NETGEAR GS728TP100NAS Bedienungsanleitung

350 East Plumeria Drive San Jose, CA 95134 USA August 2012 202-10976-01 v1.0 ProSafe M5300 Switch Web Management User Guide[...]

2 ProSafe M5300 Switch © NETGEAR, Inc. All rights reserved No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or re[...]

3 Contents Chapter 1 Getting Started Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Understanding the User Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Usi[...]

4 ProSafe M5300 Switch NSF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Checkpoint Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Stack Template Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 Stack Template Co[...]

5 ProSafe M5300 Switch LAG Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 LAG Membership . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186 Chapter 4 Routing Routing Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

6 ProSafe M5300 Switch Chapter 5 Configuring Quality of Service Class of Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331 Basic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332 Advanced . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

7 ProSafe M5300 Switch Chapter 7 Monitoring the System Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 457 Port Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 458 Port Detailed Statistics . . . . . . . . . . . . . . . . . . . . . . . [...]

8 ProSafe M5300 Switch Chapter 9 Help Online Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501 Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 501 User Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

9 1 1. Getting Started This chapter provides an overview of starting your NETGEAR ProSafe M5300 Switch and accessing the user interface. This chapter contains the following sections: • Switch Management Interface on page 9 • Web Access on page 9 • Understanding the User Interfaces on page 10 • Interface Naming Convention on page 17 Switch M[...]

Getting Started 10 ProSafe M5300 Switch Accessing the switch directly from your Web browser displays the login screen shown below. Understanding the User Interfaces ProSafe M5300 software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: • Web user interface • S[...]

Getting Started 11 ProSafe M5300 Switch Use the following procedures to log on to the Web interface: 1. Open a Web browser and enter the IP address of the switch in the Web browser address field. 2. The default user name is admin , default password is none (no password). Type the user name into the field on the login screen and then click Login . U[...]

Page Link Configuration Pages Getting Started 12 ProSafe M5300 Switch Configuration and Monitoring Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select. On pages that contain configuration options, you can input information into fields or select [...]

Getting Started 13 ProSafe M5300 Switch Device View The Device View is a Java ® applet that displays the ports on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options. The graphic also provides information about device ports, current configuration and status, table information, and feature componen[...]

Getting Started 14 ProSafe M5300 Switch Device View System LEDs In addition to the port LEDs, the device view provides a representation of the system LEDs on the left side of the front switch panel. Power/Status LED The power LED is a bicolor LED that serves as an indicator of power and diagnostic status. The following indications are given by the [...]

Getting Started 15 ProSafe M5300 Switch Device View Navigation Click the port you want to view or configure to see a menu that displays statistics and configuration options. Click the menu option to access the page that contains the configuration or monitoring options. If you click the graphic, but do not click a specific port, the main menu appear[...]

Getting Started 16 ProSafe M5300 Switch Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page displays if you click Help. User-Defined Field[...]

Getting Started 17 ProSafe M5300 Switch Interface Naming Convention The ProSafe support physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by using the software. Table 2 describes the na[...]

Getting Started 18 ProSafe M5300 Switch[...]

19 2 2. Configuring System Information Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: • Management on page 19 • Device View (See Device View on page 12) • License on page 43 • Services on page 45 • Stacking on page 68 • PoE (M5300-28G-[...]

Configuring System Information 20 ProSafe M5300 Switch System Information After a successful login, the System Information page displays. Use this page to configure and view general device information. To display the System Information page, click System  Management  System Information . A screen similar to the following displays.[...]

Configuring System Information 21 ProSafe M5300 Switch The System Information provides various statuses: Switch Status To define system information: 1. In the System Name field, enter the name you want to use to identify this switch. You may use up to 255 alphanumeric characters. The factory default is blank. 2. In the System Location field, enter [...]

Configuring System Information 22 ProSafe M5300 Switch FAN Status The screen shows the status of the fans in all units. These fans remove the heat generated by the power, CPU, and other chipsets, allowing the chipsets to work normally. Fan status has three possible values: OK, Failure, Not Applicable (NA). The following table describes the Fan Stat[...]

Configuring System Information 23 ProSafe M5300 Switch Device Status The screen shows the various inventory information for each device. The following table describes the Device Status information. Field Description Firmware Version The release.version.maintenance.build number of the code currently running on the switch. For example, if the release[...]

Configuring System Information 24 ProSafe M5300 Switch Switch Statistics Use this page to display the switch statistics. To display the Switch Statistics page, click System > Management > Switch Statistics . A screen similar to the following displays. The following table describes Switch Statistics information. Field Description ifIndex This [...]

Configuring System Information 25 ProSafe M5300 Switch Click CLEAR to clear all the counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. Broadcast Packets Received The total number of packets received that were directed to the broadcast address. Note that this does not incl[...]

Configuring System Information 26 ProSafe M5300 Switch System CPU Status Use this page to display system CPU status and utilization information. To display the System Resource page, click System > Management > System CPU Status . A screen similar to the following displays. System CPU Status The following table describes CPU Memory Status info[...]

Configuring System Information 27 ProSafe M5300 Switch Slot Information Use this page to view information about the cards installed in the switch’s slots. This page also provides information about the cards and switches that are compatible with the device. To display the Switch Statistics page, click System > Management > Slot Information .[...]

Configuring System Information 28 ProSafe M5300 Switch Supported Card The following table describes information in the Supported Card table. Field Description Card Model The model ID of the supported card. Card Index The index assigned to the card type. Card Type The hardware type of the supported card, which is assigned by the manufacturer. Card D[...]

Configuring System Information 29 ProSafe M5300 Switch Loopback Interface Use this page to create, configure, and remove Loopback interfaces. A loopback interface is a logical interface that is considered to be always up. To display the Loopback Interface page, click System > Management > Loopback Interface . A screen similar to the following[...]

Configuring System Information 30 ProSafe M5300 Switch Network Interface From the Network Interface link, you can access the following pages: • IPv4 Network Configuration on page 30 • IPv6 Network Interface Configuration on page 32 • IPv6 Network Interface Neighbor Table on page 33 IPv4 Network Configuration To display the IPv4 Network Config[...]

Configuring System Information 31 ProSafe M5300 Switch Once you have established in-band connectivity, you can change the IP information using any of the following: • Terminal interface via the EIA-232 port • Terminal interface via telnet • SNMP-based management • Web-based management To configure an IPv4 network interface: 1. Use Current N[...]

Configuring System Information 32 ProSafe M5300 Switch 8. Use DHCP Vendor Class Identifier String to specify the text string to add to DHCP requests as option 60, the VCI option. 9. Use Management VLAN ID to specify the management VLAN ID of the switch. It may be configured to any value in the range of 1 - 4093. Some network administrators use a ma[...]

Configuring System Information 33 ProSafe M5300 Switch To configure an IPv6 network interface: 1. Use Admin Mode to enable or disable the IPv6 network interface on the switch. The default value is enable. 2. Use IPv6 Address Auto Configuration Mode to set the IPv6 address for the IPv6 network interface in auto configuration mode if this option is e[...]

Configuring System Information 34 ProSafe M5300 Switch Time ProSafe software supports the Simple Network Time Protocol (SNTP). SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. ProSafe software operates only as an SNTP client and cannot provide time ser[...]

Configuring System Information 35 ProSafe M5300 Switch The device can poll Unicast server types for the server time. Polling for Unicast information is used for polling a server for which the IP address is known. SNTP servers that have been configured on the device are the only ones that are polled for synchronization information. T1 through T4 are[...]

Configuring System Information 36 ProSafe M5300 Switch SNTP Global Configuration SNTP stands for Simple Network Time Protocol. As its name suggests, it is a less complicated version of Network Time Protocol, which is a system for synchronizing the clocks of networked computer systems, primarily when data transfer is handled via the Internet. 1. Use[...]

Configuring System Information 37 ProSafe M5300 Switch SNTP Global Status The following table displays SNTP Global Status information. Field Description Version Specifies the SNTP Version the client supports. Supported Mode Specifies the SNTP modes the client supports. Multiple modes may be supported by a client. Last Update Time Specifies the loca[...]

Configuring System Information 38 ProSafe M5300 Switch SNTP Server Configuration Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. To display the SNTP Server Configuration page, click System  Management  Time  SNTP Server Configuration . To configure a [...]

Configuring System Information 39 ProSafe M5300 Switch 2. Click ADD . 3. Repeat the previous steps to add additional SNTP servers. You can configure up to three SNTP servers. 4. To removing an SNTP server, select the check box next to the configured server to remove, and then click DELETE . The entry is removed, and the device is updated. 5. To cha[...]

Configuring System Information 40 ProSafe M5300 Switch DNS You can use these pages to configure information about DNS servers the network uses and how the switch operates as a DNS client. DNS Configuration Use this page to configure global DNS settings and DNS server information. To access this page, click System  Management  DNS  DNS Conf[...]

Configuring System Information 41 ProSafe M5300 Switch 7. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 8. Click APPLY to send the updated configuration to the switch. Configuration changes take effect immediately. DNS Server Configuration The following table displays DNS [...]

Configuring System Information 42 ProSafe M5300 Switch The Dynamic Host Mapping table shows host name-to-IP address entries that the switch has learned. The following table describes the dynamic host fields. Field Description Host Lists the host name you assign to the specified IP address. Total Amount of time since the dynamic entry was first adde[...]

Configuring System Information 43 ProSafe M5300 Switch The following table displays Summary information, which describes the maximum resources each template supports for various features.. Field Description SDM Template Identifies the Template. The possible values are: • Dual IPv4 and IPv6 • IPv4-routing Default • IPv4 Data Center ARP Entries[...]

Configuring System Information 44 ProSafe M5300 Switch The following table describes the non-configurable fields on the License Key page. Field Description License Date The date the license is purchased. License Copy The number of licenses that exist on the switch. License Status Indicates whether the license is active or inactive. If a license is [...]

Configuring System Information 45 ProSafe M5300 Switch Services From the Services link, you can access the following pages: • DHCP Server on page 45 • DHCP Relay on page 53 • DHCP L2 Relay on page 54 • UDP Relay on page 57 • DHCPv6 Server on page 59 • DHCPv6 Relay on page 66 DHCP Server DHCP is generally used between clients and servers[...]

Configuring System Information 46 ProSafe M5300 Switch To enable or disable DHCP service: 1. Use Admin Mode to specify whether the DHCP Service is to be Enabled or Disabled. Default value is Disable. 2. Use Ping Packet Count to specify the number of packets a server sends to a Pool address to check for duplication as part of a ping operation. Defau[...]

Configuring System Information 47 ProSafe M5300 Switch DHCP Pool Configuration To display the DHCP Pool Configuration page, click System > Services > DHCP Server > DHCP Pool Configuration . A screen similar to the following displays. To configure a DHCP pool: 1. Select an existing DHCP pool to update or select Create from the Pool Name fie[...]

Configuring System Information 48 ProSafe M5300 Switch Type of Binding Specifies the type of binding for the pool. • Unallocated • Dynamic • Manual Network Address Specifies the subnet address for a DHCP address of a dynamic pool. Network Mask Specifies the subnet number for a DHCP address of a dynamic pool. Either Network Mask or Prefix Leng[...]

Configuring System Information 49 ProSafe M5300 Switch 2. Use ADD to create the Pool Configuration. 3. Use APPLY to change the Pool Configuration. Sends the updated configuration to the switch. Configuration changes take effect immediately. 4. Use DELETE to delete the Pool. This field is not visible to a user with read only permission. DHCP Pool Op[...]

Configuring System Information 50 ProSafe M5300 Switch 3. Use Option Type to specify the Option Type against the Option Code configured for the selected pool: • ASCII • Hex • IP Address 4. Option Value specifies the Value against the Option Code configured for the selected pool. 5. Click ADD to add a new Option Code for the selected pool. 6. [...]

Configuring System Information 51 ProSafe M5300 Switch DHCP Bindings Information To display the DHCP Bindings Information page, click System > Services > DHCP Server > DHCP Bindings Information . A screen similar to the following displays. 1. Choose: • All Dynamic Bindings to specify all dynamic bindings to be deleted. • Specific Dynam[...]

Configuring System Information 52 ProSafe M5300 Switch DHCP Conflicts Information To display the DHCP Conflicts Information page, click System > Services > DHCP Server > DHCP Conflicts Information . A screen similar to the following displays. 1. Choose: • All Address Conflicts to specify all address conflicts to be deleted. • Specific [...]

Configuring System Information 53 ProSafe M5300 Switch DHCP Relay If the switch is functioning as a Layer 3 device, the Layer 3 DHCP Relay Agent can relay DHCP messages between DHCP clients and DHCP servers that are located in different IP subnets. To display the DHCP Relay page, click System > Services > DHCP Relay . A screen similar to the [...]

Configuring System Information 54 ProSafe M5300 Switch DHCP Relay Status The following table describes the DHCP Relay Status fields. Field Description Requests Received The total number of DHCP requests received from all clients since the last time the switch was reset. Requests Relayed The total number of DHCP requests forwarded to the server sinc[...]

Configuring System Information 55 ProSafe M5300 Switch To configure the DHCP L2 Relay VLAN information: 1. VLAN ID shows the VLAN ID configured on the switch. 2. Use Admin Mode to enable or disable the DHCP L2 Relay on the selected VLAN. 3. Use Circuit ID Mode to enable or disable the Circuit ID suboption of DHCP Option-82. 4. Use Remote ID String [...]

Configuring System Information 56 ProSafe M5300 Switch DHCP L2 Relay Interface Statistics To display the DHCP L2 Relay Interface Statistics page, click System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Statistics . A screen similar to the following displays. The following table describes the DHCP L2 Relay Interface Statistics fie[...]

Configuring System Information 57 ProSafe M5300 Switch UDP Relay The UDP Relay feature provides the ability for a router to forward configured UDP broadcast packets to a particular IP address. This allows applications to reach servers on non-local subnets. This is possible even when the application is designed to assume a server is always on a loca[...]

Configuring System Information 58 ProSafe M5300 Switch • rip - Relay RIP (UDP port 520) packets • tacacs - Relay TACACS (UDP port 49) packet • tftp - Relay TFTP (UDP port 69) packets • time - Relay time service (UDP port 37) packets • Other - If this option is selected, the UDP Port Other Value is enabled. This option permits a user to en[...]

Configuring System Information 59 ProSafe M5300 Switch • ntp - Relay network time protocol (UDP port 123) packets. • pim-auto-rp - Relay PIM auto RP (UDP port 496) packets. • rip - Relay RIP (UDP port 520) packets • tacacs - Relay TACACS (UDP port 49) packet • tftp - Relay TFTP (UDP port 69) packets • time - Relay time service (UDP port[...]

Configuring System Information 60 ProSafe M5300 Switch DHCPv6 Server Configuration To display the DHCP Server Configuration page, click System > Services > DHCPv6 Server > DHCP Server Configuration . A screen similar to the following displays. To configure global DHCPv6 server settings: 1. Use Admin Mode to specify whether the DHCPv6 Servi[...]

Configuring System Information 61 ProSafe M5300 Switch[...]

Configuring System Information 62 ProSafe M5300 Switch To configure a DHCPv6 Pool: 1. From the Pool Name field, select Create and enter name for the Pool to be created. To modify information for an existing DHCPv6 pool, select the name of the pool to configure. 2. If you are configuring a new DHCPv6 pool, specify a unique name for the pool in the P[...]

Configuring System Information 63 ProSafe M5300 Switch 5. In the Valid Lifetime field, specify the valid lifetime, in seconds, for the delegated prefix. The values allowed are between 0 to 4294967295. 6. In the Prefer Lifetime field, specify the preferred lifetime, in seconds, for the delegated prefix. The values allowed are between 0 to 4294967295[...]

Configuring System Information 64 ProSafe M5300 Switch 5. In the Preferences field, specify the preference value used by clients to determine preference between multiple DHCPv6 servers. The values allowed are between 0 to 4294967295. The default value is 0. 6. Click APPLY to send the updated configuration to the switch. Configuration changes take e[...]

Configuring System Information 65 ProSafe M5300 Switch DHCPv6 Server Statistics To display the DHCP Server Statistics page, click System > Services > DHCPv6 Server > DHCPv6 Server Statistics . A screen similar to the following displays. The following table describes the DHCPv6 Server Statistics fields. Field Description Interface Select th[...]

Configuring System Information 66 ProSafe M5300 Switch DHCPv6 Relay The DHCPv6 Relay Agent allows for various sub-options to be attached to messages that are being relayed by the local switch to a DHCPv6 server. The DHCPv6 server may in turn use this information in determining an address to assign to a DHCPv6 client To display the DHCPv6 Relay Conf[...]

Configuring System Information 67 ProSafe M5300 Switch To configure the DHCPv6 Relay information for one or more interfaces: 1. Select the check box associated with each interface to configure, or select the check box in the heading row to apply the same configuration to all interfaces. 2. In the Admin Mode field, specify the DHCPv6 mode to configu[...]

Configuring System Information 68 ProSafe M5300 Switch Stacking A stackable switch is a switch that is fully functional operating as a stand-alone unit but can also be set-up to operate together with up to seven other switches. This group of switches shows the characteristics of a single switch while having the port capacity of the sum of the combi[...]

Configuring System Information 69 ProSafe M5300 Switch • Single IP address management through a web browser, the CLI, or SNMP. • Master-slave configuration. • The master retains configuration for entire stack. • Automatic detection of new members, with synchronization of firmware (upgrade or downgrade as needed). • Configuration updates a[...]

Configuring System Information 70 ProSafe M5300 Switch Stack Master Election All stack members are eligible stack masters. If the stack master becomes unavailable, the remaining stack members participate in electing a new stack master from among themselves. The following factors determine which switch is elected the stack master: • The switch tha[...]

Configuring System Information 71 ProSafe M5300 Switch Nonstop Forwarding Nonstop forwarding (NSF) allows the forwarding plane of stack units to continue to forward packets while the control and management planes restart as a result of a power failure, hardware failure, or software fault on the management unit. A nonstop forwarding failover can als[...]

Configuring System Information 72 ProSafe M5300 Switch Stack Configuration From this page, you can preconfigure stack members before adding them to the stack, change the unit number assigned to a stack member, and to select a new stack master or give management preference to one or more units. If you change the unit ID on a stack member, the member[...]

Configuring System Information 73 ProSafe M5300 Switch To change the settings for an existing stack member: 1. Select the check box next to the stack member to configure. 2. If desired, specify a new unit ID for the stack member in the Change to Switch ID field. The renumbering process causes the unit to reload. 3. Specify the switch type, priority[...]

