RTT 0 0 0 msec If a reply to the ping is received the following messages display e Received response for Seq Num 0 Rtt xyz usec e Received response for Seq Num 1 Rtt abc usec e Received response for Seq Num 2 Rtt def usec e Tx Count Rx Count Min Max Avg RTT xyz abc def msec To configure the settings and ping a host on the network T Prepare your
343. ge the PoE unit select another unit from the menu To set the System Usage Threshold enter a number from 1 to 99 This sets the threshold level at which a trap is sent if consumed power is greater than the threshold power Use Power Management Mode to describe or control the power management algorithm used by the PSE to deliver power to the requesting PDs Select Static to indicate that the power allocated for each port depends on the type of power threshold configured on the port Select Dynamic to indicate that the power consumption on each port is measured and calculated in real time Select the Traps Enable or Disable radio button Enable activates the PoE traps Disable deactivates the PoE traps The default setting is enabled Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately The following table shows the nonconfigurable fields in the PoE Configuration screen Table 22 PoE Configuration Field Description Units Displays the Current PoE Unit You can change the PoE Unit by selecting another unit ID listed here Firmware Version Version of the PoE controller s FW image Configure System Information 77 M4100 Series Managed Switch Table 22 PoE Configuration continued Field Description Power Status Indicates the power status Total Power Main AC Displays the total power provided by the MAIN AC power source
344. gher layer protocol A possible reason for discarding a packet could be to free up buffer space Octets Transmitted The total number of octets transmitted out of the interface including framing characters Packets Transmitted Without Errors Unicast Packets Transmitted Multicast Packets Transmitted Broadcast Packets Transmitted Transmit Packets Discarded The total number of packets transmitted out of the interface The total number of packets that higher level protocols requested that is transmitted to a subnetwork unicast address including those that were discarded or not sent The total number of packets that higher level protocols requested that are transmitted to a Multicast address including those that were discarded or not sent The total number of packets that higher level protocols requested that are transmitted to the broadcast address including those that were discarded or not sent The number of outbound packets that were discarded even though no errors were detected to prevent their being deliverable to a higher layer protocol A possible reason for discarding a packet could be to free up buffer space Most Address Entries Ever Used Address Entries in Use Maximum VLAN Entries The highest number of Forwarding Database Address Table entries that were learned by this switch since the most recent reboot The number of learned and static entries in the Forwarding Database Address Table
345. gs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 138 M4100 Series Managed Switch 7 Select Switching gt VLAN gt Advanced gt GARP Port Configuration GARP Port Configuration GARP Port Configuration 1 2 LAGS All Go To Interface Go Li Port GVRP Port GMRP Join Timer v Leave All Interface Timer Mode Mode centisecs Timer centisecs C O EN e L tJ CE C Hg 1 0 2 Disable Disable 20 1000 1 0 3 Disable Disable 20 1000 1 0 4 Disable Disable 20 1000 1 0 5 Disable Disable 20 1000 1 0 6 Disable Disable 20 1000 8 Use the Interface check boxes to select the physical interface 9 In the Port GVRP Mode field select Disable or Enable This specifies the GARP VLAN Registration Protocol administrative mode for the port If you select Disable the protocol is not active and the join time leave time and leave all
346. gulate new Telnet sessions If Allow New Telnet Sessions is enabled new inbound Telnet sessions can be established until there are no more sessions available If Allow New Telnet Sessions is disabled no new inbound Telnet sessions are established An established session remains active until the session is ended or an abnormal network error ends the session To configure inbound Telnet 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Access gt Telnet Manage Device Security 293 M4100 Series Managed Switch TELNET Authentication List Login Authentication List networkList Enable Authentication List enableNetList e Inbound Telnet Telnet Server Admin Mode Disable Enable Allow new telnet sessions Disable Enable Session Timeout Minutes 5 Maximum Number of Sessions 5 Current Number of Sessions 0 Outbound Telnet Allow n
347. h gt To create a MAC ACL 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt ACL gt Basic gt MAC ACL MAC ACL MAC ACL Current Number of ACL Maximum ACL MAC ACL Table es re NEN macACL The MAC ACL screen displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs To add a MAC ACL specify a name for the MAC ACL in the Name field and click the ADD button The name string can include alphabetic numeric hyphen underscore or space characters only The name must start with an alphabetic character Each configured ACL displays the following information e Rules Displays the number of rules currently configured for the MAC ACL e Direction Displays
348. h a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7T Select System LLDP LLDP MED Remote Device Information Configure System Information 103 M4100 Series Managed Switch LLDP MED Remote Device Information LLDP MED Interface Selection Interface 0 1 m Remote ID 1 Capability Information Supported Capabilities Enabled Capabilities Device Class Network Policies Information Media Unknown Tagged Application VLAN ID Priority DSCP Bit Bit Type Status Status Inventory Information Hardware Revision Firmware Revision Software Revision Serial Number Manufacturer Name Model Name Asset Id Location Information o Sub Type Location Information Extended PoE Device bal Power Source Power Priority Power Value Type 8 Use Interface to select the ports on which LLDP MED is enabled The following table describes the LLDP MED Remote Device Information fields Table 30 LLDP MED remote device information Field Description Capability Information Specifies the supported and enabled capabilities that were received in MED TLV on this port Supported Cap
349. hat contains the information to configure Get Started 18 Configure System Information This chapter covers the following topics e System Configuration Configure Initial Management VLAN Settings e Define System Information e View the Switch Status e Manage Loopback Interfaces e View the IPv6 Network Neighbor Table e Configure an IPv4 Management VLAN e View or Set the System Time e Configure DNS e Configure the DHCP Server e Configure the DHCP Pool e Configure UDP Relay Global Settings e Configure the Basic PoE Settings e Configure Advanced PoE Settings e View All MIBs Supported by the Switch e Configure SNMP v3 Settings for a User e LLDP Overview ISDP Settings Overview e Configure Timers 19 M4100 Series Managed Switch System Configuration gt To do the initial system configuration 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displa
350. hat is do not enter a password Click the Login button The web management interface menu displays Select QoS gt DiffServ gt Advanced gt IPv6 Class Configuration IPv6 Class Configuration IPv6 Class Name uL I HEEMMMAMANMAMN 7 ipv6Class To create a new class enter a class name select the class type and click the ADD button This field also lists all the existing DiffServ class names from which one can be selected The switch supports only the Class Type value All which means all the various match criteria defined for the class should be satisfied for a packet match All signifies the logical AND of all the match criteria You can select the class type only when you are creating a new class After you create the class this field this becomes a nonconfigurable field displaying the class type that you selected To rename an existing class select the check box next to the configured class update the name and click the APPLY button To remove a class click the check box beside the class name then click the DELETE button Click the REFRESH button to refresh the screen with the most current data from the switch Configure Quality of Service 251 M4100 Series Managed Switch Configure the DiffServ Class Match Criteria 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your compu
351. hd DRE UD EE RE ERR ERAS 216 Configure amP Interface uoo ee enhn eerta sebo 220 Configure a Secondary IP Address eee esses 222 VEANIOVEIVIEW soot EXER R rarei RR he E P ERE E REL P ET P TIRE 223 Use the VLAN Static Routing Wizard 0 cece eee ee 224 Configure VLAN ROUTING seses ote eb he RR ERR RE 225 ARPIOVGRVICW ebonit tioi dA purse deep Ex Dr ERU Rari dune adt band Resa 226 Display ARP Cache Entfles ovo s erronee men vEY Y Reed TE TR ER 227 Configure the Static ARP Cache 00 cece eese 228 View or Configure the ARP Table 0 cece eese 229 Configure Router Discovery sssssss e 231 Chapter 5 Configure Quality of Service QoS OVeEVIGWa cipit rr bert deat ced aden bre DEP OP DE pet pes der dore gen 234 Classof SSFVICOU vues sa imb domne ades E tox wet ease el a meu T 234 Configure COS acc ceuetes iae bdadab IC eo OR snb ERE eds 235 Map 802 1p Priorities to Queues 0 0 eee eee eee eee eee ees 236 Map IP DSCP Values to Queues 0 eee eect eens 237 Configure CoS Settings for an Interface 6 eee ee eee 238 Configure an Interface Queue 6 eee eee 239 Differentiated Services ccscess secrete mme meme reser RE ERE ERES 241 DiffServ Wizard Overview 0 0 cece eee ee eee eee 242 M4100 Series Managed Switch Use the DiffServ Wizard 1262099952590 19d vod PORbHbPOR eI oet 4253 242 Configure DIC ESOEVu s ccscens meos sut egere pe wdre eR TESTA
352. he DHCP snooping mode is to be enabled Use DHCP Snooping Mode to enable or disable the DHCP snooping feature for the entered VLAN The factory default is disabled Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure the DHCP Snooping Interface To configure the DHCP snooping interface T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt DHCP Snooping gt Interface Configuration Manage Device Security 331 10 11 12 M4100 Series Managed Switch DHCP Snooping Interface Configuration DHCP Snooping Interface Configuration 1 2 LAGS All Go To Interface o 5 1 gu Logging Interface Trust Mode Invalid Limit pps Burst Interval se
353. he check box next to the recipient change the desired fields and then click the APPLY button Configuration changes take effect immediately 11 To delete a recipient select the check box next to the recipient and click the DELETE button Configure Trap Flags You can enable or disable traps When the condition identified by an active trap is encountered by the switch a trap message is sent to any enabled SNMP Trap Receivers and a message is written to the trap log To configure trap flags 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt SNMP gt SNMP V1 V2 gt Trap Flags Trap Flags Trap Flags Authentication Q Disable Enable Link Up Down Disable Enable Multiple Users Disable Enable Spanning Tree Q Disable Enable ACL Disable Enable 8 Use Authentication to enable or disable activation of authentication failure t
354. he default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Routing 225 M4100 Series Managed Switch 7 Select Routing gt VLAN gt VLAN Routing VLAN Routing Configuration VLAN Routing Configuration VLAN ID MAC Address IP Address Subnet Mask O E E 0 4 1 2C B0 5D 91 F8 B7 192 168 22 100 255 255 255 0 The screen displays the port interface and MAC address assigned to the VLAN for routing Use IP Address to enter the IP address to be configured for the VLAN routing interface 9 Use Subnet Mask to enter the subnet mask to be configured for the VLAN routing interface 10 To add the VLAN routing Interface specified in the VLAN ID field to the switch configuration click the ADD button 11 To remove the VLAN routing interface specified in the VLAN ID field from the switch configuration click the DELETE button ARP Overview The ARP protocol associates a Layer 2 MAC address with a layer 3 IPv4 address managed switch software features both dynamic and manual ARP configuration With manual ARP configuration you can statically add entries into the ARP table ARP is a necessary part of the Internet Protocol IP and is used to translate an IP address to a media MAC address d
355. he default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Services gt DHCP Server gt DHCP Pool Configuration DHCP Pool Configuration DHCP Pool Configuration Pool Name Create v Pool Name Type of Binding Unallocated Network Address 0 0 0 0 Network Mask 0 0 0 0 Network Prefix Length Client Name Hardware Address 00 00 00 00 00 00 Hardware Address Type Ethernet Client ID Host Number 0 0 0 0 Host Mask 0 0 0 0 Host Prefix Length Lease Time Infinite Days 0 Hours 0 Minutes 0 NetBIOS Node Type b node Broadcast v Next Server Address 0 0 0 0 Domain Name Bootfile 8 To add the pool click the ADD button 9 To delete the pool click the DELETE button The DELETE button is not visible if you are logged in as a user with read only permission 10 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure System Information 61 M4100 Series Managed Switch The following table describes the DHCP Pool Configuration fields Table 16 DHCP Pool configuration Fed Description S O Pool Name Pool Name Type of Binding Network Address For a user with read write permission this field shows names of all the existing pools along with an additional option Create When you select
356. he default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt MFDB gt Bridge Multicast Forwarding Bridge Multicast Forwarding Bridge Multicast Forwarding Table EN VLAN ID Forwarding Mode Forward Unregistered 2 Forward Unregistered Select a VLAN ID check box In the Forwarding Mode list select the forwarding mode Possible values are as follows Configure Switching Information 162 M4100 Series Managed Switch Forward Unregistered If a packet is received from a VLAN with a multicast destination address and no ports in the VLAN are registered to receive multicast packets for that address then the packet is flooded to all ports in the VLAN The responsibility for accepting or dropping the packets belongs to the hosts If a multicast packet is received and there are ports registered to receive it the packet is sent only to the registered ports Forward All All multicast packets received from a VLAN are flooded to all ports in the VLAN regardless of port registrations to multicast addresses Filter Unregistered If a packet is received from a VLAN for a multicast destination address and no ports in the VLAN are registered to receive multicast packets for that address then the packets are dropped The default value is Forward Unregistered 1
357. heck box next to the instance to configure update the values and click the APPLY button You can select multiple check boxes to apply the same setting to all selected ports 11 Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the previous values of the switch For each configured instance the information described in the following table displays on the Screen Table 47 MST Configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance It is made up using the bridge priority and the base MAC address of the bridge Time Since Topology Change The time in seconds since the topology of the selected MST instance last changed Topology Change Count Number of times topology has changed for the selected MST instance Configure Switching Information 157 M4100 Series Managed Switch Table 47 MST Configuration continued Field Description Topology Change The value of the topology change parameter for the switch indicating if a topology change is in progress on any port assigned to the selected MST instance It takes a value if True or False Designated Root The bridge identifier of the root bridge It is made up from the bridge priority and the base MAC address of the bridge Root Path Cost Path cost to the designated root for this MST instance Root Portldentifier Port to access the designated root for this M
358. hich is the Sales department VLAN The CoS value of the frame must be 0 which is the default value for Ethernet frames Frames that match this criteria are permitted on interfaces 6 7 and 8 and are assigned to the hardware egress queue 0 which is the default queue All other traffic is explicitly denied on these interfaces To allow additional traffic to enter these ports you must add a new permit rule with the desired match criteria and bind the rule to interfaces 6 7 and 8 Standard IP ACL Example Configuration The following example shows how to create an IP based ACL that prevents any IP traffic from the Finance department from being allowed on the ports that are associated with other departments Traffic from the Finance department is identified by each packet s network IP address 1 From the IP ACL screen create a new IP ACL with an IP ACL ID of 1 See Configure an IP ACL on page 354 2 From the IP Rules screen create a rule for IP ACL 1 with the following settings e Rule ID 1 e Action Deny e Assign Queue ID 0 optional 0 is the default value Configuration Examples 434 M4100 Series Managed Switch e Match Every False e Source IP address 192 168 187 0 e Source IP Mask 255 255 255 0 For additional information about IP ACL rules see Configure Rules for an IP ACL on page 355 3 Click the ADD button 4 From the IP Rules screen create a second rule for IP ACL 1 with the following settings e Rule ID 2 e Ac
359. his field indicates duration of Tx LPI state in 10us increments Shows uSec the total duration of Tx LPI since the EEE counters were last cleared Tw sys tx uSec Integer that indicates the value of Tw sys that the local system can support Configure System Information 54 M4100 Series Managed Switch Table 13 Port Green Mode Statistics continued Field Description Tw sys tx Echo uSec Integer that indicates the remote system s Transmit Tw sys that was used by the local system to compute the Tw sys that it wants to request from the remote system Tw sys rx uSec Integer that indicates the value of Tw sys that the local system requests from the remote system Tw sys rx Echo uSec Integer that indicates the remote systems Receive Tw sys that was used by the local system to compute the Tw sys that it can support Fallback Tw sys uSec Integer that indicates the value of fallback Tw sys that the local system Tx dll enabled Data Link Layer Enabled Initialization status of the EEE transmit Data Tx dll ready Data Link Layer ready This variable indicates that the Tx system Rx dll enabled Status of the EEE capability negotiation on the local system requests from the remote system Link Layer management function on the local system initialization is complete and is ready to update and receive LLDPDU containing EEE TLV Rx dll ready Data Link Layer ready This variable indicates that
360. ice handling in routers Flow label can specified within the range 0 to 1048575 Use IPv6 DSCP Service to specify the IP DiffServ Code Point DSCP field The DSCP is defined as the high order six bits of the service type octet in the IPv6 header This is an optional configuration Enter an integer from 0 to 63 The IPv6 DSCP is selected by possibly selection one of the DSCP keyword from a field If a value is to be selected by specifying its numeric value then select the Other option in the field and a text box displays where you can enter the numeric value of the DSCP Rate Limit Conform Data Rate Value of Rate Limit Conform Data Rate specifies the conforming data rate of IPv6 ACL rule The valid values are 1 to 4294967295 in Kbps Rate Limit Burst Size Value of Rate Limit Burst Size specifies the burst size of the IPv6 ACL rule The valid values are 1 to 128 in Kbytes Time Range Name of time range associated with the IPv6 ACL rule Rule Status Displays if the ACL rule is active or inactive Blank means that no timer schedules are assigned to the rule To add an IPv6 rule click the ADD button To delete a rule select it an click the DELETE button Manage Device Security 364 M4100 Series Managed Switch Configure ACL Interface Bindings When an ACL is bound to an interface all the rules that were defined are applied to the selected interface You can to assign ACL lists to ACL priorities and interfaces To co
361. ich one can be selected The list includes other as an option for the remaining values e Simple Policy Use this attribute to establish the traffic policing style for the specified class This command uses single data rate and burst size resulting in two outcomes conform and violate 11 If you select the Simple Policy attribute you can configure the following fields e Color Mode This lists the color mode The default is Color Blind Color Blind Color Aware Color Aware mode requires the existence of one or more color classes that are valid for use with this policy instance A valid color class contains a single nonexcluded match criterion for one of the following fields provided the field does not conflict with the classifier of the policy instance itself e CoS e IPDSCP e IP Precedence Configure Quality of Service 256 M4100 Series Managed Switch Committed Rate This value is specified in the range 1 to 4294967295 kilobits per second Kbps Committed Burst Size This value is specified in the range 1 to 128 KBytes The committed burst size is used to determine the amount of conforming traffic allowed e Conform Action This lists the actions to be taken on conforming packets according to the policing metrics from which one can be selected The default is send Viol met e For ate Action This lists the actions to be taken on violating packets per the policing rics from which one can be selected The de
362. ics MVR Interface Configurazon REFRESH You can click a menu option to access the screen that contains the configuration or monitoring options If you click the graphic but do not click a specific port the main menu displays This menu contains the same options as the navigation tabs at the top of the screen NETGEAR M4100D126 12 Port Fiber Gigabit Layer 2 Managed Switch with Static Routng Switching Routing QoS Secvri Maintenance Help index iocour SNMP LLOP m Switching gt Device View Routing Services Qos Security gt LLDP Monitoring gt ISDP gt Maintenance gt Timer Schedule gt Holp Index REFRESH Using SNMP The managed switch software supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates Get Started 17 Vv M4100 Series Managed Switch The managed switch use both standard public MIBs for standard functionality and private MIBs that support additional switch functionality All private MIBs begin with a prefix The main object for interface configuration is in SWITCHING MIB which is a private MIB Some interface configurations also involve objects in the public MIB IF MIB SNMP is enabled by default The System gt Management gt System Information screen which is the screen that displays when you log in displays the information that you need to configure an SNMP manager to access the switch Any user
363. ide more power than is permissible by the hardware Power Denied indicates that the PSE port was denied power because of a shortage of power or due to administrative action Configure SNMP Community Settings By default two SNMP Communities exist that use the SNMP V1 and SNMP V2 protocol e Private with Read Write privileges and status set to Enable e Public with read only privileges and status set to Enable These are well known communities You can change the default settings or add other communities Only the defined communities can access the switch using the SNMP V1 and SNMP V2 protocols Only those communities with read write access can be used to change the configuration using SNMP For information about using SNMP v3 see Configure SNMP v3 Settings for a User on page 88 To configure SNMP community settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure System Information 83 M4100 Series Managed Switch 6
364. ields Table 26 LLDP Local Device Information Field jDeenpio 0 Chassis ID Subtype Specifies the string that describes the source of the chassis identifier Chassis ID Specifies the string value used to identify the chassis component associated with the local system Configure System Information 95 M4100 Series Managed Switch Table 26 LLDP Local Device Information Field Description Port ID The string that describes the source of the port identifier System Name The system name of the local system Port Description The description of the selected port associated with the local system System Capabilities Supported The system capabilities of the local system enabled Management Address Type The type of the management address Management Address The advertised management address of the local system View LLDP Remote Device Information You can view information about remote devices connected to the port To view LLDP remote device information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin use
365. ies are updated in reaction to new Routing 226 M4100 Series Managed Switch information seen on the network periodically refreshed to determine if an address still exists or removed from the cache if the entry has not been identified as a sender of an ARP packet during the course of an ageout interval usually specified through configuration Display ARP Cache Entries To display the ARP cache entries 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Routing gt ARP gt Basic gt ARP Cache ARP Cache ARP Cache IP Address Port MAC Address 10 27 34 1 1 0 1 00 16 9C E1 D8 00 Use Port to select the associated Unit Slot Port of the connection IP Address displays the IP address It must be the IP address of a device on a subnet attached to one of the switch s existing routing interfaces MAC Address displays the unicast MAC address of the d
366. ies whether the BPDU Filter feature is enabled STP BPDU filtering applies to all operational edge ports The edge port in an operational state is supposed to be Configure Switching Information 147 M4100 Series Managed Switch connected to hosts that typically drop BPDUs If an operational edge port receives a BPDU it immediately loses its operational status In that case if BPDU filtering is enabled on this port then the BPDUs received on this port are dropped The following table describes the nonconfigurable information displayed on the screen Table 42 STP Configuration Field Description Configuration Digest Key Identifier used to identify the configuration currently being used MST ID Table consisting of the MST instances including the CST and the corresponding VLAN IDs associated with each of them VID ID Table consisting of the VLAN IDs and the corresponding FID associated with each of them FID ID Table consisting of the FIDs and the corresponding VLAN IDs associated with each of them Configure Advanced STP Settings To configure advanced STP settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the
367. iggered every defined number of months 11 Click the APPLY button The updated configuration is sent to the switch and takes effect immediately Configure System Information 116 Configure Switching Information This chapter covers the following topics VLAN Overview Auto VoIP Overview Spanning Tree Protocol Overview Configure Multicast Configure Multicast Configure MLD Snooping Configure MVR Manage MAC Addresses Configure Port Settings Link Aggregation Group Overview M4100 Series Managed Switch VLAN Overview Adding Virtual LAN VLAN support to a Layer 2 switch offers some of the benefits of both bridging and routing Like a bridge a VLAN switch forwards traffic based on the Layer 2 header which is fast and like a router it partitions the network into logical segments which provides better administration security and management of multicast traffic By default all ports on the switch are in the same broadcast domain VLANs electronically separate ports on the same switch into separate broadcast domains so that broadcast packets are not sent to all the ports on a single switch When you use a VLAN users can be grouped by logical function instead of physical location Each VLAN in a network has an associated VLAN ID which appears in the IEEE 802 1Q tag in the Layer 2 header of packets transmitted on a VLAN An end station can omit the tag or the VLAN portion of the tag in which case the first switch
368. iguration Statistics Default Time to Live 64 IP Interface Routing Mode Enable Disable Configuration ICMP Echo Repli Enable Disable Secondary IP p ICMP Redirects Enable Disable ICMP Rate Limit Interval 1000 ICMP Rate Limit Burst Size 100 Maximum Next Hops a Maximum Routes 64 Select to configure Global Default Gateway Global Default Gateway Select the Routing Mode Enable or Disable radio button You must enable routing for the switch before you can route through any of the interfaces The default value is disabled Select the ICMP Echo Replies Enable or Disable radio button If ICMP echo replies are enabled then only the router can send ECHO replies By default ICMP echo replies are sent for echo requests Select the ICMP Redirects Enable or Disable radio button If this is enabled globally and on the interface level then only the router can send ICMP redirects Use ICMP Rate Limit Interval to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval By default the rate limit is 100 packets sec for example burst interval is 1000 msec To disable ICMP rate limiting set this field to 0 The valid rate interval is in the range 0 to 2147483647 Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval By default the burst size is 100 packets
369. iguration UDP Relay UDP Relay Configuration Admin Mode 9 Disable Enable UDP Relay Global Configuration Server UDP Port Address eA Other Value 8 Use Admin Mode to enable or disable the UDP Relay on the switch The default value is Disable 9 Use Server Address to specify the UDP relay server address in x x x x format 10 Use UDP Port to specify the UDP Destination Port These ports are supported e DefaultSet Relay UDP port 0 packets This is specified if no UDP port is selected when you are creating the Relay server e dhcp Relay DHCP UDP port 67 packets e domain Relay DNS UDP port 53 packets e isakmp Relay ISAKMP UDP port 500 packets e mobile ip Relay Mobile IP UDP port 434 packets nameserver Relay IEN 116 Name Service UDP port 42 packets netbios dgm Relay NetBIOS datagram server UDP port 138 packets e netbios ns Relay NetBIOS name server UDP port 137 packets ntp Relay Network Time protocol UDP port 123 packets e pim auto rp Relay PIM auto RP UDP port 496 packets e rip Relay RIP UDP port 520 packets e tacacs Relay TACACS UDP port 49 packet e tftp Relay TFTP UDP port 69 packets e time Relay time service UDP port 37 packets e Other If this option is selected the UDP Port Other Value is enabled This option permits you to enter your own UDP port in UDP Port Other Value 11 Use UDP Port Other Value to specify a UDP Destination Port that lies between 0 and 65535
370. igured on the switch the screen displays a No MSTs Available message and does not display the fields shown in the field description table that follows 8 Use MST ID to select one MST instance from existing MST instances 9 Use Interface to select one of the physical or port channel interfaces associated with VLANs associated with the selected MST instance 10 Use Port Priority to specify the priority for a particular port within the selected MST instance The port priority is set in multiples of 16 For example if the priority is any value between 0 and 15 it is set to O If you try to set it to any value between 16 and 2 16 1 it is set to 16 and so on 11 Use Port Path Cost to set the path cost to a new value for the specified port in the selected MST instance It takes a value in the range of 1 to 200000000 Configure Switching Information 159 M4100 Series Managed Switch The following table describes the read only MST port configuration information displayed on the Spanning Tree MST Configuration screen Table 48 MST Port Status Fig JDeenpion S O Auto Calculated Port Path Cost Displays whether the path cost is automatically calculated Enabled or not Disabled Path cost is calculated based on the link speed of the port if the configured value for Port path cost is zero The port identifier for the specified port within the selected MST instance It is made up from the port priority and the interface
