NETGEAR GS724TS-100NAS manual

February 2012 202-10484-04 v1.0 350 East Plumeria Drive San Jose, CA 95134 USA GS716T and GS724T Smart Switches Software Administration Manual[...]

2 | GS716Tv2 and GS724Tv3 Software Administration Manual ©2012 NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. Technical Support Thank you for choosing[...]

Table of Contents | 3 Table of Contents Chapter 1 Getting Started Getting Started with the GS716T and GS724T Gigabit Smart Switches . . 10 Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connecting the Switch to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Switch Discovery[...]

GS716Tv2 and GS724Tv3 Software Administration Manual 4 | Table of Contents Services — DHCP Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 DHCP Filtering Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Interface Configuration . . . . . . . . . . . . . . . . . . . . . . . . . [...]

GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 5 DSCP to Queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135 Defining DiffServ . . . . . . . . . . . . . . . . . . . . . . . . . . . .[...]

GS716Tv2 and GS724Tv3 Software Administration Manual 6 | Table of Contents Chapter 6 Monitoring the System Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 Switch Statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201 Port Statistics . . .[...]

GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 7 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 System Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247 Management . . . . . . . . . . . . . . . . . . . . . . . . [...]

GS716Tv2 and GS724Tv3 Software Administration Manual 8 | Table of Contents[...]

Chapter 1: Getting Started | 9 1. Getting Started 1 The NETGEAR ® GS716T and GS724T Smart Switch Software Administration Manual describes how to configure and operate the GS716T and GS724T Gigabit Smart Switches by using the Web-based graphical user interface (GUI). This manual describes the software configuration procedures and explains the optio[...]

10 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Getting Started with the GS716T and GS724T Gigabit Smart Switches This chapter provides an overview of starting your NETGEAR GS716T or GS724T Smart Switch and accessing the user interface. It also leads you through the steps to use the Smart Control Center utility.[...]

Chapter 1: Getting Started | 11 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Management Interface The NETGEAR GS716T and GS724T Smart Switches contain embedded Web server and management software for managing and monitoring switch functions. The switches function as a simple switch without the management software. However, you can use[...]

12 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Connecting the Switch to the Network To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway). The switch has a de[...]

Chapter 1: Getting Started | 13 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default. When you connect it to your network, the DHCP server will automatically assig[...]

14 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Use your Web browser to manage your switch. The default password is password . Then use this page to proceed to management of the switch covered in Using the Web Interface on page 24.[...]

Chapter 1: Getting Started | 15 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network without a DHCP Server This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server. If your network has no DHCP service, you must assign a static IP address to your switch. If you [...]

16 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 9. Click Apply to configure the switch with the network settings. Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use. Configuring the Network Settings on the Administrative System If you choose not to use t[...]

Chapter 1: Getting Started | 17 GS716Tv2 and GS724Tv3 Software Administration Manual To modify the network settings on your administrative system: 1. On your PC, access the MS Windows operating system TCP/IP Properties. 2. Set the IP address of the administrative system to an address in the 192.168.0.0 network, such as 192.168.0.200. The IP address[...]

18 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Web Access To access the GS716T or GS724T management interface, use one of the following methods: • From the Smart Control Center, select the switch and click Web Browser Access . • Open a Web browser and enter the IP address of the switch in the address field.[...]

Chapter 1: Getting Started | 19 GS716Tv2 and GS724Tv3 Software Administration Manual Smart Control Center Utilities In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features. This section describes the following Smart Control Center utilities: • Network Utilities on page 19 • [...]

20 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click OK. 5. Enter the switch password and click Apply . The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor. To restore the configuration to a previously saved version: 1. Click the Maint[...]

Chapter 1: Getting Started | 21 GS716Tv2 and GS724Tv3 Software Administration Manual Firmware Upgrade The application software for the GS716T and GS724T Smart Switches is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available. The upgrade procedure and the required equipment are describe[...]

22 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 7. When the process is complete, the switch automatically reboots. Note: Click the Tasks tab to view status information about the firmware upgrade. WARNING! It is important that you do not power-off the administrative system or the switch while the firmware upgrade[...]

Chapter 1: Getting Started | 23 GS716Tv2 and GS724Tv3 Software Administration Manual Viewing and Managing Tasks From the Tasks tab, you can view information about configuration downloads and firmware upgrades that have already occurred, are in progress, or are scheduled to take place at a later time. You can also delete or reschedule selected tasks[...]