Configuring System Information 74 ProSafe M5300 Switch The following table describes the Basic Stack Status fields. Field Description Unit ID The unit ID of the specific switch. Switch Description The description for the unit can be configured by the user. Serial Number The unique box serial number for this switch. Uptime The displays the relative [...]

Configuring System Information 75 ProSafe M5300 Switch To configure the mode of the stack ports: 1. Select the check box associated with the unit and port to configure: 2. From the Configured Stack Mode field, select the operating mode: • Stack . The port connects to the stack port on another stack member. This is the default value. • Ethernet [...]

Configuring System Information 76 ProSafe M5300 Switch Stack Port Diagnostics This page displays the diagnostics for all the stackable interfaces in the given stack. To display the Stack Port Diagnostics page, click System  Stacking  Advanced  Stack Port Diagnostics . A screen similar to the following is displayed. The following table desc[...]

Configuring System Information 77 ProSafe M5300 Switch Stack Firmware Synchronization To display the stack firmware synchronization configurations from the Stack Firmware Synchronization page, click System  Stacking  Advanced  Stack Firmware Synchronization . A screen similar to the following is displayed. To configure the Stack Firmware S[...]

Configuring System Information 78 ProSafe M5300 Switch NSF Use the NSF Summary page to enable nonstop forwarding feature on the stack, view operational status information, and to initiate a warm restart of the management unit. When nonstop forwarding is enabled, if the management unit of a stack fails, the backup unit takes over as the master witho[...]

Configuring System Information 79 ProSafe M5300 Switch 4. Click CANCEL to abandon the changes. 5. Click RESET to redisplay the page with the latest status values from the switch. Field Description Operation Status Indicates whether NSF is operational on the stack, which may differ from the Admin Status setting. If a unit that does not support NSF i[...]

Configuring System Information 80 ProSafe M5300 Switch Checkpoint Statistics Use the Checkpoint Statistics page to display information about the protocol and routing data that the management unit shares with the backup unit. To display the Checkpoint Statistics page, click System  Stacking  Advanced  NSF > Checkpoint Statistics . A scre[...]

Configuring System Information 81 ProSafe M5300 Switch The following table describes the fields on the Checkpoint Statistics page: Field Description Messages Checkpointed The number of messages sent from master unit to backup unit. Bytes Checkpointed How much data has been sent from master unit to the backup unit. Time Since Counters Cleared The am[...]

Configuring System Information 82 ProSafe M5300 Switch PoE (M5300-28G-POE+ and M5300-52G-POE+ Only) Copper Ethernet ports 1–24 on the M5300-28G-POE+ and copper Ethernet ports 1–48 on the M5300-52G-POE+ are PoE+ (IEEE 802.3at) compliant ports. Each port is capable of delivering up to 30W of reliable, uninterrupted power to connected PoE-powered [...]

Configuring System Information 83 ProSafe M5300 Switch Basic PoE Configuration Use the PoE Configuration page to view global PoE power information and to configure PoE settings. To display the Basic PoE Configuration page, click System > Services > PoE > Basic > PoE Configuration . A screen similar to the following displays. To configur[...]

Configuring System Information 84 ProSafe M5300 Switch The PoE Configuration page also provides the following information: Field Description Firmware Version Version of the PoE controller's FW image. Power Status Indicates whether the PoE capability is on or off. Nominal Power Indicates the nominal amount of power the switch can provide to all[...]

Configuring System Information 85 ProSafe M5300 Switch To configure PoE Port settings: 1. Select the check box next to the port to configure. Select multiple check boxes to apply the same settings to each selected port. Select the check box in the heading row to apply the same settings to all ports. 2. Configure or view the settings: • Admin Mode[...]

Configuring System Information 86 ProSafe M5300 Switch • Class . View the class of the PD connected to the port. The class defines the range of power a PD is drawing from the system. The class is defined as: • 0 : 0.44–12.95W • 1 : 0.44–3.83W • 2 : 3.84–6.48W • 3 : 6.49–12.95W • 4 : 12.95–25.50W (802.3at Type 2 devices only) ?[...]

Configuring System Information 87 ProSafe M5300 Switch SNMP From SNMP link under the System tab, you can configure SNMP settings for SNMP V1/V2 and SNMPv3. From the SNMP link, you can access the following pages: • SNMPV1/V2 on page 87 • SNMP V3 User Configuration on page 92 SNMPV1/V2 The pages under the SNMPV1/V2 menu allow you to configure SNM[...]

Configuring System Information 88 ProSafe M5300 Switch To configure SNMPv1/v2 communities: 1. Use Community Name to reconfigure an existing community, or to create a new one. Use this pull-down menu to select one of the existing community names, or select 'Create' to add a new one. A valid entry is a case-sensitive string of up to 16 char[...]

Configuring System Information 89 ProSafe M5300 Switch Trap Configuration This page displays an entry for every active Trap Receiver. To access this page, click System  SNMP  SNMP V1/V2  Trap Configuration . To configure SNMPv1/v2 traps: 1. To add a host that will receive SNMP traps, enter trap configuration information in the available fi[...]

Configuring System Information 90 ProSafe M5300 Switch Trap Flags Use the Trap Flags page to enable or disable traps. When the condition identified by an active trap is encountered by the switch, a trap message is sent to any enabled SNMP Trap Receivers, and a message is written to the trap log. To access the Trap Flags page, click System  SNMP [...]

Configuring System Information 91 ProSafe M5300 Switch 5. Use ACL to enable or disable activation of ACL traps by selecting the corresponding radio button. The factory default is disabled. 6. Use PoE to enable or disable activation of PoE traps by selecting the corresponding radio button. The factory default is enabled. Indicates whether PoE traps [...]

Configuring System Information 92 ProSafe M5300 Switch SNMP V3 User Configuration To access this page, click System  SNMP  SNMP V3  User Configuration . A screen similar to the following displays. To configure SNMPv3 settings for the user account: 1. Use User Name to specify the user account to be configured. 2. SNMP v3 Access Mode - Indic[...]

Configuring System Information 93 ProSafe M5300 Switch LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN. From the L[...]

Configuring System Information 94 ProSafe M5300 Switch LLDP Global Configuration Use the LLDP Global Configuration page to specify LLDP parameters that are applied to the switch. To display this page, click System  LLDP  Global Configuration . A screen similar to the following displays. To configure global LLDP settings: 1. Use Transmit Inter[...]

Configuring System Information 95 ProSafe M5300 Switch LLDP Interface Configuration To display this page, click System  LLDP  Interface Configuration . A screen similar to the following displays. 1. Use Port to specify the list of ports on which LLDP - 802.1AB can be configured. 2. Link Status indicates whether the Link is up or down. 3. Use [...]

Configuring System Information 96 ProSafe M5300 Switch LLDP Statistics To display this page, click System  LLDP  Statistics . A screen similar to the following displays. The following table describes the LLDP Statistics fields. Field Description Last Update Specifies the time when an entry was created, modified or deleted in the tables associ[...]

Configuring System Information 97 ProSafe M5300 Switch LLDP Local Device Information To display this page, click System  LLDP  Local Device Information . A screen similar to the following displays. Receive Total Specifies the number of valid LLDP frames received by this LLDP agent on the corresponding port, while the LLDP agent is enabled. Di[...]

Configuring System Information 98 ProSafe M5300 Switch To view LLDP information transmitted by an interface, select the desired interface from the Interface menu. The following table describes the LLDP Local Device Information fields. Field Description Chassis ID Subtype Specifies the string that describes the source of the chassis identifier. Chas[...]

Configuring System Information 99 ProSafe M5300 Switch LLDP Remote Device Information This page displays information on remote devices connected to the port. To display this page, click System  LLDP  Remote Device Information . A screen similar to the following displays. To view LLDP information received by an interface, select the desired in[...]

Configuring System Information 100 ProSafe M5300 Switch LLDP Remote Device Inventory To display this page, click System  LLDP  LLDP  Remote Device Inventory . A screen similar to the following displays. The following table describes the LLDP Remote Device Inventory fields. Field Description Port Specifies the list of all the ports on which[...]

Configuring System Information 101 ProSafe M5300 Switch LLDP-MED Global Configuration Use the LLDP-MED Global Configuration page to specify LLDP-MED parameters that are applied to the switch. To display this page, click System  LLDP  LLDP-MED  Global Configuration . A screen similar to the following displays. To configure global LLDP-MED s[...]

Configuring System Information 102 ProSafe M5300 Switch LLDP-MED Interface Configuration To display this page, click System  LLDP  LLDP-MED  Interface Configuration . A screen similar to the following displays. To configure LLDP-MED interface settings: 1. To configure LLDP-MED settings on one or more interfaces, select the check box associ[...]

Configuring System Information 103 ProSafe M5300 Switch LLDP-MED Local Device Information To display this page, click System  LLDP  LLDP-MED  Local Device Information . A screen similar to the following displays.[...]

Field Description Network Policy Information: Specifies if network policy TLV is present in the LLDP frames. Media Application Type Specifies the application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling. Each application type that [...]

Configuring System Information 105 ProSafe M5300 Switch LLDP-MED Remote Device Information To display this page, click System  LLDP  LLDP-MED  Remote Device Information . A screen similar to the following displays. To view LLDP-MED information received by an interface, select the desired interface from the Interface menu.[...]

Configuring System Information 106 ProSafe M5300 Switch The following table describes the LLDP-MED Remote Device Information fields. Field Description Remote ID Specifies the remote client identifier assigned to the remote system. Capability Information: Specifies the supported and enabled capabilities that was received in MED TLV on this port. Sup[...]

Configuring System Information 107 ProSafe M5300 Switch Inventory Information: Specifies if inventory TLV is received in LLDP frames on this port. Hardware Revision Specifies hardware version of the remote device. Firmware Revision Specifies Firmware version of the remote device. Software Revision Specifies Software version of the remote device. Se[...]

Configuring System Information 108 ProSafe M5300 Switch LLDP-MED Remote Device Inventory To display this page, click System  LLDP  LLDP-MED  Remote Device Inventory . A screen similar to the following displays. The following table describes the LLDP-MED Remote Device Inventory fields. Field Definition Port Specifies the list of all the por[...]

Configuring System Information 109 ProSafe M5300 Switch ISDP The Industry Standard Discovery Protocol (ISDP) is a proprietary Layer 2 network protocol which inter-operates with Cisco® devices running the Cisco Discovery Protocol (CDP). ISDP is used to share information between neighboring devices. ISDP software participates in the CDP protocol and[...]

Field Description Neighbors table last time changed The amount of time that has passed since the ISDP neighbor table was updated. Device ID The Device ID advertised by this device. The format of this Device ID is characterized by the value of Device ID Format object. Device ID format capability Indicates the Device ID format capability of the devic[...]

Configuring System Information 111 ProSafe M5300 Switch ISDP Interface Configuration To display this page, click System  ISDP  Advanced  Interface Configuration . A screen similar to the following displays. To configure per-interface ISDP settings: 1. To configure ISDP settings on one or more interfaces, select the check box associated wit[...]

Field Description Device ID The device ID of the ISDP neighbor. Interface The interface on which the neighbor is discovered. Address Displays the address of the neighbor. Capability Displays the capability of the neighbor. These are supported: • Router • Trans Bridge • Source Route • Switch • Host • IGMP • Repeater Platform Display th[...]

Configuring System Information 113 ProSafe M5300 Switch ISDP Statistics Use the ISDP Statistics page to view information about the ISDP packets sent and received by the switch. To display this page, click System  ISDP  Advanced  Statistics . A screen similar to the following displays. The following table describes the ISDP Statistics field[...]

Configuring System Information 114 ProSafe M5300 Switch Timer Schedule The Timer Schedule feature allows you to configure time ranges to use in time-based access control list (ACL) rules. For switches that support PoE+, timers can also control when power can and cannot be delivered to the port. Time-based ACLs allow one or more rules within an ACL [...]

Configuring System Information 115 ProSafe M5300 Switch 3. Click ADD to add the new timer schedule with a specified name. The configuration changes take effect immediately. 4. To remove a configured timer, select the entry to remove and click DELETE . The configuration changes take effect immediately. 5. Click CANCEL to cancel the configuration on [...]

Periodic Timer Absolute Timer Configuring System Information 116 ProSafe M5300 Switch To configure a timer schedule: 1. Select the name of the schedule created on the Timer Global Configuration page. 2. Specify the type of timer to configure: • Absolute . The timer occurs once. • Periodic . The timer occurs periodically at regular intervals. Th[...]

Configuring System Information 117 ProSafe M5300 Switch 6. Use the Recurrence Pattern to show with what period the event will repeat. These fields are available only if the scheduler type is periodic. If recurrence is not needed (a timer schedule should be triggered just once), then set 'Date Stop' as equal to 'Date Start'. Ther[...]

Configuring System Information 118 ProSafe M5300 Switch[...]

119 3 3. Configuring Switching Information Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: • VLANs on page 119 • Auto-VoIP Configuration on page 134 • iSCSI on page 139 • Spanning Tree Protocol on page 143 • Multicast on page 156 • MVR Configuration on page 17[...]

Configuring Switching Information 120 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • VLAN Configuration on page 120 VLAN Configuration Use the VLAN Configuration page to define VLAN groups stored in the VLAN membership table. Each switch in the ProSafe family supports up to 1024 VLANs. Two VLANs are created [...]

Configuring Switching Information 121 ProSafe M5300 Switch • All ports are configured with Ingress Filtering disabled. • All ports are configured to transmit only untagged frames. • GVRP is disabled on all ports and all dynamic entries are cleared. Internal VLAN Configuration This section displays the allocation base and the allocation mode o[...]

Configuring Switching Information 122 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • VLAN Configuration on page 120 • VLAN Membership on page 122 • VLAN Status on page 124 • Port PVID Configuration on page 125 • MAC Based VLAN on page 126 • Protocol Based VLAN Group Configuration on page 127 [...]

Configuring Switching Information 123 ProSafe M5300 Switch To configure VLAN membership: 1. Use VLAN ID to select the VLAN ID for which you want to display or configure data. 2. Use Group Operation to select all the ports and configure them: • Untag All - Select all the ports on which all frames transmitted for this VLAN will be untagged. All the[...]

Configuring Switching Information 124 ProSafe M5300 Switch VLAN Status Use this page to display the status of all currently configured VLANs. To display the VLAN Status page, click Switching   VLAN  Advanced  VLAN Status . Field Definition VLAN ID The VLAN Identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093. VLAN Name Th[...]

Configuring Switching Information 125 ProSafe M5300 Switch Port PVID Configuration The Port PVID Configuration screen lets you assign a port VLAN ID (PVID) to an interface. There are certain requirements for a PVID: • All ports must have a defined PVID. • If no other value is specified, the default VLAN PVID is used. • If you want to change t[...]

Configuring Switching Information 126 ProSafe M5300 Switch 6. Ingress Filtering : • When enabled, the frame is discarded if this port is not a member of the VLAN with which this frame is associated. In a tagged frame, the VLAN is identified by the VLAN ID in the tag. In an untagged frame, the VLAN is the Port VLAN ID specified for the port that r[...]

Configuring Switching Information 127 ProSafe M5300 Switch Protocol Based VLAN Group Configuration You can use a protocol based VLAN to define filtering criteria for untagged packets. By default, if you do not configure any port- (IEEE 802.1Q) or protocol based VLANs, untagged packets will be assigned to VLAN 1. You can override this behavior by de[...]

Configuring Switching Information 128 ProSafe M5300 Switch 4. Use VLAN ID to select the VLAN ID. It can be any number in the range of 1 to 4093. All the ports in the group will assign this VLAN ID to untagged packets received for the protocols you included in this group. 5. Click ADD to add a new Protocol Based VLAN group to the switch. 6. Click DE[...]

Configuring Switching Information 129 ProSafe M5300 Switch IP Subnet Based VLAN IP Subnet to VLAN mapping is defined by configuring an entry in the IP Subnet to VLAN table. An entry is specified via a source IP address, network mask, and the desired VLAN ID. The IP Subnet to VLAN configurations are shared across all ports of the device. To display [...]

Configuring Switching Information 130 ProSafe M5300 Switch Port DVLAN Configuration Use this page to view and configure the double VLAN (DVLAN) tag settings for each interface. Double VLAN tagging allows service providers to create Virtual Metropolitan Area Networks (VMANs). With DVLAN tagging, service providers can pass VLAN traffic from one custo[...]

Configuring Switching Information 131 ProSafe M5300 Switch Voice VLAN Configuration Use this menu to configure the parameters for Voice VLAN Configuration. Voice VLAN enables ports to carry voice traffic that has a defined priority. Voice over IP (VoIP) traffic is inherently time-sensitive: for a network to provide acceptable service, the transmiss[...]

Configuring Switching Information 132 ProSafe M5300 Switch 6. Click APPLY to update the switch with the changes. 7. Click CANCEL to abandon the changes. Field Description Operational State This is the operational status of the voice vlan on the given interface. To be enabled, Voice VLAN must be globally enabled and enabled on the interface. Additio[...]

Configuring Switching Information 133 ProSafe M5300 Switch GARP Port Configuration Note: It can take up to 10 seconds for GARP configuration changes to take effect. To display the GARP Port Configuration page, click Switching   VLAN  Advanced  GARP Port Configuration . To configure the per-interface GARP settings: 1. Select the check bo[...]

Configuring Switching Information 134 ProSafe M5300 Switch 6. Use Leave All Time (centiseconds) to control how frequently LeaveAll PDUs are generated. A LeaveAll PDU indicates that all registrations will shortly be deregistered. Participants will need to rejoin in order to maintain registration. The Leave All Period Timer is set to a random value i[...]

Configuring Switching Information 135 ProSafe M5300 Switch To configure protocol-based Auto-VoIP settings: 1. From the Prioritization Type menu, select the method used to prioritize VoIP traffic when a call-control protocol is detected, which is one of the following: • Remark – Remark the voice traffic with the specified 802.1p priority value a[...]

Configuring Switching Information 136 ProSafe M5300 Switch OUI-Based The OUI-based Auto VoIP feature helps provide a classification mechanism for voice packets that include OUI bits so that they can be prioritized above data packets in order to provide better Quality of Service (QoS). From the OUI-based link, you can access the following pages: •[...]

Configuring Switching Information 137 ProSafe M5300 Switch OUI Port Settings Use this page to configure the OUI-based Auto VoIP administrative mode on the interfaces. To display the OUI Port Settings page, click Switching   Auto-VoIP > OUI-based > OUI Port Settings . To configure protocol-based Auto-VoIP settings: 1. Select the check bo[...]