371. ime sources are established by stratums Stratums define the accuracy of the reference clock The higher the stratum where zero is the highest the more accurate the clock The device receives time from stratum 1 and above since it is itself a stratum 2 device The following is an example of stratums Stratum 0 A real time clock is used as the time source for example a GPS system e Stratum 1 A server that is directly linked to a stratum 0 time source is used Stratum 1 time servers provide primary network time standards Configure System Information 37 M4100 Series Managed Switch Stratum 2 The time source is distanced from the stratum 1 server over a network path For example a stratum 2 server receives the time over a network link through NTP from a stratum 1 server Information received from SNTP servers is evaluated based on the time level and server type SNTP time definitions are assessed and determined by the following time levels e 71 Time that the original request was sent by the client T2 Time that the original request was received by the server T3 Time that the server sent a reply 74 Time that the client received the server s reply The device can poll unicast server types for the server time Polling for unicast information is used for polling a server for which the IP address is known SNTP servers that were configured on the device are the only ones that are polled for synchronization
372. in and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Auto VoIP gt OUI based gt Properties System Switching Routing QoS Security Monitoring Maintenance Help Auto VolP STP Multicast MYR Address Table ri LAG Protocol based OUI Based Properties OUI based Properties Port Settings Auto VoIP VLAN ID OUI Table Auto VoIP Status OUI Based Properties OUI based priority In the Auto VoIP VLAN ID field specify the VoIP VLAN ID on the switch The range is 1 to 4093 A VLAN ID value of 0 implies that there is no Auto VoIP VLAN configured VLAN ID default value is 2 Use OUl based priority to configure OUl based priority on the switch The range is 0 to 7 The default value is 7 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure OUI Based Port Settings To display the OUI port settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP
373. in password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt System Information The System Information screen displays Scroll down to Temperature Status The screen displays the current temperature of the system sensor of the switch The maximum temperature of the temperature sensors depends on the actual hardware To refresh the switch information click the REFRESH button View the Device Status To view the device status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt System Information The System Information screen displays Configure System Information 26 M4100 Series Managed Switch 8 Scroll down to Device Status Device Status Firmware Version Boot Version CPLD Version Serial Number 0x0 2TK1215AF000D OK 9 To
374. in screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Logs gt Event Logs Monitoring the System 388 Event Logs Event Logs Type EVENT gt EVENT gt EVENT gt EVENT gt EVENT gt EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT EVENT Entry o0 OQ 4 O0 uv hb wn ew o o 0 Filename bootos c unitmgr c bootos c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c bootos c unitmgr c Line 220 5806 220 220 220 220 220 220 M4100 Series Managed Switch TaskID 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 Code AAAAAAAA 00000000 AAAAAAAA AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 AAAAAAAA 00000000 Time 00031 00327 00031 00031 003142 00031 0013346 00031 00
375. in user name is admin and the default admin password is blank that is do not enter a password Configure System Information 108 6 Ti 10 11 12 M4100 Series Managed Switch Click the Login button The web management interface menu displays Select System gt ISDP gt Advanced gt Global Configuration Global Configuration Global Configuration Admin Mode Disable Enable Timer 30 Hold Time 180 Version 2 Advertisements Disable Enable Neighbors table last time changed 2 Days 01 15 37 Device ID 2ER1084000005 Device ID Format Capability Serial Number Host Name Device ID Format Serial Number Select the Admin Mode Enable radio button The default value is Enable In the Timer field specify the period of time between sending new ISDP packets The range is 5 to 254 seconds The default value is 30 seconds In the Hold Time field specify the hold time for ISDP packets that the switch transmits The hold time specifies how long a receiving device should store information sent in the ISDP packet before discarding it The range 10 to 255 seconds The default value is 180 seconds Select the Version 2 Advertisements Disable or Enable radio button This setting controls the sending of ISDP version 2 packets from the device The default value is Enable Click the APPLY button Your settings are saved The following table describes the ISDP Advanced Global Configuration fields Table 33
376. in user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt System Information and scroll down to the FAN Status System Switching Routing QoS Security Monitoring Maintenance Help Index Device View Services PoE SNMP LLDP ISDP Timer Schedule gt Initial Setup FAN Status System Information Switch Statistics gt System CPU Status Temperature Status USB Device Information System The following information displays FAN Status OK Failure or Not Present e UNIT ID This identifies the switch to which the fan belongs e System The working status of the system fan in each unit 8 Click the REFRESH button to refresh the system information of the switch View the Temperature Status gt To display the temperature status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Configure System Information 25 M4100 Series Managed Switch Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default adm
377. information received from the supplicant to the authentication server in order for the credentials to be checked which determine the authorization state of the port The Authenticator PAE controls the authorized unauthorized state of the controlled port depending on the outcome of the RADIUS based authentication process Supplicant Authenticator SS Switch E SS Authentication server RADIUS Supplicant 192 168 10 23 Figure 1 802 1X authenticator and supplicant roles 802 1X Sample Configuration This example shows how to configure the switch so that 802 1X based authentication is required on the ports in a corporate conference room 1 0 5 1 0 8 These ports are available to visitors and must be authenticated before granting access to the network The authentication is handled by an external RADIUS server When the visitor is successfully authenticated traffic is automatically assigned to the guest VLAN This example assumes that a VLAN was configured with a VLAN ID of 150 and VLAN name of Guest 1 From the Port Authentication screen select ports 1 0 5 1 0 6 1 0 7 and 1 0 8 2 From the Port Control menu select Unauthorized The Port Control setting for all other ports where authentication is not needed should Authorized When the Port Control setting is Authorized the port is unconditionally put in a force authorized state and does not require any authentication When the Port Control setting is Auto the authenticator PAE sets
378. ing configuration Field Description Begins At The fields under this are used to configure the Start values for the date and time Week This field is used to configure the start week Day This field is used to configure start day Month This field is used to configure start month Hours This field is used to configure start hours Minutes This field is used to configure start minutes Ends At The fields under this are used to configure the End values for the date and time Week This field is used to configure the end week Day This field is used to configure end day Month This field is used to configure end month Hours This field is used to configure end hours Minutes This field is used to configure end minutes fet 0000000000 This field is used to configure the recurring offset Zone This field is used to configure the Zone Configure System Information 46 M4100 Series Managed Switch The fields in the following table are visible only when Summer Time is Non Recurring Table 11 Summer Time Nonrecurring Configuration Field Description Begins At The fields under this are used to configure the Start values for the date and time Ends At The fields under this are used to configure the End values for the date e Week This field is used to configure the start week e Day This field is used to configure the start day e Month This field is used to configure the start month Hours Thi
379. ing interface and the routing interface status up or down These fields display information but cannot be changed 8 From the VLAN ID list select a VLAN This list displays all IDs of VLANs configured on this switch 9 In the Routing Mode field select the option to Enable or Disable the global routing on the selected VLAN interface 10 Select the Configuration Method what the switch does on start up e DHCP Transmit a DHCP request e Manual Do nothing 11 Specify the IP Address of the interface The factory default value is 169 254 100 100 12 Specify the IP Subnet Mask for the interface The factory default value is 255 255 0 0 13 Specify the Management VLAN ID of the switch The management VLAN is used for management of the switch You can enter any value in the range of 1 4093 14 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 View or Set the System Time The managed switch software supports the Simple Network Time Protocol SNTP You can also set the system time manually SNTP assures accurate network device clock time synchronization up to the millisecond Time synchronization is performed by a network SNTP server The managed switch software operates only as an SNTP client and cannot provide time services to other systems T
380. ion IP Source Guard Interface Configuration 2 1 2 LAGS All Go To Interface GO Interface IPSG Mode IPSG Port Security 1 0 1 Disable Disable 1 0 2 Disable Disable 1 0 3 Disable Disable 1 0 4 Disable Disable 1 0 5 Disable Disable 1 0 6 Disable Disable Select an Interface to enable IPSG In the IPSG Mode menu select Enable or Disable This enables or disables validation of the sender IP address on this interface If IPSG is enabled packets are not forwarded if the sender IP address is not in the DHCP snooping binding database The factory default is Disable Use IPSG Port Security to enable or disables the IPSG port security on the selected interface If IPSG port security is enabled then the packets are not forwarded if the sender MAC address is not in the FDB table and it is not in DHCP snooping binding database To enforce filtering based on MAC address other required configurations are as follows e Enable port security globally e Enable port security on the interface level IPSG port security can t be enabled if IPSG is Disabled The factory default is disabled Configure IP Source Guard Binding Toconfigure IP source guard binding 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser
381. ion Ouput Gupst Guput i nif g Yer M Yer io Yer m Yer I ver gt Yer i Yer La Yer low ve gt Yer low Iu 8 For Admin Mode select Enable or Disable to determine the ability of the port to deliver power 9 Use Port Priority to determine which ports can deliver power when the total power delivered by the system crosses a specific threshold If the switch is not able to supply power to all connected devices priority is used to determine which ports can supply power The lowest numbered port that is one of the ports of the same priority has a higher priority Select the priority order from the following list e Low Low priority e Medium Medium priority e High High priority e Critical Critical priority 10 Select the High Power Mode from the following options e Disabled indicates that a port is powered in the IEEE 802 3af mode e Legacy indicates that a port is powered using high inrush current used by legacy PD s whose power requirements are more than 15W from power up Pre 802 3at indicates a port is powered in the IEEE 802 3af mode initially and then switched to the high power IEEE 802 3at mode before 75 msec This mode must be selected if the PD is NOT performing Layer 2 Classification or the PSE is performing 2 Event Layer 1 Classification e 802 3at indicates that a port is powered in the IEEE 802 3at mode For example if the class detected by PSE is not class4 then the PSE port do
382. is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Traffic Control gt MAC Filter gt MAC Filter Summary MAC Filter Summary MAC Filter Summary MAC Address VLAN ID Source Port Members Destination Port Members D3 02 F1 93 B3 01 1 1 0 9 1 0 16 1 0 17 The following table describes the information displayed on the screen Table 85 MAC Filter Summary User Manual ed eserptom 0000000000 MAC Address The MAC address of the filter in the format 00 01 1A B2 53 4D VLAN ID The VLAN ID associated with the filter Manage Device Security 312 M4100 Series Managed Switch Table 85 MAC Filter Summary User Manual continued Field Description Source Port Members A list of ports to be used for filtering inbound packets Destination Port Members A list of ports to be used for filtering outbound packets Configure the Global Port Security Mode Use the port security feature to lock one or more ports on the system When a port is locked only packets with an allowable source MAC addresses can be forwarded All other packets are discarded To configure the global port security mode 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet
383. is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 190 M4100 Series Managed Switch 7 Select Switching gt Address Table gt Advanced gt Address Table Address Table MAC Address Table G Search By vant v Go Total MAC Addresses 43 C 1 00 06 02 05 06 05 0 12 Learned 00 07 03 05 05 05 5 1 Management 00 0F FE 00 8E 76 0 12 Learned 00 16 9C E1 D8 00 0 12 Learned 00 19 E7 D3 82 2D 0 12 Learned 00 1A A0 1A 94 FA 0 12 Learned 00 E0 0C BC ES 60 0 12 Learned 52 54 40 22 46 5C 0 12 Learned C8 0A A9 32 F3 63 0 12 Learned 00 07 03 05 05 07 vlan 2 Management 00 07 03 05 05 07 vlan 3 Management 00 07 03 05 05 07 vlan 4 Management 00 07 03 05 05 07 vlan 5 Management 00 07 03 05 05 07 vlan 6 Management 00 07 03 05 05 07 vlan 7 Management 00 07 03 05 05 07 vlan 8 Management 00 07 03 05 05 07 vlan 9 Management 00 07 03 05 05 07 vlan 10 Management 00 07 03 05 05 07 vlan 11 Management 1 1 1 1 1 1 1 1 2 3 4 5 6 7 8 9 mo lo m N 00 07 03 05 05 07 vlan 12 Management m Ww 00 07 03 05 05 07 vlan 13 Management 00 07 03 05 05 07 vlan 14 Management 00 07 03 05 05 07 vlan 15 Management 00 07 03 05 05 07 vlan 16 Management 00 07 03 05 05 07 vlan 17 Management 00 07 03 05 05 07 vlan 18 Management 00 07 03 05 05 07 vlan 19 Management m ie m e x oon nu s N o 00 07 03 05 05 07 vlan 20 Management
384. is chapter covers the following topics Save Configuration Configure Auto Install Reboot a Switch Upload Files Download Files File Management Overview Use the Ping IPv4 Utility Use the Ping IPv6 Utility Run Traceroute IPv4 Configure Traceroute IPv6 Settings 404 M4100 Series Managed Switch Save Configuration gt To save the configuration 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance Save Config Save Configuration Save Configuration Save Configuration Q Saving all applied changes will cause all changes to configuration panels that were applied but not saved o to be saved thus retaining their new values across a system reboot Select the check box Click the APPLY button Your configuration changes are saved across a system reboot All changes submitted since the previous save or system reboot are retained by the
385. is specified Deleting Host would delete Client Name Client ID Hardware address for the manual pool and set the Pool Type to Unallocated Specifies the subnet mask for a manual binding to a DHCP client Either Host Mask or Prefix Length can be configured to specify the subnet mask but not both Specifies the subnet mask for a manual binding to a DHCP client Either Host Mask or Prefix Length can be configured to specify the subnet mask but not both The valid range is 0 to 32 Configure System Information 62 M4100 Series Managed Switch Table 16 DHCP Pool configuration continued Field Description Lease Time Can be selected as Infinite to specify the lease time as Infinite or as Specified Duration and enter a specific lease period In the case of dynamic binding infinite implies a lease period of 60 days In the case of manual binding Infinite implies indefinite lease period The default value is Specified Duration Days The number of days of the lease period This field appears only if the user has specified Specified Duration as the Lease time The default value is 1 The valid range is 0 to 59 Hours The number of hours of lease period This field appears only if you specified Specified Duration as the lease time The valid range is 0 to 22 Minutes The number of minutes in the lease period This field appears only if you specified Specified Duration as the lease time The valid range is 0 to 86399 Default
386. isplayed or configured Configure System Information 56 M4100 Series Managed Switch Table 14 Green Mode Statistics Summary continued Field Description Energy Detect Admin Mode Enable or Disable Energy Detect Mode on the port When this mode is Energy Detect Operational Status Current operational status of the Energy Detect mode enabled when the port link is down the PHY automatically goes down for short period of time and then wakes up to check link pulses This allows autonegotiation to be performed power saving consumption when no link partner is present View the Port Green Mode EEE History To view the port green mode EEE history Le 8 9 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt Green Ethernet gt Green Ethernet LPI History Port GreenMode EEE History Interface E Sampling Interval 36
387. itch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt Basic gt DiffServ Configuration System Switching Routing Security Monitoring Maintenance Help CoS DiffServ gt Diffserv Wizard DiffServ Configuration Basic z x DiffServ DiffServ Configuration Configuration DiffServ Admin Mode Disable Enable Advanced Status Class Table 32 Class Rule table Policy table Policy Instance table Policy Attributes table Service table Configure Quality of Service 244 M4100 Series Managed Switch Table 72 DiffServ Configuration Field Description DiffServ Admin Mode The options mode for DiffServ The default value is Enable While disabled the DiffServ configuration is retained when saved and can be changed but it is not activated When enabled Diffserv services are activated Class table Displays the number of configured DiffServ classes out of the total allowed on the switch Class Rule table Displays the number of configured class rules out of the total allowed on the switch Policy table Displays the number of configured policies out of the total allowed on the switch
388. itch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Port Authentication gt Advanced gt Port Summary Port Summary Port Summary 12 AI Operatin VLAN Ke Session Control cna 9 Reauthentication contra Protocol PAE Authenticator Backend VLAN Aenal eA Session RUP Port Port Mode Enabled Direction Version Capabilities PAE State State Assigned 9 Timeout 3 Status Method Reason Enabled Action 1 0 1 Auto FALSE Versioni Authenticator Initialize Initialize 0 Not Assigned FALSE 0 Default Port Based 1 0 2 Versioni Authenticator Initialize Initialize 0 Not Assigned FALSE 0 Port Based 1 0 3 Auto FALSE Versioni Authenticator Initialize Initialize 0 Not Assigned FALSE 0 Port Based 1 0 4 Auto FALSE Versioni Authenticator Initialize Initialize 0 NotAssigned FALSE 0 Port Based 1 0 5 Auto FALSE Versioni Authenticator Initialize Initialize 0 Not Assigned FALSE 0 Port Based Manage Device Security 306 M4100 Series Managed Switch The following table describes the fields on the Port Summary screen Table 83 Port summary Field Description Port Control Mode Operating Control Mode S
389. itch sends a Ping request to the specified address 10 Click the APPLY button The switch sends the number of pings specified in the Count field and the results are displayed below the configurable data in the Ping area Use the Ping IPv6 Utility This screen is used to send a ping request to a specified host name or IPv6 address You can use this to check whether the switch can communicate with a particular IPv6 station When you click the APPLY button the switch sends three pings and the results are displayed on the screen The output is Send count 3 Receive count n from IPv6 Address Average round trip time 2 n ms To configure the settings and ping a host name or IPv6 address on the network 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Troubleshooting gt Ping IPv6 Maintenance 422 M4100 Series Managed Switch Ping IPv6 Ping IPv6
390. ity 280 M4100 Series Managed Switch View Login Sessions To view login sessions 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt Login Sessions Login Sessions Login Sessions Connection Session Session Idle Time From Time Type admin i ffff 10 27 253 150 00 00 00 01 35 38 The following table describes the nonconfigurable information displayed on the screen Table 80 Login Sessions Field Description ID Identifies the ID of this row User Name Shows the user s name whose session is open Connection From Shows from which machine the user is connected Idle Time Shows the idle session time Session Time Shows the total session time Session Type Shows the type of session Telnet serial or SSH Manage Device Security 281 M4100 Series Managed Switch Configure Management Acc
391. ity making use of this sFlowRcvrTable entry The empty string indicates that the entry is currently unclaimed and the receiver configuration is reset to default values An entity wishing to claim an sFlowRcvrTable entry must ensure that the entry is unclaimed before trying to claim it The entry is claimed by setting the owner string The entry must be claimed before any changes can be made to other sampler objects Receiver Timeout The time in seconds remaining before the sampler is released and stops sampling A management entity wanting to maintain control of the sampler is responsible for setting a new value before the old one expires The valid range is 0 to 2147483647 A value of zero sets the selected receiver configuration to its default values Use No Timeout to select True or False from the menu to set the no time out sampling for the receiver Sampling is not stopped until No Timeout selected entry is True The default value is False Maximum Datagram Size The maximum number of data bytes that can be sent in a single sample datagram Set this value to avoid fragmentation of the sFlow datagrams The default value is 1400 The allowed range is 200 to 9116 Monitoring the System 401 M4100 Series Managed Switch 12 Receiver Address The IP address of the sFlow collector If set to 0 0 0 0 no sFlow datagrams are sent 13 Receiver Port The destination port for sFlow datagrams The allowed range is 1 to 65535 14
392. k Layer Discovery Protocol LLDP allows stations on an 802 LAN to advertise major capabilities and physical descriptions This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN LLDP is a one way protocol there are no request response sequences Information is advertised by stations implementing the transmit function and is received and processed by stations implementing the receive function The transmit and receive functions can be enabled or disabled separately per port By default both transmit and receive are disabled on all ports The application is responsible for starting each transmit and receive state machine appropriately based on the configured status and operational state of the port The Link Layer Discovery Protocol Media Endpoint Discovery LLDP MED is an enhancement to LLDP with the following features e Auto discovery of LAN policies such as VLAN Layer 2 Priority and DiffServ settings enabling plug and play networking e Device location discovery for creation of location databases e Extended and automated power management of Power over Ethernet endpoints e Inventory management enabling network administrators to track their network devices and determine their characteristics manufacturer software and hardware versions serial or asset number Configure LLDP Global Settings You can specify LLDP parameters that are applied to the switch gt To co
393. le 9 Enable SSH Version 2 Disable Enable SSH Session Timeout minutes Maximum Number of SSH Sessions Current Number of SSH Sessions Keys Present No Login Authentication List networkList w Enable Authentication List enableNetList v 8 Select the SSH Admin Mode Disable or Enable radio button The currently configured value is displayed The default value is Disable 9 Select the SSH Version 1 Disable or Enable radio button The currently configured value is shown when the screen is displayed The default value is Enable 10 Select the SSH Version 2 Disable or Enable radio button The currently configured value is displayed The default value is Enable 11 In the SSH Session Timeout field set the time out value for incoming SSH sessions to the switch The acceptable range for this field is 1 5 minutes 12 In the Maximum Number of SSH Sessions field set the maximum number of inbound SSH sessions allowed on the switch The currently configured value is displayed The acceptable range for this field is 0 5 13 In the Login Authentication List menu select an authentication list This list is used to authenticate users who try to login to the switch 14 In the Enable Authentication List menu select an authentication list This list is used to authenticate users who try to get enable level privilege 15 To refresh the screen and to show the latest SSH sessions privileges click the REFRESH button
394. learned on the selected port Click the REFRESH button to refresh the screen and to show the latest MAC address es learned on a specific port Configure Static MAC Addresses To configure static MAC addresses 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Manage Device Security 316 6 Ef 8 9 M4100 Series Managed Switch Click the Login button The web management interface menu displays Select Security gt Traffic Control gt Port Security gt Static MAC Address Static MAC Address Configuration Port List Interface _1 0 1 E Static MAC Address Table Ee ITI E In the Interface list select the physical interface To add MAC addresses enter them in the Static MAC Address field 10 In the VLAN ID menu select the VLAN ID corresponding to the MAC address being added 11 To add a new static MAC address to the switch click the ADD button 12 To delete a existing static MAC address from the switch click the DELET
395. lect System LLDP LLDP MED Global Configuration LLDP MED Global Configuration Global Configuration Fast Start Repeat Count 3 Device Class Network Connectivity The Device Class field displays the local device s MED classification There are four different kinds of devices three of them represent the actual end points classified as Class Generic IP Communication Controller and so on Class II Media Conference Bridge and so on Class Ill Communication IP Telephone and so on The fourth device is a Network Connectivity Device which is typically a LAN switch or router IEEE 802 1 Bridge IEEE 802 11 Wireless Access Point and so on Use Fast Start Repeat Count to specify the number of LLDP PDUs that are transmitted when the protocol is enabled The range is from 1 to 10 The default value is 3 Configure the LLDP MED Interface gt To configure the LLDP MED interface 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure System Information 99 10 11 12 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin a
396. lected port This command sets the value in seconds of the timer used by the authenticator state machine on this port to define periods of time in which it does not attempt to acquire a supplicant The quiet period is the period for which the authenticator does not attempt to acquire a supplicant after a failed authentication exchange with the supplicant The quiet period must be a number in the range of 0 to 65535 A quiet period value of 0 means that the authenticator state machine never acquires a supplicant The default value is 60 Changing the value does not change the configuration until the APPLY button is clicked Transmit Period This input field allows the user to configure the transmit period for the selected port The transmit period is the value in seconds of the timer used by the authenticator state machine on the specified port to determine when to send an EAPOL EAP Request Identity frame to the supplicant The transmit period must be a number in the range of 1 to 65535 The default value is 30 Changing the value does not change the configuration until the APPLY button is clicked GuestVLAN ID This field allows the user to configure the guest VLAN ID on the interface The valid range is 0 to 4093 The default value is 0 Changing the value does not change the configuration until the APPLY button is clicked Enter 0 to clear the guest VLAN ID on the interface Guest VLAN Period This input field allows the user to enter the guest VL
397. ll formed Total Packets Received Without Errors The total number of packets received that were without errors Unicast Packets Received The number of subnetwork unicast packets delivered to a higher layer protocol Multicast Packets Received The total number of good packets received that were directed to a multicast address This number does not include packets directed to the broadcast address Broadcast Packets Received Total Packets Received with MAC Errors Jabbers Received Fragments Received The total number of good packets received that were directed to the broadcast address Note that this does not include multicast packets The total number of inbound packets that contained errors preventing them from being deliverable to a higher layer protocol The total number of packets received that were longer than 1518 octets excluding framing bits but including FCS octets and had either a bad frame check sequence FCS with an integral number of octets FCS Error or a bad FCS with a nonintegral number of octets Alignment Error Note that this definition of jabber is different from the definition in IEEE 802 3 section 8 2 1 5 10BASE5 and section 10 3 1 4 10BASE2 These documents define jabber as the condition where any packet exceeds 20 ms The allowed range to detect jabber is between 20 ms and 150 ms The total number of packets received that were less than 64 octets in length with ERROR CRC exclu
398. lt IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Monitoring the System 399 M4100 Series Managed Switch Select Monitoring gt sFlow gt Advanced gt sFlow Agent System Switching Routing Security Monitoring Maintenance Help Index Ports Logs Mirroring Basic sFlow Agent Information v Advanced sFlow Agent sFlow Agent Source Interface Information Source Interface sFlow Receiver Configuration sFlow Interface Configuration Agent Version 1 3 Netgear Inc 10 0 2 3 Agent Address 10 130 83 152 sFlow Agent Information The screen displays the agent version and agent address Agent Version Uniquely identifies the version and implementation of this MIB The version string must use the following structure MIB Version Organization Software Revision where MIB Version 1 3 the version of this MIB Organization NETGEAR Inc Revision 1 0 Agent Address The IP address associated with this agent 8 In the Source Interface list select the management interface to be used for sFlow Agent Possible values are as follows None Routing interface Routing VLAN Routing loopback interface Tunnel interface Service port By default VLAN 1 is used as sou