24 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Understanding the User Interfaces The switch software includes a set of comprehensive management functions for configuring and monitoring the system by using one of the following methods: • Web user interface • Simple Network Management Protocol (SNMP) Each of [...]

Chapter 1: Getting Started | 25 GS716Tv2 and GS724Tv3 Software Administration Manual Figure 1. Administrative Page Layout Navigation Tabs, Feature Links, and Page Menu The navigation tabs along the top of the Web interface give you quick access to the various switch functions. The tabs are always available and remain constant, regardless of which f[...]

26 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Configuration and Status Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select. On pages that contain configuration options, you can input information into fields[...]

Chapter 1: Getting Started | 27 GS716Tv2 and GS724Tv3 Software Administration Manual If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.[...]

28 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive. For example, if the IP Addressing page is open, the help topic for that page d[...]

Chapter 1: Getting Started | 29 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Naming Convention The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by[...]

30 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 2: Configuring System Information | 31 2. Configuring System Information 2 Use the features in the System tab to define the switch’s relationship to its environment. The System tab contains links to the following features: • Management on page 32 • License Key on page 47 • SNMP on page 47 • LLDP on page 52 • Services — DHCP Fi[...]

32 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information. From the Management link, you can access the follow[...]

Chapter 2: Configuring System Information | 33 GS716Tv2 and GS724Tv3 Software Administration Manual To define system information: 1. Open the System Information page. 2. Define the following fields: • System Name . Enter the name you want to use to identify this switch. You may use up to 31 alphanumeric characters. The factory default is blank. ?[...]

34 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the network information for the management interface: 1. Select the appropriate radio button to determine how to configure the network information for the switch management interface: • Dynamic IP Address (DHCP). Specifies that the swi[...]

Chapter 2: Configuring System Information | 35 GS716Tv2 and GS724Tv3 Software Administration Manual port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID. The management VLAN has the following requirements: • Only one management VLAN can be active at a time. • When a new management VLAN is[...]

36 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual SNTP time definitions are assessed and determined by the following time levels: • T1 : Time at which the original request was sent by the client. • T2 : Time at which the original request was received by the server. • T3 : Time at which the ser[...]

Chapter 2: Configuring System Information | 37 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the time by using the CPU clock cycle as the source: 1. From the Clock Source field, select Local . 2. In the Date field, enter the date in the DD/MM/YYYY format. 3. In the Time field, enter the time in HH:MM:SS format. Note: If you do n[...]

38 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. Use the menu to select the Coordinated Universal Time (UTC) time zone in which the switch is located, expressed as the number of hours. 3. Click Apply to send the updated configuration to the switch. Configuration changes take effect immediately. [...]

Chapter 2: Configuring System Information | 39 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. SNTP Server Configuration Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. To displ[...]

40 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual • Priority . Specifies the priority of this server entry in determining the sequence of servers to which SNTP requests are sent. Enter a priority from 1–3, with 1 being the default and the highest priority. Servers with lowest numbers have priori[...]

Chapter 2: Configuring System Information | 41 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. Denial of Service Use the Denial of Service (DoS) page to configure DoS control. The switch software provides support for classifying and blocking specific types of DoS att[...]

42 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the Auto- DoS feature: 1. Select a radio button to enable or disable Auto-DoS: • Disable . Auto-DoS is disabled (default). • Enable . Auto-DoS is enabled. 2. Click Apply to send the updated configuration to the switch. Configuration [...]

Chapter 2: Configuring System Information | 43 GS716Tv2 and GS724Tv3 Software Administration Manual to drop packets that have a TCP header smaller than the configured Min TCP Hdr Size. The factory default is Disable. • Denial of Service Min TCP Hdr Size . Specify the Min TCP Hdr Size allowed. If First Fragment DoS prevention is enabled, the switc[...]

44 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the global DNS settings: 1. Specify whether to enable or disable the administrative status of the DNS Client. • Enable . Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. • Disable . Prevent the switc[...]

Chapter 2: Configuring System Information | 45 GS716Tv2 and GS724Tv3 Software Administration Manual To add a static entry to the local DNS table: 1. Specify the static host name to add. Enter up to 158 characters. 2. Specify the IP address in standard IPv4 dot notation to associate with the hostname. 3. Click Add . The entry appears in the list bel[...]

46 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Green Ethernet Configuration Use this page to configure Green Ethernet features. Using the Green Ethernet features allows for power consumption savings. To access this page, click System  Management  Green Ethernet Configuration . To configure [...]