Configuring Switching Information 138 ProSafe M5300 Switch OUI Table Use this page to add and remove Organizationally Unique Identifiers (OUIs) from the OUI database the device maintains. Device hardware manufacturers can include an OUI in a network adapter to help identify the device. The OUI is a unique 24-bit number assigned by the IEEE registra[...]

Configuring Switching Information 139 ProSafe M5300 Switch iSCSI The Internet Small Computer System Interface (iSCSI) feature helps network administrators track iSCSI traffic between iSCSI initiators and target systems. This is accomplished by monitoring, or snooping traffic to detect packets used by iSCSI stations in establishing iSCSI sessions an[...]

Configuring Switching Information 140 ProSafe M5300 Switch To configure global iSCSI settings: 1. In the iSCSI Status field, either Enable or Disable iSCSI optimization on the switch. The default is Disable. 2. In the QoS Profile field, select the quality of service profile that will be applied to iSCSI flows. • VLAN Priority Tag • DSCP By defa[...]

Configuring Switching Information 141 ProSafe M5300 Switch Sessions Use this page to view active iSCSI session information. To access the iSCSI Global Configuration page, click Switching > iSCSI > Basic > Sessions . Field Description Target Name Shows the name assigned to the iSCSI target. Initiator Name Shows the name of the initiator. IS[...]

Configuring Switching Information 142 ProSafe M5300 Switch To configure iSCSI target settings: 1. In the TCP Port field, specify the TCP port number for the target that will monitor for iSCSI traffic. The well-known iSCSI ports 3260 and 860 are configured as the default ports. 2. In the IP Address field, specify an IP address for the target that wi[...]

Configuring Switching Information 143 ProSafe M5300 Switch Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, Multiple STP, and Rapid STP. Classic STP pro[...]

Configuring Switching Information 144 ProSafe M5300 Switch To configure the global STP settings: 1. Use Spanning Tree Admin Mode to specify whether spanning tree operation is enabled on the switch. Value is enabled or disabled. 2. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch. The options are IEEE 802.1d,[...]

Field Description Configuration digest key Identifier used to identify the configuration currently being used. MST ID Table consisting of the MST instances (including the CST) and the corresponding VLAN IDs associated with each of them. VID ID Table consisting of the VLAN IDs and the corresponding FID associated with each of them. FID ID Table cons[...]

Configuring Switching Information 146 ProSafe M5300 Switch CST Configuration Use the Spanning Tree CST Configuration page to configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To display the Spanning Tree CST Configuration page, click Switching > STP > Advanced  CST Configuration . To configure CST settings: 1. [...]

Configuring Switching Information 147 ProSafe M5300 Switch the value must be less than or equal to (2 * Bridge Forward Delay) – 1 and greater than or equal to 2 * (Bridge Hello Time +1). The default value is 20. • Bridge Hello Time (secs) - Specifies the bridge Hello time for the Common and Internal Spanning Tree (CST), which indicates the amou[...]

Configuring Switching Information 148 ProSafe M5300 Switch CST Port Configuration Use the Spanning Tree CST Port Configuration page to configure Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. To display the Spanning Tree CST Port Configuration page, click Switching > STP > Advanced  CST Port Configu[...]

Configuring Switching Information 149 ProSafe M5300 Switch 4. Use Port Path Cost to set the Path Cost to a new value for the specified port in the common and internal spanning tree. It takes a value in the range of 1 to 200000000. 5. Use External Port Path Cost to set the External Path Cost to a new value for the specified port in the spanning tree[...]

Configuring Switching Information 150 ProSafe M5300 Switch CST Port Status Use the Spanning Tree CST Port Status page to display Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. To display the Spanning Tree CST Port Status page, click Switching > STP > Advanced  CST Port Status . The following table d[...]

Configuring Switching Information 151 ProSafe M5300 Switch MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch. To display the Spanning Tree MST Configuration page, click Switching > STP > Advanced  MST Configuration . Designated Root Root Bridge for the CST. It is made up [...]

Configuring Switching Information 152 ProSafe M5300 Switch To configure an MST instance: 1. To add an MST instance, configure the MST values and click ADD : • MST ID - Specify the ID of the MST to create. Valid values for this are between 1 and 4094. This is only visible when the select option of the MST ID select box is selected. • Priority - [...]

Configuring Switching Information 153 ProSafe M5300 Switch MST Port Status Use the Spanning Tree MST Port Status page to configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch. To display the Spanning Tree MST Port Status page, click Switching  STP  Advanced  MST Port Status . Note: If no MST instances[...]

Configuring Switching Information 154 ProSafe M5300 Switch To configure MST port settings: 1. Use MST ID to select one MST instance from existing MST instances. 2. Use Interface to select one of the physical or port channel interfaces associated with VLANs associated with the selected MST instance. 3. Use Port Priority to specify the priority for a[...]

Configuring Switching Information 155 ProSafe M5300 Switch STP Statistics Use the Spanning Tree Statistics page to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To display the Spanning Tree Statistics page, click Switching  STP  Advanced  STP Statistics . The followi[...]

Configuring Switching Information 156 ProSafe M5300 Switch Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. From the Multicast link, you can access the following pages: • MFDB on page 156 • IGMP Snooping on page 158 • [...]

Configuring Switching Information 157 ProSafe M5300 Switch MFDB Statistics Use this page to view statistical information about the multicast forwarding database (MFDB). To display the MFDB Statistics page, click Switching > Multicast > MFDB  MFDB Statistics . Field Description Max MFDB Table Entries The maximum number of entries that the M[...]

Configuring Switching Information 158 ProSafe M5300 Switch IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from[...]

Configuring Switching Information 159 ProSafe M5300 Switch IGMP Snooping Configuration Use the IGMP Snooping Configuration page to configure the parameters for IGMP snooping, which is used to build forwarding lists for multicast traffic. Note that only a user with Read/Write access privileges may change the data on this screen. To access the IGMP S[...]

Configuring Switching Information 160 ProSafe M5300 Switch IGMP Snooping Interface Configuration Use the IGMP Snooping Interface Configuration page to configure IGMP snooping settings on specific interfaces. To access the IGMP Snooping Interface Configuration page, click Switching   Multicast  IGMP Snooping  Interface Configuration . To[...]

Configuring Switching Information 161 ProSafe M5300 Switch IGMP VLAN Configuration Use the IGMP Snooping VLAN Configuration page to configure IGMP snooping settings for VLANs on the system. To access the IGMP Snooping VLAN Configuration page, click Switching   Multicast  IGMP Snooping  IGMP VLAN Configuration . To configure IGMP snoopin[...]

Configuring Switching Information 162 ProSafe M5300 Switch Multicast Router Configuration This page configures the interface as the one the multicast router is attached to. All IGMP packets snooped by the switch will be forwarded to the multicast router reachable from this interface. The configuration is not needed most of the time since the switch[...]

Configuring Switching Information 163 ProSafe M5300 Switch Multicast Router VLAN Configuration This page configures the interface to only forward the snooped IGMP packets that come from VLAN ID (<vlanId>) to the multicast router attached to this interface. The configuration is not needed most of the time since the switch will automatically de[...]

Configuring Switching Information 164 ProSafe M5300 Switch IGMP Snooping Querier Configuration Use this menu to configure the parameters for IGMP Snooping Querier. Note that only a user with Read/Write access privileges may change the data on this screen. To access this page, click Switching   Multicast  IGMP Snooping  Querier Configura[...]

Configuring Switching Information 165 ProSafe M5300 Switch IGMP Snooping Querier VLAN Configuration Use this page to configure IGMP queriers for use with VLANs on the network. To access this page, click Switching   Multicast  IGMP Snooping  Querier VLAN Configuration . To configure Querier VLAN settings: 1. To create a new VLAN ID for I[...]

Field Description Operational State Displays the operational state of the IGMP Snooping Querier on a VLAN. It can be in any of the following states: • Querier: Snooping switch is the Querier in the VLAN. The Snooping switch will send out periodic queries with a time interval equal to the configured querier query interval. If the snooping switch s[...]

Configuring Switching Information 167 ProSafe M5300 Switch MLD Snooping From the MLD Snooping link, you can access the following pages: • MLD Snooping Configuration on page 167 • MLD Snooping Interface Configuration on page 168 • MLD VLAN Configuration on page 169 • Multicast Router Configuration on page 170 • Multicast Router VLAN Config[...]

Configuring Switching Information 168 ProSafe M5300 Switch MLD Snooping Interface Configuration To access the MLD Snooping Interface Configuration page, click Switching   Multicast  MLD Snooping  Interface Configuration . 1. Select the check box associated with each interface you want to configure. Select the check box in the heading ro[...]

Configuring Switching Information 169 ProSafe M5300 Switch MLD VLAN Configuration To access the MLD VLAN Configuration page, click Switching   Multicast  MLD Snooping  MLD VLAN Configuration . 1. Use VLAN ID to set the VLAN IDs for which MLD Snooping is enabled. 2. Use Admin Mode to enable MLD Snooping for the specified VLAN ID. 3. Use [...]

Configuring Switching Information 170 ProSafe M5300 Switch Multicast Router Configuration To access the Multicast Router Configuration page, click Switching   Multicast  MLD Snooping  Multicast Router Configuration . 1. Select the check box associated with each interface you want to configure. Select the check box in the heading row to [...]

Configuring Switching Information 171 ProSafe M5300 Switch MLD Snooping Querier Configuration Use this menu to configure the parameters for MLD Snooping Querier. Note that only a user with Read/Write access privileges may change the data on this screen. To access the MLD Snooping Querier Configuration page, click Switching   Multicast  MLD[...]

Configuring Switching Information 172 ProSafe M5300 Switch MLD Snooping Querier VLAN Configuration To access the MLD Snooping Querier VLAN Configuration page, click Switching   Multicast  MLD Snooping  Querier VLAN Configuration . 1. VLAN ID - Specifies the VLAN ID on which MLD Snooping Querier is administratively enabled and VLAN exist[...]

Configuring Switching Information 173 ProSafe M5300 Switch MVR Configuration IGMP snooping helps limit multicast traffic when member ports are in the same VLAN; however, when ports belong to different VLANs, a copy of the multicast stream is sent to each VLAN that has member ports in the multicast group. MVR eliminates the need to duplicate the mul[...]

Field Definition MVR Max Multicast Groups Displays the maximum number of multicast groups that MVR supports. MVR Current Multicast Groups Displays current number of the MVR groups allocated. Configuring Switching Information 174 ProSafe M5300 Switch 3. Use MVR Global query response time to set the maximum time to wait for the IGMP reports membershi[...]

Configuring Switching Information 175 ProSafe M5300 Switch MVR Interface Configuration To display the MVR Interface Configuration page, click Switching > MVR > Advanced > MVR Interface Configuration . A screen similar to the following displays. 1. Use Interface to specify the interface you want to configure. 2. Use Admin Mode to Enable or [...]

Configuring Switching Information 176 ProSafe M5300 Switch MVR Group Membership To display the MVR Configuration page, click Switching > MVR > Advanced > MVR Group Membership . A screen similar to the following displays. 1. Use the Group IP to specify the IP multicast address of the MVR group for which you want to display or configure data[...]

Configuring Switching Information 177 ProSafe M5300 Switch Address Table From the Address Table link, you can access the following pages: • Basic on page 177 • Advanced on page 179 Basic From the Basic link, you can access the following pages: • Address Table on page 177 Address Table This table contains information about unicast entries for [...]

Configuring Switching Information 178 ProSafe M5300 Switch 1. Use Search By to search for MAC Addresses by MAC Address, VLAN ID, and port: • Searched by MAC Address - Select MAC Address from pull-down menu, enter the 6 byte hexadecimal MAC Address in two-digit groups separated by colons, for example 01:23:45:67:89:AB. Then click on the “Go” b[...]

Configuring Switching Information 179 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • Dynamic Addresses on page 179 • Address Table on page 177 • Static MAC Address on page 180 Dynamic Addresses This page allows the user to set the Address Aging Interval for the specified forwarding database. To dis[...]

Configuring Switching Information 180 ProSafe M5300 Switch Static MAC Address Use this page to configure static MAC addresses in the MAC address table. Each static MAC address can be associated with one or more interfaces and VLANs. Unlike dynamic MAC addresses in the MAC address table, static MAC addresses do not age out. To display the Static MAC[...]

Configuring Switching Information 181 ProSafe M5300 Switch Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages: • Port Configuration on page 181 • Port Description on page 182 Port Configuration Use the Port Co[...]

Configuring Switching Information 182 ProSafe M5300 Switch To configure port settings: 1. Select the check box associated with each Port to configure, or select the check box in the header row to apply the same settings to all ports. 2. Use STP Mode to select the Spanning Tree Protocol Administrative Mode for the port or LAG. The possible values ar[...]

Configuring Switching Information 183 ProSafe M5300 Switch To access the Port Description page, click Switching  Ports  Port Description . 1. Select the check box associated with each Port to configure, or select the check box in the header row to apply the same settings to all ports. 2. Use Port Description to enter the description string to[...]

Configuring Switching Information 184 ProSafe M5300 Switch Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, which increases fault tolerance and provides[...]

Configuring Switching Information 185 ProSafe M5300 Switch To configure LAG settings: 1. Use LAG Name to enter the name you want assigned to the LAG. You may enter any string of up to 15 alphanumeric characters. A valid name has to be specified in order to create the LAG. 2. Use Hash Mode to select the load-balancing mode used on a port-channel (LA[...]

Field Description LAG Description A description string attached to a LAG.. LAG ID Identification of the LAG. LAG State Indicates whether the Link is up or down. Configured Ports Indicate the ports that are members of this port-channel Active Ports Indicates the ports that are actively participating in the port-channel. Configuring Switching Informa[...]

Configuring Switching Information 187 ProSafe M5300 Switch 5. Use Link Trap to specify whether you want to have a trap sent when link status changes. The factory default is enable, which will cause the trap to be sent. 6. Use STP Mode to enable or disable the Spanning Tree Protocol Administrative Mode associated with the LAG. The possible values ar[...]

Configuring Switching Information 188 ProSafe M5300 Switch[...]

189 4 4. Routing The Routing tab contains links to the following features: • Routing Table on page 189 • IP on page 193 • IPv6 on page 201 • IPv6 on page 201 (Licensed Feature) • ARP on page 220 • RIP on page 225 (Licensed Feature) • OSPF on page 232 (Licensed Feature) • OSPFv3 on page 257 (Licensed Feature) • Router Discovery on [...]

Routing 190 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • Route Configuration on page 190 Route Configuration To display the Route Configuration page, click Routing   Routing Table  Basic  Route Configuration . Route Configuration 1. Use the Route Type field to specify default or static. If crea[...]

Routing 191 ProSafe M5300 Switch Learned Routes Field Description Route Type This field can be either default or static. If creating a default route, all that needs to be specified is the next hop IP address, otherwise each field needs to be specified. Network Address The IP route prefix for the destination. Subnet Mask Also referred to as the subn[...]

Routing 192 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • Route Configuration on page 190 • Route Preferences on page 192 Route Preferences Use this panel to configure the default preference for each protocol, e.g., 60 for static routes, 120 for RIP. These values are arbitrary values in the range of[...]

Routing 193 ProSafe M5300 Switch IP The IP folder contains links to the following web pages that configure and display IP routing data: • Basic on page 193 • Advanced on page 197 Basic From the Basic link, you can access the following pages: • IP Configuration on page 193 • Statistics on page 194 IP Configuration Use this menu to configure [...]

Routing 194 ProSafe M5300 Switch 5. Use ICMP Rate Limit Burst Size to control the ICMP error packets by specifying the number of ICMP error packets that are allowed per burst interval. By default, burst size is 100 packets. When burst interval is 0 then configuring this field is not a valid operation. Valid Burst Size must be in the range 1 to 200.[...]

Routing 195 ProSafe M5300 Switch Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error. IpInHdrErrors The number of input datagrams discarded due to errors in their IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors[...]

Routing 196 ProSafe M5300 Switch IpReasmFails The number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors, etc). Note that this is not necessarily a count of discarded IP fragments since some algorithms can lose track of the number of fragments by combining them as they are received. IpFragOKs The number [...]

Routing 197 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • IP Configuration on page 193 • Statistics on page 194 • IP Interface Configuration on page 197 • Secondary IP Address on page 200 IP Interface Configuration Use the IP Interface Configuration page to update IP interface data for this swit[...]

Routing 198 ProSafe M5300 Switch To configure IP routing on an interface: 1. Use Go To Interface to enter the Interface in unit/slot/port format and click Go . The entry corresponding to the specified interface is selected. 2. Use Port to select the interface for which data is to be displayed or configured. 3. Use Description to enter the descripti[...]

Routing 199 ProSafe M5300 Switch 4. Use IP Address Configuration Method to enter the method by which an IP address is configured on the interface. There are three methods: None, Manual, and DHCP. By default the method is None. Method 'None' should be used to reset the DHCP method. Note: When the configuration method is changed from DHCP t[...]

Field Description VLAN ID Displays the VLAN ID for the interface. Link State The state of the specified interface is either Active or Inactive. An interface is considered active if it the link is up and it is in forwarding state. OSPF Admin Mode Displays OSPF admin mode of the interface. The default value is disable. Routing 200 ProSafe M5300 Switc[...]

Routing 201 ProSafe M5300 Switch IPv6 IPv6 is the next generation of the Internet Protocol. With 128-bit addresses, versus 32-bit addresses for IPv4, IPv6 solves the address depletion issues seen with IPv4 and removes the requirement for Network Address Translation (NAT), which is used in IPv4 networks to reduce the number of globally unique IP add[...]

Routing 202 ProSafe M5300 Switch IPv6 Global Configuration Use the Global Configuration page to enable IPv6 forwarding on the router and to enable the forwarding of IPv6 unicast datagrams. To display the IPv6 Global Configuration page, click Routing  IPv6  Basic  Global Configuration . To configure global IPv6 routing: 1. Use IPv6 Unica[...]

Routing 203 ProSafe M5300 Switch IPv6 Route Table Use the IPv6 Route Table page to display all active IPv6 routes and their settings. To display the IPv6 Route Table page, click Routing  IPv6  Basic  Route Table . To view the IPv6 route table: 1. Use Routes Displayed to choose from: • Configured Routes - Shows the routes configured by[...]

Routing 204 ProSafe M5300 Switch Advanced From the Basic link, you can access the following pages: • IPv6 Global Configuration on page 202 • IPv6 Interface Configuration on page 204 • IPv6 Prefix Configuration on page 206 • IPv6 Statistics on page 207 • IPv6 Neighbor Table on page 212 • IPv6 Route Configuration on page 214 • IPv6 Rout[...]