399. ly e Rx Monitors received packets only Note For VLANs only the Tx and Rx and None options are applicable e Tx and Rx Specify VLAN as the source VLAN e None Remove the specified source VLAN e Ifthe VLAN is configured as the source VLAN its direction is displayed as a blank field To apply the settings to the system click the APPLY button If the port is configured as a source port the Mirroring Port field value is Mirrored To delete a mirrored port select the check box next to the mirrored port and then click the DELETE button Click the APPLY button Your settings are applied to the switch Configure an RSPAN VLAN You can configure the VLAN to use the remote switched port analyzer RSPAN VLAN RSPAN allows you to mirror traffic from multiple source ports or from all ports that are members of a VLAN from different network devices and send the mirrored traffic to a destination port a probe port connected to a network analyzer on a remote device The mirrored traffic is tagged with the RSPAN VLAN ID and transmitted over trunk ports in the RSPAN VLAN To configure an RSPAN VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the
400. ly or statically Both methods are used concurrently when a port is locked Dynamic locking implements a first arrival mechanism for port security You specify how many addresses can be learned on the locked port If the limit has not been reached then a packet with an unknown source MAC address is learned and forwarded normally When the limit is reached no more addresses are learned on the port Any packets with source MAC addresses that were not already learned are discarded You can effectively disable dynamic locking by setting the number of allowable dynamic entries to zero Static locking allows you to specify a list of MAC addresses that are allowed on a port The behavior of packets is the same as for dynamic locking only packets with an allowable source MAC address can be forwarded To configure port security settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays
401. m Information 33 10 11 12 M4100 Series Managed Switch Use the Loopback ID field to select list of currently configured loopback interfaces Use the Primary IP Address field to input the primary IPv4 address for this interface in dotted decimal notation This option is visible only when IPv4 loopback is selected Use the Primary IP Subnet Mask field to input the primary IPv4 subnet mask for this interface in dotted decimal notation This option is visible only when IPv4 Loopback is selected The loopback Interface Status indicates whether the link is up or down To create secondary loopback interfaces use the Secondary IP Address field to input the secondary IP address for this interface in dotted decimal notation This input field is visible only when Add Secondary is selected This option is visible when IPv4 Loopback is selected Use the Secondary Subnet Mask field to input the secondary subnet mask for this interface in dotted decimal notation This input field is visible only when Add Secondary is selected This option is visible when IPv4 Loopback is selected View the IPv6 Network Neighbor Table gt To display the IPv6 Network Neighbor Table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the
402. m this server on the authentication port Packets Dropped The number of RADIUS packets received from this server on the authentication port and dropped for some other reason Manage Device Security 270 M4100 Series Managed Switch Configure a RADIUS Accounting Server You can view and configure various settings for one or more RADIUS accounting servers on the network To configure a RADIUS accounting server 1 10 11 12 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security Management Security RADIUS Accounting Server Configuration Accounting Server Configuration Accounting Server Configuration Accounting Server IP Es peraan id Accounting Server Name Secret Configured Accounting Mode a 168 10 100 radius1 1813 Enable Statistics e Malformed Accounting Tri Accounting Accounting Accounting Posse Bad Pending Tipaniis Unknow
403. management interface menu displays 7 Select Switching gt VLAN gt Advanced gt VLAN Membership VLAN Membership VLAN Membership 1 iw Group Operation Untag All m VLAN Name default UNTAGGED PORT MEMBERS 18 19 20 21 22 23 24 Uj U U U Uj UJ U 8 Use VLAN ID to select the VLAN ID 9 Use Group Operation to select all the ports and configure them Untag All Select all the ports on which all frames transmitted for this VLAN are untagged All the ports are included in the VLAN Tag All Select the ports on which all frames transmitted for this VLAN are tagged All the ports are included in the VLAN Remove All Select all the ports that can be dynamically registered in this VLAN through GVRP This selection excludes all ports from the selected VLAN 10 Use Port List to add the ports you selected to this VLAN Each port has three modes T Tagged Select the ports on which all frames transmitted for this VLAN are tagged The ports that are selected are included in the VLAN U Untagged Select the ports on which all frames transmitted for this VLAN are untagged The ports that are selected are included in the VLAN BLANK Autodetect Select the ports that can be dynamically registered in this VLAN through GVRP This selection has the effect of excluding a port from the selected VLAN Configure Switching Information 126 M4100 Series Managed Switch Table 38 VLAN Membership Field Definition VLAN
404. mation Field Description IP Address Specifies the Client s IP Address Hardware Address Specifies the Client s Hardware Address Lease Time Left Specifies the Lease time left in Days Hours and Minutes dd hh mm format Type Specifies the Type of Binding Dynamic or Manual View DHCP Conflicts Information To view the DHCP conflicts information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Services gt DHCP Server gt DHCP Conflicts Information DHCP Conflicts Information Reset All Address Conflicts O Specific Address Conflict DHCP Conflicts Information Search By Conflict IP Address Go IP Address Detection Method Detection Time 8 Select of the following All Address Conflicts to specify all address conflicts Configure System Information 67 M4100 Series Managed Switch e Specific Address Conflict
405. me is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Services gt DHCP Server gt DHCP Server Statistics DHCP Server Statistics Binding Details Automatic Bindings Expired Bindings Malformed Messages Message Received DHCPDISCOVER DHCPREQUEST DHCPDECLINE DHCPRELEASE DHCPINFORM Message Sent DHCPOFFER DHCPACK DHCPNAK The following table describes the DHCP Server Statistics fields Table 17 DHCP server statistics Field Description Automatic Bindings Specifies the number of Automatic Bindings on the DHCP server Expired Bindings Specifies the number of Expired Bindings on the DHCP server Malformed Messages Specifies the number of the malformed messages DHCPDISCOVER Specifies the number of DHCPDISCOVER messages received by the DHCP server DHCPREQUEST Specifies the number of DHCPREQUEST messages received by the DHCP server DHCPDECLINE Specifies the number of DHCPDECLINE messages received by the DHCP server DHCPRELEASE Specifies the number of DHCPRELEASE messages received by the DHCP server DHCPINFORM Specifies the number of DHCPINFORM messages received by the DHCP server DHCPOFFER Specifies the number of DHCPOFFER messages sent by the DHCP server Configure System Information 65 M4100 Series Managed Switch Table 17 DHCP server statisti
406. menu displays Select System Management Time SNTP Server Configuration SNTP Server Configuration SNTP Server Configuration Server Address Port Priority Version Type I lS SNTP Server Status o Last Last Last Address Update Attempt Attempt Requests Time Time Status Failed Requests Enter the appropriate SNTP server information in the available fields Server Type Specifies whether the address for the SNTP server is an IP address IPv4 or host name DNS The default value is IPv4 Address Specify the address of the SNTP server This is a text string of up to 64 characters containing the encoded unicast IP address or host name of an SNTP server Unicast SNTP requests are sent to this address If this address is a DNS host name then that host name should be resolved into an IP address each time a SNTP request is sent to it Port Enter a port number on the SNTP server to which SNTP requests are sent The valid range is 1 65535 The default is 123 e Priority Specify the priority of this server entry in determining the sequence of servers to which SNTP requests are sent The client continues sending requests to different servers until a successful response is received or all servers are exhausted Configure System Information 43 M4100 Series Managed Switch This indicates the order in which to query the servers A server entry with a precedence of 1 is queried before a server with a priority of 2
407. min Mode Disable Enable Voice VLAN Configuration 1 2 All Go To Interface 260 3 Interface Interface Mode Value See bests Mode Gants a A m 1 0 1 Disable Disable EMEN 1 0 2 Disable Disable Disable 1 0 3 Disable Disable Disable 1 0 4 Disable Disable Disable 1 0 5 Disable Disable Disable 1 0 6 Disable Disable Disable The Operational State field displays the status of the voice VLAN for each interface 8 Select the Administrative Mode Disable or Enable radio button The default value is Disable 9 Use Interface to select the physical interface 10 Use Interface Mode to select the voice VLAN mode for selected interface Configure Switching Information 136 11 12 M4100 Series Managed Switch e Disable The default value e None Allow the IP phone to use its own configuration to send untagged voice traffic e VLAN ID Configure the phone to send tagged voice traffic e dotip Configure voice VLAN 802 1p priority tagging for voice traffic When this is selected enter the dot1p value in the Value field Untagged Configure the phone to send untagged voice traffic Use Value to enter the VLAN ID or dotip value This is enabled only when VLAN ID or dot1p is selected as interface mode Use CoS Override Mode to select the Cos override mode for selected interface The default is Disable Configure GARP Switch Settings Note It can take up to 10 seconds for
408. mputer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt VLAN Trunking Configuration System Switching Routing QoS Security Monitoring Maintenance Help Index Auto VolP STP Multicast MVR Address Table Ports LAG Basic Switchport Mode Config Advanced RES Switchport Configuration Configuration 1 LAG All Go To Interface So gt VLAN Trunki cuu ng Interface Switchport Mode Native VLAN Tagging Access VLAN ID Native VLAN ID Trunk Allowed VLANs VA Here DENEN ee EENENDo 130 VLAN Membership gt VLAN Status E General Disable 1 4093 Port PVID 1 4093 Configuration 1 4093 8 Select the interface to configure e Select the Unit ID field to display physical port information for the selected unit e Use LAG to display LAG only e Use All to display all physical ports e Use Go To Interface to select an interface by entering its number e Select the Interface check box 9 Select from the menu to configure the switchport mode of the interface as one
409. mputer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Manage Device Security 290 7 10 11 12 13 14 M4100 Series Managed Switch Select Security gt Access gt SSH gt Host Keys Download Host Keys Download Host Keys Download File Type SSH 1 RSA Key File Transfer Mode TFTP E Server Address Type IPv4 E Server Address 10 27 9 99 Remote File Path 4 projects fastpath amyd Remote File Name netgear 0710 stk In the File Type menu specify the type of file to transfer e SSH 1 RSA Key File SSH 1 Rivest Shamir Adleman RSA Key file e SSH 2 RSA Key PEM File SSH 2 Rivest Shamir Adleman RSA Key file PEM Encoded e SSH 2 DSA Key PEM File SSH 2 Digital Signature Algorithm DSA Key file PEM Encoded In the Transfer Mode menu specify the protocol to use to transfer the file e TFTP Trivial File Transfer Protocol e SFTP Secure File Transfer Protocol e SCP Secure Copy Protocol In the Server Address Type field specify either IPv4 IPv6 or DNS to indicate the format of the TFTP SFTP SCP
410. munity names or the set request is rejected If you select Disable the community name become invalid 12 To add the currently selected community to the switch click the ADD button 13 To delete the currently selected Community Name click the DELETE button Configure an SNMP Trap gt To configure an SNMP trap 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Configure System Information 84 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt SNMP gt SNMP V1 V2 gt Trap Configuration System Switching Routing Security Monitoring Maintenance Help Index Management Device View Services PoE SNM LLDP ISDP Timer Schedule v SNMP V1 V2 Trap Configuration Community Configuration Trap Configuration Source Interface Trap Flags Supported MIBS gt SNMP V3 Trap Source Interface Configuration Trap Configuration Community Name A E 1 Version
411. n Packets Server H Requests Retransmissions Responses 9 Authenticators Requests Types Dropped Responses 0 0 0 0 0 0 0 0 192 168 10 100 0 00 0 In the Accounting Server IP Address field specify the IP address of the RADIUS accounting server to add In the Accounting Server Name field enter the name of the accounting server to add In the Port field specify the UDP port number the server uses to verify the RADIUS accounting server The valid range is 0 65535 If the user has read only access the value is displayed but cannot be changed From the Secret Configured menu select Yes to add a RADIUS secret in the next field After you add the RADIUS accounting server this field indicates whether the shared secret for this server was configured In the Secret field type the shared secret to use with the specified accounting server Manage Device Security 271 M4100 Series Managed Switch 13 From the Accounting Mode list enable or disable the RADIUS accounting mode 14 To delete a configured RADIUS accounting server click the DELETE button To clear the accounting server statistics click the CLEAR COUNTERS button The following table describes RADIUS accounting server statistics available on the screen Table 79 RADIUS accounting server configuration Field Description Accounting Server Address Displays the accounting server associated with the statistics Round Trip Time secs Displays the time inte
412. n The web management interface menu displays Select Security Management Security TACACS TACACS Configuration TACACS Configuration TACACS Configuration Key String Connection Timeout In the Key String field specify the authentication and encryption key for TACACS communications between the switch and the TACACS server The valid range is 0 128 characters The key must match the key configured on the TACACS server In the Connection Timeout field specify the maximum number of seconds allowed to establish a TCP connection between the managed switch and the TACACS server Click the APPLY button Your settings are applied to the system Manage Device Security 273 M4100 Series Managed Switch Configure TACACS Server Settings You can configure up to five TACACS servers with which the switch can communicate To configure a TACACS server 1 10 11 12 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Cli
413. n List HttpListName Manage Device Security 282 10 11 12 M4100 Series Managed Switch The Authentication List field displays the authentication list that HTTP is using Select the HTTP Access Disable or Enable radio button This specifies whether the switch can be accessed from a web browser If you choose to enable web mode you can manage the switch from a web browser The factory default is enabled Select the Java Mode Disable or Enable radio button This disables or enables the Java applet that displays a picture of the switch in the Device view tab of the System tab If you run the applet you can click the picture of the switch to select configuration screens instead of using the navigation tree on the left side of the screen The factory default is Enable In the HTTP Session Soft Timeout Minutes field set the inactivity time out for HTTP sessions The value must be in the range of 1 to 60 minutes The default value is 60 minutes The currently configured value is shown when the screen displays In the HTTP Session Hard Timeout Hours field set the hard time out for HTTP sessions This time out is unaffected by the activity level of the session The value must be in the range of 1 to 168 hours The default value is 24 hours The currently configured value is shown when the screen is displayed In the Maximum Number of HTTP Sessions field set the maximum allowable number of HTTP sessions The value
414. n button The web management interface menu displays Configure System Information 30 M4100 Series Managed Switch 7 Select System gt Management gt System CPU Status System CPU Status CPU Memory Status Total System Memory 126416 KBytes Available Memory 26780 KBytes CPU Utilization Memory Utilization Report status 27422720 alloc 102027264 CPU Utilization 300 Secs hardwareMonitorTask osapiTimer _interrupt_thread The following information displays Total System Memory The total memory of the switch in KBytes Available Memory The available memory space for the switch in KBytes e CPU Utilization Information Memory information task related information and percentage of CPU utilization per task View USB Device Information You can view USB device details such as manufacturer vendor product ID and status of the USB flash device gt To display the USB device information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Configure System Information 31 M4100 Series Managed Switch 5 Enter the user name and password The defa
415. n displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt MVR gt Advanced gt MVR Configuration MVR Configuration MVR Configuration MVR Running Disable Enable MVR Multicast Vian 1 1 to 4094 MVR Max Multicast Groups 256 MVR Current Multicast Groups 0 MVR Global query response time 5 1 to 100 MVR Mode compatible dynamic Select the MVR Running Disable or Enable radio button The factory default is Disable In the MVR Multicast VLAN field specify the VLAN on which MVR multicast data is received All source ports belong to this VLAN The value can be set in a range of 1 to 4094 The default value is 1 In the MVR Global query response time field set the maximum time to wait for the IGMP reports membership on a receiver port This time applies only to receiver port leave processing When an IGMP query is sent from a receiver port the switch waits for the default or configured MVR query time for an IGMP group membership report before removing the port from the multicast group membership The value is equal to the tenths of second The range is from 1 to 100 tenths The factory default is 5 tenths or one half Use the MVR Mode field to specify the MVR mode of operation The factory default is Compatible Click the REFRESH bu
416. n up to 255 characters in length The factory default is blank Enter the System Contact the name of the contact person for this switch You can use a contact name up to 255 characters in length The factory default is blank In the SNTP Mode menu select Enable or Disable This specifies the state of the SNTP client The default value is Enable and the local clock is used to get the time value Specify the address of the SNTP server Enter a text string of up to 64 characters containing the host name of an SNTP server The server address can be IPv4 IPv6 or a host name The host name resolves into an IP address each time an SNTP request is sent to it Select a Designated Source Interface from the list Possible values are Management VLAN or Service Port The source interface to be used for SNMP trap syslog DNS TACACS RADIUS sflow and SNTP applications By default Management VLAN is used as the source interface Note If you configure a management VLAN as the source interface you must enable routing mode for the selected VLAN Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure Initial Management VLAN Settings 1 gt To configure the initial management VLAN settings Prepare your computer with a static IP address in the 169 254 10
417. nagement VLAN For you to manage the device by using the web based configuration utility the device management IP address must be defined and known A management VLAN interface is created by default and it is assigned an IP address if a DHCP server is present If it fails to get an IP address a fallback address 169 254 100 100 255 255 0 0 is assigned to it Management VLAN is used as the default source interface for the syslog message log and SNMP client and so on The network interface is disabled by default The management VLAN is the logical interface used for in band connectivity with the switch through any of the switch s front panel ports The configuration parameters associated with the switch s management VLAN do not affect the configuration of the front panel ports through which traffic is switched or routed To access the switch over a network you must first configure it with IP information IP address subnet mask You can configure the IP information using any of the following e DHCP e Terminal interface through the EIA 232 port Configure System Information 35 M4100 Series Managed Switch Once you establish in band connectivity you can change the IP information using any of the following Terminal interface through the EIA 232 port e Terminal interface through Telnet SNMP based management e Web based management To configure the IPv4 management VLAN 1 Prepare your computer with a static IP addres
418. nagement interface menu displays 7 Select System gt Management gt System Information The System Information screen displays 8 Select System gt Management gt Time gt Time Configuration and select SNTP as the Clock Source System Switching Device View Initial Setup System Information Switch Statistics System CPU Status gt USB Device Information Loopback Interface gt Management Interfaces Time Time Configuration SNTP Server Configuration Summer Time Configuration DNS Green Ethernet Routing QoS Services PoE SNMP Time Configuration Time Configuration Clock Source Security Monitoring Maintenance Help Index LLDP ISDP Timer Schedule Local SNTP SNTP Global Configuration Client Mode Port Source Interface Unicast Poll Interval Broadcast Poll Interval Unicast Poll Timeout Unicast Poll Retry Time Zone Name Offset Hours Offset Minutes Disable Unicast Broadcast 123 5 Default 123 vlan 1 9 Use Client Mode to specify the mode of operation of SNTP Client An SNTP client can operate in one of the following modes Disable SNTP is not operational No SNTP requests are sent from the client nor are any received SNTP messages processed Unicast SNTP operates in a point to point fashion A unicast client sends a request to a designated server at its unicast address and expects a reply from which it can determine the time and optionally the
419. nation Action Logging Oseue ID Interface Interface Every prefix Prefix t4 refix Length Port No rales have ACL bean configured for this A 8 Use Rule ID to enter a whole number in the range of 1 to 511 to identify the rule An IP ACL can use up to 511 rules 9 Use Action to specify the action to take if a packet matches the rule s criteria Manage Device Security 362 10 11 12 13 14 15 16 17 M4100 Series Managed Switch The choices are permit or deny Use Logging to enable logging for this ACL rule subject to resource availability in the device If the Access List Trap flag is also enabled this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval A fixed 5 minute report interval is used for the entire system A trap is not issued if the ACL rule hit count is zero for the current interval This field is visible for a Deny action Use Assign Queue ID to specify the hardware egress queue identifier used to handle all packets matching this IPv6 ACL rule The valid range of queue IDs is 0 to 7 This field is visible for a Permit action Use Mirror Interface to specify the specific egress interface where the matching traffic stream is copied in addition to being forwarded normally by the device This field cannot be set if a redirect interface is already configured for the ACL rule This field is visible
420. nd the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt LLDP gt LLDP MED gt Interface Configuration LLDP MED Interface Configuration Interface Configuration 1 All Go To Port in Y J Transmit Type Length Values Extended Extended Link Med Operational Notification MED Network Location s Inventory SOARES Status Status Status Status Capabilities Polic Identification Power via Power vin Information MDI PSE MDI PD Oa a 1 ae I 3 L 1 rl LN Disable Disable Enable 0 2 Enable Disable Enable Enable Enable Enable Disable Disable Enable 0 3 Enable Disable Enable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Disable Disable Enable Enable Disable Enable Enable Enable Disable Disable Enable GoToport __ Qsoa loga BI The screen displays the link status whether the port is up or down and the operational status whe
421. nes match criteria used as a filter to determine if incoming traffic meets the requirements to be a member of the class Sets the DiffServ Class match criteria based on Traffic Type selection as below e VOIP Sets match criteria to UDP protocol HTTP Sets match criteria to HTTP destination port e FTP Sets match criteria to FTP destination port e Telnet Sets match criteria to Telnet destination port e Every Sets match criteria all traffic Creates a Diffserv Policy and adds it to the DiffServ Class created If Policing is set to YES then DiffServ Policy style is set to Simple Traffic that conforms to the Class Match criteria is processed according to the Outbound Priority selection Outbound Priority configures the handling of conforming traffic as below High Sets policing action to markdscp ef e Med Sets policing action to markdscp af31 e Low Sets policing action to send If Policing is set to NO then all traffic is marked as specified below High Sets policy mark ipdscp ef e Med Sets policy mark ipdscp af31 e Low Sets policy mark ipdscp be Each port selected is added to the policy created Use the DiffServ Wizard To use the DiffServ Wizard 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of
422. net for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt MLD Snooping gt Interface Configuration MLD Snooping Interface Configuration MLD Snooping Interface Configuration 1 2 LAGS All Go To Interface Go j Fast S Group Present Admin x Max Response ce 2 Leave Interface Membership s Expiration s Mode Time secs x Admin Interval secs Time secs Mode 1 0 1 Disable 10 1 0 2 Disable 10 1 0 3 Disable 10 1 0 4 Disable 10 1 0 5 Disable 10 1 0 6 Disable 10 1 0 7 Disable 10 1 0 8 Disable 10 1 0 9 Disable 10 1 0 10 Disable 10 Disable Disable Disable Disable Disable Disable Disable Disable Disable Disable P EN o I o I o I o Eo Configure Switching Information 175 10 11 12 13 M4100 Series Managed Switch The Interface field display all physical VLAN and LAG interfaces Select an interface In the Admin Mode list select Disable or Enabl
423. network and an external network such as the Internet They can also be used on a router positioned between two parts of the network to control the traffic entering or exiting a specific part of the internal network The added packet processing required by the ACL feature does not affect switch performance That is ACL processing occurs at wire speed Access lists are a sequential collection of permit and deny conditions This collection of conditions known as the filtering criteria is applied to each packet that is processed by the switch or the router The forwarding or dropping of a packet is based on whether or not the packet matches the specified criteria Traffic filtering requires the following two basic steps 1 Create an access list definition The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded Additionally you can assign traffic that matches the criteria to a particular queue or redirect the traffic to a particular port A default deny all rule is the last rule of every list 2 APPLY the access list to an interface in the inbound direction The managed switch allows ACLs to be bound to physical ports and LAGs The switch software supports MAC ACLs and IP ACLs MAC ACL Sample Configuration The following example shows how to create a MAC based ACL that permits Ethernet traffic from the Sales department on specified ports and denies all other traffic on
424. nfigure ACL interface bindings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt ACL gt Advanced gt IP Binding Configuration IP Binding Configuration Binding Configuration ACLID X Direction Inbound x Sequence Number 1 to 4294967295 Port Selection Table Interface Binding Status Sequence Interface Direction ACL Type ACL ID Name a Number 1 0 8 Inbound IP ACL Select an existing IP ACL from the ACL ID menu The packet filtering direction for ACL is Inbound which means that the IP ACL rules are applied to traffic entering the port Specify an optional sequence number to indicate the order of this access list relative to other access lists already assigned to this interface and direction A low number indicates high precedence order If a sequence number is already in use for this interface and direction the specified access list repl
425. nfigure LLDP global settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure System Information 90 7 10 11 12 M4100 Series Managed Switch Select System gt LLDP gt Global Configuration LLDP Global Configuration Global Configuration Transmit Interval Transmit Hold Multiplier Re Initialization Delay Notification Interval Use Transmit Interval to specify the interval in seconds to transmit LLDP frames The range is from 5 to 32768 secs The default value is 30 seconds Use Transmit Hold Multiplier to specify the multiplier on Transmit Interval to assign TTL The range is from 2 to 10 secs The default value is 4 Use Re Initialization Delay to specify the delay before re initialization The range is from 1 to 10 secs The default value is 2 seconds Use Notification Interval to specify the interval in seconds for transmission of
426. nformation is optional Source port information can be specified in two ways e Select the keyword other from the menu and specify the number of the port in the range from 0 to 65535 Manage Device Security 363 18 19 20 21 22 23 24 25 26 27 M4100 Series Managed Switch e Select one of the keywords from the list DOMAIN ECHO FTP FTPDATA WWW HTTP SMTP SNMP TELNET and TFTP Each of these values translates into its equivalent port number which is used as both the start and end of the port range Use Destination Prefix Prefix Length to enter prefix combined with prefix length to be compared to a packet s destination IP address as a match criteria for the selected IPv6 ACL rule The prefix length can be in the range 0 to 128 Use Destination L4 Port to specify a packet s destination Layer 4 port as a match condition for the selected IPv6 ACL rule Destination port information is optional Destination port information can be specified in two ways e Select the keyword other and specify the number of the port in the range from 0 to 65535 e Select one of the keywords from the list DOMAIN ECHO FTP FTPDATA WWW HTTP SMTP SNMP TELNET and TFTP Each of these values translates into its equivalent port number which is used as both the start and end of the port range Flow Label Flow label is 20 bit number that is unique to an IPv6 packet used by end stations to signify quality of serv
427. ng Routing QoS Security Monitoring Maintenance Help x Device View Services PoE SNMP LLDP ISDP Timer Schedule Initial Setup v System Information Switch Statistics gt System CPU Status gt USB Device Information Loopback Interface gt Management Interfaces Time DNS SDM Template Preference Green Ethernet System Information System Information Product Name System Name System Location System Contact Login Timeout Management Interface IPv4 Management VLAN Interface Management VLAN ID IPv4 Loopback Interface System Date System Up Time Current SNTP Sync Status System SNMP OID System MAC Address Supported Java Plugin Version Current SNTP Synchronized Time 8 Define the following fields System Name Enter a name to identify this switch You can use up to 255 alphanumeric characters The factory default is blank System Location Enter the location of this switch You can use up to 255 alphanumeric characters The factory default is blank System Contact Enter the contact person for this switch You can use up to 25 alphanumeric characters The factory default is blank Login Timeout Specify how many minutes of inactivity can occur on a serial port connection before the switch closes the connection Enter a number between 0 and 160 the factory default is 5 Entering O disables the time out Management Interface Select the management interface to be used as source interface f
428. ng System Utilities gt Upload File from Switch To view trap logs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Monitoring the System 386 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Monitoring gt Logs gt Trap Logs Trap Logs Trap Logs Number of Traps Since Last Reset Trap Log Capacity Number of Traps Since Log Last Viewed Trap Logs D 2 days 23 19 51 Spanning Tree Topology Change 0 Unit 1 2 days 23 19 51 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 23 19 50 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 23 19 49 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 23 19 48 Spanning Tree Topology Change 0 Unit 1 2 days 23 19 48 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 22 35 50 Spanning Tree Topology Change Received MSTID 0 Unit 1 Sl
429. nge The valid range is 6 40 and the value must be less than or equal to 2 Bridge Forward Delay 1 and greater than or equal to 2 Bridge Hello Time 1 The default value is 20 Bridge Hello Time secs Specifies the bridge Hello time for the Common and Internal Spanning Tree CST which indicates the amount of time in seconds a root bridge waits between configuration messages The value is fixed at 2 seconds The value must be less than or equal to Bridge Max Age 2 1 The default Hello time value is 2 Bridge Forward Delay secs Specifies the bridge forward delay time which indicates the amount of time in seconds a bridge remains in a listening and learning state before forwarding packets The value must be greater or equal to Bridge Max Age 2 1 The time range is from 4 seconds to 30 seconds The default value is 15 Configure Switching Information 151 M4100 Series Managed Switch e Spanning Tree Maximum Hops Specifies the maximum number of bridge hops the information for a particular CST instance can travel before being discarded The valid range is 1 127 Spanning Tree Tx Hold Count Configures the maximum number of BPDUs the bridge is allowed to send within the hello time window The default value is 6 The following table describes the nonconfigurable information displayed on the screen Table 44 CST Status Field Description Bridge identifier The bridge identifier for the CST It is made
430. ning trees This is achieved by ensure the following 1 The allocation of VIDs to FIDs is unambiguous 2 Each FID supported by the bridge is allocated to exactly one spanning tree instance Configuration Examples 443 M4100 Series Managed Switch The combination of VID to FID and then FID to MSTI allocation defines a mapping of VIDs to spanning tree instances represented by the MST Configuration Table With this allocation we ensure that every VLAN is assigned to one and only one MSTI The CIST is also an instance of spanning tree with a MSTID of 0 An instance might occur that has no VIDs allocated to it but every VLAN must be allocated to one of the other instances of spanning tree The portion of the active topology of the network that connects any two bridges in the same MST region traverses only MST bridges and LANs in that region and never bridges of any kind outside the region in other words connectivity within the region is independent of external connectivity MSTP Sample Configuration This example shows how to create an MSTP instance from a switch The example network has three different managed switches that serve different locations in the network In this example ports 1 0 1 1 0 5 are connected to host stations so those links are not subject to network loops Ports 1 0 6 1 0 8 are connected across switches 1 2 and 3 Ports 1 0 1 1 0 5 Connected to Hosts Ports 1 0 1 1 0 5 Connected to Hos
431. nter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button Configure Switching Information 128 M4100 Series Managed Switch The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt Port PVID Configuration Port PVID Configuration PVID Configuration 1 2 LAGS All Go To Interface 269 9 Acceptable Configured Current Current Interface PVID Frame Ingress Ingress Port Priority Co Lr EI EH DEED 1 0 1 1 0 2 1 0 3 1 0 4 1 0 5 1 0 6 1 0 7 1 0 8 7 1 0 9 E AI Hem Admit All Disable Disable Admit Al Disable Disable Admit All Disable Disable Admit Al Disable Disable Admit All Disable Disable Admit Al Disable Disable Admit All Disable Disable Admit Al Disable Disable mn c om omg nm mw 8 Click ALL to display information for all physical ports and LAGs 9 Select the check box next to the interfaces to configure You can select multiple interfaces to apply the same setting to the selected interfaces Select the check box in the heading row to apply the same settings to all interfaces 10 Use Interface to select the interface 11 Use PVID to specify the VLAN ID you
432. nto the IPSG database MAC Address Displays the MAC address for the binding entry IP Address Displays valid IP address for the binding entry Filter Type Filter type used on the interface One is source IP address filter type the other is source IP address and MAC address filter type Manage Device Security 338 M4100 Series Managed Switch Configure Dynamic ARP Inspection gt To configure dynamic ARP inspection 1 10 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt Dynamic ARP Inspection gt DAI Configuration Dynamic ARP Inspection Configuration Dynamic ARP Inspection Global Configuration Validate Source MAC Disable Enable Validate Destination MAC Q Disable Enable Validate IP Disable Enable Select the Validate Source MAC Disable or Enable radio button This specifies the DAI Source MAC Validation Mode If
433. ntrol DHCP Snooping Settings ios eee eer remet teme m ess 330 Configure Global DHCP Snooping Settings sees 330 Configure the DHCP Snooping Interface 0c eee eee eee 331 Configure DHCP Snooping Static Binding eese 332 Configure DHCP Snooping Dynamic Binding 00 008 333 Configure Persistent DHCP Snooping 00 e eee eee eee eee 334 View DHCP SNOOPING Statisties 34 acude t aeo ur nwt anda eed essais 335 Configure an IP Source Guard Interface eese 336 Configure IP Source Guard Binding 0 0c eee eee eee eee eee 337 Configure Dynamic ARP Inspection 00 c cece cence eee eee 339 Configure Dynamic ARC Inspection 0 cece eee eee ees 340 Configure a Dynamic ARC Inspection Interface sess 341 Conftigure aDAI ACE cde pdop br pide tgero UR RUP UOI ed bod 342 Configure a Dynamic ARP Inspection ACL Rule 00 000 343 View DAVStatistiGs seceEcbp pep REDPPCHO HOC O PH PPP anand geod seated FE s 343 Access Control List OVer Vie Wi sia Rad nbn elas at iet alb eot oz ire 9 EE HR Dd 345 Users ACL Wizald ess dese duri rna kapinta enee S Eee eS T AERE 345 Greate q MAC AG oorr RRPPPQEIQaEUS e one pspeldqeb6dd S Rs 347 Configure MAC RUES enr rrer rrr eR RE rr RARE 349 Configure ACL MAC Bihdilit ic icr ona ttn tecto niece 351 View or Delete MAC Bindings 0 e cece ee eee eee eee 353 Configure amp ACL vs 13 od oditaut ea oed atate aaa 3
434. o Eo Eo Io Select the physical or LAG interface Use Promiscuous Primary VLAN to set the primary VLAN ID for Promiscuous Association mode The range of the VLAN ID is 2 4093 Use Promiscuous Secondary VLAN ID s to set the secondary VLAN ID List for Promiscuous Association mode You can enter individual VLAN IDs ranges of VLAN IDs or a combination of both To specify a individual VLAN ID type a number such as10 To specify a VLAN ID range type numbers separated by a hyphen such as 10 13 To specify ia combination use commas to separate each entry for example 10 15 40 43 1000 1005 2000 The range of the VLAN ID is 2 4093 Note The VLAN ID List given in this field replaces the configured Secondary VLAN list in the association To delete the IP subnet based VLAN from the switch click the DELETE button 12 Click the APPLY button Manage Device Security 326 M4100 Series Managed Switch The changes are applied to the system Configuration changes take effect immediately Storm Control Overview A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port Forwarded message responses can overload network resources and or cause the network to time out The switch measures the incoming broadcast multicast unknown unicast packet rate per port and discards packets when the rate exceeds the defined value Storm control is enabled per interfa
435. o Green Mode s Watts Hours Loopback Interface Management Interfaces gt Time Reason Admin Down DNS Green Ethernet Green Ethernet Configuration Green Ethernet Interface Configuration Green Ethernet Detail Green Ethernet Summary Energy Detect Admin Mode Disable Operational Status Inactive Select the Interface for the data is to be displayed or configured Use the Energy Detect Admin Mode selection to enable or disable this option on the port With energy detect mode enabled when the port link is down the PHY automatically goes down for short period of time and then wakes up to check link pulses This allows Configure System Information 53 M4100 Series Managed Switch performing autonegotiation and saving power consumption when no link partner is present The The default value is Disabled 10 Use the Short Reach Admin Mode selection to enable or disable this option on the port With short reach mode enabled PHY is forced to operate in low power mode irrespective of the cable length The default value is Disabled 11 Use the EEE Admin Mode selection to enable or disable this option on the port With EEE mode enabled the port transitions to low power mode during link idle conditions The default value is Disabled 12 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unles
436. ode Disable Enable SSL Version 3 Disable Enable TLS Version 1 Disable Enable HTTPS Port 443 HTTPS Session Soft Timeout Minutes 60 HTTPS Session Hard Timeout Hours 24 Maximum Number of HTTPS Sessions 16 Authentication List HttpsListName Select the HTTPS Admin Mode Disable or Enable radio button This specifies the administrative mode of secure HTTP The currently configured value is shown when the screen is displayed The default value is Disable You can download SSL certificates only when the HTTPS Admin mode is disabled Select the SSL Version 3 Disable or Enable radio button This disables or enables Secure Sockets Layer Version 3 0 The currently configured value is shown when the screen is displayed The default value is Enable Select the TLS Version 1 Disable or Enable radio button This disables or enables Transport Layer Security Version 1 0 The currently configured value is shown when the screen is displayed The default value is Enable Use HTTPS Port to set the HTTPS port number The value must be in the range of 1 to 65535 Port 443 is the default value The currently configured value is shown when the screen is displayed Use HTTPS Session Soft Timeout Minutes to set the inactivity time out for HTTPS sessions The value must be in the range of 1 to 60 minutes The default value is 60 minutes The currently configured value is shown when the screen is displayed Use HTTPS Session Hard Timeo
437. of EAP response identity frames that were received by this authenticator EAP Response Frames Received EAP Request ID Frames Transmitted EAP Request Frames Transmitted This displays the number of valid EAP response frames other than resp ID frames that were received by this authenticator This displays the number of EAP request identity frames that were transmitted by this authenticator This displays the number of EAP request frames other than request identity frames that were transmitted by this authenticator Perform a Cable Test To perform a cable test 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Monitoring the System 379 M4100 Series Managed Switch Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Ports gt Cable Test Cable Test Cable Test 1 2 All Go To Port Disa Cable Status Cable Failure Location 1 0 1 Normal im im i o 2 Cable status t
438. of the following e Access mode is suitable for ports connected to end stations or end users Access ports participate only in one VLAN They accept both tagged and untagged packets but always transmit untagged packets e General mode enables custom configuration of a port The user configures the General port VLAN attributes such as membership PVID tagging ingress filter and so on using the settings on the Port Configuration screen By default all ports are initially configured in General mode e Trunk mode is intended for ports that are connected to other switches Trunk ports can participate in multiple VLANs and accept both tagged and untagged packets 10 Select from the menu to configure the Access VLAN ID Configure Switching Information 124 M4100 Series Managed Switch This is the access VLAN for the port and is valid only when the port switchport mode is Access 11 Select from the menu to configure the Native VLAN ID This is the native VLAN for the port and is valid only when the port switchport mode is Trunk 12 Configure the Trunk Allowed VLANs the set of VLANs of which the port can be a member when configured in Trunk mode By default this list contains all possible VLANs even if they are not yet created VLAN IDs are in the range 1 to 4093 Use a hyphen to specify a range or a comma to separate VLAN IDs in a list Spaces are not permitted A zero value clears allowed VLANs An All value set
439. of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security Management Security RADIUS Radius Configuration Radius Configuration Radius Configuration Current Server Address 192 168 10 100 Number of Configured Authentication Servers 1 Number of Configured Accounting Servers 0 Number of Named Authentication Server Groups 1 Number of Named Accounting Server Groups 0 Max Number of Retransmits Timeout Duration secs 5 mE Accounting Mode Disable Enable Radius Attribute 4 Mode Disable Enable The Current Server IP Address field is blank if no servers are configured see Configure a RADIUS Server on page 268 The switch supports up to three configured RADIUS servers If more than one RADIUS servers is configured the current server is the server configured as the primary server If no servers are configured as the primary server the current server is the most recently added RADIUS server In the Max Number of Retransmits field specify the value of the maximum number of times a request packet is retransmitted to the RADIUS server The valid range is 1 15 The default value is 4 Give consideration to maximum delay
440. ogin to the SFTP SCP server where the file is sent This field is visible only when the SFTP or SCP transfer mode is selected Maintenance 410 Vv M4100 Series Managed Switch 17 The last row of the table is used to display information about the progress of the file transfer Upload an HTTP File To upload an HTTP file 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance Upload HTTP File Upload HTTP File Upload HTTP File Upload File Type Archive m Image Name imagei v In the File Type menu specify what type of file to upload e Archive Specify archive STK code to retrieve from the operational flash Image Name Select one of the images from the list e Imaget Specify the code image to retrieve e Image2 Specify the code image to retrieve e CLI Banner Specify CLI Banner when you want retrieve the CLI banner file e Text C
441. ollowing table describes the nonconfigurable information displayed on the screen Table 95 IPv6 ACL Configuration Fed _ Deseription 00000 Current Number of ACL The current number of IP ACLs configured on the switch Maximum ACL The maximum number of IP ACLs that can be configured on the switch depending on the hardware The number of rules associated with the IP ACL Type The type is IPv6 ACL Configure IPv6 Rules You can configure the rules for the IPv6 access control lists ACLs that you created By default no specific value is in effect for any of the IPv6 ACL rules To configure IPv6 rules 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt ACL gt Advanced gt IPv6 Rules IPv6 Rules IPv6 Rules ACL Name esti v IPv6 ACL Rule Table Testi So So g __ Assign Mirror Redirect Match Source 0ce Source Desti
442. om an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field Manage Device Security 345 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt ACL gt ACL Wizard System Switching Routing QoS Security Monitoring Maintenance Help Index Management Security Access Port Authentication Traffic Control Control v ACL Wizard ACL Wizard Basic Advanced ACL Type Selection ACLType ACL Based on Destination MAC ACL Based on Destination MAC Match 3 Rule ID Action E Destination MAC Destination MAC Mask VLAN very Binding Configuration Port Selection Table Use ACL Type to specify the ACL type you are using to create the ACL You can select one type from 10 optional types e ACL Based on Destination MAC To create an ACL based on the destination MAC address destination MAC mask and VLAN e ACL Based on Source MAC To create an ACL based on the source MAC address source MAC mask and VLAN e ACL Based on Destination IPv4 To create an ACL based on the destination IPv4 address and IPv4 address mask e AC
443. on an Interface on page 257 All UDP packet flows destined to the 192 12 2 0 network with an IP source address from the 192 12 1 0 network that includes a Layer 4 source port of 4567 and destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3 On this network traffic from streaming applications uses UDP port 4567 as the source and 4568 as the destination This real time traffic is time sensitive so it is assigned to a high priority hardware queue By default data traffic uses hardware queue 0 which is designated as a best effort queue Also the confirmed action on this flow is to send the packets with a committed rate of 1000000 Kbps and burst size of 128 KB Packets that violate the committed rate and burst size are dropped Configuration Examples 439 M4100 Series Managed Switch 802 1X Local area networks LANs are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure or permit unauthorized users to attempt to access the LAN through equipment already attached In such environments it might be desirable to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services Port based network access control makes use of the physical characteristics of LAN infrastructures in order to provide a means of authenticating and authorizing devices attached to a LAN port that has point to
444. on displayed on the screen Table 64 Route Configuration Learned Routes Fed Description OSS Network Address The IP route prefix for the destination Subnet Mask Also referred to as the subnet network mask this indicates the portion of the IP interface address that identifies the attached network Protocol This field tells which protocol created the specified route The possibilities are as follows e Local e Static Route Type This field can be Connected or Static or Dynamic based on the protocol Next Hop Interface The outgoing router interface to use when forwarding traffic to the destination Next Hop IP Address The outgoing router IP address to use when forwarding traffic to the next router if any in the path toward the destination The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network Administrative cost of the path to the destination If no value is entered default is 1 The range is 0 255 Routing 204 M4100 Series Managed Switch Configure Advanced Routes To configure advanced routes 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP
445. on the screen Table 89 Storm control interface configuration Field Description Flow Control Enable or disable IEEE 802 3x flow control by selecting the corresponding line on the menu Flow control helps to prevent data loss when the port cannot keep up with the number of frames being switched When enabled the switch can send a PAUSE frame to stop traffic on a port if the amount of memory used by packets on the port exceeds a preconfigured threshold and responds to pause requests from partner devices The paused port does not forward packets for the period of time specified in the PAUSE frame When the PAUSE frame time elapses or the utilization returns to a specified low threshold the switch enables the port to again transmit frames The factory default is disabled For LAG interfaces Flow Control mode is displayed blank as flow control is not applicable Broadcast Storm Recovery Mode Enable or disable this option by selecting the corresponding line on the entry field When you specify Enable for broadcast storm recovery and the broadcast traffic on the specified Ethernet port exceeds the configured threshold the switch blocks discards the broadcast traffic The factory default is enable Broadcast Storm Recovery Level Type The broadcast storm recovery level as a percentage of link speed or as packets per second Broadcast Storm Recovery Level The threshold at which storm control activates The factory default is
446. on the screen Table 92 Dynamic ARP inspection statistics Field Description VLAN The enabled VLAN ID for which statistics are to be displayed DHCP Drops Number of ARP packets that were dropped by DAI because there is no matching DHCP snooping binding entry found DHCP Permits Number of ARP packets that were forwarded by DAI because there is a matching DHCP snooping binding entry found ACL Drops Number of ARP packets that were dropped by DAI because there is no matching ARP ACL rule found for this VLAN and the static flag is set on this VLAN ACL Permits Number of ARP packets that were permitted by DAI because there is a matching ARP ACL rule found for this VLAN Manage Device Security 344 M4100 Series Managed Switch Table 92 Dynamic ARP inspection statistics Field Description Bad Source MAC Number of ARP packets that were dropped by DAI because the sender MAC address in ARP packet didn t match the source MAC in Ethernet header Bad Dest MAC Number of ARP packets that were dropped by DAI because the target MAC address in ARP reply packet didn t match the destination MAC in Ethernet header Invalid IP Number of ARP packets that were dropped by DAI because the sender IP address in the ARP packet or target IP address in ARP reply packet is invalid Invalid addresses include 0 0 0 0 255 255 255 255 IP multicast addresses class E addresses 240 0 0 0 4 loopback addresses 127 0 0 0 8
447. onfiguration Specify configuration in text mode to retrieve the stored configuration Script File Specify script file to retrieve the stored configuration Error Log Specify error log to retrieve the system error persistent log sometimes referred to as the event log Trap Log Specify trap log to retrieve the system trap records Buffered Log Specify buffered log to retrieve the system buffered in memory log Maintenance 411 9 M4100 Series Managed Switch e Tech Support Specify Tech Support to retrieve the switch information needed for troubleshooting The factory default is Archive Use Local File Name to specify the local script file name to upload when the file type is Script File Upload a USB File To upload a file to USB 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Upload gt USB File Upload Upload File To USB
448. or DNS to indicate the format of the TFTP SFTP SCP Server Address field The factory default is IPv4 In the Server Address field type the IP address or DNS host name of the server in accordance with the format indicated by the server address type The factory default is the IPv4 address 0 0 0 0 In the Remote File Path field enter the path of the file to download You can enter up to 96 characters The factory default is blank In the Remote File Name field type the name of the file on the TFTP server to download You can enter up to 32 characters The factory default is blank Configure SSH To configure SSH 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 287 M4100 Series Managed Switch 7 Select Security gt Access gt SSH gt SSH Configuration SSH Configuration SSH Configuration SSH Admin Mode Disable Enable SSH Version 1 Disab
449. or SNMP trap syslog DNS TACACS RADIUS sflow and SNTP applications Possible values are as follows e Routing Interface Routing VLAN Routing Loopback Interface M4100 24G POE ProSafe 24 port Gigabit L2 Managed Switch with PoE 10 0 2 2 B1 0 1 1 5 0 to 160 mins VLAN 1 v 10 130 84 37 255 255 255 128 i Jan 1 10 28 38 1970 UTC 0 00 0 days 10 hours 28 mins 38 secs Other 1 3 6 1 4 1 4526 100 11 27 74 44 01 94 DB F8 1 6 SNTP Last Attempt Status Is Not Successful Configure System Information 23 M4100 Series Managed Switch Service Port Different Some applications that can be selected in this screen require that the source interface be configured separately In this case the Different option is shown By default VLAN 1 is used as the source interface 9 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 The following table describes the status information the System screen displays System Information Table 3 Status information in the System screen Fed Description 00000000 Product Name The product name of this switch IPv4 Management VLAN Interface The IPv4 address and mask assigned to the management VLAN interface Management VLAN ID The management VLAN ID of the switch Click the dis
450. ort on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Configure Switching Information 197 10 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt LAG gt LAG Configuration LAG Configuration LAG Configuration LAG Nai Descripti Admin Mod Mod STP Mode Static Mode Link Tray s cue eR me script jon min e p Ports eS G6 3 CO E NM lagi Enable 3 Src Dest MAC VLAN EType incoming port Enable Disable Disable mmm h lag 2 Enable 3 Src Dest MAC VLAN EType incoming port Enable Disable Disable DO ch3 lag3 Enable 3 Src Dest MAC VLAN EType incoming port Enable Disable Disable DO lo Fo Use LAG Name to enter the name you want assigned to the LAG You can enter any string of up to 15 alphanumeric characters A valid name must be specified for you to create the LAG Use the list to enable or disable Admin Mode When the LAG is disabled no traffic flows and LACPDUs is dropped but the links that form the LAG are not released The default is enable Use Hash Mode to select the load balancing mode used on a port channel LAG Traf
451. ort on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt LLDP gt LLDP MED gt Local Device Information Configure System Information 101 M4100 Series Managed Switch LLDP MED Local Device Information LLDP MED Interface Selection Interface 0 1 v Network Policies Information Media Unknown Tagged Application VLAN ID Priority DSCP Bit Bit Type Status Status Inventory Information Hardware Revision 0x0 Firmware Revision 1 Software Revision 10 14 19 6 Serial Number 23 Manufacturer Name Broadcom Corporation Model Name GSM7212P Asset Id Location Information Sub Type Location Information Coordinate Based Civic Address ELIN Extended PoE o Devi Type PSE Unknown High 0 Watts 8 Use Interface to select the ports on which LLDP MED frames can be transmitted The following table describes the LLDP MED Local Device Information fields Table 29 LLDP MED local device information Fed Description 000000000 O Network Policy Information Specifies if the network policy TLV is present in the LLDP frames Media Application
452. ot 0 Port 22 2 days 22 35 49 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 22 35 48 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 22 35 47 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 22 35 47 Spanning Tree Topology Change 0 Unit 1 2 days 22 35 47 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 15 17 Spanning Tree Topology Change 0 Unit 1 2 days 19 15 17 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 15 16 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot O Port 2 days 19 15 15 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 15 14 Spanning Tree Topology Change 0 Unit 1 2 days 19 15 14 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 10 49 Spanning Tree Topology Change 0 Unit 1 2 days 19 10 49 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 10 48 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port 2 days 19 10 47 Spanning Tree Topology Change Received MSTID 0 Unit 1 Slot 0 Port The screen also displays information about the traps that were sent 8 To clear the counters click the Clear Counters button This resets all statistics for the trap logs to the default values The following table describes the fields in the Trap Logs screen
453. ot be longer than 255 characters Use Retry Number to specify the number of times to retry sending DNS queries to the DNS server This number ranges from 0 to 100 The default value is 2 Use Response Timeout secs to specify the amount of time in seconds to wait for a response to a DNS query This time out ranges from 0 to 3600 The default value is 3 Specify the Source Interface that is used for DNS Possible values are as follows e Routing interface e Routing VLAN e Routing loopback interface Configure System Information 48 13 14 15 16 17 M4100 Series Managed Switch By default VLAN 1 is used as source interface To specify the DNS server to which the switch sends DNS queries enter an IP address in standard IPv4 dot notation in the DNS Server Address and click the ADD button The server appears in the list You can specify up to eight DNS servers The precedence is set in the order created To remove a DNS server from the list select the check box next to the server and click the DELETE button If no DNS server is specified the check box is global and deletes all the DNS servers listed Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately To add the specified DNS server to the List of DNS Servers click the ADD button Configuration changes take effect immediately To delete the specified DNS server from the list of
454. ower Consumption mW Percentage Power Saving Cumulative Energy Saving W H Loopback Interface gt Management Interfaces Time Green Features supported Unit on this unit Green Ethernet Energy Detect Configuration Green Ethernet URES interface Energy Detect Configuration Adesin Mode Green Ethernet SSS Detail 0 1 Disable Inactive Green Ethernet 0 2 Disable Inactive Summary Energy Detect Operational Status 0 3 Disable Inactive 0 4 Disable Inactive Click the REFRESH button to refresh the screen with the most current data from the switch The following table describes the Green Mode Statistics Summary nonconfigurable fields Table 14 Green Mode Statistics Summary Fed Description 0000000000000 Current Power Consumption mWatts Estimated power consumption by all ports in mWatts Percentage Power Saving 96 Percentage of power saved on all ports due to Green modes enabled Cumulative Energy Saving W H Cumulative Energy saved in Watts Hours due to all green modes being enabled Displays the Unit ID Green Features supported on this List of Green Features supported on the given unit that could be one or more of the following Energy Detect Energy Detect EEE Energy Efficient Ethernet LPI History EEE Low Power Idle History LLDP Cap Exchg EEE LLDP Capability Exchange Pwr Usg Est Power Usage Estimates Interface Interface for which data is d