Routing 205 ProSafe M5300 Switch To configure IPv6 interface information: 1. Use Interface to select the interface to be configured or displayed. All physical interfaces are valid. 2. Use IPv6 Mode to enable/disable IPv6 mode. When IPv6 mode is enabled, interface is capable of IPv6 operation without a global address. In this case, an EUI-64 based l[...]

Routing 206 ProSafe M5300 Switch IPv6 Prefix Configuration Use this page to manually configure an IPv6 address for an interface. To display the IPv6 Prefix Configuration page, click Routing  IPv6  Advanced  Prefix Configuration . To configure IPv6 address information for an interface: 1. Use Interface to select the interface to be confi[...]

Routing 207 ProSafe M5300 Switch IPv6 Statistics Use the IPv6 Statistics page to display IPv6 traffic statistics for one or all interfaces. To display the IPv6 Statistics page, click Routing  IPv6  Advanced  Statistics . The following image shows some, but not all, of the statistics the page displays.[...]

Routing 208 ProSafe M5300 Switch To view statistics for an IPv6 interface, select the interface with the information to view from the Interface menu. When the selection is changed, a screen refresh will occur causing all fields to be updated for the newly selected port. IPv6 Statistics Field Description Total Datagrams Received The total number of [...]

Routing 209 ProSafe M5300 Switch Datagrams Successfully Reassembled The number of IPv6 datagrams successfully reassembled. Note that this counter is incremented at the interface to which these datagrams were addressed which might not be necessarily the input interface for some of the fragments. Datagrams Failed To Reassemble The number of failures [...]

Routing 210 ProSafe M5300 Switch ICMPv6 Statistics Field Description Total ICMPv6 Messages Received The total number of ICMP messages received by the interface which includes all those counted by ipv6IfIcmpInErrors. Note that this interface is the interface to which the ICMP messages were addressed which may not be necessarily the input interface f[...]

Routing 211 ProSafe M5300 Switch Total ICMPv6 Messages Transmitted The total number of ICMP messages which this interface attempted to send. Note that this counter includes all those counted by icmpOutErrors. ICMPv6 Messages Not Transmitted Due To Error The number of ICMP messages which this interface did not send due to problems discovered within [...]

Routing 212 ProSafe M5300 Switch IPv6 Neighbor Table Use the IPv6 Neighbor Table page to display IPv6 neighbor details for a specified interface. To display the IPv6 Neighbor Table page, click Routing  IPv6  Advanced  Neighbor Table . To search for an entry in the IPv6 neighbor table, use the Search By menu to specify the search criteri[...]

Routing 213 ProSafe M5300 Switch Neighbor State Specifies the state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache: • Incmp - Address resolution is being performed on the entry. A neighbor solicitation message has been sent to the solicited-node multicast address of the target, but t[...]

Routing 214 ProSafe M5300 Switch IPv6 Route Configuration Use this page to configure static IPv6 routes. To display the IPv6 Route Configuration page, click Routing  IPv6  Advanced  Static Route Configuration . To configure a static IPv6 route: 1. Use IPv6 Prefix/Prefix Length to enter the Network Prefix and Prefix Length for the Config[...]

Routing 215 ProSafe M5300 Switch IPv6 Route Preferences Use this panel to configure the default preference for each protocol. These values are arbitrary values in the range of 1 to 255 and are independent of route metrics. Most routing protocols use a route metric to determine the shortest path known to the protocol, independent of any other protoc[...]

Routing 216 ProSafe M5300 Switch Tunnel Configuration ProSafe software provides for the creation, deletion, and management of tunnel interfaces. These are dynamic interfaces that are created and deleted via user-configuration. ProSafe support configured IPv6 over IPv4 tunnels to facilitate the transition of IPv4 networks to IPv6 networks. With conf[...]

Routing 217 ProSafe M5300 Switch 9. Use Destination Address to specify the destination address for this tunnel in dotted decimal notation. 10. Click ADD to allow the user to configure a new tunnel. 11. Click DELETE to delete the corresponding tunnel. 12. Click CANCEL to discard the changes made on the page and navigate back to the referring page.[...]

Routing 218 ProSafe M5300 Switch VLAN You can configure ProSafe M5300 Switch software with some ports supporting VLANs and some supporting routing. You can also configure the software to allow traffic on a VLAN to be treated as if the VLAN were a router port. When a port is enabled for bridging (default) rather than routing, all normal bridge proce[...]

Routing 219 ProSafe M5300 Switch To configure a VLAN routing interface by using the VLAN Routing Wizard: 1. Use VLAN ID to specify the VLAN Identifier (VID) associated with this VLAN. The range of the VLAN ID is 1 to 4093. 2. Use Ports to display selectable physical ports and LAGs (if any). Selected ports will be added to the Routing VLAN. Each por[...]

Routing 220 ProSafe M5300 Switch 3. Use Subnet Mask to enter the Subnet Mask to be configured for the VLAN Routing Interface. 4. Click ADD to add the VLAN Routing Interface specified in the VLAN ID field to the switch configuration. 5. Click DELETE to remove the VLAN Routing Interface specified in the VLAN ID field from the switch configuration. Fi[...]

Routing 221 ProSafe M5300 Switch Basic From the Basic link, you can access the following pages: • ARP Cache on page 221 ARP Cache Use this screen to show ARP entries in the ARP Cache. To display the ARP Cache page, click Routing   ARP  Basic  ARP Cache . To view the ARP cache 1. Use Port to select the associated Unit/Slot/Port of the [...]

Routing 222 ProSafe M5300 Switch Static ARP Cache To display the Static ARP Cache page, click Routing   ARP  Advanced  ARP Create . ARP Static Configuration Use this screen to add an entry to the Address Resolution Protocol table. 1. Use IP Address to enter the IP address you want to add. It must be the IP address of a device on a subne[...]

Routing 223 ProSafe M5300 Switch ARP Table Configuration You can use this screen to change the configuration parameters for the Address Resolution Protocol Table. You can also use this screen to display the contents of the table. To display the ARP Table Configuration page, click Routing   ARP  Advanced  ARP Table Configuration . To con[...]

Routing 224 ProSafe M5300 Switch • Specific Static Entry - Selecting this allows the user to specify the required IP Address. • None - Selected if the user does not want to delete any entry from the ARP Table. 7. Use Remove IP Address to enter the IP Address against the entry that is to be removed from the ARP Table. This appears only if the us[...]

Routing 225 ProSafe M5300 Switch RIP Note: RIP is a licensed feature and is available only on switches that have an active license installed. RIP is an Interior Gateway Protocol (IGP) based on the Bellman-Ford algorithm and targeted at smaller networks (network diameter no greater than 15 hops). The routing information is propagated in RIP update p[...]

Routing 226 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • RIP Configuration (Advanced) on page 226 • Interface Configuration on page 227 • Route Redistribution on page 230 RIP Configuration (Advanced) Use the RIP Configuration page to enable and configure or disable RIP in Global mode and to confi[...]

Routing 227 ProSafe M5300 Switch 6. Use Default Metric to set a default for the metric of redistributed routes. This field displays the default metric if one has already been set or blank if not configured earlier. The valid values are 1 to 15. Field Description Global Route Changes The number of route changes made to the IP Route Database by RIP. [...]

Routing 228 ProSafe M5300 Switch 3. Use Receive Version to select what RIP control packets the interface will accept from the pull-down menu. The value is one of the following: • RIP-1 - Accept only RIP version 1 formatted packets. • RIP-2 - Accept only RIP version 2 formatted packets. The default is RIP-2. • Both - Accept packets in either f[...]

Routing 229 ProSafe M5300 Switch Send Version Displays the version of RIP control packets the interface should send from the pull-down menu. The value is one of the following: • RIP-1 - send RIP version 1 formatted packets via broadcast. • RIP-1c - RIP version 1 compatibility mode. Send RIP version 2 formatted packets via broadcast. • RIP-2 -[...]

Routing 230 ProSafe M5300 Switch Route Redistribution Use the RIP Route Redistribution page to configure which routes are redistributed to other routers using RIP. The allowable values for each fields are displayed next to the field. If any invalid values are entered, an alert message is displayed with the list of all the valid values. To display t[...]

Routing 231 ProSafe M5300 Switch The source IP address is compared to the destination IP address of the route. The source IP netmask in the access list rule is treated as a wildcard mask, indicating which bits in the source IP address must match the destination address of the route. (Note that a 1 in the mask indicates a “don't care” in th[...]

Routing 232 ProSafe M5300 Switch OSPF Note: OSPF is a licensed feature and is available only on switches that have an active license installed. From the OSPF link, you can access the following pages: • Basic on page 232 • Advanced on page 233 Basic From the Basic link, you can access the following pages: • OSPF Configuration (Basic) on page 2[...]

Routing 233 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • OSPF Configuration (Advanced) on page 234 • Common Area Configuration on page 237 • Stub Area Configuration on page 238 • NSSA Area Configuration on page 239 • Area Range Configuration on page 241 • Interface Configuration on page 242[...]

Routing 234 ProSafe M5300 Switch OSPF Configuration (Advanced) Use the OSPF Configuration page to enable OSPF on a router and to configure the related OSPF settings. To display the OSPF Configuration page, click Routing  OSPF  Advanced  OSPF Configuration . Default Route Advertise Configuration 1. When Default Information Originate is e[...]

Routing 235 ProSafe M5300 Switch 3. Use Metric to specify the metric of the default route. The range of valid values is 0 to 16777214. 4. Use Metric Type to set the OSPF metric type of the default route. Two types are supported: • External Type 1 • External Type 2 - Default is External Type 2. OSPF Configuration 1. Use Router ID to specify the [...]

Routing 236 ProSafe M5300 Switch 9. Use Default Metric to set a default for the metric of redistributed routes. This field is blank if a default metric has not been configured. The range of valid values is 1 to 16777214. 10. Use Maximum Paths to set the number of paths that OSPF can report for a given destination. The range of valid values is 1 to [...]

Routing 237 ProSafe M5300 Switch Common Area Configuration The OSPF Common Area Configuration page lets you create a Common Area Configuration once you have enabled OSPF on an interface. At least one router must have OSPF enabled for this web page to display. To display the Common Area Configuration page, click Routing  OSPF  Advanced  [...]

Routing 238 ProSafe M5300 Switch Stub Area Configuration To display the Stub Area Configuration page, click Routing  OSPF  Advanced  Stub Area Configuration . To configure an OSPF stub area: 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32-bit integer in dotted decimal format that uniquely identifies the area to which a rout[...]

Routing 239 ProSafe M5300 Switch NSSA Area Configuration To display the NSSA Area Configuration page, click Routing  OSPF  Advanced  NSSA Area Configuration . To configure an OSPF NSSA area: 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32-bit integer in dotted decimal format that uniquely identifies the area to which a rout[...]

Field Description SPF Runs The number of times that the intra-area route table has been calculated using this area's link-state database. This is typically done using Dijkstra's algorithm. Area Border Router Count The total number of area border routers reachable within this area. This is initially zero, and is calculated in each SPF Pass[...]

Routing 241 ProSafe M5300 Switch Area Range Configuration Use the OSPF Area Range Configuration page to configure and display an area range for a specified NSSA. To display the Area Range Configuration page, click Routing  OSPF  Advanced  Area Range Configuration . To configure an OSPF area range: 1. Use Area ID to specify the area for [...]

Routing 242 ProSafe M5300 Switch Interface Configuration Use the OSPF Interface Configuration page to configure an OSPF interface. To display the Interface Configuration page, click Routing  OSPF  Advanced  Interface Configuration . To configure an interface for OSPF: 1. Use the check boxes to the left of the Interface field to select e[...]

Routing 243 ProSafe M5300 Switch 3. Use Admin Mode * to select enable or disable. The default value is 'disable.' You can configure OSPF parameters without enabling OSPF Admin Mode, but they will have no effect until you enable Admin Mode. The following information will be displayed only if the Admin Mode is enabled: State, Designated Rou[...]

Routing 244 ProSafe M5300 Switch 12. Use Authentication Type to select an authentication type other than none. You can select the authentication type from the pull-down menu. The choices are: • None: This is the initial interface state. If you select this option from the pull-down menu, no authentication protocols will be run. • Simple - If you[...]

Routing 245 ProSafe M5300 Switch State The current state of the selected router interface. One of: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values. All interface timers will be disabled, and [...]

Routing 246 ProSafe M5300 Switch OSPF Interface Statistics This screen displays statistics for the selected interface. The information will be displayed only if OSPF is enabled. To display the OSPF Interface Statistics page, click Routing  OSPF  Advanced  OSPF Interface Statistics . To view OSPF statistics for an interface, select the i[...]

Routing 247 ProSafe M5300 Switch Interface Events The number of times the specified OSPF interface has changed its state, or an error has occurred. Virtual Events The number of state changes or errors that have occurred on this virtual link. Neighbor Events The number of times this neighbor relationship has changed state, or an error has occurred. [...]

Routing 248 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen to show the latest interface statistics. Click CLEAR to clear all the statistics of the OSPF interface. Hellos Sent The number of Hello packets sent on this interface by this router. Hellos Received The number of Hello packets received on this interface by this router.[...]

Routing 249 ProSafe M5300 Switch OSPF Neighbor Table This screen displays the OSPF neighbor table list. When a particular neighbor ID is specified, detailed information about a neighbor is given. The information below will only be displayed if OSPF is enabled. To display the OSPF Neighbor Table page, click Routing  OSPF  Advanced  OSPF [...]

Routing 250 ProSafe M5300 Switch Click REFRESH to show the latest DHCP bindings information. Click CLEAR to clear all the neighbors in the table. State The state of a neighbor can be the following: • Down - This is the initial state of a neighbor conversation. It indicates that there has been no recent information received from the neighbor. On N[...]

Routing 251 ProSafe M5300 Switch Link State Database Use the OSPF Link State Database page to display OSPF link state information. To display the Link State Database page, click Routing  OSPF  Advanced  Link State Database . Field Description Router ID The 32-bit integer in dotted decimal format that uniquely identifies the router withi[...]

Routing 252 ProSafe M5300 Switch Click REFRESH to show the latest OSPF Link State information. Virtual Link Configuration Use the OSPF Virtual Link Configuration page to create or configure virtual interface information for a specific area and neighbor. A valid OSPF area must be configured before this page can be displayed. To display the Virtual L[...]

Routing 253 ProSafe M5300 Switch 3. Use Hello Interval to enter the OSPF hello interval for the specified interface in seconds. This parameter must be the same for all routers attached to a network. Valid values range from 1 to 65,535. The default is 10 seconds. 4. Use Dead Interval to enter the OSPF dead interval for the specified interface in sec[...]

Field Description Neighbor State The OSPF interface state, it can be these values: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values. All interface timers will be disabled, and there will be no[...]

Routing 255 ProSafe M5300 Switch Route Redistribution This screen can be used to configure the OSPF Route Redistribution parameters. The allowable values for each fields are displayed next to the field. If any invalid values are entered, an alert message will be displayed with the list of all the valid values. To display the Route Redistribution pa[...]

Routing 256 ProSafe M5300 Switch NSF OSPF Summary Use the NSF OSPF Configuration page to configure the non-stop forwarding (NSF) support mode and to view NSF summary information for the OSPF feature. NSF is a feature used in switch stacks to maintain switching and routing functions in the event of a stack unit failure. For information about NSF, se[...]

Routing 257 ProSafe M5300 Switch OSPFv3 OSPFv3 is the Open Shortest Path First routing protocol for IPv6. It is similar to OSPFv2 in its concept of a link state database, intra/inter area, and AS external routes and virtual links. It differs from its IPv4 counterpoint in a number of respects, including the following: peering is done via link-local [...]

Routing 258 ProSafe M5300 Switch Note: *Once OSPFv3 is initialized on the router, it will remain initialized until the router is reset. 3. Click APPLY to update the switch with the changes. 4. Click CANCEL to abandon the changes. Advanced From the Advanced link, you can access the following pages: • OSPFv3 Configuration on page 259 • Common Are[...]

Routing 259 ProSafe M5300 Switch OSPFv3 Configuration Use the OSPFv3 Configuration page to activate and configure OSPFv3 for a switch. To display the OSPFv3 Configuration page, click Routing  OSPFv3  Advanced  OSPFv3 Configuration . Default Route Advertise 1. Use Default Information Originate to enable or disable Default Route Advertise[...]

Routing 260 ProSafe M5300 Switch OSPFv3 Configuration 1. Use Router ID to specify the 32-bit integer in dotted decimal format that uniquely identifies the router within the autonomous system (AS). If you want to change the Router ID you must first disable OSPFv3. After you set the new Router ID, you must re-enable OSPFv3 to have the change take eff[...]

Field Description ASBR Mode Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. Router automatically becomes an ASBR when it is configured to redistribute routes learnt from other protocol. ABR Status The values of this are enabled or disabled. Enabled implies that the router [...]

Routing 262 ProSafe M5300 Switch Common Area Configuration Use the Common Area Configuration page to create and configure an OSPFv3 area. To display the Common Area Configuration page, click Routing  OSPFv3  Advanced  Common Area Configuration . 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32 bit integer in dotted decimal f[...]

Routing 263 ProSafe M5300 Switch Stub Area Configuration To display the Stub Area Configuration page, click Routing  OSPFv3  Advanced  Stub Area Configuration . To configure an OSPFv3 stub area: 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32 bit integer in dotted decimal format that uniquely identifies the area to which a [...]

Routing 264 ProSafe M5300 Switch NSSA Area Configuration To display the NSSA Area Configuration page, click Routing  OSPFv3  Advanced  NSSA Area Configuration . 1. Use Area ID to enter the OSPF area ID. An Area ID is a 32-bit integer in dotted decimal format that uniquely identifies the area to which a router interface connects. 2. Use [...]

Routing 265 ProSafe M5300 Switch Area Range Configuration Use the Area Range Configuration page to configure OSPFv3 area ranges. To display the Area Range Configuration page, click Routing  OSPFv3  Advanced  Area Range Configuration . 1. Use Area ID to specify the area for which data is to be configured. 2. Use IPv6 Prefix to enter the [...]

Routing 266 ProSafe M5300 Switch Interface Configuration Use the OSPFv3 Interface Configuration page to create and configure OSPFv3 interfaces. To display the Interface Configuration page, click Routing  OSPFv3  Advanced  Interface Configuration . To configure an interface for OSPFv3 routing: 1. Interface - The interface for which data [...]

Routing 267 ProSafe M5300 Switch 4. Use Router Priority to enter the OSPFv3 priority for the selected interface. The priority of an interface is specified as an integer from 0 to 255. The default is 1, which is the highest router priority. A value of '0' indicates that the router is not eligible to become the designated router on this net[...]