455. page 247 Click the Class1 hyperlink to view the DiffServ Class Configuration screen for this class Configure the following settings for Class1 e Protocol Type UDP e Source IP Address 192 12 1 0 e Source Mask 255 255 255 0 e Source L4 Port Other and enter 4567 as the source port value e Destination IP Address 192 12 2 0 Configuration Examples 438 9 10 M4100 Series Managed Switch e Destination Mask 255 255 255 0 e Destination L4 Port Other and enter 4568 as the destination port value For more information see Configure a DiffServ Class on page 247 Click the APPLY button From the Policy Configuration screen create a new policy with the following settings e Policy Selector Policy1 Member Class Class1 For more information seeConfigure DiffServ Policy on page 254 Click the ADD button The new policy is added Click the Policy1 hyperlink to view the Policy Class Configuration screen for this policy Configure the policy attributes as follows e Assign Queue 3 e Policy Attribute Simple Policy e Color Mode Color Blind e Committed Rate 1000000 Kbps Committed Burst Size 128 KB e Confirm Action Send e Violate Action Drop For more information see Configure DiffServ Policy on page 254 From the Service Configuration screen select the check box next to interfaces g7 and g8 to attach the policy to these interfaces Click the APPLY button See Configure DiffServ Policy Settings
456. pecifies the port whose settings are displayed in the current table row This field indicates the configured control mode for the port Possible values are as follows e Force Unauthorized The authenticator port access entity PAE unconditionally sets the controlled port to unauthorized e Force Authorized The authenticator PAE unconditionally sets the controlled port to authorized e Auto The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant authenticator and the authentication server e MAC Based The authenticator PAE sets the controlled port mode to reflect the outcome of authentication exchanges between a supplicant an authenticator and an authentication server on a per supplicant basis This field indicates the control mode under which the port is actually operating Possible values are as follows e ForceUnauthorized e ForceAuthorized e Auto e MAC Based e N A If the port is in detached state it cannot participate in port access control Reauthentication Enabled This field shows whether reauthentication of the supplicant for the specified port is allowed The possible values are true and false If the value is true reauthentication occurs Otherwise reauthentication is not allowed Control Direction Protocol Version PAE Capabilities This displays the control direction for the specified port The control di
457. played Management VLAN ID value to jump to the VLAN screen IPv4 Loopback Interface The IPv4 address and mask assigned to the loopback interface System Date The current date System Up time The time in days hours and minutes since the last switch reboot Current SNTP Sync Status Displays the current SNTP sync status System SNMP OID The base object ID for the switch s enterprise MIB System Mac Address Universally assigned network address Supported Java plug in Version The supported version of Java plug in Current SNTP Synchronized Time Displays the SNTP synchronized time View the Switch Status You can view the fan status temperature status device status and switch statistics View the Fan Status You can view the status of the fans in all units These fans remove the heat generated by the power CPU and other chipsets and allow the chipsets work normally Configure System Information 24 M4100 Series Managed Switch gt To view the fan status 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default adm
458. point connection characteristics and of preventing access to that port in cases in which the authentication and authorization process fails In this context a port is a single point of attachment to the LAN such as ports of MAC bridges and associations between stations or access points in IEEE 802 11 wireless LANs The IEEE 802 11 standard describes an architectural framework within which authentication and consequent actions take place It also establishes the requirements for a protocol between the authenticator the system that passes an authentication request to the authentication server and the supplicant the system that requests authentication as well as between the authenticator and the authentication server The managed switches support a guest VLAN which allows unauthenticated users limited access to the network resources Note You can use QoS features to provide rate limiting on the guest VLAN to limit the network resources the guest VLAN provides Another 802 1X feature is the ability to configure a port to enable or disable EAPoL packet forwarding support You can disable or enable the forwarding of EAPoL when 802 1X is disabled on the device The ports of an 802 1X authenticator switch provide the means by which it can offer services to other systems reachable through the LAN Port based network access control allows the operation of a switch s ports to be controlled in order to ensure that access to its services is permitte
459. ponse Time field set the value for maximum response time of MLD snooping for the specified VLAN ID The valid range is 1 to Group Membership Interval 1 Its value should be less than the group membership interval value 13 In the Multicast Router Expiry Time field set the value for the multicast router expiry time of MLD snooping for the specified VLAN ID The valid range is 0 to 3600 Configure a Multicast Router To configure a multicast router 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Configure Switching Information 177 6 7 8 9 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt MLD Snooping gt Multicast Router Configuration Multicast Router Configuration Multicast Router Configuration 1 2 LAGS All Go To Interface Go jJ _ interface Multicast Router Disable Disable Disable Disable Disable Di
460. port to receive the packet can either reject it or insert a tag using its default VLAN ID A given port can handle traffic for more than one VLAN but it can support only one default VLAN ID Configure a Basic VLAN You can define VLAN groups stored in the VLAN membership table Each switch in the managed switch family supports up to 1024 VLANs Two VLANs are created by default VLAN 1 and VLAN 2 e VLAN 1 is the default VLAN of which all ports are members e VLAN 2 is the default Auto VoIP VLAN gt To configure a basic VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays N Cas 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 118 M4100 Series Managed Switch 7 Select Switching gt VLAN gt Basic gt VLAN Configuration VLAN Configuration Reset Reset Configuration Internal VLAN Configuration Internal VLAN Allocation Base 4093 Internal VLAN Allocation Policy As
461. r example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Monitoring the System 391 6 8 10 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Mirroring gt Multiple Port Mirroring System Switching Routing Security Monitoring Maintenance Help Index Ports Mirroring sFlow Multiple Port Mirroring RSPAN VLAN Global Configuration RSPAN Source Admin Mode True False Switch Configuration RSPAN Destination Switch Configuration i LAG CPU VLANS All Go To Interface L co J retrace Direction sane 0 1 None 0 2 None Destination Port None Y Source Interface Configuration You can select items in this screen using the following methods Select a Unit ID 1 2 3 and so on to display the physical ports of the selected unit e Select LAG to display a list of LAGs only e Select CPU to display a list of CPUs only e Select VLANs to display a list of available VLANs e Select All to display a list of all physical ports
462. r for the specified port within the CST It is made up from the port priority and the interface number of the port Port Forwarding State The forwarding state of this port Port Role Each MST bridge port that is enabled is assigned a Port Role for each spanning tree The port role is one of the following values Root Port Designated Port Alternate Port Backup Port Master Port or Disabled Port Designated Root Root bridge for the CST It is made up using the bridge priority and the base MAC address of the bridge Designated Cost Path cost offered to the LAN by the designated port Configure Switching Information 155 M4100 Series Managed Switch Table 46 CST port status continued Field Description Designated Bridge Bridge identifier of the bridge with the designated port It is made up using the bridge priority and the base MAC address of the bridge Designated Port Port Identifier on the designated bridge that offers the lowest cost to the LAN It is made up from the port priority and the interface number of the port Topology Change Acknowledge Identifies whether the next BPDU to be transmitted for this port would have the topology change acknowledgement flag set It is either True or False Edge port Indicates whether the port is enabled as an edge port It takes the value Enabled or Disabled Point to point MAC Derived value of the point to point status CST Regional Root Bridg
463. r name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Manage Device Security 354 6 9 M4100 Series Managed Switch Click the Login button The web management interface menu displays Select Security gt ACL gt Advanced gt IP ACL IP ACL IP ACL Configuration Current Number of ACL Maximum ACL IP ACL Table ram m ON NN 7 0 i0 Basic IP ACL The screen displays the current size of the ACL table and the maximum size of the ACL table The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs The maximum size is 100 The Current Number of ACL displays the current number of the all ACLs configured on the switch The Maximum ACL displays the maximum number of IP ACLs that can be configured on the switch depending on the hardware In the IP ACL field specify the ACL ID or IP ACL name The ID is an integer in the following range e 1 99 Creates an IP basic ACL which allows you to permit or deny traffic from a source IP address e 100 199 Creates an IP extended ACL which allows you to permit or deny specific types of Layer 3 or Layer 4 traffic from a source IP address to a destination IP address This type of ACL provides more granularity and filtering capabilities than the standard IP ACL e IP ACL Name Create a named IP ACL instead of configuring the IP exten
464. r name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure System Information 96 M4100 Series Managed Switch 7 Select System gt LLDP gt Remote Device Information LLDP Remote Device Information LLDP Interface Selection Interface Remote Device Information Remote ID Chassis ID Chassis ID Subtype Port ID Port ID Subtype System Name System Description Port Description System Capabilities Supported System Capabilities Enabled Time To Live Management Address Type Management Address 1 00 1E C9 AA AA E2 MAC Address Gi1 0 14 Interface Name 8 Use Interface to select the local ports that can receive LLDP frames The following table describes the LLDP Remote Device Information fields Table 27 LLDP remote device information Chassis ID Subtype Field Description Remote ID The Remote ID Chassis ID The chassis component associated with the remote system The source of the chassis identifier Port ID The port component associated with the remote system Port ID Subtype System Name The source of the port identifier The system name of the remote system System Description The description of the given port associated with the remote system Port Description System Capabilities Supported The description of the given port associated with the remote
465. r name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt Denial of Service Configuration Manage Device Security 297 10 11 12 M4100 Series Managed Switch Denial of Service Configuration Denial of Service Configuration Denial of Service Min TCP Header Size Denial of Service ICMPv4 Denial of Service Max ICMPv4 Packet Size Denial of Service ICMPv6 Denial of Service Max ICMPv6 Packet Size Denial of Service First Fragment Denial of Service ICMP Fragment Denial of Service SIP DIP Denial of Service SMAC DMAC Denial of Service TCP FIN amp URG amp PSH Denial of Service TCP Flag amp Sequence Denial of Service TCP Fragment Denial of Service TCP Offset Denial of Service TCP Port Denial of Service TCP SYN Denial of Service TCP SYN amp FIN m m M m m m m m o M o mo oo mo o o o o m o o o o Denial of Service UDP Port In the Denial of Service Min TCP Header Size field specify the Min TCP Har Size allowed If DoS TCP fragment is enabled the switch drops these packets e First TCP fragments with a TCP payload IP Payload Length IP Header Size lt Min TCP Header Size e Its range is 0 to 255 The default value is 20 Use Denial of Service ICMPv4 to enable ICMPv4 DoS prevention ICMPv4 DoS prevention causes the switch to drop ICMPv4 packets with a type set to ECHO REQ ping
466. r of ICMP Redirect messages received The number of ICMP Echo request messages received IcmpInEchoReps The number of ICMP Echo Reply messages received IcmpinTimestamps IcmpinTimestampReps The number of ICMP Timestamp request messages received The number of ICMP Timestamp Reply messages received IcmpinAddrMasks The number of ICMP Address Mask Request messages received IcmpinAddrMaskReps IcmpOutMsgs IcmpOutErrors The number of ICMP Address Mask Reply messages received The total number of ICMP messages that this entity attempted to send Note that this counter includes all those counted by icmpOutErrors The number of ICMP messages that this entity did not send due to problems discovered within ICMP such as a lack of buffers This value should not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram In some implementations there can be no types of error that contribute to this counter s value IcmpOutDestUnreachs IcmpOutTimeExcds The number of ICMP Destination Unreachable messages sent The number of ICMP Time Exceeded messages sent IcmpOutParmProbs The number of ICMP Parameter Problem messages sent IcmpOutSrcQuenchs IcmpOutRedirects The number of ICMP Source Quench messages sent The number of ICMP Redirect messages sent For a host this value is always zero since hosts do not send redirects
467. r router periodically query all end devices on the network to announce their multicast memberships This central device is the IGMP querier The IGMP query responses known as IGMP reports keep the switch updated with the current multicast group membership on a port by port basis If the switch does not receive updated membership information in a timely fashion it stops forwarding multicasts to the port where the end device is located You can configure and display information about IGMP snooping queriers on the network and separately on VLANs Configure Switching Information 170 M4100 Series Managed Switch gt To configure IGMP snooping querier 1 10 11 12 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Multicast gt IGMP Snooping gt Querier Configuration IGMP Snooping Querier Configuration Querier Configuration Querier Admin Mode
468. raps by selecting the corresponding radio button The factory default is enabled Configure System Information 86 10 11 12 13 14 M4100 Series Managed Switch Use Link Up Down to enable or disable activation of link status traps by selecting the corresponding radio button The factory default is enabled Use Multiple Users to enable or disable activation of multiple user traps by selecting the corresponding radio button The factory default is enabled This trap is triggered when the same user ID is logged in to the switch more than once at the same time either through Telnet or the serial port Use Spanning Tree to enable or disable activation of spanning tree traps by selecting the corresponding radio button The factory default is enabled Use ACL to enable or disable activation of ACL traps by selecting the corresponding radio button The factory default is disabled Use PoE to enable or disable activation of PoE traps by selecting the corresponding radio button The factory default is enabled Indicates whether PoE traps are sent Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately View All MIBs Supported by the Switch gt To view supported MIBs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your comput
469. rce interface 9 Click the APPLY button Your changes take effect immediately Click the REFRESH button to refresh the screen to show the latest sFlow agent information Configure the sFlow Receiver gt To configure the sFlow receiver 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Monitoring the System 400 10 11 M4100 Series Managed Switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt sFlow gt Advanced gt sFlow Receiver Configuration sFlow Receiver Configuration sFlow Receiver Configuration eo Receiver i Maximum Receiver Pat Datagram Index i u Datagram Size Address Version 1 o False 1400 0 0 0 0 6343 5 2 o False 1400 0 0 0 0 6343 5 3 o False 1400 0 0 0 0 6343 5 rr o False 1400 0 0 0 0 6343 5 5 o False 1400 0 0 0 0 6343 5 6 o False 1400 0 0 0 0 6343 5 7 o False 1400 0 0 0 0 6343 5 8 o False 1400 0 0 0 0 6343 5 Receiver Owner The ent
470. re System Information 112 M4100 Series Managed Switch 7 Select System gt ISDP gt Advanced gt Statistics ISDP Statistics ISDP Statistics ISDP Packets Received ISDP Packets Transmitted ISDPv1 Packets Received ISDPv1 Packets Transmitted ISDPv2 Packets Received ISDPv2 Packets Transmitted ISDP Bad Header ISDP Checksum Error ISDP Transmission Failure ISDP Invalid Format ISDP Table Full ISDP IP Address Table Full The following table describes the ISDP Statistics fields Table 35 ISDP statistics Field Description ISDP Packets Received ISDP Packets Transmitted ISDPv1 Packets Received Displays the ISDP packets received including ISDPv1 and ISDPv2 packets Displays the ISDP packets transmitted including ISDPv1 and ISDPv2 packets Displays the ISDPv1 packets received ISDPv1 Packets Transmitted ISDPv2 Packets Received ISDPv2 Packets Transmitted Displays the ISDPv1 packets transmitted Displays the ISDPv2 packets received Displays the ISDPv2 packets transmitted ISDP Bad Header ISDP Checksum Error ISDP Transmission Failure Displays the ISDP bad packets received Displays the number of the checksum error Displays the number of the transmission failure ISDP Invalid Format ISDP Table Full ISDP Ip Address Table Full Displays the number of the invalid format ISDP packets received Displays the table size of the ISDP table Displays the table size of the ISD
471. re the remote file name to store the database when remote is selected Use Write Delay to configure the maximum write time to write the database into local or remote The range of Write Delay is 15 to 86400 View DHCP Snooping Statistics To view DHCP snooping statistics T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 335 M4100 Series Managed Switch 7 click Security gt Control gt DHCP Snooping gt Statistics DHCP Snooping Statistics DHCP Snooping Statistics 1 2 LAGS All DHCP S er Msgs Interface MAC Verify Failures Client Ifc Mismatch uds id Received 1 0 1 0 1 0 2 1 0 3 1 0 4 1 0 5 1 0 6 1 0 7 1 0 8 EN o mE o LO Oo LN Oo NEMO Lb O LO Click CLEAR to clear all interfaces statistics Click the REFRESH button to refresh the data on the screen with the latest statistics The following table describes the nonconfigurable
472. re your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Maintenance 417 M4100 Series Managed Switch 7 Select Maintenance gt Download gt USB File Upload Download File From USB Download File From USB File Type Archive Image Name imagel USB File 8 Use File Type to specify what type of file to upload e Archive Specify archive STK code to retrieve from the operational flash e Text Configuration to specify configuration in text mode to retrieve the stored configuration The factory default is Archive 9 Use Image Name to select one of the images from the list e Image1 Specify the code image1 to retrieve e Image2 Specify the code image to retrieve 10 Use USB File to give a name along with path for the file to upload You can enter up to 32 characters The factory default is blank 11 Click the APPLY button Configuration changes take effect immediately
473. rection dictates the degree to which protocol exchanges take place between supplicant and authenticator This affects whether the unauthorized controlled port exerts control over communication in both directions disabling both incoming and outgoing frames or just in the incoming direction disabling only the reception of incoming frames This field is not configurable on some platforms This field displays the protocol version associated with the selected port The only possible value is 1 corresponding to the first version of the 802 1x specification This field is not configurable This field displays the port access entity PAE functionality of the selected port Possible values are Authenticator or Supplicant This field is not configurable Manage Device Security 307 Table 83 Port summary M4100 Series Managed Switch Field Description Authenticator PAE State This field displays the current state of the authenticator PAE state machine Possible values are as follows Initialize Disconnected Connecting Authenticating Authenticated Aborting Held ForceAuthorized ForceUnauthorized Backend State Vlan Assigned This field displays the current state of the backend authentication state machine Possible values are as follows Request Response Success Fail Timeout Initialize Idle This field displays the VLAN ID assigned to the selected interface by the authenticator This field is displa
474. red field If no time is specified the schedule does not start running Time End The time of the day when the schedule operation is terminated e Date Start The schedule start date If no date is specified the schedule starts running immediately e Date Stop The schedule termination date If no end date selected the schedule operates indefinitely Configure System Information 115 M4100 Series Managed Switch 10 Use the Recurrence Pattern to show with what period the event repeats If recurrence is not needed a timer schedule should be triggered just once then set Date Stop as equal to Date Start The following recurrence values are available e Daily The timer schedule works with daily recurrence The Every WeekDay selection means that the schedule is triggered every day from Monday to Friday The Every Day s selection means that the schedule is triggered every defined number of days If the number of days is not specified then the schedule is triggered every day e Weekly The timer schedule works with weekly recurrence Every Week s Define the number of weeks when the schedule is triggered If number of weeks is not specified then the schedule is triggered every week WeekDay Specify the days of week when the schedule operates e Monthly The timer schedule works with monthly recurrence Show the day of the month when the schedule is triggered The Every Month s selection means that the schedule is tr
475. rent sessions Configure the Console Port gt To configure the console port 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Manage Device Security 295 10 11 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt Console Port Console Port Console Port Serial Port Login Timeout minutes 5 0 to 160 Baud Rate bps 115200 wv Character Size bits 8 Flow Control Disable Stop Bits E Parity None Login Authentication List defaultList Enable Authentication List enableList In the Serial Port Login Timeout minutes field enter a number between 0 and 160 This specifies how many minutes of inactivity can occur on a serial port connection before the switch closes the connection The factory default is 5 Entering 0 disables the time out In the Baud Rate bps menu select the default baud rate for the serial port connection You c
476. repare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt IGMP Snooping gt Querier VLAN Configuration IGMP Snooping Querier VLAN Configuration IGMP Snooping Querier VLAN Configuration uerier Operational Q A Last Last i Election Querier VLAN Operational Operational Max VLAN ID e Querier Querier Participate Address State Version Response Address Version Mode Emm CI IMENENNENENENM 100 Enable 192 168 10 2 Disable 8 To create a new VLAN ID for IGMP snooping select New Entry from the VLAN ID field and complete the following fields You can also set pre configurable snooping querier parameters Configure Switching Information 172 M4100 Series Managed Switch e VLAN ID Specifies the VLAN ID for which the IGMP snooping querier is to be enabled Querier Election Participate Mode Enable or disabl
477. ress field The default IP address of the switch is 169 254 100 100 The Login screen displays B 5 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Access HTTPS gt Certificate Download Certificate Download Certificate Download File Type SSL Trusted Root Certificate PEM File Transfer Mode TFTP iw Server Address Type IPv4 Server Address 10 27 9 99 Remote File Path projects fastpath amyc Remote File Name netgear_0710 stk 8 Inthe File Type list specify the type of file e SSL Trusted Root Certificate PEM File SSL Trusted Root Certificate file PEM Encoded Manage Device Security 286 10 11 12 13 M4100 Series Managed Switch e SSL Server Certificate PEM File SSL Server Certificate file PEM Encoded e SSL DH Weak Encryption Parameter PEM File SSL Diffie Hellman Weak Encryption Parameter file PEM Encoded SSL DH Strong Encryption Parameter PEM File SSL Diffie Hellman Strong Encryption Parameter file PEM Encoded In the Transfer Mode menu specify the protocol to use to transfer the file e TFTP Trivial File Transfer Protocol e SFTP Secure File Transfer Protocol e SCP Secure Copy Protocol In the Server Address Type menu specify either IPv4 IPv6
478. ress is used when no address is configured on the VLAN on which query is being sent The supported IPv6 formats are x x X X X X X X and xx 10 In the MLD Version field specify the MLD protocol version used in periodic MLD queries 11 In the Query Interval secs field specify the time interval in seconds between periodic queries sent by the snooping querier The query interval must be a value in the range of 1 and 1800 The default value is 60 12 In the Querier Expiry Interval secs field specify the time interval in seconds after which the last querier information is removed The querier expiry interval must be a value in the range of 60 and 300 The default value is 60 The following table describes the nonconfigurable information displayed on the screen Table 54 MLD Snooping Querier Configuration Field Description VLAN Ids Enabled For MLD Snooping Querier Displays VLAN IDs enabled for MLD snooping querier Configure an MLD Snooping Querier VLAN gt To configure a MLD snooping querier VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Configure Switching Information 180 10 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch
479. ress of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt Authentication List HTTP Authentication List HTTP Authentication List HTTP Authentication List NIIT ERN RN RR RR 7 httpList Select the check box for a list name Use the numbered lists 1 2 3 4 to select the method to appear in the selected authentication login list If you select a method in the first list that does not time out such as local no other method is tried even if you specified more than one method The options are as follows e Local The user s locally stored ID and password are used for authentication e Radius The user s ID and password are authenticated using the RADIUS server instead of locally e TACACS The user s ID and password are authenticated using the TACACS server Manage Device Security 279 M4100 Series Managed Switch HTTPS Authentication List You can configure an HTTPS list A login list specifies the authentication method s used to validate the switch or port access through HTTPS for the users associated with the list The default list is httpsList To configure an HTTPS a
480. ress of the switch is 169 254 100 100 The Login screen displays Manage Device Security 310 5 6 7 8 M4100 Series Managed Switch Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Traffic Control gt MAC Filter gt MAC Filter Configuration MAC Filter Configuration MAC Filter Config MAC Filter Create Fitter v VLAN ID MAC Address pL Source Port Members Port 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 Destination Port Members In the MAC Filter list select Create Filter This is the list of MAC address and VLAN ID pairings for all configured filters To change the port mask s for an existing filter select the entry to change To add a new filter select Create Filter from the top of the list 9 From the VLAN ID list select the VLAN to use with the MAC address to fully identify packets you want filtered You can change this field only when the Create Filter option is selected from the MAC Filter menu 10 In the MAC Address list specify the MAC address of the filter in the format 00 01 1A B2 53 4D You can change this field when you select the Create Filter option You cannot define filters for
481. revention causes the switch to drop ICMP fragmented packets The factory default is disabled Use Denial of Service SIP DIP to enable SIP DIP DoS prevention This causes the switch to drop packets with a source IP address equal to the destination IP address The factory default is disabled Use Denial of Service SMAC DMAC to enable SMAC DMAC DoS prevention This causes the switch to drop packets with a source MAC address equal to the destination MAC address The factory default is disabled Use Denial of Service TCP FIN amp URG amp PSH to enable TCP FIN amp URG amp PSH DoS prevention This causes the switch to drop packets with TCP flags FIN URG and PSH set and TCP Sequence Number 0 The factory default is disabled Use Denial of Service TCP Flag amp Sequence to enable TCP flag DoS prevention This causes the switch to drop packets with TCP control flags set to 0 and TCP sequence number set to 0 The factory default is disabled Use Denial of Service TCP Fragment to enable TCP fragment DoS prevention This causes the switch to drop packets e First TCP fragments that has a TCP payload IP Payload Length IP Header Size Min TCP Header Size e The factory default is disabled Use Denial of Service TCP Offset to enable TCP offset DoS prevention This causes the switch to drop packets with a TCP header Offset 1 The factory default is disabled Use Denial of Service TCP Port to enable TCP port DoS prevention This cau
482. ription SSS O High Power Enabled when particular port supports High Power Mode Max Power The maximum power in Watts that can be provided by the port Class The Class defines the range of power a PD is drawing from the system Class definitions 0 0 44 12 95 watts 1 0 44 3 83 watts 2 0 44 6 48 watts 3 0 44 12 95 watts 4 0 44 25 5 watts Output Voltage Current voltage being delivered to device in volts Output Current Current being delivered to device in mA Output Power Current power being delivered to device in Watts Configure System Information 82 M4100 Series Managed Switch Table 24 PoE Port Configuration continued Field Description Status The status is the operational status of the port PD detection e Disabled No power being delivered e DeliveringPower Power is being drawn by the device Fault Indicates a problem with the port Test The port is in test mode e otherFault The port is idle due to an error condition e Searching The port is not in one of the above states Fault Status Describes the error description when the PSE port is in fault status No Error indicates that the PSE port is not in any error state MPS Absent indicates that the PSE port has detected an absence of main power supply Short indicates that the PSE port has detected a short circuit condition Overload indicates that the PD connected to the PSE port had tried to prov
483. rivate VLAN Association Configuration Private VLAN Association mE Primary VLAN Secondary VLAN s Isolated VLAN Community VLAN s Use Primary VLAN to select the primary VLAN ID of the domain This is used to associate secondary VLANs to the domain Use Secondary VLAN s to display all the statically created VLANs excluding the primary and default VLANs This field is used to associate VLANs to the selected primary VLAN To delete the IP subnet based VLAN from the switch click the DELETE button Click the APPLY button Your changes are applied to the system Configuration changes take effect immediately Manage Device Security 322 Yv M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 88 Private VLAN Association Configuration Field Description Isolated VLAN Displays the isolated VLAN associated with the selected primary VLAN Community VLAN s Displays the list of community VLAN s associated with the selected primary VLAN Configure the Private VLAN Port Mode To configure the private VLAN port mode 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The def
484. rotocols including ICMP IpOutRequests The total number of IP datagrams that local IP user protocols including ICMP supplied to IP in requests for transmission This counter does not include any datagrams counted in ipForwDatagrams IpOutDiscards The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination but that were discarded such as for lack of buffer space This counter includes datagrams counted in ipForwDatagrams if any such packets met this discretionary discard criterion IpOutNoRoutes The number of IP datagrams discarded because no route could be found to transmit them to their destination Note that this counter includes any packets counted in ipForwDatagrams that meet this no route criterion This includes any datagrams that a host cannot route because all of its default gateways are down IpReasmTimeout The maximum number of seconds that received fragments are held while they are awaiting reassembly at this entity IpReasmReqds The number of IP fragments received that needed to be reassembled at this entity IpReasmOKs The number of IP datagrams successfully re assembled IpReasmFails The number of failures detected by the IP re assembly algorithm for whatever reason timed out errors and so on This is not necessarily a count of discarded IP fragments since some algorithms can lose track of the number of fragments by combining them as they
485. rs are also assigned to the defaultList until you specifically assign them to a different list Two default lists are present enableList and enableNetList To configure the enable authentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Manage Device Security 276 10 11 12 M4100 Series Managed Switch The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt Authentication List gt Enable Authentication List Enable Authentication List Enable Authentication List 2 Cc M CUPS SEE I ww bw N HW A 7 enableList Enable None enableNetList Enable None If you are creating a new list type the name in the List Name field The name can be up to 15 alphanumeric characters long and is not case sensitive In the numbered lists 1 2 3 4 5 select the method to appear first in the selected authentication enable list The options are as follows
486. rt traffic statistics on the switch gt To view port statistics 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt Ports gt Port Statistics Port Statistics Status i LAGS All Go To Interface 0 Total Packets E Time Packets Broadcast Transmit since transmitted Collision Interface received x Packets Packet counters z h z without Frames without received Errors last Errors Errors cleared 0 1 mI i 789757 0 299442 1677536 o 109676 0 o 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec 31 day 9 hr 51 min 9 sec w o o 420083 o o IE o IBI o IE o IB Oo IE o
487. rval in hundredths of a second between the most recent Accounting Response and the Accounting Request that matched it from this RADIUS accounting server Accounting Requests Displays the number of RADIUS Accounting Request packets sent not including retransmissions Accounting Retransmissions Displays the number of RADIUS Accounting Request packets retransmitted to this RADIUS accounting server Accounting Responses Displays the number of RADIUS packets received on the accounting port from this server Malformed Accounting Responses Displays the number of malformed RADIUS Accounting Response packets received from this server Malformed packets include packets with an invalid length Bad authenticators and unknown types are not included as malformed accounting responses Bad Authenticators Displays the number of RADIUS Accounting Response packets that contained invalid authenticators received from this accounting server Pending Requests Displays the number of RADIUS Accounting Request packets sent to this server that did not yet time out or receive a response Timeouts Displays the number of accounting time outs on this server Unknown Types Displays the number of RADIUS packets of unknown type that were received from this server on the accounting port Packets Dropped Displays the number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason TACACS
488. rval seconds ARP packets are dropped If this value is N A there is no limit The value can set to 1 which means N A The range of Rate Limit is 0 300 The factory default is 15 pps packets per second Use Burst Interval secs to specify the burst interval value for rate limiting purpose on this interface If the rate limit is None burst interval has no meaning and displays as N A The factory default is 1 second Configure a DAI ACL To configure a dynamic ARP inspection ACL T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt Dynamic ARP Inspection gt DAI ACL Configuration Dynamic ARP Inspection ACL Configuration DAI ACL Configuration Use Name to create new ARP ACL for DAI To add a new DAI ACL click the ADD button To remove the currently selected DAI ACL from the switch configuration click the DELETE button Manage
489. rver Certificate File PEM Encoded e Use SSL DH Weak Encryption Parameter PEM File to specify the SSL Diffie Hellman Weak Encryption Parameter File PEM Encoded e Use SSL DH Strong Encryption Parameter PEM File to specify the SSL Diffie Hellman Strong Encryption Parameter File PEM Encoded The factory default is Image1 Note To download SSH key files SSH must be administratively disabled and there can be no active SSH sessions Note To download SSL PEM files SSL must be administratively disabled and there can be no active SSH sessions Use Image Name to select one of the images from the list e Image1 Specify the code image to retrieve e Image2 Specify the code image t to retrieve Use Transfer Mode to specify what protocol to use to transfer the file e TFTP Trivial File Transfer Protocol e SFTP Secure File Transfer Protocol e SCP Secure Copy Protocol Use Server Address Type to specify either IPv4 IPv6 or DNS to indicate the format of the TFTP SFTP SCP Server Address field Maintenance 414 12 13 14 15 16 17 M4100 Series Managed Switch The factory default is IPv4 Use Server Address to enter the IP address of the server in accordance with the format indicated by the server address type The factory default is the IPv4 address 0 0 0 0 Use Remote File Path to enter the path of the file to download The file path cannot include the following symbols lt gt
490. s 9 Use Confirm Console Password to enter the password again to confirm that you entered it correctly 10 Use Telnet Password to enter the Telnet password Passwords are a maximum of 64 alphanumeric characters 11 Use Confirm Telnet Password to enter the password again to confirm that you entered it correctly 12 Use SSH Password to enter the SSH password Passwords are a maximum of 64 alphanumeric characters 13 Use Confirm SSH Password to enter the password again to confirm that you entered it correctly 14 Click the APPLY button Your settings are saved Configure RADIUS Settings RADIUS servers provide additional security for networks The RADIUS server maintains a user database which contains per user authentication information The switch passes information to the configured RADIUS server which can authenticate a user name and password before authorizing use of the network RADIUS servers provide a centralized authentication method for the following e Web access e Access control port 802 1 X You can add information about one or more RADIUS servers on the network gt To configure RADIUS 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Manage Device Security 266 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address
491. s Available Publications and Online Help Register Your Product Understanding the User Interfaces Web Management Interface Overview Use a Web Browser to Access the Switch and Log In Using SNMP Note For more information about the topics covered in this manual visit the support website at support netgear com Note Firmware updates with new features and bug fixes are made available from time to time at downloadcenter netgear com Some products can regularly check the site and download new firmware or you can check for and download new firmware manually If the features or behavior of your product does not match what is described in this guide you might need to update your firmware 11 M4100 Series Managed Switch Available Publications and Online Help A number of publications are available for your managed switch at downloadcenter netgear com including the following publications e M4100 Chassis Hardware Installation Guide e M4100 Switch Module Installation Guide e M4100 Software Setup Manual e M4100 User Manual this document You can also access this document online when you are logged in to the switch Select Help gt Online Help gt User Guide e M4100 Command Line Interface Manual Refer to the M4100 Command Line Interface Manual for information about the command structure This provides information about the CLI commands used to configure the switch It provides CLI descriptions syntax and default values
492. s 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt Management Security gt Authentication List gt Dot1x Authentication List Dotix Authentication List Dotix Authentication List E dotixList 8 Select the check box for the dot1x list 9 Select the method to appear first in the selected authentication login list The options are as follows IAS The users ID and password in Internal Authentication Server Database are used for authentication e Local The user s locally stored ID and password are used for authentication e RADIUS The user s ID and password are authenticated using the RADIUS server instead of locally e None The user is authenticated without a user name and password Manage Device Security 278 M4100 Series Managed Switch Configure an HTTP Authentication List You can configure an HTTP list An HTTP list specifies the authentication method s used to validate the switch or port access through HTTP To configure an HTTP authentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP add
493. s A valid name must be specified for you to create the LAG Use LAG Description to enter the description string to be attached to a LAG It can be up to 64 characters in length In the Admin Mode list select Enable or Disable When the LAG is disabled no traffic flows and LACPDUS are dropped but the links that form the LAG are not released The factory default is enabled Use Link Trap to specify whether a trap is sent when link status changes The factory default is enable which causes the trap to be sent Use STP Mode to enable or disable the Spanning Tree Protocol administrative mode associated with the LAG The possible values are as follows e Disable Spanning tree is disabled for this LAG Enable Spanning tree is enabled for this LAG Use Static Mode to select Enable or Disable Configure Switching Information 200 15 M4100 Series Managed Switch When the LAG is enabled it does not transmit or process received LACPDUs for example the member ports do not transmit LACPDUs and all the LACPDUs it can receive are dropped The factory default is Disable Use Hash Mode to select the load balancing mode used on a port channel LAG Traffic is balanced on a port channel LAG by selecting one of the links in the channel over which to transmit specific packets The link is selected by creating a binary pattern from selected fields in a packet and associating that pattern with a particular link Src MAC VLAN ET
494. s IP protocol is a match condition for the selected IP ACL rule The possible values are ICMP IGMP IP TCP and UDP TCP Flag Specify that a packet s TCP flag is a match condition for the selected IP ACL rule The TCP flag values are URG ACK PSH RST SYN FIN Each TCP flag has these possible values w and can be set separately e Ignore A packet matches this ACL rule whether or not the TCP flag in this packet is set e Set A packet matches this ACL rule if the TCP flag in this packet is set e Clear A packet matches this ACL rule if the TCP flag in this packet is not set Source IP Address Enter an IP address using dotted decimal notation to be compared to a packet s source IP address as a match criteria for the selected IP ACL rule Source IP Mask Specify the IP Mask in dotted decimal notation to be used with the Source IP address value Source L4 Port Specify a packet s source Layer 4 port as a match condition for the selected extended IP ACL rule This is an optional configuration The possible values are DOMAIN ECHO FTP FTPDATA WWW HTTP SMTP SNMP TELNET and TFTP Each of these values translates into its equivalent port number which is used as both the start and end of the port range Manage Device Security 359 M4100 Series Managed Switch e Destination IP Address Enter an IP address using dotted decimal notation to be compared to a packet s destination IP address as a match criteria for the selected
495. s all VLANs in the range 1 to 4093 13 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 The following table describes the nonconfigurable data that the Switchport Configuration screen displays Table 37 Switchport Mode Configuration Field Description Native VLAN Tagging When VLAN tagging is enabled if the trunk port receives untagged frames it forwards them on the native VLAN with no VLAN tag When VLAN tagging is disabled if the trunk port receives untagged frames it includes the native VLAN ID in the VLAN tag when forwarding Configure VLAN Membership To configure VLAN membership 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure Switching Information 125 M4100 Series Managed Switch 6 Click the Login button The web
496. s attempted Port Status This field shows the authorization status of the specified port The possible values are Authorized Unauthorized and N A If the port is in detached state the value is N A because the port cannot participate in port access control View the Client Summary To view the client summary 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Port Authentication gt Advanced gt Client Summary Client Summary Client Summary 1 2 All Supplicant H A Port MAC Session Filter VLAN VLAN Session Termination Time ID ID Assigned Timeout Action 1 2 All Manage Device Security 309 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 84 Client summary Fed Deseription 000000 Port The port to be displayed User Nam
497. s configured In the Admin Mode list select Enable or Disable The default value is Enable 10 Click the APPLY button Your settings are saved Configure System Information 110 M4100 Series Managed Switch View ISDP Neighbors To view ISDP neighbors 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt ISDP gt Advanced gt Neighbor ISDP Neighbor ISDP Neighbor Search By Device Device Id v Entry Device Port Hold Advertisement Last Software Interf Add 9 bility Platf ID merece rass pay Or ID Time Version Changed Version Time 2TH11959F002C 0 1 Router GSM7212P 0 1 178 4 Days 01 33 46 10 19 5 39 2TG12151F0010 0 3 Router GSM5212P 0 1 168 2 Days 21 53 44 7 0 0 0 The following table describes the ISDP Neighbor fields Table 34 ISDP Neighbor Field Description Device ID The device ID of the ISDP neighbor Interface The
498. s field is used to configure the start hours Minutes This field is used to configure the start minutes and time e Week This field is used to configure the end week e Day This field is used to configure the end day e Month This field is used to configure the end month e Hours This field is used to configure the end hours e Minutes This field is used to configure the end minutes Offset This field is used to configure the recurring offset Zone This field is used to configure the Zone 9 Click the APPLY button The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 Configure DNS You can configure the information about DNS servers that the network uses and how the switch operates as a DNS client gt To configure DNS 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Configure System Information 47 10 11 12 M4100 Series Managed Switch The default admin user nam
499. s if the VLAN were a router port When a port is enabled for bridging default rather than routing all normal bridge processing is performed for an inbound packet which is then associated with a VLAN Its MAC destination address MAC DA and VLAN ID are used to search the MAC address table If routing is enabled for the VLAN and the MAC DA of an inbound unicast packet is that of the internal bridge router interface the packet is routed An inbound multicast packet is forwarded to all ports in the VLAN plus the internal bridge router interface if it was received on a routed VLAN Since a port can be configured to belong to more than one VLAN VLAN routing might be enabled for all of the VLANs on the port or for a subset VLAN routing can be used to allow more than one physical port to reside on the same subnet It could also be used when a VLAN spans multiple physical networks or when additional segmentation or security is required This section shows how to configure the NETGEAR switch to support VLAN routing A port can be either a VLAN port or a router port but not both However a VLAN port can be part of a VLAN that is itself a router port Routing 223 M4100 Series Managed Switch Use the VLAN Static Routing Wizard The VLAN Static Routing Wizard creates a VLAN adds selected ports to the VLAN The VLAN Wizard gives the user the option to add the selected ports as a link aggregation groups LAGs The wizard does the following
500. s in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt Management Interfaces gt IPv4 Management VLAN Configuration System Switching Device View gt Initial Setup gt System Information Switch Statistics gt System CPU Status gt USB Device Information Loopback Interface Management Interfaces gt IPv6 Network Neighbor Table IPv4 Management VLAN Configuration Time Routing QoS Security Services PoE SNMP LLDP ISDP Monitoring Maintenance Help Index Timer Schedule IPv4 Management VLAN Configuration IPv4 Management VLAN Configuration VLAN ID iw Routing Mode Enable Disable Configuration Method DHCP Manual IP Address Subnet Mask MAC Address 74 44 01 94 DB FA Routing Interface Status Up Management VLAN ID 1 Configure System Information 36 M4100 Series Managed Switch The screen displays the MAC address assigned to the VLAN rout
501. s name at a time to display its statistics If no class is associated with the chosen policy then nothing displays in the list Offered Packets Octets A count of the total number of packets octets offered to all class instances in this service policy before their defined DiffServ treatment is applied This is the overall count per interface per direction Discarded Packets Octets A count of the total number of packets octets discarded for all class instances in this service policy for any reason due to DiffServ treatment This is the overall count per interface per direction Sent Packets Octets A count of the total number of packets octets forwarded for all class instances in this service policy after their defined DiffServ treatments were applied In this case forwarding means the traffic stream was passed to the next functional element in the data path such as the switching or routing function of an outbound link transmission element This is the overall count per interface per direction Configure Quality of Service 260 Manage Device Security This chapter covers the following topics Management Security Settings Configure RADIUS Settings TACACS Set Up a Login Authentication List Configure Management Access Manage Certificates Manage Telnet Download a Certificate Manage Telnet Port Authentication Overview Traffic Control Configure a Private Group Control DHCP Snooping Settings Configure an IP Source G
502. s you save the configuration See Save Configuration on page 405 You can click the CLEAR button to clear the configuration and reset the statistics to their default values You can click the REFRESH button to update the screen The following table describes the Port Green Mode Statistics nonconfigurable fields Table 13 Port Green Mode Statistics Fed beseription 000 Cumulative Energy Saved on this The cumulative energy saved due to all Green Modes enabled on this port due to Green Mode s Watts port in Watts Hours Hours Operational Status Indicates whether Energy Detect Admin Mode is currently operational Enabled Reason The reason for the current operational status of Energy Detect Admin Mode Operational Status Indicates whether Short Reach Admin Mode is currently enabled Reason The reason for the current operational status of Short Reach Admin Mode Rx Low Power Idle Event Count This field displays the total number of Rx LPI events since EEE counters were last cleared The value increments each time the MAC RX enters LP IDLE state Rx Low Power Idle Duration The duration of the Rx LPI state in 10us increments Shows the total uSec duration of Rx LPI since the EEE counters were last cleared Tx Low Power Idle Event Count Shows the total number of Tx LPI events since EEE counters were last cleared The value increments each time MAC TX enters LP IDLE state Tx Low Power Idle Duration T
503. sable Disable Disable Disable Select the interface In the Multicast Router list select Enable or Disable for the selected interface Configure a Multicast Router VLAN To configure a multicast router VLAN 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Configure Switching Information 178 7 8 9 M4100 Series Managed Switch Select Switching gt Multicast gt MLD Snooping gt Multicast Router VLAN Configuration Multicast Router VLAN Configuration Multicast Router VLAN Configuration Interface 1 0 1 m Multicast Router VLAN Configuration a ON RR REN Select the interface In the VLAN ID list select the VLAN ID 10 In the Multicast Router list select Enable or Disable This enables or disables the multicast router for the VLAN ID Configure the MLD Snooping Querier You can configure the parameters for the MLD
504. screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button Configure Switching Information 120 M4100 Series Managed Switch The web management interface menu displays 7 Select Switching gt VLAN gt VLAN Configuration Reset Reset Configuration Internal VLAN Configuration Internal VLAN Allocation Base Internal VLAN Allocation Policy VLAN Configuration Basic gt VLAN Configuration 4093 5 Ascending 9 Descending m VLAN ID VLAN Name VLAN Type Make Static DL mm NM default 2 Default Disable Dynamic AUTO VoIP Disable 8 Use VLAN ID to specify the VLAN Identifier for the new VLAN The range of the VLAN ID is 1 to 4093 9 Use the optional VLAN Name field to specify a name for the VLAN It can be up to 32 alphanumeric characters long including blanks The default is blank VLAN ID 1 always has a name of Default 10 To add a new VLAN to the switch click the ADD button 11 To delete a selected VLAN from the switch click the DELETE button The following table describes the nonconfigurable information displayed on the screen Table 36 VLAN Configuration Field Description VLAN Type This field identifies the type of the VLAN that you are configuring You cannot change the type of the default VLAN VLAN ID 1 itis always type Default
505. screens are context sensitive For example if the IP Addressing screen is open the help topic for that screen displays if you click the Help button You can connect to the online support site at netgear com when you are logged in to the switch To access the online support link 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Get Started 15 M4100 Series Managed Switch 7 Select Help gt Online Help gt Support To connect to the NETGEAR support site for managed switch click the APPLY button Web Management Interface Device View The Device View is a Java applet that displays the ports on the switch This graphic provides an alternate way to navigate to configuration and monitoring options The graphic also provides information about device ports current configuration and status tables and feature components To use Device View 1 Prepare your compu
506. seceeseanes 182 Configure Advanced MVR Settings 0 cece e eee eee eee eee 183 Configure MYR GrOUPS iie rente re RR rrr PE IPC e CE Roa 185 Configure an MVR Interface uro soo eeis esr mes ke e pere p REY 186 Configure MVR Group Membership sse eese 187 VIEW MANR StaUISTICS s o2 pna a dt exi UT ame aura game bg ame 188 Manage MAC Addresses neue ne EEEE EOE heh hn 50505 189 View the MAC Address Table 0 cece cece eee eee eee 190 Configure Dynamic Addresses Aging Interval 00 000 192 Configure a Static MAC Address 20 c cece sees 193 Configure Port Settings uou men d rrsaoa asa ua wr uM egeat eq dA E ede 194 Entera Port Description 125 od o3 eene ne bob E Ea ba dd ds 196 Link Aggregation Group Overview sees 197 Configure LAG SettiNGS 4 eost pre ker re rh RES 197 Configure LAG Membership ne rece ce e tec ege na tre degens 199 Chapter 4 Routing Manage the Routing Tables 3 22 3 oec oe et d reb b b PR Pa eda 203 Configure Basic ROUtes osebile scope me rar x EI e ER eyes 203 Configure Advanced Routes 0 cee cece eee eee 205 Configure Route Preferences 0 0 e cece eee ene eae 207 Configure IP SERUM GS c 5 4 aides a oro ooh Pre nro orte i ea 208 VIEW IP Statistics sees cede tees ser Bou o Y rese aa E due Et sane 210 Configure Advanced IP Settings 0 cece eee eee e eee 214 VIEW IP Statistics osea hh RERERRE A P
507. ser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Monitoring the System 381 M4100 Series Managed Switch 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Monitoring gt Logs gt Buffered Logs Buffered Logs Buttered Logs Ademen States vito install contrel c 3523 1881 v DHCP option resolved 1 TFTP IP address 10 9 11 20 auto install centrel c 2026 1752 Autoinsta Waiting for retry timeout auto jnstall contrel c 3523 1751 S DHCP option resolved TFTP IP address 10 9 11 20 all contrel c 2026 1750 v Autolnsta hing for rary imatt 1749 vs DHCP opti TFT IP address 10 9 11 20 pring Tree Topology Change O Unit 1 gt 23 20 00 10 ut ology Change Received MSTID 0 Unit 1 Stot O Port 22 gt JAN 03 2319 59 10 27 n Tree Topology Change Received MSTID 0 Unt 1 Slot Port 22 lt 13 gt JAN 03 23 19 58 10 27 Spenning Tree Topology Change Received MSTID 0 Unit 1 fiot 0 Port 22 auto install control c 3 TFT 1P address 10 9 11 20 to inet rtrolel SS Aut Wai retry tenet TFTP 19 address 10 9 1120 9 for retry teneo TFT 1P address 10 9 11 20 _contrele 2026 1736 v Autolnatall Waiting for retry timeout control c 3523 1735 DIC option resolved T
508. server for the last received valid packet Reference Clock Id Specifies the reference clock identifier of the server for the last received valid packet Server Mode Specifies the mode of the server for the last received valid packet Unicast Server Max Entries Specifies the maximum number of unicast server entries that can be configured on this client Unicast Server Current Entries Specifies the number of current valid unicast server entries configured for this client Broadcast Count Specifies the number of unsolicited broadcast SNTP messages that were received and processed by the SNTP client since last reboot Configure System Information 42 M4100 Series Managed Switch Configure SNTP Servers You can view and modify information for adding and modifying Simple Network Time Protocol SNTP servers To configure SNTP servers 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface
509. ses the switch to drop packets with TCP source port equal to TCP destination port The factory default is disabled Use Denial of Service TCP SYN to enable TCP SYN DoS prevention This causes the switch to drop packets with TCP flags SYN set The factory default is disabled Use Denial of Service TCP SYN amp FIN to enable TCP SYN amp FIN DoS prevention This causes the switch to drop packets with TCP flags SYN and FIN set The factory default is disabled Manage Device Security 299 M4100 Series Managed Switch 24 Use Denial of Service UDP Port to enable UDP Port DoS prevention This causes the switch to drop packets with UDP source port equal to UDP destination port The factory default is disabled Port Authentication Overview In port based authentication when 802 1X is enabled globally and on the port successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions At any given time only one supplicant is allowed to attempt authentication on a port in this mode Ports in this mode are under bidirectional control This is the default authentication mode The 802 1X network has three components Authenticators Specify the port that is authenticated before permitting system access Supplicants Specify the host connected to the authenticated port requesting access to the system services Authentication Server Specifies the external server for
510. shown a confirmation screen after you click the button Reset All User Passwords to Factory Defaults You can reset all user passwords to their factory defaults To reset the passwords 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Reset Password Reset Password Reset Password Reset Check this box and click APPLY below to reset all user passwords Maintenance 408 M4100 Series Managed Switch Select the check box Click the APPLY button All user passwords reset to their factory default values All changes you made are lost even if you saved the configuration Upload Files You can upload files from the switch Upload a File from the Switch to the TFTP Server gt To upload a file from the switch to the TFTP server 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 1
511. specified 10 Define the criteria to associate with a DiffServ class Match Every This adds to the specified class definition a match condition whereby all packets are considered to belong to the class e Reference Class This lists the class es that can be assigned as reference class es to the current class e Protocol Type This lists the keywords for the Layer 4 protocols from which one can be selected The list includes other as an option for the remaining values Source Prefix Length This is a valid source IPv6 prefix to compare against an IPv6 packet The prefix is always specified with the prefix length The prefix can be entered in the range of 0 to FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF and the prefix length can be entered in the range of 0 to 128 Source L4 Port This lists the keywords for the known source Layer 4 ports from which one can be selected The list includes other as an option for the unnamed ports e Destination Prefix Length This is a valid destination IPv6 prefix to compare against an IPv6 packet The prefix is always specified with the prefix length The prefix can be entered in the range of 0 to FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF and the prefix length can be entered in the range of 0 to 128 Configure Quality of Service 253 M4100 Series Managed Switch e Destination L4 Port This lists the keywords for the known destination Layer 4 ports from which one can be selected The list incl