Routing 268 ProSafe M5300 Switch Field Description IPv6 Address The IPv6 address of the interface. LSA Ack Interval The number of seconds between LSA Acknowledgment packet transmissions, which must be less than the Retransmit Interval. State The current state of the selected router interface. One of: • Down: This is the initial interface state. I[...]

Routing 269 ProSafe M5300 Switch Interface Statistics This screen displays statistics for the selected interface. The information will be displayed only if OSPFv3 is enabled. To display the Interface Statistics page, click Routing  OSPFv3  Advanced  Interface Statistics . Backup Designated Router The identity of the Backup Designated Ro[...]

Routing 270 ProSafe M5300 Switch Use Interface to select the interface for which data is to be displayed. Field Description OSPFv3 Area ID The OSPFv3 area to which the selected router interface belongs. An OSPFv3 Area ID is a 32 bit integer in dotted decimal format that uniquely identifies the area to which the interface connects. Area Border Route[...]

Routing 271 ProSafe M5300 Switch Invalid OSPF Packet Type The number of OSPFv3 packets discarded because the packet type field in the OSPFv3 header is not a known type. Hellos Ignored The number of received Hello packets that were ignored by this router from the new neighbors after the limit has been reached for the number of neighbors on an interf[...]

Routing 272 ProSafe M5300 Switch Neighbor Table This screen shows the OSPFv3 Neighbor Table. This information is displayed only if OSPFv3 is enabled and there exists at least on OSPFv3 enabled interface having a valid neighbor. To display the Neighbor Table page, click Routing  OSPFv3  Advanced  Neighbor Table . Field Description Interf[...]

Routing 273 ProSafe M5300 Switch Link State Database Use the OSPFv3 Link State Database page to display the link state database. To display the Link State Database page, click Routing  OSPFv3  Advanced  Link State Database . Field Description Router ID The 32 bit integer in dotted decimal format that uniquely identifies the router withi[...]

Routing 274 ProSafe M5300 Switch Click REFRESH to show the latest OSPFv3 Link State information. Age The time since the link state advertisement was first originated, in seconds. Sequence The sequence number field is a signed 32-bit integer. It is used to detect old and duplicate link state advertisements. The larger the sequence number, the more r[...]

Routing 275 ProSafe M5300 Switch Virtual Link Configuration Use the Virtual Link Configuration page to define a new or configure an existing virtual link. To display this page, a valid OSPFv3 area must be defined via the OSPFv3 Area Configuration page. To display the Virtual Link Configuration page, click Routing  OSPFv3  Advanced  Virt[...]

Field Description Neighbor State The state of the Virtual Neighbor Relationship. State The state of the interface: • Down: This is the initial interface state. In this state, the lower-level protocols have indicated that the interface is unusable. In this state, interface parameters will be set to their initial values. All interface timers will b[...]

Routing 277 ProSafe M5300 Switch Route Redistribution This screen can be used to configure the OSPFv3 Route Redistribution parameters. The allowable range for each field is displayed next to it. If an invalid value is entered in one or multiple fields, an alert message will be displayed with the list of all the valid values. To display the Route Re[...]

Routing 278 ProSafe M5300 Switch NSF OSPFv3 Summary Use the NSF OSPFv3 Summary page to configure the non-stop forwarding (NSF) support mode and to view NSF summary information for the OSPF feature. NSF is a feature used in switch stacks to maintain switching and routing functions in the event of a stack unit failure. For information about NSF, see [...]

Routing 279 ProSafe M5300 Switch Router Discovery The Router Discovery protocol is used by hosts to identify operational routers on the subnet. Router Discovery messages are of two types: Router Advertisements and Router Solicitations . The protocol mandates that every router periodically advertise the IP Addresses it is associated with. Hosts list[...]

Routing 280 ProSafe M5300 Switch VRRP The Virtual Router Redundancy protocol is designed to handle default router failures by providing a scheme to dynamically elect a backup router. The driving force was to minimize “black hole” periods due to the failure of the default gateway router during which all traffic directed towards it is lost until [...]

Routing 281 ProSafe M5300 Switch 3. Use Pre-empt Mode to select enable or disable. If you select enable, a backup router will preempt the master router if it has a priority greater than the master virtual router's priority provided the master is not the owner of the virtual router IP address. The default is enable. 4. Use Priority to enter the[...]

Routing 282 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • VRRP Configuration on page 280 • VRRP Secondary IP on page 282 • Tracking Configuration on page 283 • Virtual Router Statistics on page 284 VRRP Secondary IP To display the VRRP Secondary IP page, click Routing  VRRP  Advanced ?[...]

Routing 283 ProSafe M5300 Switch Tracking Configuration Use Tracking Configuration to track specific route IP states within the router that can alter the priority level of a virtual router for a VRRP group. To display the Tracking Configuration page, click Routing  VRRP  Advanced  Tracking Configuration . To configure VRRP tracking sett[...]

Routing 284 ProSafe M5300 Switch Virtual Router Statistics Use the Virtual Router Statistics page to display statistics for a specified virtual router. To display the Virtual Router Statistics page, click Routing  VRRP  Advanced  Statistics . Field Description Router Checksum Errors The total number of VRRP packets received with an inva[...]

Routing 285 ProSafe M5300 Switch Click REFRESH to show the latest VRRP information. Address List Errors The total number of packets received for which the address list does not match the locally configured list for the virtual router. Invalid Authentication Type The total number of packets received with an unknown authentication type. Authenticatio[...]

Routing 286 ProSafe M5300 Switch Multicast IP Multicasting enables a network host (or multiple hosts) to send an IP datagram to multiple destinations simultaneously. The initiating host sends each multicast datagram only once to a destination multicast group address, and multicast routers forward the datagram only to hosts who are members of the mu[...]

Routing 287 ProSafe M5300 Switch Mroute Table This screen displays contents of the Mroute Table in tabular form. To display the Mroute Table page, click Routing  Multicast  Mroute Table . Field Description Source IP The IP address of the multicast packet source to be combined with the Group IP to fully identify a single route whose Mroute [...]

Routing 288 ProSafe M5300 Switch Multicast Global Configuration To display the Multicast Global Configuration page, click Routing  Multicast  Global Configuration . Use Admin Mode to set the administrative status of Multicast Forwarding in the router. The default is disable. If you change the administrative mode, click APPLY to update the [...]

Routing 289 ProSafe M5300 Switch Multicast Interface Configuration To display the Multicast Interface Configuration page, click Routing  Multicast  Interface Configuration . To configure the TTL threshold for one or more interfaces: 1. Select the check box associated with each interface you want to configure. Select the check box in the he[...]

Routing 290 ProSafe M5300 Switch DVMRP DVMRP is an interior gateway protocol that is suitable for routing multicast traffic within an autonomous system (AS). DVMRP should not be used between different autonomous systems due to limitations with hop count and scalability. Note: Only one multicast routing protocol can be operational on the switch at a[...]

Routing 291 ProSafe M5300 Switch DVMRP Global Configuration To display the Global Configuration page, click Routing  Multicast  DVMRP  Global Configuration . To configure global DVMRP settings: 1. Use Admin Mode to set the administrative status of DVMRP to active or inactive. The default is disable. Field Description Version The current[...]

Routing 292 ProSafe M5300 Switch To configure per-interface DVMRP settings: 1. Use Interface to select the interface for which data is to be configured. 2. Use Interface Mode to set the administrative mode of the selected DVMRP routing interface. 3. Use Interface Metric to enter the DVMRP metric for the selected interface. This value is sent in DVM[...]

Routing 293 ProSafe M5300 Switch DVMRP Neighbor To display the DVMRP Neighbor page, click Routing  Multicast  DVMRP  DVMRP Neighbor . To search for an entry in the DVMRP neighbor table, select the search criteria from the Search menu: • Interface . Search by the interface on which the neighbor was discovered. If you select this search[...]

Routing 294 ProSafe M5300 Switch DVMRP Next Hop To display the DVMRP Next Hop page, click Routing  Multicast  DVMRP  DVMRP Next Hop . Field Description Source IP The IP address used with the source mask to identify the source network for this table entry. Source Mask The network mask used with the source IP address. Next Hop Interface T[...]

Routing 295 ProSafe M5300 Switch DVMRP Route To display the DVMRP Route page, click Routing  Multicast  DVMRP  DVMRP Route . Field Description Source Address The network address that is combined with the source mask to identify the sources for this entry. Source Mask The subnet mask to be combined with the source address to identify the[...]

Routing 296 ProSafe M5300 Switch IGMP The Internet Group Management Protocol (IGMP) is used by IPv4 systems (hosts, L3 switches, and routers) to report their IP multicast group memberships to any neighboring multicast routers. The ProSafe managed switch performs the multicast router role of the IGMP protocol, which means it collects the membership [...]

Routing 297 ProSafe M5300 Switch IGMP Routing Interface Configuration To display the IGMP Routing Interface Configuration page, click Routing  Multicast  IGMP  Routing Interface Configuration . To configure an interface for IGMP: 1. Use the check boxes associated with the Interface field to select each interface to configure. The same s[...]

Routing 298 ProSafe M5300 Switch 10. Use Last Member Query Count to enter the number of queries to be sent on receiving a leave group report. Valid values are from 1 to 20. The default value is 2. 11. Click APPLY to update the switch with the changes. 12. Click CANCEL to abandon the changes. IGMP Routing Interface Statistics To display the IGMP Rou[...]

Routing 299 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen with the latest IGMP interface statistics. IGMP Groups To display the IGMP Groups page, click Routing  Multicast  IGMP  IGMP Groups . Number of Joins Received The number of times a group membership has been added on the selected interface; that is, the numb[...]

Routing 300 ProSafe M5300 Switch Click REFRESH to refresh the data on the screen with latest IGMP groups information. IGMP Membership To display the IGMP Membership page, click Routing  Multicast  IGMP  IGMP Membership . Field Description Group IP The IP multicast group address for which data is to be displayed. Interface This parameter[...]

Routing 301 ProSafe M5300 Switch IGMP Proxy Interface Configuration To display the IGMP Proxy Interface Configuration page, click Routing  Multicast  IGMP  Proxy Interface Configuration . To configure an interface as an IGMP proxy: 1. Use Interface to select the port for which data is to be configured. You must have configured at least [...]

Routing 302 ProSafe M5300 Switch IGMP Proxy Interface Statistics To display the IGMP Proxy Interface Statistics page, click Routing  Multicast  IGMP  Proxy Interface Statistics . Field Description Interface Displays the interface on which IGMP packets received. Version The version of IGMP packets received. Queries Received The number of[...]

Routing 303 ProSafe M5300 Switch IGMP Proxy Membership To display the IGMP Proxy Membership page, click Routing  Multicast  IGMP  Proxy Membership . Field Description Group IP Displays the IP multicast group address. Proxy Interface Displays the interface on which IGMP proxy is enabled. Source Hosts This parameter shows source addresses[...]

Routing 304 ProSafe M5300 Switch PIM The Protocol Independent Multicast protocol is a simple, protocol-independent multicast routing protocol. PIM uses an existing unicast routing table and a Join/Prune/Graft mechanism to build a tree. PIM The ProSafe managed switch supports two types of PIM: sparse mode (PIM-SM) and dense mode (PIM-DM). PIM-SM is [...]

Routing 305 ProSafe M5300 Switch SSM Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. While PIM-SM employs a specially-configured RP router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Source Specific Multicast (PIM-SSM) does not use an [...]

Routing 306 ProSafe M5300 Switch PIM Interface Configuration To display the PIM Interface Configuration page, click Routing  Multicast  PIM  Interface Configuration . To configure per-interface PIM settings: 1. Select the check box associated with each interface you want to configure. Select the check box in the heading row to apply the[...]

Routing 307 ProSafe M5300 Switch PIM Neighbor To display the PI Neighbor page, click Routing  Multicast  PIM  PIM Neighbor . Field Description Interface The interface on which neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry. Up Time The time since this PIM neighbor (last) became a neighbor of the loc[...]

Routing 308 ProSafe M5300 Switch Candidate RP Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. To display the PIM Candidate RP Configuration page, click Routing  Multicast  PIM-SM  Candidate RP Configuration . To configure a candidate RP: 1. Use Interface to select the interface fo[...]

Routing 309 ProSafe M5300 Switch BSR Candidate Configuration The settings on this page are valid for PIM-SM and do not apply if the PIM mode is PIM-DM. To display the PIM BSR Candidate Configuration page, click Routing  Multicast  PIM-SM  BSR Candidate Configuration . To configure a BSR candidate: 1. Use Interface to select the interfac[...]

Routing 310 ProSafe M5300 Switch Static RP Configuration This page is used to statically configure the RP address for one or more multicast groups. To display the PIM-SM Static RP Configuration page, click Routing  Multicast  PIM-SM  Static RP Configuration . To configure a static RP: 1. Use RP Address to specify the IP Address of the R[...]

Routing 311 ProSafe M5300 Switch Static Routes Configuration To display the Static Routes Configuration page, click Routing  Multicast  Static Routes Configuration . To configure a static multicast route: 1. Use Source IP to enter the IP Address that identifies the multicast packet source for the entry you are creating. 2. Use Source Mask [...]

Routing 312 ProSafe M5300 Switch Admin Boundary Configuration The definition of an administratively scoped boundary is a mechanism to stop the ingress and egress of multicast traffic for a given range of multicast addresses on a given routing interface. To display the Admin Boundary Configuration page, click Routing  Multicast  Admin Bound[...]

Routing 313 ProSafe M5300 Switch IPv6 Multicast The in the ProSafe M5300 switches support IPv6 multicast routing. From the IPv6 Multicast link, you can access the following pages: • Mroute Table on page 313 • IPv6 PIM on page 314 • MLD on page 321 • Static Routes Configuration on page 329 Mroute Table This screen displays contents of the Mr[...]

Routing 314 ProSafe M5300 Switch IPv6 PIM From the IPv6 PIM-DM link, you can access the following pages: • PIM Global Configuration on page 314 • PIM SSM Configuration on page 315 • PIM Interface Configuration on page 316 • PIM Neighbor on page 317 • PIM Candidate RP Configuration on page 318 • PIM BSR Candidate Configuration on page 31[...]

Routing 315 ProSafe M5300 Switch PIM SSM Configuration While PIM-SM employs a specially-configured RP router that serves as a meeting junction for multicast senders and listeners, Protocol-Independent Multicast Source Specific Multicast (PIM-SSM) does not use an RP. It supports only source route deliver trees. It is used between routers so that the[...]

Routing 316 ProSafe M5300 Switch PIM Interface Configuration To display the IPv6 PIM Interface Configuration page, click Routing  IPv6 Multicast  PIM  Interface Configuration . To configure IPv6 PIM interface settings: 1. Select the check box associated with each interface you want to configure. Select the check box in the heading row t[...]

Routing 317 ProSafe M5300 Switch PIM Neighbor To display the IPv6 PIM Neighbor page, click Routing  IPv6 Multicast  PIM  PIM-DM Neighbor . Field Description Interface The physical interface on which PIM-DM is enabled. Neighbor IP The IP address of the PIM neighbor for which this entry contains information. Up Time The time since this PI[...]

Routing 318 ProSafe M5300 Switch PIM Candidate RP Configuration To display the IPv6 PIM Candidate RP Configuration page, click Routing  IPv6 Multicast  PIM  Candidate RP Configuration . To configure candidate RP settings for IPv6 PIM-SM: 1. Use Interface to select the interface for which data is to be displayed. 2. Use Group Address to [...]

Routing 319 ProSafe M5300 Switch PIM BSR Candidate Configuration To display the IPv6 PIM-SM BSR Candidate Configuration page, click Routing  IPv6 Multicast  PIM-SM  BSR Candidate Configuration . To configure BSR candidate settings for IPv6 PIM-SM: 1. Use Interface to select the interface for which data is to be configured. 2. Use Priori[...]

Routing 320 ProSafe M5300 Switch PIM Static RP Configuration This page is used to statically configure the RP address for one or more multicast groups. To display the IPv6 PIM Static RP Configuration page, click Routing  IPv6 Multicast  PIM  Static RP Configuration . To configure static RP settings for IPv6 PIM-SM: 1. Use RP Address to [...]

Routing 321 ProSafe M5300 Switch MLD MLD is used by IPv6 systems (listeners and routers) to report their IP multicast addresses memberships to any neighboring multicast routers. The implementation of MLD v2 is backward compatible with MLD v1. MLD protocol enables the IPv6 router to discover the presence of multicast listeners, the nodes that want t[...]

Routing 322 ProSafe M5300 Switch MLD Routing Interface Configuration To display the MLD Routing Interface Configuration page, click Routing  IPv6 Multicast  MLD  Routing Interface Configuration . To configure per-interface MLD settings: 1. Use Interface to select the interface for which data is to be configured or displayed. 2. Use Admi[...]

Routing 323 ProSafe M5300 Switch 8. Use Startup Query Count to specify the value that indicates the configured number of Queries sent out on startup, separated by the Startup Query Interval. 9. Use Last Member Query Interval to enter the last member query interval in milliseconds. This is the maximum response time to be inserted into group-specific[...]

Routing 324 ProSafe M5300 Switch MLD Groups To display the MLD Groups page, click Routing  IPv6 Multicast  MLD  MLD Groups . Field Description Interface Indicates the interface on which data is displayed. Group IP Indicates the address of the MLD members. Last Reporter The IP Address of the source of the last membership report received [...]

Routing 325 ProSafe M5300 Switch MLD Traffic To display the MLD Traffic page, click Routing  IPv6 Multicast  MLD  MLD Traffic . Field Description Valid MLD Packets Received The number of valid MLD packets received by the router. Valid MLD Packets Sent The number of valid MLD packets sent by the router. Queries Received The number of val[...]

Routing 326 ProSafe M5300 Switch MLD Proxy Interface Configuration To display the MLD Proxy Interface Configuration page, click Routing  IPv6 Multicast  MLD  Proxy Interface Configuration . To configure MLD proxy interface settings: 1. Use Interface to select the interface to be configured. 2. Use Admin Mode to set the administrative st[...]

Routing 327 ProSafe M5300 Switch MLD Proxy Interface Statistics To display the MLD Proxy Interface Statistics page, click Routing  IPv6 Multicast  MLD  Proxy Interface Statistics . Field Description Proxy Interface Displays the interface on which MLD Proxy packets received. Version The version of MLD Proxy packets received. Queries Rece[...]

Routing 328 ProSafe M5300 Switch MLD Proxy Membership To display the MLD Proxy Membership page, click Routing  IPv6 Multicast  MLD  Proxy Membership . Field Description Group IP The IPv6 multicast group address. Source Hosts This parameter shows source addresses which are members of this multicast address. Last Reporter The IPv6 address[...]