512. ssword Enable Password Configuration Enable Password Configuration Password eeccceee Confirm Password ececcece Use Password to specify a password Passwords are a maximum of 64 alphanumeric characters Use Confirm Password to enter the password again to confirm that you entered it correctly Click the APPLY button Your settings are saved Configure a Line Password To configure a line password 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Manage Device Security 265 M4100 Series Managed Switch 7 Select Security gt Management Security gt Line Password Line Password Configuration Line Password Configuration Console Password Confirm Console Password Telnet Password Confirm Telnet Password SSH Password Confirm SSH Password 8 Use Console Password to enter the console password Passwords are a maximum of 64 alphanumeric character
513. st one group is configured Table 87 Private Group Membership Field Description Group Name This field identifies the name for the private group you selected It can be up to 24 non blank characters long Group Mode This field identifies the mode of the private group you selected The modes are as follows community e isolated The group mode can be either isolated or community When in isolated mode the member port in the group cannot forward its egress traffic to any other members in the same group By default the mode is community mode In community mode each member port can forward traffic to other members in the same group but not to members in other groups Configure Protected Ports If a port is configured as protected it does not forward traffic to any other protected port on the switch but it forwards traffic to unprotected ports You can configure the ports as protected or unprotected You need read write access privileges to modify the configuration To configure protected ports 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Manage Device Security 319 10 11 12
514. stimated length and the longest estimated length Unknown is displayed if the cable length could not be determined The cable length is displayed only if the cable status is Normal Failure Location The estimated distance in meters from the end of the cable to the failure location The failure location is only displayed if the cable status is Open or Short Logs Overview The switch generates messages in response to events faults or errors occurring on the platform as well as changes in configuration or other occurrences These messages are stored locally and can be forwarded to one or more centralized points of collection for monitoring purposes or long term archival storage Local and remote configuration of the logging capability includes filtering of messages logged or forwarded based on severity and generating component View or Configure Buffered Logs This log stores messages in memory based upon the settings for message component and severity On stackable systems this log exists only on the top of stack platform Other platforms in the stack forward their messages to the top of stack log gt To view or configure buffered logs 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web brow
515. switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Configure Switching Information 143 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Auto VoIP gt OUI based OUI Table OUI Table OUI Table 00 01 E3 SIEMENS 00 03 68 CISCOi 00 12 43 CISCO2 00 0F E2 H3C 00 60 69 NITSUKO 00 D0 1E PINTEL 00 E0 75 VERILINK 00 E0 BB 3COM 7 00 04 0D AVAYAL 00 1B 4F AVAYA2 8 Use Telephony OUl s to select the VoIP OUI prefix to be added in the format AA BB CC Up to 128 OUls can be configured 9 Use Description to enter the description for the OUI The maximum length of description is 32 characters The following OUls are present in the configuration by default e 00 01 E3 SIEMENS e 00 03 6B CISCO1 e 00 12 43 CISCO2 e 00 0F E2 H3C e 00 60 B9 NITSUKO e 00 D0 1E PINTEL e 00 E0 75 VERILINK e 00 E0 BB 3COM e 00 04 0D AVAYA1 e 00 1B 4F AVAYA2 10 To add a new telephony OUI entry click the ADD button 11 To delete a created entry click the DELETE button 12 Click the APPLY button Configure Switching Information
516. switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure Switching Information 148 7 10 11 12 13 14 M4100 Series Managed Switch Select Switching gt STP gt Advanced gt STP Configuration STP Configuration STP Configuration Spanning Tree Admin Mode Disable Enable Force Protocol Version IEEE 802 1d IEEE 802 1w IEEE 802 15 Configuration Name 00 04 06 02 04 07 Configuration Revision Level 0 Forward BPDU while STP Disabled Disable Enable BPDU Guard Disable Enable BPDU Filter Disable Enable Configuration Digest Key 0xac36177f50283cd4b83821d8ab26de62 Configuration Format Selector 0 STP Status MST ID 0 Select the Spanning Tree Admin Mode Disable or Enable radio button This specifies whether spanning tree operation is enabled on the switch Select a Force Protocol Version radio button This specifies the Force Protocol Version parameter for the switch The options are IEEE 802 1d IEEE 802 1w and IEEE 802 1s In the Configuration Name field specify the identifier used to identify the configuration currently being used It can be up to 32 alphanumeric characters In the Configuration Revision Level field specify the identifier
517. system The system capabilities of the remote system System Capabilities Enabled The system capabilities of the remote system that are supported and enabled Time to Live Management Address Type Management Address The Time To Live value in seconds of the received remote entry The type of the management address e Management Address specifies the advertised management address of the remote system e Type specifies the type of the management address Configure System Information 97 M4100 Series Managed Switch View LLDP Remote Device Inventory To view LLDP remote device inventory 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt LLDP gt LLDP gt Remote Device Inventory LLDP Remote Device Inventory LLDP Remote Device Inventory Search By Interface Remote Device ID Management Address MAC Address System Name Remote
518. t if any The Key Generation in Progress field displays which key is being generated if any RSA DSA or None Select an RSA Keys Management radio button e None This is the default selection e Generate RSA Keys Select this option to begin generating the RSA host keys To generate SSH key files SSH must be administratively disabled and there can be no active SSH sessions Manage Device Security 289 M4100 Series Managed Switch e Delete RSA Keys Select this option to delete the corresponding RSA key file if it is present 9 Select a DSA Keys Management radio button e None This is the default selection e Generate DSA Keys Select this option to begin generating the DSA host keys To generate SSH key files SSH must be administratively disabled and there can be no active SSH sessions e Delete DSA Keys Select this option to delete the corresponding DSA key file if it is present 10 Click the APPLY button The host key file starts downloading Note To download SSH key files SSH must be administratively disabled and there can be no active SSH sessions 11 To refresh the screen and to show the latest SSH sessions click the REFRESH button Download Host Keys You can transfer a file to or from the switch To download host keys 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your co
519. t filtering direction for the ACL ACL Type The type of ACL assigned to the selected interface and direction ACL ID Name The ACL number in the case of an IP ACL or ACL name in the case Sequence Number The sequence number signifying the order of specified ACL relative to of a named IP ACL and IPv6 ACL identifying the ACL assigned to the selected interface and direction other ACLs assigned to the selected interface and direction View or Delete VLAN ACL Bindings You can view or delete the VLAN ACL bindings To view or delete VLAN ACL bindings in the VLAN Binding Table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password Manage Device Security 367 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt ACL gt Advanced gt VLAN Binding Table ACL Vlan Binding Table VLAN Binding Configuration tj VLAN ID Sequence Number ACL Type ACL ID 8 To delete a VLAN
520. t speed and duplex mode In autonegotiation mode the duplex mode and speed are set from the autonegotiation process Physical Status Link Status Link Trap Indicates the port speed and duplex mode Indicates whether the link is up or down Indicates whether or not the port sends a trap when link status changes Packets RX and TX 64 Octets The total number of packets including bad packets received or transmitted that were 64 octets in length excluding framing bits but including FCS octets Packets RX and TX 65 127 Octets The total number of packets including bad packets received or transmitted that were between 65 and 127 octets in length inclusive excluding framing bits but including FCS octets Packets RX and TX 128 255 Octets The total number of packets including bad packets received or transmitted that were between 128 and 255 octets in length inclusive excluding framing bits but including FCS octets Monitoring the System 373 M4100 Series Managed Switch Table 100 Port Detailed Statistics screen fields continued Field Description Packets RX and TX 256 511 Octets Packets RX and TX 512 1023 Octets Packets RX and TX 1024 1518 Octets Packets RX and TX 1519 2047 Octets Packets RX and TX 2048 4095 Octets Packets RX and TX 4096 9216 Octets Octets Received The total number of packets including bad packets received or transmitted that were between 25
521. ter to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select QoS gt DiffServ gt Advanced gt IPv6 Class Configuration IPv6 Class Configuration IPv6 Class Name ipv6Class All Configure Quality of Service 252 M4100 Series Managed Switch 8 Click the class name for an existing class to go to the IPv6 DiffServ Class Configuration section of the screen IPv6 Class Configuration IPv6 Class Information Class Name ipv6Class Class Type All IPv6 DiffServ Class Configuration Match Every Any zl Reference Class VoIP Tz Protocol Type Source Prefix Length Source L4 Port domain 0 to 65535 Destination Prefix Length Destination L4 Port domain Flow Label IP DSCP af11 z Class Summary 9 Specify the Class Name Displays the name for the configured DiffServ class The Class Type field displays the DiffServ class type You can only select the class type when you are creating a new class After you create a class this becomes a nonconfigurable field displaying the class type you
522. ter with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Device View Device View TO Ed uBuuupsusuz The port coloring indicates whether a port is currently active Green indicates that the port is enabled red indicates that an error occurred on the port or that the link is disabled NETGEAR PROSAFE M4100 12GF Get Started 16 M4100 Series Managed Switch 8 Click a port to see a menu that displays statistics and configuration options NETOEAR Port Configuration Cable Test Port Detailed Statistics Port Summary Statatics Double VLAN Tunneling Spanning Tree Port Configuration Spanreng Tree Port Configuration Status VLAN Port Configuration GARP Por Configuration Por Socur y Interface Configuration Port Socurity Static Port Socurty Dynamic Port Security Violation Status IP Interface Configuration Port Access Control Configurabon Port Access Control Stabst
523. terface Specifies the unit slot port for the interfaces Transmit Total Specifies the number of LLDP frames transmitted by the LLDP agent on the corresponding port Receive Total Specifies the number of valid LLDP frames received by this LLDP agent on the corresponding port while the LLDP agent is enabled Discards Specifies the number of LLDP TLVs discarded for any reason by the LLDP agent on the corresponding port Errors Specifies the number of invalid LLDP frames received by the LLDP agent on the corresponding port while the LLDP agent is enabled Age outs Specifies the number of age outs that occurred on a given port An age out is the number of times the complete set of information advertised by a particular MAC Service Access Point MSAP was deleted from tables associated with the remote entries because information timeliness interval had expired TLV Discards Specifies the number of LLDP TLVs discarded for any reason by the LLDP agent on the corresponding port TLV Unknowns Specifies the number of LLDP TLVs received on the local ports that were not recognized by the LLDP agent on the corresponding port TLV MED Specifies the total number of LLDP MED TLVs received on the local ports TLV 802 1 Specifies the total number of LLDP TLVs received on the local ports that are of type 802 1 TLV 802 3 Specifies the total number of LLDP TLVs received on the local ports that are of type 802 3 Configure System
524. terface settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Configure System Information 51 10 11 M4100 Series Managed Switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select System gt Management gt Green Ethernet gt Green Ethernet Interface Configuration Green Ethernet Interface Configuration Green Ethernet Interface Configuration Go To Interface eo J Specify the Go To Interface by entering the Interface in unit slot port format and click the Go button The entry corresponding to the specified Interface is selected Select the Port Use the Auto Power Down Mode selection to enable or disable this option The factory default is enable When the port link is down the PHY automatically goes down for short period of time and then wakes up to check link pulses This allows performing autonegotiation and saving power consumption when no link partner is present Click the APP
525. ternatively the IP Precedence value of the packet can be marked re marked e Marking CoS 802 1p Sets the 3 bit priority field in the first only 802 1p header to a specified value when packets are transmitted for the traffic class An 802 1p header is inserted if it does not already exist This is useful for assigning a Layer 2 priority level based on a DiffServ forwarding class for example DSCP or IP Precedence value definition to convey some QoS characteristics to downstream switches that do not routinely look at the DSCP value in the IP header e Policing A method of constraining incoming traffic associated with a particular class so that it conforms to the terms of the TCS Special treatment can be applied to out of profile Configuration Examples 437 M4100 Series Managed Switch packets that are either in excess of the conformance specification or are nonconformant The DiffServ feature supports the following types of traffic policing treatments actions e drop The packet is dropped e mark cos The 802 1p user priority bits are re marked and forwarded e mark dscp The packet DSCP is re marked and forwarded e mark prec The packet IP precedence is re marked and forwarded e send The packet is forwarded without DiffServ modification Color Mode Awareness Policing in the DiffServ feature uses either color blind or color aware mode Color blind mode ignores the coloration marking of the incoming packet Color awar
526. tes the portion of the IP interface address that identifies the attached network Protocol This field tells which protocol created the specified route The possibilities are as follows e Local e Static Route Type This field can be either default or static If creating a default route all that must be specified is the next hop IP address otherwise each field must be specified Next Hop Interface The outgoing router interface to use when forwarding traffic to the destination Next Hop IP Address The outgoing router IP address to use when forwarding traffic to the next router if any in the path toward the destination The next router is always one of the adjacent neighbors or the IP address of the local interface for a directly attached network Routing 206 M4100 Series Managed Switch Table 65 Route Configuration Learned Routes Table Field Description Preference The preference is an integer value from 0 to 255 You can specify the preference value sometimes called administrative distance of an individual static route Among routes to the same destination the route with the lowest preference value is the route entered into the forwarding database By specifying the preference of a static route the user controls whether a static route is more or less preferred than routes from dynamic routing protocols The preference also controls whether a static route is more or less preferred than other static routes
527. that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt VLAN gt Advanced gt MAC Based VLAN Mac Based VLAN Group Configuration MAC Based VLAN Configuration E MAC Address VLAN ID DE M EMEN D4 B2 9D 3C 90 43 8 The MAC Address fields display valid MAC addresses that can be bound to a VLAN ID These fields are configurable only when a MAC Based VLAN is created Configure Switching Information 130 M4100 Series Managed Switch 9 Use VLAN ID to specify a VLAN ID in the range of 1 to 4093 10 To add a MAC address to VLAN mapping click the ADD button 11 To delete a MAC address to VLAN mapping click the DELETE button Configure a Protocol Based VLAN Group You can use a protocol based VLAN to define filtering criteria for untagged packets By default if you do not configure any port IEEE 802 1Q or protocol based VLANs untagged packets are assigned to VLAN 1 You can override this behavior by defining either port based VLANs or protocol based VLANs or both Tagged packets are always handled according to the IEEE 802 1Q standard and are not included in protocol based VLANs If you assign a port to a protocol based VLAN for a specific protocol untagged frames received on that port for that protocol are assigned the protocol based VLAN ID Untagged frames received on the port for other protocols are assigned the Port VLAN ID either the d
528. the APPLY button Monitoring the System 397 M4100 Series Managed Switch The settings are sent to the switch Configuration changes take effect immediately These changes are not retained across a power cycle unless you save the configuration See Save Configuration on page 405 sFlow Overview You can configure sFlow agent information sFlow agents sFlow receivers and sFlow interfaces Configure sFlow Agent Information gt To configure sFlow agent information 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Monitoring gt sFlow gt Basic gt sFlow Agent Information System Switching Routing Security Monitoring Maintenance Help Index Ports Logs Mirroring Basic sFlow Agent Information sFlow Agent Tof aD BE sFlow Agent Source Interface Advanced Source Interface sFlow Agent Information Agent Version 1 3 Netgear Inc 10 0 2 3 Agent Address 1
529. the PoE controller s FW image Power Status Indicates the power status Total Power Main AC Displays the total power provided by the MAIN AC power source Total Power RPS Displays the total power provided by the redundant power source Current source of system power Main AC or RPS Threshold Power System can power up one port if consumed power is less than this power That is consumed power can be between Nominal and Threshold Power values The threshold power value is effected by changing System Usage Threshold Consumed Power Total amount of a power that is currently being delivered to all ports Configure a PoE Port To configure a PoE port 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Configure System Information 80 M4100 Series Managed Switch 7 Select System gt PoE gt Advanced gt PoE Port Configuration PoE Port Configurat
530. the Rx system initialization is complete and is ready to update and receive LLDPDU containing EEE TLV Time Since Counters Last Cleared Time Since Counters Last Cleared since the time of power up or after EEE counters are cleared View the Green Mode Statistics Summary You can view the Port Green Mode Statistics settings To view the port green mode statistics settings T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button Configure System Information 55 M4100 Series Managed Switch The web management interface menu displays 7 Select System gt Management gt Green Ethernet gt Green Ethernet Summary System Switching Device View Initial Setup System Information Switch Statistics System CPU Status USB Device Information Routing QoS Security Monitoring Maintenance Help Index Services PoE SNMP LLDP ISDP Timer Schedule Green Mode Statistics Summary Current P
531. the direction of packet traffic affected by the MAC ACL which can be Inbound or blank To delete a MAC ACL select the check box next to the Name field then click the DELETE button Manage Device Security 348 M4100 Series Managed Switch 10 To change the name of a MAC ACL select the check box next to the Name field update the name then click the APPLY button 11 To add a new MAC ACL to the switch configuration click the ADD button Configure MAC Rules You can define rules for MAC based ACLs The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded A default deny all rule is the last rule of every list To configure MAC rules 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Security gt ACL gt Basic gt MAC Rules a a ER ES I BL Cr ss ms cues RENS s nma e SS
532. the switch click the ADD button To delete an existing static ARP entry from the switch click the DELETE button Click the APPLY button The MAC address mapping to the IP is updated Configuration changes take effect immediately Click the REFRESH button to show the latest IP information Routing 228 M4100 Series Managed Switch The following table describes the nonconfigurable information displayed on the screen Table 70 ARP Cache Field Description Port The associated Unit Slot Port of the connection IP Address Displays the IP address It must be the IP address of a device ona subnet attached to one of the switch s existing routing interfaces MAC Address The unicast MAC address of the device The address is six two digit hexadecimal numbers separated by colons for example 00 06 29 32 81 40 View or Configure the ARP Table To view or configure the ARP table 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password
533. ther LLDP MED TLVs are transmitted or not on this interface Use Go To Port to enter the port in unit slot port format and click the Go button The entry corresponding to the specified port is selected Use Interface to specify the list of ports on which LLDP MED 802 1AB can be configured Use MED Status to specify whether LLDP MED mode is enabled or disabled on this interface Use Notification Status to specify the LLDP MED topology notification mode of the interface Use Transmit Type Length Values to specify which optional type length values TLVs in the LLDP MED are transmitted in the LLDP PDUs frames for the selected interface Configure System Information 100 M4100 Series Managed Switch The following values are available e MED Capabilities Transmit the capabilities TLV in LLDP frames e Network Policy Transmit the network policy TLV in LLDP frames Location Identification Transmit the location TLV in LLDP frames Extended Power via MDI PSE Transmit the extended PSE TLV in LLDP frames Extended Power via MDI PD Transmit the extended PD TLV in LLDP frames Inventory Information To transmit the inventory TLV in LLDP frames View LLDP MED Local Device Information To view LLDP MED local device information T Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet p
534. thernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt Dynamic ARP Inspection gt DAI Interface Configuration Dynamic ARP Inspection Interface Configuration DAI Interface Configuration 1 2 LAGS All Go To Interface GO Interface Trust Mode Rate Limit pps Burst ET ST 1 0 1 Disable 1 o 2 Disable 7 1 0 3 Disable 1 0 4 Disable 7 1 0 5 Disable 1 0 6 Disable Use Interface to selects the physical interface Use Trust Mode to indicate whether the interface is trusted for dynamic ARP Inspection purposes When set to Disable ARP packets coming to this interface are subjected to ARP inspection If enabled ARP packets coming to this interface are forwarded without Manage Device Security 341 gt 10 11 M4100 Series Managed Switch checking The factory default is Disable Use Rate Limit pps to specify rate limit value for dynamic ARP Inspection purpose If the rate of incoming ARP packets exceeds this value for consecutive burst inte
535. throughout a bridged LAN comprising arbitrarily interconnected networking devices each operating MSTP STP or RSTP MSTP allows frames assigned to different VLANs to follow separate paths each based on an independent Multiple Spanning Tree Instance MSTI within Multiple Spanning Tree MST Regions composed of LANs and or MSTP bridges These regions and the other bridges and LANs are connected into a single Common Spanning Tree CST IEEE DRAFT P802 1s D13 MSTP connects all bridges and LANs with a single Common and Internal Spanning Tree CIST The CIST supports the automatic determination of each MST region choosing its maximum possible extent The connectivity calculated for the CIST provides the CST for interconnecting these regions and an Internal Spanning Tree IST within each region MSTP ensures that frames with a given VLAN ID are assigned to one and only one of the MSTIs or the IST within the region that the assignment is consistent among all the networking devices in the region and that the stable connectivity of each MSTI and IST at the boundary of the region matches that of the CST The stable active topology of the bridged LAN with respect to frames consistently classified as belonging to any given VLAN thus simply and fully connects all LANs and networking devices throughout the network though frames belonging to different VLANs can take different paths within any Region per IEEE DRAFT P802 1s D13 All bridges whether they use
536. tic DNS table select the check box next to the entry and click the DELETE button 12 To change the host name or IP address in an entry select the check box next to the entry and enter the new information in the appropriate field and then click the APPLY button The Dynamic Host Mapping table shows host name to IP address entries that the switch learned The following table describes the dynamic host fields Table 12 DNS Dynamic Host Mapping Field Description Host Lists the host name you assign to the specified IP address Total Amount of time since the dynamic entry was first added to the table Addresses Lists the IP address associated with the host name Elapsed Amount of time since the dynamic entry was last updated Type The type of the dynamic entry Configure Green Ethernet Settings gt To configure green Ethernet settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Configure System Information 50 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank
537. tic IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt IGMP Snooping gt Interface Configuration IGMP Snooping Interface Configuration IGMP Snooping Interface Configuration 1 2 LAGS All Go To Interface o GO J Fast Group Present arg Max Response 5 Leave Interface Membership Expiration gt ode Time secs Admin Interval secs Time secs Mode WI Las 0 1 Disable 1 0 2 Disable 260 10 1 0 3 Disable 260 10 1 0 4 Disable 260 10 7 1 0 5 Disable 260 10 1 0 6 Disable 260 10 1 0 7 Disable 260 10 1 0 8 Disable 260 10 Disable Disable Disable Disable Disable Disable Disable Disable Till Note Only auser with Read Write access privileges can change the data on this screen Configure Switching Information 166 10 11 12 13 14 M4100 Series Managed Switch Use the Interface ch
538. tic IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Configure Switching Information 176 Y a M4100 Series Managed Switch 6 Click the Login button The web management interface menu displays 7 Select Switching gt Multicast gt MLD Snooping gt MLD VLAN Configuration MLD VLAN Configuration MLD VLAN Configuration Fast Grou Admin Leave x Maximum Multicast Router VLAN ID S Membership d Mode Admin Response Time Expiry Time Mode Interval 100 Enable Enable 10 0 8 Select VLAN ID check boxes for VLAN IDs for which MLD snooping is enabled 9 In the Admin Mode list select Enable to enable MLD snooping for the specified VLAN ID 10 Use Fast Leave Admin Mode to enable or disable the MLD snooping Fast Leave Mode for the specified VLAN ID 11 In the Group Membership Interval field set the value for group membership interval of MLD snooping for the specified VLAN ID The valid range is Maximum Response Time 1 to 3600 12 In the Maximum Res
539. tion Permit e Match Every True 5 Click the ADD button 6 From the IP Binding Configuration screen assign ACL ID 1 to the interface gigabit ports 2 3 and 4 and assign a sequence number of 1 See Configure ACL Interface Bindings on page 365 By default this IP ACL is bound on the inbound direction so it examines traffic as it enters the switch 7 Click the APPLY button 8 Use the IP Binding Table screen to view the interfaces and IP ACL binding information See View or Delete IP ACL Bindings on page 366 The IP ACL in this example matches all packets with the source IP address and subnet mask of the Finance department s network and deny it on the Ethernet interfaces 2 3 and 4 of the switch The second rule permits all non Finance traffic on the ports The second rule is required because there is an explicit deny all rule as the lowest priority rule Differentiated Services DiffServ Standard IP based networks are designed to provide best effort data delivery service Best effort service implies that the network deliver the data in a timely fashion although the environment can affect performance During times of congestion packets might be delayed sent sporadically or dropped For typical Internet applications such as email and file transfer a slight degradation in service is acceptable and in many cases unnoticeable However any degradation of service has undesirable effects on applications with strict timing requirements
540. tion The Leave All Period Timer is set to a random value in the range of LeaveAllTime to 1 5 LeaveAllTime The timer is specified in centiseconds Enter a number between 200 and 6000 2 to 60 seconds The Configure Switching Information 139 M4100 Series Managed Switch factory default is 1000 centiseconds 10 seconds An instance of this timer exists for each GARP participant for each port Auto VoIP Overview The Auto VoIP feature enables manual and auto assignment of VoIP phone traffic to a special VLAN such as voice VLAN allowing the assignment of special QoS parameters to that traffic giving it high priority services Configure Protocol Based Port Settings gt To configure protocol based port settings 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt Auto VolP gt Protocol based gt Port Settings Configure Switching Information 140
541. tion MAC address to compare against an Ethernet frame The valid format is xx xx xx xx xx xx The BPDU keyword can be specified using a Destination MAC address of 01 80 C2 xx xx xx Use Destination MAC Mask to specify the destination MAC address mask specifying which bits in the destination MAC to compare against an Ethernet frame The valid format is xx xx xx xx xx xx The BPDU keyword can be specified using a destination MAC mask of 00 00 00 ff ff ff Use EtherType Key to specify the EtherType value to compare against an Ethernet frame The valid values are the following e Appletalk e ARP IBM SNA e Pv4 e Pv6 e PX e MPLS multicast e MPLS unicast NetBIOS Novell e PPPoE e Reverse ARP User Value Use EtherType User Value to specify the user defined customized EtherType value to be used when the user has selected User Value as the EtherType key to compare against an Ethernet frame Manage Device Security 350 19 20 21 22 23 24 25 26 27 28 29 M4100 Series Managed Switch The valid range of values is 0x0600 to OxFFFF Use Source MAC to specify the wource MAC address to compare against an Ethernet frame The valid format is XX XX XX XX XX XX Use Source MAC Mask to specify the wource MAC address mask specifying which bits in the source MAC to compare against an Ethernet frame The valid format is XX XX XX XX XX XX Use VLAN to specify the VLAN ID to compare ag