Routing 329 ProSafe M5300 Switch Static Routes Configuration To display the Static Routes Configuration page, click Routing  IPv6 Multicast  Static Routes Configuration . To configure static IPv6 multicast routes: 1. Use Source IP to enter the IP Address that identifies the multicast packet source for the entry you are creating. 2. Use Pre[...]

Routing 330 ProSafe M5300 Switch[...]

331 5 5. Configuring Quality of Service Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: • Class of Service on page 331 • Differentiated Services on page 339 In a typical switch, each physical port consists of one or more queues for transmitting p[...]

Configuring Quality of Service 332 ProSafe M5300 Switch From the Class of Service link under the QoS tab, you can access the following pages: • Basic on page 332 • Advanced on page 333 Basic From the Basic link, you can access the following pages: • CoS Configuration on page 332 CoS Configuration To display the CoS Configuration page, click Q[...]

Configuring Quality of Service 333 ProSafe M5300 Switch 3. Use Global Trust Mode to specify whether to trust a particular packet marking at ingress. Global Trust Mode can only be one of the following. Default value is trust dot1p. • untrusted • trust dot1p • trust ip-dscp 4. Use Interface Trust Mode to specify whether to trust a particular pa[...]

Configuring Quality of Service 334 ProSafe M5300 Switch To map 802.1p priorities to queues: 1. Use Interface to specify CoS configuration settings based per-interface or specify all CoS configurable interfaces. 2. Specify which internal traffic class to map the corresponding 802.1p value. The queue number depends on the specific hardware. The 802.1[...]

Configuring Quality of Service 335 ProSafe M5300 Switch To map DSCP values to queues: 1. Use Interface to specify CoS configuration settings based per-interface or specify all CoS configurable interfaces. 2. The IP DSCP field displays an IP DSCP value from 0 to 63. 3. For each DSCP value, specify which internal traffic class to map the correspondin[...]

Configuring Quality of Service 336 ProSafe M5300 Switch 3. Use Interface Shaping Rate to specify the maximum bandwidth allowed, typically used to shape the outbound transmission rate. This value is controlled independently of any per-queue maximum bandwidth configuration. It is effectively a second-level shaping mechanism. Default value is 0. Valid[...]

Configuring Quality of Service 337 ProSafe M5300 Switch • Use Minimum Bandwidth to specify the minimum guaranteed bandwidth allotted to this queue. Setting this value higher than its corresponding Maximum Bandwidth automatically increases the maximum to the same value. Default value is 0. Valid Range is 0 to 100 in increments of 1. The value 0 me[...]

Configuring Quality of Service 338 ProSafe M5300 Switch To configure CoS Queue Drop Precedence Configuration settings: 1. From the Interface menu, select the interface to configure. 2. In the Queue ID field, select a queue to associate with the selected interface. 3. From the Drop Precedence Level field, select a drop precedence level. 4. In the WR[...]

Configuring Quality of Service 339 ProSafe M5300 Switch Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks are designed to provide “best effort” data [...]

Configuring Quality of Service 340 ProSafe M5300 Switch DiffServ Wizard The DiffServ Wizard enables DiffServ on the switch by creating a traffic class, adding the traffic class to a policy, and then adding the policy to the ports selected on DiffServ Wizard page. The DiffServ Wizard will: • Create a DiffServ Class and define match criteria used a[...]

Configuring Quality of Service 341 ProSafe M5300 Switch To configure the switch using the DiffServ Wizard: 1. Use Traffic Type to define the DiffServ Class . Traffic type options: VOIP , HTTP , FTP , Telnet , and Every . 2. Ports displays the ports which can be configured to support a DiffServ policy . The DiffServ policy will be added to selected [...]

Field Description DiffServ Admin Mode The options mode for DiffServ. The default value is 'enable'. While disabled, the DiffServ configuration is retained when saved and can be changed, but it is not activated. When enabled, Diffserv services are activated. Class table Displays the number of configured DiffServ classes out of the total al[...]

Configuring Quality of Service 343 ProSafe M5300 Switch Advanced • DiffServ Configuration on page 341 • Class Configuration on page 343 • IPv6 Class Configuration on page 346 • Policy Configuration on page 348 • Service Interface Configuration on page 351 • Service Statistics on page 352 Class Configuration Use the Class Configuration p[...]

Configuring Quality of Service 344 ProSafe M5300 Switch To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class. 2. Class Name - Displays the name for the configured DiffServ class. 3. Class Type - Displays the DiffServ cla[...]

Configuring Quality of Service 345 ProSafe M5300 Switch • Class of Service - This lists all the values for the class of service match criterion in the range 0 to 7 from which one can be selected. • VLAN - This is a value in the range of 0-4095. • Ethernet Type - This lists the keywords for the Ethertype from which one can be selected. • Sou[...]

Configuring Quality of Service 346 ProSafe M5300 Switch IPv6 Class Configuration Use the IPv6 Class Configuration page to add a new IPv6 DiffServ class name, or to rename or delete an existing class. The page also allows you to define the criteria to associate with a DiffServ class. As packets are received, these DiffServ classes are used to priori[...]

Configuring Quality of Service 347 ProSafe M5300 Switch To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class. 2. Class Name - Displays the name for the configured DiffServ class. 3. Class Type - Displays the DiffServ cla[...]

Configuring Quality of Service 348 ProSafe M5300 Switch • Source L4 Port - This lists the keywords for the known source layer 4 ports from which one can be selected. The list includes 'other' as an option for the unnamed ports. • Destination Prefix/Length - This is a valid Destination IPv6 Prefix to compare against an IPv6 Packet. Pre[...]

Configuring Quality of Service 349 ProSafe M5300 Switch 5. Click DELETE to delete the currently selected policy from the switch. To configure the policy attributes: 1. Click the name of the policy. The policy name is a hyperlink. The following figure shows the configuration fields for the policy. 2. Select the queue to which packets will of this po[...]

Configuring Quality of Service 350 ProSafe M5300 Switch • Mark IP DSCP - This lists the keywords for the known DSCP values from which one can be selected. The list includes 'other' as an option for the remaining values. • Simple Policy - Use this attribute to establish the traffic policing style for the specified class. This command u[...]

Field Description Policy Name Displays name of the DiffServ policy. Policy Type Displays type of the policy as In Member Class Name Displays name of each class instance within the policy. Configuring Quality of Service 351 ProSafe M5300 Switch Service Interface Configuration Use the Service Interface Configuration page to activate a policy on an in[...]

Configuring Quality of Service 352 ProSafe M5300 Switch Service Statistics This screen displays class-oriented statistical information for the policy, which is specified by the interface and direction. The 'Member Classes' drop down list is populated on the basis of the specified interface and direction and hence the attached policy (if a[...]

Configuring Quality of Service 353 ProSafe M5300 Switch Discarded Packets/Octets A count of the total number of packets/octets discarded for all class instances in this service policy for any reason due to DiffServ treatment. This is the overall count per-interface, per-direction. Sent Packets/Octets A count of the total number of packets/octets fo[...]

Configuring Quality of Service 354 ProSafe M5300 Switch[...]

355 6 6. Managing Device Security Use the features available from the Security tab to configure management security settings for port, user, and server security. The Security tab contains links to the following features: • Management Security Settings on page 355 • Configuring Management Access on page 372 • Port Authentication on page 386 ?[...]

Managing Device Security 356 ProSafe M5300 Switch Local User From the Local User link, you can access the following pages: • User Management on page 356 • User Password Configuration on page 357 User Management By default, two user accounts exist: • admin, with Read/Write privileges • guest, with Read Only privileges By default, both of the[...]

Managing Device Security 357 ProSafe M5300 Switch 5. Access Mode indicates the user's access mode. The admin account always has 'Read/Write' access, and all other accounts have 'Read Only' access. 6. Click ADD to add a user account with 'Read Only' access. 7. Click DELETE to delete the currently selected user acco[...]

Managing Device Security 358 ProSafe M5300 Switch Enable Password Configuration Use this page to configure a local password to control CLI access to privileged levels. Passwords are a maximum of 64 alphanumeric characters. The password is case sensitive. To display the Enable Password Configuration page, click Security   Management Security ?[...]

Managing Device Security 359 ProSafe M5300 Switch To configure the line password: 1. Use Console Password to enter the Console password. Passwords are a maximum of 64 alphanumeric characters. 2. Use Confirm Console Password to enter the password again, to confirm that you entered it correctly. 3. Use Telnet Password to enter the Telnet password. Pa[...]

Managing Device Security 360 ProSafe M5300 Switch Radius Configuration Use the Radius Configuration page to add information about one or more RADIUS servers on the network. To access the Radius Configuration page, click Security  Management Security  RADIUS  Radius Configuration. The Current Server IP Address field is blank if no servers a[...]

Managing Device Security 361 ProSafe M5300 Switch all configured servers. If the RADIUS request was generated by a user login attempt, all user interfaces will be blocked until the RADIUS application returns a response. 3. From the Accounting Mode menu, select whether the RADIUS accounting mode is enabled or disabled on the current server. 4. Use R[...]

Managing Device Security 362 ProSafe M5300 Switch 2. Click ADD to add a new server to the switch. This button is only available to READWRITE users. These changes will not be retained across a power cycle unless a save is performed. 3. Click DELETE to remove the selected server from the configuration. This button is only available to READWRITE users[...]

Managing Device Security 363 ProSafe M5300 Switch Accounting Server Configuration Use the RADIUS Accounting Server Configuration page to view and configure various settings for one or more RADIUS accounting servers on the network. To access the RADIUS Accounting Server Configuration page, click Security  Management Security  RADIUS  Accoun[...]

Field Description Accounting Server Address Identifies the accounting server associated with the statistics. Round Trip Time(secs) Displays the time interval, in hundredths of a second, between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server. Accounting Requests Displays the number o[...]

Managing Device Security 365 ProSafe M5300 Switch The TACACS+ folder contains links to the following features: • Configuring TACACS+ on page 364 • TACACS+ Server Configuration on page 365 TACACS+ Configuration The TACACS+ Configuration page contains the TACACS+ settings for communication between the switch and the TACACS+ server you configure v[...]

Managing Device Security 366 ProSafe M5300 Switch To configure TACACS+ server settings: 1. Use TACACS+ Server to enter the configured TACACS+ server IP address. 2. Use Priority to specify the order in which the TACACS+ servers are used. It should be within the range 0-65535. 3. Use Port to specify the authentication port. It should be within the ra[...]

Managing Device Security 367 ProSafe M5300 Switch To configure the authentication lists for access to the switch management interface: 1. List Name - If you are creating a new login list, enter the name you want to assign. It can be up to 15 alphanumeric characters long and is not case sensitive. 2. Use the drop-down menu to select the method that [...]

Managing Device Security 368 ProSafe M5300 Switch To configure authentication list methods for enable access: 1. List Name - If you are creating a new enable list, enter the name you want to assign. It can be up to 15 alphanumeric characters long and is not case sensitive. 2. Use the drop-down menu to select the method that should appear first in t[...]

Managing Device Security 369 ProSafe M5300 Switch Dot1x Authentication List You use this page to configure IEEE 802.1X (Dot1x) lists. Dot1x controls port-based access to the network through a switch port that is controlled by IEEE 802.1X. A dot1x list specifies the authentication method(s) you want to be used to validate port access for the users a[...]

Managing Device Security 370 ProSafe M5300 Switch To configure authentication list methods for HTTP access: 1. List Name - Select the HTTP list name for which you want to configure data. 2. Use the drop-down menu to select the method that should appear first in the selected authentication login list. If you select a method that does not time out as[...]

Managing Device Security 371 ProSafe M5300 Switch • Tacacs - The user's ID and password will be authenticated using the TACACS+ server. • None - The user will not be authenticated. 3. Use the drop-down menu to select the method, if any, that should appear second in the selected authentication login list. This is the method that will be use[...]

Managing Device Security 372 ProSafe M5300 Switch Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the ProSafe M5300 management interface. The Security  Access tab contains the following folders: • HTTP on page 372 • HTTPS Configuration on page 373 • SSH on page 377 • Telnet on page 380[...]

Managing Device Security 373 ProSafe M5300 Switch To configure the HTTP server settings: 1. Use HTTP Access to specify whether the switch may be accessed from a web browser. If you choose to enable web mode you will be able to manage the switch from a web browser. The factory default is enabled. 2. Use Java Mode to enable or disable the java applet[...]

Managing Device Security 374 ProSafe M5300 Switch To configure HTTPS settings: 1. Use HTTPS Admin Mode to Enable or Disable the Administrative Mode of Secure HTTP. The currently configured value is shown when the web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled. 2. Use[...]

Managing Device Security 375 ProSafe M5300 Switch Certificate Management Use this menu to generate or delete certificates. To display the Certificate Management page, click Security  Access > HTTPS  HTTPS Certificate Management . To manage certificates: 1. Use None to specify there is no certificate management. This is the default selectio[...]

Managing Device Security 376 ProSafe M5300 Switch To configure the certificate download settings for HTTPS sessions: 1. Use File Type to specify the type of file you want to transfer: • SSL Trusted Root Certificate PEM File - SSL Trusted Root Certificate File (PEM Encoded) • SSL Server Certificate PEM File - SSL Server Certificate File (PEM Enc[...]

Managing Device Security 377 ProSafe M5300 Switch SSH From the SSH link, you can access the following pages: • SSH Configuration on page 377 • Host Keys Management on page 378 • Host Keys Download on page 379 SSH Configuration To display the SSH Configuration page, click Security  Access > SSH  SSH Configura tion . To configure the S[...]

Field Description Current Number of SSH Sessions Displays the number of SSH connections currently in use in the system. Keys Present Displays which keys, RSA, DSA or both, are present (if any). Managing Device Security 378 ProSafe M5300 Switch Host Keys Management Use this menu to generate or delete RSA and DSA keys. To display the Host Keys Manage[...]

Field Description Keys Present Displays which keys, RSA, DSA or both, are present (if any). Key Generation In Progress Displays which key is being generated (if any), RSA, DSA or None. Managing Device Security 379 ProSafe M5300 Switch Host Keys Download Use this page to transfer a host key file to the switch from a remote host. To display the Host [...]

Managing Device Security 380 ProSafe M5300 Switch Telnet To display the Telnet page, click Security  Access > Telnet . Telnet Authentication List This page allows you to select the login and enable authentication list available. The login list specifies the authentication method(s) you want used to validate switch or port access for the users[...]

Managing Device Security 381 ProSafe M5300 Switch Outbound Telnet Client Configuration This page regulates new outbound telnet connections. If Allow New Telnet Sessions are enabled, new outbound telnet sessions can be established until there are no more sessions available. If Allow New Telnet Sessions are disabled, no new outbound telnet sessions a[...]

Field Description Character Size (bits) The number of bits in a character. This is always 8. Flow Control Whether hardware flow control is enabled or disabled. It is always disabled. Stop Bits The number of stop bits per character. Its is always 1. Parity The parity method used on the serial port. It is always None. Managing Device Security 382 Pro[...]

Managing Device Security 383 ProSafe M5300 Switch 3. Use Denial of Service Max ICMP Packet Size to specify the Max ICMPv4 Packet Size allowed (This includes the ICMP header size of 8 bytes). If ICMP DoS prevention is enabled, the switch will drop ICMP ping packets that have a size greater then this configured Max ICMP Packet Size minus the ICMP hea[...]

Managing Device Security 384 ProSafe M5300 Switch Access Control The Access Control feature allows you to configure settings that control management access to the switch.. Access Control configure requires three steps: 1. Use the Access Profile Configuration page to create an access profile. To add rules to the profile, the access profile must be d[...]

Managing Device Security 385 ProSafe M5300 Switch 4. To remove an access profile, select the Remove Profile check box. The access profile should be deactivated before removing the access profile. 5. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 6. If you make changes to th[...]

Managing Device Security 386 ProSafe M5300 Switch 1. To add an access profile rule, configure the following settings and click Add . • Rule Type : Specify whether the rule permits or denies access to the ProSafe M5300 management interface. • Select Permit to allow access to the management interface for traffic that meets the criteria you config[...]

Managing Device Security 387 ProSafe M5300 Switch • Supplicants - Specifies the host connected to the authenticated port requesting access to the system services. • Authentication Server - Specifies the external server, for example, the RADIUS server that performs the authentication on behalf of the authenticator, and indicates whether the user[...]

Managing Device Security 388 ProSafe M5300 Switch Note: If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS. To set the method, go to Security > Management Security > Authentication List and select RADIUS as method 1 for defaultList. For more information, see “Aut[...]

Managing Device Security 389 ProSafe M5300 Switch Advanced From the Advanced link, you can access the following pages: • 802.1X Configuration on page 389 • Port Authentication on page 390 • Port Summary on page 393 • Client Summary on page 396 802.1X Configuration Use the 802.1X Configuration page to enable or disable port access control on[...]

Managing Device Security 390 ProSafe M5300 Switch Port Authentication Use the Port Authentication page to enable and configure port access control on one or more ports. To access the Port Authentication page, click Security  Port Authentication > Advanced  Port Authentication . Note: Use the horizontal scroll bar at the bottom of the brows[...]

Managing Device Security 391 ProSafe M5300 Switch • auto - The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication exchanges between the supplicant, authenticator, and the authentication server. • mac based - The authenticator PAE sets the controlled port mode to reflect the outcome of the authentication[...]

Managing Device Security 392 ProSafe M5300 Switch • Maximum Requests - This input field allows the user to enter the maximum requests for the selected port. The maximum requests value is the maximum number of times the authenticator state machine on this port will retransmit an EAPOL EAP Request/Identity before timing out the supplicant. The maxi[...]

Managing Device Security 393 ProSafe M5300 Switch Port Summary Use the Port Summary page to view information about the port access control settings on a specific port. To access the Port Summary page, click Security  Port Authentication  Advanced  Port Summary . The following table describes the fields on the Port Summary page. Field Descr[...]

Managing Device Security 394 ProSafe M5300 Switch Operating Control Mode This field indicates the control mode under which the port is actually operating. Possible values are: • ForceUnauthorized • ForceAuthorized • Auto • N/A: If the port is in detached state it cannot participate in port access control. Reauthentication Enabled This field[...]

Managing Device Security 395 ProSafe M5300 Switch Vlan Assigned This field displays the vlan id assigned to the selected interface by the Authenticator. This field is displayed only when the port control mode of the selected interface is not mac-based. This field is not configurable. Vlan Assigned Reason This field displays reason for the vlan id a[...]