542. ts UC 1 0 1 1 0 5 Switch 1 Root Bridge Ports 1 0 6 1 0 8 SS Connected to Switch 2 and 3 Ports 1 0 6 1 0 8 to Switch 1 and 3 Wp Switch 2 Ports 1 0 6 1 08 Connected to Switch 2 and RN Switch 3 amp Ports 1 0 1 1 0 5 Connected to Hosts Figure 2 MSTP configuration Perform the following procedures on each switch to configure MSTP 1 Use the VLAN Configuration screen to create VLANs 300 and 500 See VLAN Overview on page 223 2 Use the VLAN Membership screen to include ports 1 0 1 1 0 8 as tagged T or untagged U members of VLAN 300 and VLAN 500 See VLAN Overview on page 223 Configuration Examples 444 10 11 12 M4100 Series Managed Switch From the STP Configuration screen enable the Spanning Tree State option See Spanning Tree Protocol Overview on page 145 Use the default values for the rest of the STP configuration settings By default the STP Operation Mode is MSTP and the configuration name is the switch MAC address From the CST Configuration screen set the Bridge Priority value for each of the three switches to force Switch 1 to be the root bridge e Switch 1 4096 e Switch 2 12288 e Switch 3 20480 Note Bridge priority values are multiples of 4096 If you do not specify a root bridge and all switches use the same Bridge Priority value the switch with the lowest MAC address is elected as the root bridge see Configure Common Spanning Tree on p
543. ts at Layers 2 3 and 4 by inspecting the following information for a packet e Source destination MAC address e EtherType e Class of Service 802 1p priority value first only VLAN tag e VLAN ID range first only VLAN tag e Secondary 802 1p priority value second inner VLAN tag e Secondary VLAN ID range second inner VLAN tag e IP service type octet also known as ToS bits precedence value DSCP value e Layer 4 protocol TCP UDP and so on e Layer 4 source destination ports e Source destination IP address From a DiffServ point of view there are two types of classes DiffServ traffic classes DiffServ service levels forwarding classes DiffServ Traffic Classes With DiffServ you define which traffic classes to track on an ingress interface You can define simple BA classifiers DSCP and a wide variety of multifield MF classifiers e Layer 2 Layers 3 4 IP only Configuration Examples 436 M4100 Series Managed Switch Protocol based e Address based You can combine these classifiers with logical AND or OR operations to build complex MF classifiers by specifying a class type of all or any respectively That is within a single class multiple match criteria are grouped together as an AND expression or a sequential OR expression depending on the defined class type Only classes of the same type can be nested class nesting does not allow for the negation for example exclude option of the referen
544. ts the difference between the current time and the time that the sample was recorded Percentage Time spent in LPI Percentage of time spent in LPI mode during the current measurement mode since last sample interval Percentage Time spent in LPI Percentage of time spent in LPI mode since EEE LPI statistics were mode since last reset reset Configure the DHCP Server gt To configure the DHCP server 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password Configure System Information 58 M4100 Series Managed Switch The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Services gt DHCP Server gt DHCP Server Configuration DHCP Server Configuration DHCP Server Configuration Admin Mode Disable Enable Ping Packet Count 2 Conflict Logging Mode Disable Enable Bootp Automatic Mode Disable Enable Excluded Address IP Range From IP Range To 4 8 Select the Admin Mode Dis
545. tton The web management interface menu displays Configure Quality of Service 254 7 8 9 M4100 Series Managed Switch Select QoS DiffServ Advanced Policy Configuration Policy Configuration Policy Configuration Eg Policy Name Policy Type Member Class 7 policy1 Use Policy Name to uniquely identify a policy using a case sensitive alphanumeric string from 1 to 31 characters Select a Member Class 10 The Member Class list includes all DiffServ classes currently defined as members of the specified policy This list is automatically updated as a new class is added to or removed from the policy You can select an item in this list only when an existing policy class instance is to be removed After you remove the policy class instance this becomes a nonconfigurable field 11 Use the Policy Type to select the type specific to inbound traffic direction 12 To add a new policy to the switch click the ADD button 13 To delete the currently selected policy from the switch click the DELETE button Configure DiffServ Policy Attributes To configure the DiffServ policy attributes 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP a
546. tton to update the screen to show the latest MVR configuration Configure Switching Information 184 M4100 Series Managed Switch 13 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately The following table describes the nonconfigurable information displayed on the screen Table 57 MVR Configuration Field Definition MVR Max Multicast Groups Displays the maximum number of multicast groups that MVR supports MVR Current Multicast Groups Displays current number of the MVR groups allocated Configure MVR Groups To configure MVR groups 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt MVR gt Advanced gt MVR Group Configuration MVR Group Configuration MVR Group Configuration In the MVR Group IP list specify the IP address for the new MVR group
547. uard Interface Configure Dynamic ARP Inspection Access Control List Overview 261 M4100 Series Managed Switch Management Security Settings You can configure the login password Remote Authorization Dial In User Service RADIUS settings Terminal Access Controller Access Control System TACACS settings and authentication lists Configure Users By default two user accounts exist e admin with read write privileges e guest with read only privileges By default both of these accounts do not have passwords The names are not case sensitive If you log in as the admin user you are assigned read write privileges and you can use the User Management screen to assign passwords and set security parameters for the default user accounts and add and delete accounts other than admin up to a maximum of six Only the admin user account is allowed read write privileges gt To configure users 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a passwor
548. udes other as an option for the unnamed ports e Flow Label This is a 20 bit number that is unique to an IPv6 packet used by end stations to signify Quality of Service handling in routers Flow Label can be specified in the range of 0 to 1048575 e IP DSCP This lists the keywords for the known DSCP values from which one can be selected The list includes other as an option for the remaining values Match Criteria Displays the configured match criteria for the specified class Values Displays the values of the configured match criteria 11 Click the APPLY button The updated configuration is sent to the switch Configuration changes take effect immediately Configure DiffServ Policy You can associate a collection of classes with one or more policy statements After creating a policy you can click the policy link to display the Policy screen To configure a DiffServ policy 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login bu
549. ult admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select System gt Management gt USB Device Information USB Device Information USB Device Details Device Status Manufacturer Serial Number USB Version Compliance Class Code Subclass Code Protocol Vendor ID Product ID USB Memory Statistics Total Size Bytes Used Bytes Free USB Directory Details 8 Click the REFRESH button to refresh the screen with the latest information The following table describes USB Device Details information Table 6 USB device Information Fed beseription S O Device Status The current status of device Active if the device is USB plugged in and recognized by the switch Inactive if the device is not mounted Invalid if the device is not present or invalid device is plugged in Manufacturer The USB flash drive device manufacturer Serial Number The USB flash drive device serial number USB Version Compliance The USB flash drive device version Class Code The USB flash drive device class USB Device Details Subclass Code The USB flash drive device subclass Protocol The USB flash drive device protocol Vendor ID The USB flash drive device vendor ID Configure System Information 32 M4100 Series Managed Switch Table 6 USB device Information continued Field Description
550. umber of collisions on this Ethernet segment Time Since Counters Last Cleared The elapsed time in days hours minutes and seconds since the statistics for this port were last cleared View Detailed Port Statistics To view detailed port statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays Monitoring the System 371 M4100 Series Managed Switch 7 Select Monitoring gt Ports gt Port Detailed Statistics Port Detailed Statistics Port Detailed Statistics Interface 0 1 X MST ID CST v ifindex 1 Port Type Normal Port Channel ID Disable Port Role STP Mode Enable STP State Admin Mode Enable Flow Control Mode Disable LACP Mode Enable Physical Mode Auto Physical Ststus 1000 Mbps Link Stetus Link Up Link Trap Enable Packets RX and TX 64 Octets 1612226 Packets RX and TX 65 127 Octets 440500 Packets RX and TX 128 255 Octets 93632
551. used to identify the configuration currently being used The values allowed are between 0 and 65535 The default value is 0 Select the Forward BPDU while STP Disabled Disable or Enable radio button This specifies whether spanning tree BPDUs should be forwarded while spanning tree is disabled on the switch Select the BPDU Guard Disable or Enable radio button This specifies whether the BPDU guard feature is enabled The STP BPDU guard allows a network administrator to enforce the STP domain borders and keep the active topology consistent and predictable The switches behind the edge ports with STP BPDU guard enabled are not able to influence the overall STP topology At the reception of BPDUs the BPDU guard operation disables the port that is configured with this option and transitions the port into a disabled state This would lead to an administrative disable of the port Select the BPDU Filter Disable or Enable radio button This specifies whether the BPDU Filter feature is enabled STP BPDU filtering applies to all operational edge ports An edge port in an operational state is supposed to be connected to hosts that typically drop BPDUs If an operational edge port receives a Configure Switching Information 149 M4100 Series Managed Switch BPDU it immediately loses its operational status In that case if BPDU filtering is enabled on this port and the BPDUs received on this port are dropped The following table describes
552. user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Maintenance gt Download gt File Download File Download File Download File Type Archive Image Name imagel w Transfer Mode Server Address Type Server Address Remote File Path Remote File Name Use File Type to specify what type of file to transfer Maintenance 413 10 11 M4100 Series Managed Switch e Archive Specify archive STK code to upgrade the operational flash e Imaget Specify the code image to download e Image2 Specify the code image2 to download e CLI Banner Specify CLI Banner when you want a banner to be displayed before the login prompt e Text Configuration Specify configuration in text mode to update the switch s configuration If the file has errors the update is stopped e Use Config Script to specify the script configuration file e Use SSH 1 RSA Key File to specify the SSH 1 Rivest Shamir Adleman RSA Key File e Use SSH 2 RSA Key PEM File to specify the SSH 2 Rivest Shamir Adleman RSA Key File PEM Encoded e Use SSH 2 DSA Key PEM File to specify the SSH 2 Digital Signature Algorithm DSA Key File PEM Encoded e Use SSL Trusted Root Certificate PEM File to specify the SSL Trusted Root Certificate File PEM Encoded e Use SSL Server Certificate PEM File to specify the SSL Se
553. ut Hours to set the hard time out for HTTPS sessions This time out is unaffected by the activity level of the session The value must be in the range of 1 to 168 hours The default value is 24 hours The currently configured value is shown when the screen is displayed Manage Device Security 284 M4100 Series Managed Switch 14 Use Maximum Number of HTTPS Sessions to set the maximum allowable number of HTTPS sessions The value must be in the range of 0 to 16 The default value is 16 The currently configured value is shown when the screen is displayed Manage Certificates You can generate or delete certificates gt To manage certificates 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Access gt HTTPS gt Certificate Management Certificate Management Certificate Management Certificate Present None Generate Certificates Delete
554. uter with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Manage Device Security 268 M4100 Series Managed Switch Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt RADIUS gt Server Configuration RADIUS Server Configuration Server Configuration S t P M E Radius Server IP Address Radius Server Name Current Port ps Secret UM giis id tsa ro LA E L 9 168 10 100 LA L L W 1 CE L 1 Statistics Re d Malfi d Radius mene Access Access Access Access Access reis E Bad Pending Unknown Packets Server Time Requests Retransmissions Accepts Rejects Challenges D Authenticators Requests Types Dropped 192 168 10 100 0 00 0 The Current field indicates whether a server is currently in use as the authentication server To add a RADIUS server specify the following settings e Inthe Radius Server IP Address field specify the IP address of the RADIUS server e Inthe Radius
555. uthentication list 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt Authentication List HTTPS Authentication List HTTPS Authentication List HTTPS Authentication List A RN RR RN E httpsList Select the check box for the HTTPS list In the numbered lists 1 2 3 4 select the method to appear first in the selected authentication login list If you select a method that does not time out such as local no other method is tried even if you specified more than one method The options are as follows Local The user s locally stored name and password iare used for authentication None The user cannot be authenticated RADIUS The user s name and password are authenticated using the RADIUS server instead of local authentication TACACS The user authenticates without a user name and password Manage Device Secur
556. uting Table IP VLAN ARP Router Discovery IP Configuration IP Configuration Statistics Default Time to Live 64 gt Advanced Routing Mode Enable O Disable ICMP Echo Replies Enable Disable ICMP Redirects Enable Disable ICMP Rate Limit Interval 1000 ICMP Rate Limit Burst Size Maximum Next Hops Maximum Routes Select to configure Global Default Gateway Global Default Gateway The screen displays the default time to live the maximum next hops and the maximum routes Select the Routing Mode Enable or Disable radio button You must enable routing for the switch before you can route through any of the interfaces The default value is disable Select the ICMP Echo Replies Enable or Disable radio button If ICMP echo replies are enabled then only the router can send ECHO replies By default ICMP echo replies are sent for echo requests Select the ICMP Redirects Enable or Disable radio button If it is enabled globally and on the interface level then only the router can send ICMP redirects Use ICMP Rate Limit Interval to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval By default the rate limit is 100 packets sec for example burst interval is 1000 msec To disable ICMP rate limiting set this field to 0 The valid rate interval must be in the range 0 to 2147483647 Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the
557. vice interface is In Operational Status Shows the operational status of this service interface either Up or Down View Service Statistics You can view class oriented statistical information for the policy which is specified by the interface and direction The Member Classes menu is populated on the basis of the specified Configure Quality of Service 258 M4100 Series Managed Switch interface and direction and hence the attached policy if any Highlighting a member class name displays the statistical information for the policy class instance for the specified interface and direction To view service statistics 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt Advanced gt Service Statistics System Switching Routing Security Monitoring Maintenance Help Index CoS gt Diffserv Wizard Service Statistics Basic RE
558. vides a single path between end stations avoiding and eliminating loops For information about configuring Common STP see Configure CST Ports on page 152 Multiple Spanning Tree Protocol MSTP supports multiple instances of Spanning Tree to efficiently channel VLAN traffic over different interfaces Each instance of the Spanning Tree behaves in the manner specified in IEEE 802 1w Rapid Spanning Tree RSTP with slight Configure Switching Information 145 M4100 Series Managed Switch modifications in the working but not the end effect chief among the effects is the rapid transitioning of the port to Forwarding The difference between the RSTP and the traditional STP IEEE 802 1D is the ability to configure and recognize full duplex connectivity and ports that are connected to end stations resulting in rapid transitioning of the port to Forwarding state and the suppression of Topology Change Notification These features are represented by the parameters pointtopoint and edgeport MSTP is compatible with both RSTP and STP It behaves appropriately to STP and RSTP bridges A MSTP bridge can be configured to behave entirely as a RSTP bridge or an STP bridge Note For two bridges to be in the same region the force version should be 802 1s and their configuration name digest key and revision level should match For additional information about regions and their effect on network topology refer to the IEEE 802 1Q standard Configure Sp
559. want assigned to untagged or priority tagged frames received on this port The factory default is 1 12 In the Acceptable Frame Types field select VLAN only or Admit All This specifies the types of frames that can be received on this port VLAN only Untagged frames or priority tagged frames received on this port are discarded Admit All Untagged frames or priority tagged frames received on this port are accepted and assigned the value of the Port VLAN ID for this port With either option VLAN tagged frames are forwarded in accordance to the 802 1Q VLAN specification 13 Specify the Ingress Filtering setting e When enabled the frame is discarded if this port is not a member of the VLAN with which this frame is associated In a tagged frame the VLAN is identified by the VLAN ID in the tag In an untagged frame the VLAN is the port VLAN ID specified for the port that received this frame e When disabled all frames are forwarded in accordance with the 802 1Q VLAN bridge specification The factory default is disabled 14 Use Port Priority to specify the default 802 1p priority assigned to untagged packets arriving at the port The possible value is from 0 to 7 Configure Switching Information 129 M4100 Series Managed Switch Configure a MAC Based VLAN Group The MAC based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classifies traffic based on the source MAC address of the packet
560. wards a copy into each of the remaining network segments in accordance with the IEEE MAC Bridge standard Eventually the packet is made accessible to all nodes connected to the network This approach works well for broadcast packets that are intended to be seen or processed by all connected nodes In the case of multicast packets however this approach could lead to less efficient use of network bandwidth particularly when the packet is intended for only a small number of nodes Packets are flooded into network segments where no node has any interest in receiving the packet While nodes rarely incur any processing overhead to filter packets addressed to unrequested group addresses they are unable to transmit new packets onto the shared media for the period of time that the multicast packet is flooded The problem of wasting bandwidth is even worse when the LAN segment is not shared for example in full duplex links Configure Switching Information 165 M4100 Series Managed Switch Allowing switches to snoop IGMP packets is a creative effort to solve this problem The switch uses the information in the IGMP packets as they are being forwarded throughout the network to determine which segments should receive packets directed to the group address Configure IGMP Snooping Interface Settings You can configure IGMP snooping settings on specific interfaces To configure IGMP snooping interface settings 1 Prepare your computer with a sta
561. witch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt ACL gt Advanced gt IP Extended Rules Extended ACL Rules IP Rules ACL ID NAME T est v E Redirect Match Protocol n urce ggal Pee sec Destination vice Type Rate Limit Conform Rate Limit Time e Interface Every Type 3 Address a k lasi L4 Port YPe Data Rate Burst Size Range False 4 IP 1 Extended ACL Rule Table What is shown on this screen varies depending on the current step in the rule configuration process Use ACL ID Name to select the IP ACL Configure the new rule e Rule ID Enter a whole number in the range of 1 to 51 This number identifies the rule An IP ACL can use up to 511 rules Manage Device Security 358 M4100 Series Managed Switch Action Specify the action to take if a packet matches the rule s criteria The choices are permit or deny Logging When set to Enable logging is enabled for this ACL rule subject to resource availability in the device If the Access List Trap flag is also enabled this causes periodic traps to be generated
562. words are valid in days from the time the password is set Once a password expires the user must enter a new password following the first login after password expiration A value of 0 indicates that passwords never expire Use Password History to specify the number of previous passwords to store for prevention of password reuse This ensures that each user does not reuse passwords often A value of 0 indicates that no previous passwords are stored Use Lockout Attempts to specify the number of allowable failed local authentication attempts before the user s account is locked A value of 0 indicates that user accounts is never locked Enable Password Configuration gt To enable password configuration 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Manage Device Security 264 10 M4100 Series Managed Switch Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Management Security gt Enable Pa
563. x Ethernet links to be aggregated together to form a link aggregation group LAG which is also known as a port channel The switch can treat the port channel as if it were a single link gt To configure LAG membership 1 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field Configure Switching Information 199 10 11 12 13 14 M4100 Series Managed Switch The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Switching gt LAG gt LAG Membership LAG Membership LAG Membership LAG ID Lagi v LAG Name LAG Description Admin Mode Enable v Link Trap Disable STP Mode Enable v Static Mode Disable Hash Mode Src Dest MAC VLAN EType incoming port 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 Use LAG ID to select the identification of the LAG Use LAG Name to enter the name you want assigned to the LAG You can enter any string of up to 15 alphanumeric character
564. xpiry interval timer is expired the snooping switch moves into querier mode e Disabled Snooping querier is not operational on the VLAN The snooping querier moves to disabled mode when IGMP snooping is not operational on the VLAN or when the querier address is not configured or the network management address is also not configured Operational Version Last Querier Address Last Querier Version Displays the operational IGMP protocol version of the querier Displays the IP address of the last querier from which a query was snooped on the VLAN Displays the IGMP protocol version of the last querier from which a query was snooped on the VLAN Operational Max Response Time Displays maximum response time to be used in the queries that are sent by the snooping querier Configure Switching Information 173 M4100 Series Managed Switch Configure MLD Snooping You can configure the parameters for MLD snooping which is used to build forwarding lists for multicast traffic Note that only a user with Read Write access privileges can change the data on this screen gt To configure MLD snooping 1 8 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field
565. yed only when the port control mode of the selected interface is not MAC based This field is not configurable Vlan Assigned Reason Key Transmission Enabled Session Timeout This field displays reason for the VLAN ID assigned by the authenticator to the selected interface This field is displayed only when the port control mode of the selected interface is not MAC based This field is not configurable Possible values are as follows Radius Unauth Default Not Assigned This field displays if key transmission is enabled on the selected port This is not a configurable field The possible values are true and false If the value is false key transmission does not occur Otherwise key transmission is supported on the selected port This field displays session rimeout set by the Radius server for the selected port This field is displayed only when the port control mode of the selected port is not MAC based Manage Device Security 308 M4100 Series Managed Switch Table 83 Port summary Field Description Session Termination Action This field displays termination action set by the RADIUS server for the selected port This field is displayed only when the port control mode of the selected port is not MAC based Possible values are as follows e Default e Reauthenticate If the termination action is default then at the end of the session the client details are initialized Otherwise re authentication i
566. you select Enable Sender MAC validation for the ARP packets is enabled The factory default is Disable Select the Validate Destination MAC Disable or Enable radio button This specifies the DAI Destination MAC Validation mode for the switch If you select Enable Destination MAC validation for the ARP response packets is enabled The factory default is Disable Select the Validate IP Disable or Enable radio button This specifies the DAI IP Validation mode for the switch by selecting Enable or Disable radio button If you select Enable IP address validation for the ARP packets is enabled The factory default is Disable Manage Device Security 339 M4100 Series Managed Switch Configure Dynamic ARC Inspection To configure dynamic ARC inspection 1 10 11 Prepare your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch Launch a web browser Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 The Login screen displays Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password Click the Login button The web management interface menu displays Select Security gt Control gt Dynamic ARP Inspection gt DAI
567. your computer with a static IP address in the 169 254 100 0 subnet for example 169 254 100 201 2 Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch 3 Launch a web browser 4 Enter the IP address of the switch in the web browser address field The default IP address of the switch is 169 254 100 100 Configure Quality of Service 245 M4100 Series Managed Switch The Login screen displays 5 Enter the user name and password The default admin user name is admin and the default admin password is blank that is do not enter a password 6 Click the Login button The web management interface menu displays 7 Select QoS gt DiffServ gt Advanced gt Diffserv Configuration DiffServ Configuration DiffServ Configuration DiffServ Admin Mode Q Disable Enable Status MID Table Current size Maxsize Class Table 32 Class Rule table 192 Policy table 64 Policy Instance table Policy Attributes table Service table 8 Select the DiffServ Admin Mode Disable or Enable radio button Enable Differentiated services are active e Disable The DiffServ configuration is retained and can be changed but it is not active 9 Click the APPLY button The changes are applied to the system The following table describes the information displayed in the Status table on the DiffServ Configuration screen Table 73 Diffserv Configuration Field Description
568. ype incoming port Source MAC VLAN EtherType and incoming port associated with the packet Dest MAC VLAN EType incoming port Destination MAC VLAN EtherType and incoming port associated with the packet Src Dest MAC VLAN EType incoming port Source Destination MAC VLAN EtherType and incoming port associated with the packet Src IP and Src TCP UDP Port Source IP and Source TCP UDP fields of the packet Dest IP and Dest TCP UDP Port Destination IP and Destination TCP UDP Port fields of the packet Src Dest IP and TCP UDP Port Source Destination IP and source destination TCP UDP Port fields of the packet Enhanced Hashing mode Features MODULO N operation based on the number of ports in the LAG non unicast traffic and unicast traffic hashing using a common hash algorithm excellent load balancing performance and packet attributes selection based on the packet type For L2 packets source and destination MAC address are used for hash computation For L3 packets source IP destination IP address TCP UDP ports are used 16 Use the Port Selection Table to select the ports as members of the LAG Configure Switching Information 201 Routing This chapter covers the following topics Manage the Routing Table Configure IP Settings Configure Advanced IP Settings VLAN Overview ARP Overview Configure Router Discovery 202 M4100 Series Managed Switch Manage the Routing Table Vv The Routing
569. ys Select System gt Management gt Initial Setup System Switching Routing QoS Security Monitoring Maintenance Help Index Device View Services PoE SNMP LLDP ISDP Timer Schedule Initial Setup Initial Setup gt System Information Switch Statistics Admin Password System CPU Status poe eee gt USB Device Information gt Loopback Interface System Location gt Management System Contact Interfaces SNTP Mode Disable Enable gt Time gt DNS Green Ethernet Designated Source Interface Management VLAN System Configuration System Name SNTP Server In the Admin Password field enter the new password for the Admin account The new password does not display as you type it only dots are shown to hide the entry The password is from 8 to 64 alphanumeric characters in length and is case sensitive In the Enable Password field enter the new password for the enable mode in the command line interface The new password does not display as you type it only dots are shown to hide the entry The password is from 8 to 64 alphanumeric characters in length and is case sensitive Enter the System Name the name to identify this switch You can use a name up to 255 characters in length The factory default is blank Enter the System Location the location of the switch Configure System Information 20 12 13 14 15 16 M4100 Series Managed Switch You can use a locatio

M4100 Series Managed Switch User Manual

Contents

Download Pdf Manuals

Related Search

Related Contents