Managing Device Security 396 ProSafe M5300 Switch Client Summary To access the Client Summary page, click Security  Port Authentication  Advanced  Client Summary . Field Description Port The port to be displayed. User Name This field displays the User Name representing the identity of the supplicant device. Supplicant Mac Address This fiel[...]

Managing Device Security 397 ProSafe M5300 Switch Traffic Control From the Traffic Control link, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settings. To display the page, click the Security  Traffic Control tab. The Traffic Control folder contains links to the following features: • MAC Filter on page 397 ?[...]

Managing Device Security 398 ProSafe M5300 Switch To configure MAC filter settings: 1. Select Create Filter from the MAC Filter menu. a. This is the list of MAC address and VLAN ID pairings for all configured filters. To change the port mask(s) for an existing filter, select the entry you want to change. To add a new filter, select “Create Filter[...]

Managing Device Security 399 ProSafe M5300 Switch MAC Filter Summary Use the MAC Filter Summary page to view the MAC filters that are configured on the system. To display the MAC Filter Summary page, click Security  Traffic Control> MAC Filter  MAC Filter Summary. Field Description MAC Address The MAC address of the filter in the format 00[...]

Managing Device Security 400 ProSafe M5300 Switch To configure the global port security mode: 1. In the Port Security Mode field, select the appropriate radio button to enable or disable port security on the switch. 2. Click APPLY to update the switch with the change. 3. Click CANCEL to abandon the change. The Port Security Violation table shows in[...]

Managing Device Security 401 ProSafe M5300 Switch To configure port security settings: 1. Port - Selects the interface to be configured. 2. Select the check box next to the port or LAG to configure. Select multiple check boxes to apply the same setting to all selected interfaces. Select the check box in the heading row to apply the same settings to[...]

Managing Device Security 402 ProSafe M5300 Switch Dynamic MAC Address Use the Dynamic MAC Address page to convert a dynamically learned MAC address to a statically locked address. To display the Dynamic MAC Address page, click Security  Traffic Control> Port Security  Dynamic MAC Address. To convert learned MAC addresses: 1. Port List - Se[...]

Managing Device Security 403 ProSafe M5300 Switch Static MAC Address Use this page to add and remove the MAC addresses of hosts that are allowed to send traffic to specific interfaces on the device. The number of MAC addresses you can associate with each interface is determined by the maximum static MAC addresses allowed on a given interface. To di[...]

Managing Device Security 404 ProSafe M5300 Switch Private Group The Private Group feature provides Layer 2 isolation between ports that share the same broadcast domain. Ports can be grouped together as members of the same private group. The Private Group folder contains links to the following features: • Private Group Configuration on page 404 ?[...]

Managing Device Security 405 ProSafe M5300 Switch Private Group Membership Use this page to configure the ports that belong to the existing private groups. To display the Private Group Membership page, click Security  Traffic Control> Private Group  Private Group Membership. To configure private group port membership: 1. Use Group ID to se[...]

Managing Device Security 406 ProSafe M5300 Switch Protected Ports Configuration If a port is configured as protected, it does not forward traffic to any other protected port on the switch, but it will forward traffic to unprotected ports. Use the Protected Ports Configuration page to configure the ports as protected or unprotected. You need read-wr[...]

Managing Device Security 407 ProSafe M5300 Switch Private VLAN The Private VLANs feature provides Layer 2 isolation between ports that share the same broadcast domain. In other words, it allows a VLAN broadcast domain to be partitioned into smaller point-to-multipoint subdomains. The ports participating in a private VLAN can be located anywhere in [...]

Managing Device Security 408 ProSafe M5300 Switch To configure the private VLAN type: 1. Select the check box associated with each VLAN to configure. To apply the same settings to all VLANs, select the check box in the header row. 2. Use the Private VLAN Type menu to identify a group of protected ports that can be combined into a logical group. The[...]

Managing Device Security 409 ProSafe M5300 Switch 2. In the Secondary VLAN field, specify the VLAN ID of the VLAN to associate with the selected primary VLAN. 3. Click APPLY to send the updated configuration to the switch. Configuration changes take effect immediately. 4. Click CANCEL to cancel the configuration on the screen. Field Description Iso[...]

Managing Device Security 410 ProSafe M5300 Switch 4. Click CANCEL to cancel the configuration on the screen. Private VLAN Host Interface Configuration Use this page to map host ports to primary and secondary private VLANs. To display the Private VLAN Host Interface Configuration page, click the Security  Traffic Control  Private VLAN > Pri[...]

Managing Device Security 411 ProSafe M5300 Switch Private VLAN Promiscuous Interface Configuration Use this page to associate a port with a promiscuous primary VLAN. An endpoint connected to a promiscuous port is allowed to communicate with any endpoint within the private VLAN. Multiple promiscuous ports can be defined for a single private VLAN dom[...]

Managing Device Security 412 ProSafe M5300 Switch Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out. The switch measures the incoming broadcast/multica[...]

Managing Device Security 413 ProSafe M5300 Switch Storm Control Interface Configuration To display the Storm Control Interface Configuration page, click Security  Traffic Control> Storm Control  Storm Control Interface Configuration. Field Description Broadcast Storm Recovery Mode Enable or disable this option by selecting the correspondin[...]

Managing Device Security 414 ProSafe M5300 Switch Control To display the page, click the Security  Control tab. The Control folder contains links to the following features: • DHCP Snooping on page 414 • IP Source Guard on page 419 • Dynamic ARP Inspection on page 421 DHCP Snooping Dynamic Host Configuration Protocol (DHCP) Snooping is a se[...]

Managing Device Security 415 ProSafe M5300 Switch DHCP Snooping Global Configuration Use this page to configure the administrative mode of DHCP snooping on the switch and to enable DHCP snooping on VLANS. When enabled on a VLAN, DHCP snooping forwards valid DHCP client messages it receives in the VLAN. The message is forwarded on all trusted interf[...]

Managing Device Security 416 ProSafe M5300 Switch DHCP Snooping Interface Configuration To display the DHCP Snooping Interface Configuration page, click Security  Control> DHCP Snooping  Interface Configuration. To configure interfaces for DHCP snooping: 1. Select the check box associated with each interface to configure. To apply the same[...]

Managing Device Security 417 ProSafe M5300 Switch DHCP Snooping Binding Configuration To display the DHCP Snooping Binding Configuration page, click Security  Control> DHCP Snooping  Binding Configuration. To configure static DHCP snooping bindings: 1. From the Interface menu, select the interface on which to configure a static binding. 2.[...]

Managing Device Security 418 ProSafe M5300 Switch DHCP Snooping Persistent Configuration To display the DHCP Snooping Persistent Configuration page, click Security  Control> DHCP Snooping  Persistent Configuration. 1. Use Store to select the local store or remote store. Local selection disable the Remote objects like Remote File Name and R[...]

Field Description Interface The untrusted and snooping enabled interface for which statistics to be displayed. MAC Verify Failures Number of packets that were dropped by DHCP Snooping as there is no matching DHCP Snooping binding entry found. Client Ifc Mismatch The number of DHCP messages that are dropped based on source MAC address and client HW [...]

Managing Device Security 420 ProSafe M5300 Switch IP Source Guard Interface Configuration To display the IP Source Guard Interface Configuration page, click Security  Control> IP Source Guard  Interface Configuration. To configure interfaces for IPSG: 1. Select the check box associated with each interface to configure. To apply the same se[...]

Managing Device Security 421 ProSafe M5300 Switch Static Binding Configuration 1. Interface - Selects the interface to add a binding into the IPSG database. 2. Use MAC Address to specify the MAC address for the binding. 3. Use VLAN ID to select the VLAN from the list for the binding rule. 4. Use IP Address to specify valid IP Address for the bindin[...]

Managing Device Security 422 ProSafe M5300 Switch DAI Configuration To display the DAI Configuration page, click Security  Control> Dynamic ARP Inspection  DAI Configuration. To configure global DAI settings: 1. Use Validate Source MAC to choose the DAI Source MAC Validation Mode for the switch by selecting Enable or Disable radio button. [...]

Managing Device Security 423 ProSafe M5300 Switch 3. Use Logging Invalid Packets to indicate whether the Dynamic ARP Inspection logging is enabled on this VLAN. If this object is set to 'Enable' it will log the Invalid ARP Packets information. If this object is set to 'Disable', Dynamic ARP Inspection logging is disabled. 4. Use[...]

Managing Device Security 424 ProSafe M5300 Switch DAI ACL Configuration Use this page to add DAI access control lists (ACL) and to view DAI ACLs that have been configured. To display the DAI ACL Configuration page, click Security  Control> Dynamic ARP Inspection  DAI ACL Configuration. 1. Use Name to create New ARP ACL for DAI. 2. Click AD[...]

Managing Device Security 425 ProSafe M5300 Switch DAI Statistics This screen shows the Statistics per VLAN. To display the DAI Statistics page, click Security  Control> Dynamic ARP Inspection  DAI Statistics. Field Description VLAN The enabled VLAN ID for which statistics to be displayed. DHCP Drops Number of ARP packets that were dropped [...]

Managing Device Security 426 ProSafe M5300 Switch Captive Portal The Captive Portal (CP) feature allows you to block wired and wireless clients from accessing the network until user verification has been established. You can configure CP verification to allow access for both guest and authenticated users. Authenticated users must be validated again[...]

Managing Device Security 427 ProSafe M5300 Switch 1. Use Admin Mode to enable or disable Captive Portal feature. By default, the Captive Portal feature is disabled. 2. Use Additional HTTP Port to configure an additional port for HTTP traffic (HTTP traffic uses port 80), but you can configure an additional port for HTTP traffic. Enter a port number [...]

Managing Device Security 428 ProSafe M5300 Switch Captive Portal Configuration By default, the switch has one captive portal. You can change the settings for that captive portal, and you can also create and configure up to nine additional portals. To display the Captive Portal Configuration page, click Security  Control> Captive Portal  CP[...]

Managing Device Security 429 ProSafe M5300 Switch 6. Use Block to control the blocked status. If the CP is blocked, users cannot gain access to the network through the CP. Use this function to temporarily protect the network during unexpected events, such as denial of service attacks. 7. If the Verification Mode is Local or RADIUS, use Group to ass[...]

Managing Device Security 430 ProSafe M5300 Switch Captive Portal Binding Configuration You can associate a configured captive portal with a specific network (SSID). The CP feature only runs on the interfaces you specify. A CP can have multiple interfaces associated with it, but an interface can be associated to only one CP at a time. To display the[...]

Field Description Interface The interface for which you want to view information. CP ID The ID of captive portal instance. Operational Status Shows whether the portal is active on the specified interface. Block Status Indicates whether the captive portal is temporarily blocked for authentications. Authenticated users Displays the number of authenti[...]

Managing Device Security 432 ProSafe M5300 Switch Captive Portal User Configuration When you click Add from the CP User Configuration page, the screen refreshes, and you can add a new user to the Local User database. To display the Captive Portal User Configuration page, click Security  Control> Captive Portal  CP User Configuration. 1. Us[...]

Managing Device Security 433 ProSafe M5300 Switch 10. Use Max Bandwidth Up to specify the maximum rate (Rate in bits per seconds) at which a client can send data into the network. 0 indicates to use the global limit (Range: 0 – 536870911 bps.) 11. Use Max Output to specify the number of octets the user is allowed to transmit. After this limit has[...]

Managing Device Security 434 ProSafe M5300 Switch Captive Portal Client To display the Captive Portal Client page, click Security  Control> Captive Portal  CP Client. Field Description MAC Address Identifies the MAC address of the client IP Address Drops Identifies the IP address of the client (if applicable) Protocol Shows the current con[...]

Managing Device Security 435 ProSafe M5300 Switch Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates, decide which t[...]

Managing Device Security 436 ProSafe M5300 Switch Note: There is an implicit “deny all” rule at the end of an ACL list. This means that if an ACL is applied to a packet and if none of the explicit rules match, then the final implicit “deny all” rule applies and the packet is dropped. To use the ACL Wizard to configure an ACL: 1. Use ACL Typ[...]

Managing Device Security 437 ProSafe M5300 Switch 7. Click DELETE to remove the currently selected Rule from the ACL based on destination MAC. 8. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 9. Click APPLY to send the updated configuration to the switch. Configuration cha[...]

Managing Device Security 438 ProSafe M5300 Switch The MAC ACL table displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured. The current size is equal to the number of configured IPv4 ACLs plus the number of configured MAC ACLs. To configure a MAC ACL: 1. To add a MAC ACL, specify a name [...]

Managing Device Security 439 ProSafe M5300 Switch • Assign Queue Id - Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule. Valid range of Queue Ids is (0 to 6). • CoS - Specifies the 802.1p user priority to compare against an Ethernet frame. Valid range of values is 0 to 7. • Ethertype User Value -[...]

Managing Device Security 440 ProSafe M5300 Switch MAC Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the MAC Binding Configuration page to assign MAC ACL lists to ACL Priorities and Interfaces. To display the MAC Binding Configuration page, click Security ?[...]

Managing Device Security 441 ProSafe M5300 Switch 5. Click APPLY to save any changes to the running configuration. MAC Binding Table Use the MAC Binding Table page to view or delete the MAC ACL bindings. To display the MAC Binding Table, click Security  ACL> Basic  Binding Table . The following table describes the information displayed in [...]

Managing Device Security 442 ProSafe M5300 Switch IP ACL An IP ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match. On this menu the interfaces to which an IP ACL applies[...]

Managing Device Security 443 ProSafe M5300 Switch IP Rules Use these screens to configure the rules for the IP Access Control Lists created using the IP Access Control List Configuration screen. What is shown on this screen varies depending on the current step in the rule configuration process. Note: There is an implicit “deny all” rule at the [...]

Managing Device Security 444 ProSafe M5300 Switch • Action - Selects the ACL forwarding action, which is one of the following: • Permit - Forwards packets which meet the ACL criteria. • Deny - Drops packets which meet the ACL criteria. • Logging - When set to 'Enable', logging is enabled for this ACL rule (subject to resource avai[...]

Managing Device Security 445 ProSafe M5300 Switch 4. To update an IP ACL rule, select the check box associated with the rule, update the desired fields, and then click APPLY . You cannot modify the Rule ID of an existing IP rule. 5. Click CANCEL to cancel the configuration on the screen and reset the data on the screen to the latest value of the sw[...]

Managing Device Security 446 ProSafe M5300 Switch 2. Configure the desired criteria for the new rule. • Rule ID - Specify a number from 1–12 to identify the IP ACL rule. You can create up to 12 rules for each ACL. • Action - Selects the ACL forwarding action, which is one of the following: • Permit - Forwards packets which meet the ACL crit[...]

Managing Device Security 447 ProSafe M5300 Switch remove the rule and re-create it, or re-configure 'Match Every' to 'False' for the other match criteria to be visible. • Protocol Keyword - Specify that a packet's IP protocol is a match condition for the selected IP ACL rule. The possible values are ICMP, IGMP, IP, TCP, a[...]

Managing Device Security 448 ProSafe M5300 Switch • IP Precedence - The IP Precedence field in a packet is defined as the high-order three bits of the Service Type octet in the IP header. This is an optional configuration. Enter an integer from 0 to 7. • IP TOS - The IP TOS field in a packet is defined as all eight bits of the Service Type octe[...]

Managing Device Security 449 ProSafe M5300 Switch IPv6 ACL An IP ACL consists of a set of rules which are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit/Deny) is taken and the additional rules are not checked for a match. On this menu the interfaces to which an IP ACL appli[...]

Managing Device Security 450 ProSafe M5300 Switch IPv6 Rules Use these screens to configure the rules for the IPv6 Access Control Lists, which is created using the IPv6 Access Control List Configuration screen. By default, no specific value is in effect for any of the IPv6 ACL rules. To display the IPv6 Rules page, click Security  ACL> Advanc[...]

Managing Device Security 451 ProSafe M5300 Switch 2. Use Rule ID to enter a whole number in the range of 1 to 12 that will be used to identify the rule. An IP ACL may have up to 12 rules. 3. Configure the desired rule attributes: • Use Action to specify what action should be taken if a packet matches the rule's criteria. The choices are perm[...]

Managing Device Security 452 ProSafe M5300 Switch • Use Source L4 Port to specify a packet's source layer 4 port as a match condition for the selected IPv6 ACL rule. Source port information is optional. Source port information can be specified in two ways: • Select keyword “other” from the drop down menu and specify the number of the p[...]

Managing Device Security 453 ProSafe M5300 Switch IP Binding Configuration When an ACL is bound to an interface, all the rules that have been defined are applied to the selected interface. Use the IP Binding Configuration page to assign ACL lists to ACL Priorities and Interfaces. To display the IP Binding Configuration page, click Security  ACL&[...]

Field Description Interface Displays selected interface. Direction Displays selected packet filtering direction for ACL. ACL Type Displays the type of ACL assigned to selected interface and direction. ACL ID/Name Displays the ACL Number (in the case of IP ACL) or ACL Name (in the case of named IP ACL and IPv6 ACL) identifying the ACL assigned to se[...]

Managing Device Security 455 ProSafe M5300 Switch VLAN Binding Table Use this page to bind ACLs to VLANs on the switch rather than to ports. At the bottom of the page, the table displays any currently-configured ACLs for the selected VLAN. You can also bind an ACL to a port To display the VLAN Binding Table, click Security  ACL> Advanced  [...]

Managing Device Security 456 ProSafe M5300 Switch[...]

457 7 7. Monitoring the System Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains links to the following features: • Ports on page 457 • Logs on page 468 • Port Mirroring on page 477 • sFlow on page 47[...]

Monitoring the System 458 ProSafe M5300 Switch Port Statistics The Port Statistics page displays a summary of per-port traffic statistics on the switch. To access the Port Statistics page, click Monitoring  Ports> Port Statistics . The following table describes the per-port statistics displayed on the screen. Use the buttons at the bottom of [...]

Monitoring the System 459 ProSafe M5300 Switch Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click Monitoring  Ports> Port Detailed Statistics . (Following figure show some, but not all, of the fields on the Port Detailed Statistics page.) Collis[...]

Monitoring the System 460 ProSafe M5300 Switch The following table describes the detailed port information displayed on the screen. To view information about a different port, select the port number from the Interface menu. Use the buttons at the bottom of the page to perform the following actions: • Click CLEAR to clear all the counters. This re[...]

Monitoring the System 461 ProSafe M5300 Switch Physical Mode Indicates The port speed and duplex mode. In auto-negotiation mode the duplex mode and speed are set from the auto-negotiation process. Physical Status Indicates the port speed and duplex mode. Link Status Indicates whether the Link is up or down. Link Trap Indicates whether or not the po[...]

Monitoring the System 462 ProSafe M5300 Switch Packets Received 128-255 Octets The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). Packets Received 256-511 Octets The total number of packets (including bad packets) received that were[...]

Monitoring the System 463 ProSafe M5300 Switch Rx FCS Errors The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets Overruns The total number of frames discarded as this port was ove[...]

Monitoring the System 464 ProSafe M5300 Switch Packets Transmitted 128-255 Octets The total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). Packets Transmitted 256-511 Octets The total number of packets (including bad packets) received tha[...]

Monitoring the System 465 ProSafe M5300 Switch Multiple Collision Frames A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision. Excessive Collision Frames A count of frames for which transmission on a particular interface fails due to excessive collisions. P[...]

Monitoring the System 466 ProSafe M5300 Switch EAP Statistics Use the EAP Statistics page to display information about EAP packets received on a specific port. To display the EAP Statistics page, click Monitoring  Ports > EAP Statistics . The following table describes the EAP statistics displayed on the screen. Use the buttons at the bottom o[...]

Monitoring the System 467 ProSafe M5300 Switch Cable Test To display the Cable Test page, click Monitoring  Ports > Cable Test . EAPOL Last Frame Version This displays the protocol version number carried in the most recently received EAPOL frame. EAPOL Last Frame Source This displays the source MAC address carried in the most recently receive[...]

Monitoring the System 468 ProSafe M5300 Switch 1. Interface - Indicates the interface to which the cable to be tested is connected. 2. Click APPLY to perform a cable test on the selected interface. The cable test may take up to 2 seconds to complete. If the port has an active link then the link is not taken down and the cable status is always “No[...]

Monitoring the System 469 ProSafe M5300 Switch Buffered Logs To access the Buffered Logs page, click Monitoring  Logs > Buffered Logs . Buffered Log Configuration This log stores messages in memory based upon the settings for message component and severity. On stackable systems, this log exists only on the top of stack platform. Other platfor[...]

Monitoring the System 470 ProSafe M5300 Switch Format of the messages Messages logged to a collector or relay via syslog have an identical format of either type: If system is not stacked • <15>Aug 24 05:34:05 STK0 MSTP[2110]: mspt_api.c(318) 237 %% Interface 12 transitioned to root state on message age timer expiry. The above example indica[...]

Monitoring the System 471 ProSafe M5300 Switch Console Log Configuration This allows logging to any serial device attached to the host. To access the Console Log Configuration page, click Monitoring  Logs > Console Log Configuration . 1. A log that is “Disabled” shall not log messages. A log that is “Enabled” shall log messages. Enabl[...]

Monitoring the System 472 ProSafe M5300 Switch 1. Use Admin Status to enable/disable logging to configured syslog hosts. Setting this to disable stops logging to all syslog hosts. Disable means no messages will be sent to any collector/relay. Enable means messages will be sent to configured collector/relays using the values configured for each coll[...]

Monitoring the System 473 ProSafe M5300 Switch The following table describes the Trap Log information displayed on the screen. The page also displays information about the traps that were sent. Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values.[...]

Field Description Number of Traps Since Last Reset The number of traps that have occurred since the switch last reboot. Trap Log Capacity The maximum number of traps stored in the log. If the number of traps exceeds the capacity, the entries will overwrite the oldest entries. Number of Traps since log last viewed The number of traps that have occur[...]

Monitoring the System 475 ProSafe M5300 Switch The following table describes the Event Log information displayed on the screen. Use the buttons at the bottom of the page to perform the following actions: • Click CLEAR to clear the messages out of the Event Log. • Click REFRESH to refresh the data on the screen and display the most current infor[...]

Field Description Entry The sequence number of the event. Type The type of the event. File Name The file in which the event originated. Line The line number of the event. Task Id The task ID of the event. Code The event code. Time The time this event occurred. Monitoring the System 476 ProSafe M5300 Switch Persistent Logs A persistent log is a log [...]

Monitoring the System 477 ProSafe M5300 Switch • Error (3) - error conditions • Warning (4) - warning conditions • Notice(5) - normal but significant conditions • Informational(6) - informational messages • Debug(7) - debug-level messages 3. Click REFRESH to refresh the web page to show the latest messages in the persistent log. Format of[...]

Monitoring the System 478 ProSafe M5300 Switch Use the Multiple Port Mirroring page to define port mirroring sessions. To access the Multiple Port Mirroring page, click Monitoring  Mirroring > Port Mirroring . To configure Port Mirroring: 1. Select the check box next to each port to configure as a source port. 2. Use Source Port to specify th[...]

Monitoring the System 479 ProSafe M5300 Switch sFlow sFlow ® is a standard for monitoring high-speed switched and routed networks. sFlow technology is built into network equipment and gives complete visibility into network activity, enabling effective management and control of network resources. The sFlow monitoring system consists of an sFlow Age[...]

Monitoring the System 480 ProSafe M5300 Switch To display the sFlow Agent page, click Monitoring   sFlow  Basic  sFlow Agent . Field Description Agent Version Uniquely identifies the version and implementation of this MIB. The version string must have the following structure: MIB Version;Organization;Software Revision where: • MIB Ver[...]

Monitoring the System 481 ProSafe M5300 Switch sFlow Receiver Configuration Use the sFlow Receiver Configuration page to configure the sFlow Receiver. To display the sFlow Receiver Configuration page, click Monitoring   sFlow  Advanced  sFlow Receiver Configuration . 1. Receiver Index . Selects the receiver for which data is to be displ[...]

Monitoring the System 482 ProSafe M5300 Switch sFlow Interface Configuration sFlow agent collects statistical packet-based sampling of switched flows and sends them to the configured receivers. A data source configured to collect flow samples is called a sampler. sFlow agent also collects time-based sampling of network interface statistics and send[...]

483 8 8. Maintenance Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Save Configuration on page 483 • Reset on page 485 • Upload File From Switch on page 487 • Download File To Switch on page 490 • File Management on page 495 • Troubleshoo[...]

Maintenance 484 ProSafe M5300 Switch Auto Install Configuration The AutoInstall feature enables the configuration of a switch automatically when the device is turned on and, during the boot process, no configuration file is found in device storage. By communicating with a DHCP server, AutoInstall obtains an IP address for the switch and an IP addre[...]

Maintenance 485 ProSafe M5300 Switch To configure the auto install settings: 1. Use Auto Install to enable/disable start/stop auto install mode on the switch. 2. Select the Auto Save check box and click the APPLY button to have configuration changes you have made saved across a system reboot. All changes submitted since the previous save or system [...]

Maintenance 486 ProSafe M5300 Switch Factory Default Use the Factory Default page to reset the system configuration to the factory default values. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.1.1, and the DHCP client is enabled. If you lose network connectivity after you reset the switch to the fact[...]

Maintenance 487 ProSafe M5300 Switch Upload File From Switch Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server. The Upload menu contains links to the following options: • File Upload on page 487 • HTTP File Upload on page 488 • USB File Upload on page 489 File Up[...]

Maintenance 488 ProSafe M5300 Switch • Tech Support - Specify Tech Support to retrieve the switch information needed for trouble-shooting. The factory default is Archive. 2. Use Transfer Mode to specify what protocol to use to transfer the file: • TFTP - Trivial File Transfer Protocol • SFTP - Secure File Transfer Program • SCP - Secure Cop[...]

Maintenance 489 ProSafe M5300 Switch • Error Log - Specify error log to retrieve the system error (persistent) log, sometimes referred to as the event log. • Trap Log - Specify trap log to retrieve the system trap records. • Buffered Log - Specify buffered log to retrieve the system buffered (in-memory) log. • Tech Support - Specify Tech Su[...]

Maintenance 490 ProSafe M5300 Switch Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP. The Download menu contains links to the following options: • File Download on page 490 • HTTP File Download on page 492 • USB File Download on page 494 File Download To display[...]

Maintenance 491 ProSafe M5300 Switch • Use SSL Trusted Root Certificate PEM File to specify SSL Trusted Root Certificate File (PEM Encoded). • Use SSL Server Certificate PEM File to specify SSL Server Certificate File (PEM Encoded). • Use SSL DH Weak Encryption Parameter PEM File to specify SSL Diffie-Hellman Weak Encryption Parameter File (P[...]

Maintenance 492 ProSafe M5300 Switch HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser). To display this page, click Maintenance  Download  HTTP File Download . To download a file to the switch by using HTTP: 1. Use File Type to specify [...]

Maintenance 493 ProSafe M5300 Switch 2. If you are downloading a GSM7352Sv1 or GSM7352Sv2 image (Archive), select the image on the switch to overwrite. This field is only visible when Archive is selected as the File Type. Note: It is recommended that you not overwrite the active image. The system will display a warning that you are trying to overwr[...]

Maintenance 494 ProSafe M5300 Switch USB File Download Use this menu to download a file from the switch to USB device. To display the HTTP File Upload page, click Maintenance  Download  USB File Upload . 1. Use File Type to specify what type of file you want to upload: • Archive - Specify archive (STK) code when you want to retrieve from th[...]

Maintenance 495 ProSafe M5300 Switch File Management The system maintains two versions of the ProSafe software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces switch down time when upgrading or downgrading the ProSafe so[...]

Maintenance 496 ProSafe M5300 Switch Dual Image Configuration The Dual Image feature allows switch to retain two images in permanent storage. The user designates one of these images as the active image to be loaded during subsequent switch restarts. This feature reduces switch down time when upgrading / downgrading the image. To display the Dual Im[...]

Maintenance 497 ProSafe M5300 Switch Troubleshooting The Troubleshooting menu contains links to the following options: • Ping IPv4 on page 497 • Ping IPv6 on page 498 • Traceroute IPv4 on page 499 • Traceroute IPv6 on page 500 Ping IPv4 Use this screen to tell the switch to send a Ping request to a specified IP address. You can use this to [...]

Maintenance 498 ProSafe M5300 Switch • Count - Enter the number of echo requests you want to send. The initial value is default value. The Count you enter is not retained across a power cycle. • Interval (secs) - Enter the Interval between ping packets in seconds. initial value is default value. The Interval you enter is not retained across a p[...]

Maintenance 499 ProSafe M5300 Switch Traceroute IPv4 Use this screen to tell the switch to send a TraceRoute request to a specified IP address or Hostname. You can use this to discover the paths packets take to a remote destination. Once you click the APPLY button, the switch will send traceroute and the results will be displayed below the configur[...]

Maintenance 500 ProSafe M5300 Switch • InitTTL - Enter the initial TTL to be used. The initial value is default value. The InitTTL you enter is not retained across a power cycle. • MaxFail - Enter the maximum Failures allowed in the session. The initial value is default value. The MaxFail you enter is not retained across a power cycle. • Inte[...]

501 9 9. Help Use the features available from the Help tab to connect to online resources for assistance. The Help tab contains a links to the following: • Online Help on page 501 • Registration on page 503 Online Help The Online Help includes the following pages: • Support on page 501 • User Guide on page 502 Support Use the Support page t[...]

Help 502 ProSafe M5300 Switch User Guide Use the User Guide page to access the Web Management User Guide (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help  Online Help > User Guide . To access to the User Guide that is available online, click APPLY .[...]

Help 503 ProSafe M5300 Switch Registration Use the Registration page to register your ProSafe M5300 switch. Completing the registration confirms your e-mail address, lowers technical support resolution time, and ensures your shipping address accuracy. NETGEAR, Inc. would also like to incorporate your feedback into future product development. Note: [...]

Help 504 ProSafe M5300 Switch If you have not registered the product or have not disabled the registration reminders, the following pop-up window appears each time a user successfully logs on to the switch: The registration pop-up window includes the following buttons: • TURN OFF . Use this button to turn off the Product Registration feature and [...]

505 A A. Default Settings This appendix describes the default settings for many of the ProSafe M5300 Managed Switch software features. Table 3. Default Settings Feature Default IP address 192.168.1.1 Subnet mask 255.255.0.0 Default gateway 0.0.0.0 Protocol DHCP Management VLAN ID 1 Minimum password length Eight characters IPv6 management mode Enabl[...]

Default Settings 506 ProSafe M5300 Switch ISDP Enabled (Versions 1 and 2) RMON Enabled TACACS+ Not configured RADIUS Not configured SSH/SSL Disabled Telnet Enabled Denial of Service Protection Disabled Captive Portal Disabled Dot1x Authentication (IEEE 802.1X) Disabled MAC-Based Port Security All ports are unlocked Access Control Lists (ACL) None c[...]

Default Settings 507 ProSafe M5300 Switch Default VLAN ID 1 Default VLAN Name Default GVRP Disabled GARP Timers Leave: 60 centiseconds Leave All: 1000 centiseconds Join: 20 centiseconds Voice VLAN Disabled Guest VLAN Disabled RADIUS-assigned VLANs Disabled Double VLANs Disabled Spanning Tree Protocol (STP) Enabled STP Operation Mode IEEE 802.1s Mul[...]

Default Settings 508 ProSafe M5300 Switch[...]

509 B B. Configuration Examples This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 509 • Access Control Lists (ACLs) on page 511 • Differentiated Services (DiffServ) on page 514 • 802.1X on page 518 • MSTP on page 521 Virtual Local Area Networks (VLANs) A local a[...]

Configuration Examples 510 ProSafe M5300 Switch • They are easy to manage. The addition of nodes, as well as moves and other changes, can be dealt with quickly and conveniently from a management interface rather than from the wiring closet. • They provide increased performance. VLANs free up bandwidth by limiting node-to-node and broadcast traf[...]

Configuration Examples 511 ProSafe M5300 Switch • For the VLAN with VLAN ID 10, specify the following members: port 1 (U), port 2 (U), and port 3 (T). • For the VLAN with VLAN ID 20, specify the following members: port 4 (U), port 5 (T), and port 6 (U). 3. In the Port PVID Configuration screen (see “Port PVID Configuration” on page 3-103 ),[...]

Configuration Examples 512 ProSafe M5300 Switch criteria to a particular queue or redirect the traffic to a particular port. A default deny all rule is the last rule of every list. 2. APPLY the access list to an interface in the inbound direction. ProSafe allow ACLs to be bound to physical ports and LAGs. The switch software supports MAC ACLs and I[...]

Configuration Examples 513 ProSafe M5300 Switch ports, you must add a new permit rule with the desired match criteria and bind the rule to interfaces 6, 7, and 8. Standard IP ACL Example Configuration The following example shows how to create an IP-based ACL that prevents any IP traffic from the Finance department from being allowed on the ports th[...]

Configuration Examples 514 ProSafe M5300 Switch Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will. During times of congestion, packets may be delayed, s[...]

Configuration Examples 515 ProSafe M5300 Switch • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.) • Layer 4 source/destination ports • Source/destination IP address From a DiffServ point of view, there are two types of classes: • DiffServ traffic classes • DiffServ service[...]

Configuration Examples 516 ProSafe M5300 Switch Traffic Conditioning Policy Traffic conditioning pertains to actions performed on incoming traffic. There are several distinct QoS actions associated with traffic conditioning: • Dropping - Drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especia[...]

Configuration Examples 517 ProSafe M5300 Switch DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: 1. From the QoS Class Configuration screen, create a new class with the following settings: • Class Name: Class1 • Class Type: All For more information about this screen, see C[...]

Configuration Examples 518 ProSafe M5300 Switch All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3. On this network, traffic from streaming applications us[...]

Configuration Examples 519 ProSafe M5300 Switch operation of a switch’s ports to be controlled in order to ensure that access to its services is only permitted by systems that are authorized to do so. Port access control provides a means of preventing unauthorized access by supplicants to the services offered by a system. Control over the access [...]

Configuration Examples 520 ProSafe M5300 Switch 802.1X Example Configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5 - 1/0/8). These ports are available to visitors and need to be authenticated before granting access to the network. The authent[...]

Configuration Examples 521 ProSafe M5300 Switch MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of Spanning Tree to efficiently channel VLAN traffic over different i[...]

Configuration Examples 522 ProSafe M5300 Switch An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs. The MST Configuration Identifier has the following components: 1. Configuration Identifier Format Select[...]

Configuration Examples 523 ProSafe M5300 Switch MSTP Example Configuration This example shows how to create an MSTP instance from the GSM7352Sv1 or GSM7352Sv2 switch. The example network has three different ProSafe that serve different locations in the network. In this example, ports 1/0/1-1/0/5 are connected to host stations, so those links are no[...]

Configuration Examples 524 ProSafe M5300 Switch If you do not specify a root bridge and all switches have the same Bridge Priority value, the switch with the lowest MAC address is elected as the root bridge (see CST Configuration on page 146). 5. From the CST Port Configuration screen, select ports 1/0/1 - 1/0/8 and select Enable from the STP Statu[...]

525 C C. Notification of Compliance NETGEAR Wired Products Regulatory Compliance Information This section includes user requirements for operating this product in accordance with National laws for usage of radio spectrum and operation of radio devices. Failure of the end-user to comply with the applicable requirements may result in unlawful operati[...]

ProSafe M5300 Switch Notification of Compliance 526 • This device must accept any interference received, including interference that may cause undesired operation. FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the[...]

ProSafe M5300 Switch Notification of Compliance 527 GPL License Agreement GPL may be included in this product; to view the GPL license agreement go to ftp://downloads.netgear.com/files/GPLnotice.pdf For GNU General Public License (GPL) related information, visit http://support.netgear.com/app/answers/detail/a_id/2649[...]

528 Index Numerics 802.1X 359 , 387 , 389 example configuration 518 A access control ACL example configuration 511 ACLs 435 authentication 802.1X 386 , 518 enable 16 port-based 386 RADIUS 359 SNMP 16 TACACS+ 364 Auto-VoIP Configuration 134 C certificate 375 compliance 525 Configuration 802.1X 387 , 389 Access Control Lists 435 Access Profile 384 Ac[...]

529 ProSafe M5300 Switch I IEEE 802.11x 518 IEEE 802.1AB 93 IEEE 802.1D 143 IEEE 802.1Q 119 , 143 IEEE 802.1s 143 IEEE 802.1w 143 IEEE 802.1X 359 IGMP 158 interface LAG 184 logical 17 naming convention 17 physical 17 queue configuration 336 , 337 IP DSCP 332 Mapping 334 L LAG VLAN 184 LAGPDUs 184 LAGs 184 Membership 186 Static 184 LLDP 93 LLDP-MED [...]

530 ProSafe M5300 Switch U Unicast 35 upload configuration 487 V VLAN 119 example configuration 509 guest 518 ID 119 managing 119 Port VLAN ID 125 PVID 125 VoIP 134[...]