Chapter 2: Configuring System Information | 47 GS716Tv2 and GS724Tv3 Software Administration Manual License Key This page provides information about available License Keys for various features. By default those License Keys are not available. If License Key for feature is not available, the user will not be allowed to configure this functionality. [...]

48 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Community Configuration To display this page, click System  SNMP  SNMP V1/V2  Community Configuration . By default, two SNMP Communities exist: • Private, with Read/Write privileges and status set to Enable . • Public, with Read Only pri[...]

Chapter 2: Configuring System Information | 49 GS716Tv2 and GS724Tv3 Software Administration Manual • Community String . Specify a community name. A valid entry is a case-sensitive string of up to 16 characters. • Access Mode . Specify the access level for this community by selecting Read/Write or Read Only from the menu. • Status . Specify t[...]

50 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. To modify information about an existing SNMP recipient, select the check box next to the recipient, change the desired fields, and then click Apply . Configuration changes take effect immediately. 3. To delete a recipient, select the check box nex[...]

Chapter 2: Configuring System Information | 51 GS716Tv2 and GS724Tv3 Software Administration Manual SNMP v3 User Configuration This is the configuration for SNMP v3. To access this page, click System  SNMP  SNMP V3  User Configuration . The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account. The a[...]

52 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and det[...]

Chapter 2: Configuring System Information | 53 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global LLDP settings: 1. Configure the following LLDP properties. • TLV Advertised Interval . Specify the interval at which frames are transmitted. The default is 30 seconds, and the valid range is 1–32768 seconds. • Hold Multiplie[...]

54 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure LLDP port settings: 1. Change the LLDP port settings described below: • Interface. Specifies the port to be affected by these parameters. • Admin Status . Select the status for transmitting and receiving LLDP packets: • Tx Only : E[...]

Chapter 2: Configuring System Information | 55 GS716Tv2 and GS724Tv3 Software Administration Manual • Tx and Rx : Enable both transmitting and receiving LLDP PDUs on the selected ports. • Disabled : Do not transmit or receive LLDP PDUs on the selected ports. • Management IP Address. Choose whether to advertise the management IP address from t[...]

56 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties. To display this page, click System  LLDP  Advanced  LLDP[...]

Chapter 2: Configuring System Information | 57 GS716Tv2 and GS724Tv3 Software Administration Manual 3. From the Notification field, specify whether the port should send a topology change notification if a device is connected or removed. 4. From the Transmit Optional TLVs field, specify whether the port should transmit optional type length values (T[...]

58 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the LLDP local information that displays for each port. Field Description Interface Select the interface with the information to display. Port ID Subtype Identifies the type of data displayed in the Port ID field. Port I[...]

Chapter 2: Configuring System Information | 59 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. To view additional details about a port, click the name of the port in the Interface column of the Port Information table. A popup window displays information for the selec[...]

60 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Neighbors Information Use the LLDP Neighbors Information page to view the data that a specified interface has received from other LLDP-enabled systems. To display the LLDP Neighbors Information page, click System > LLDP > Advanced > Neighbor[...]

Chapter 2: Configuring System Information | 61 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information that displays for all LLDP neighbors that have been discovered. Click Refresh to update the information on the screen with the most current data. To view additional information about the remote device, cl[...]

62 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Details Local Port Displays the interface on the local system that received LLDP information from a remote system. MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device. Basic Details Chas[...]

Chapter 2: Configuring System Information | 63 GS716Tv2 and GS724Tv3 Software Administration Manual Address Specifies the advertised management address of the remote system. Interface SubType Specifies the port subtype. Interface Number Identifies the port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Sp[...]

64 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Asset ID Displays the asset ID advertised by the remote device. Location Information Civic Displays the physical location, such as the street address, the remote device has advertised in the location TLV. For example, 123 45th St. E. The field value [...]

Chapter 2: Configuring System Information | 65 GS716Tv2 and GS724Tv3 Software Administration Manual Services — DHCP Filtering DHCP Filtering is a useful feature that can be employed as a security measure against unauthorized DHCP servers. A known attack is when an unauthorized DHCP server responds to a client that is requesting an IP address. The[...]

66 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Interface Configuration Use the DHCP Filtering Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (o[...]

Chapter 2: Configuring System Information | 67 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure DHCP filtering settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select th[...]

68 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 3: Configuring Switching Information | 69 3. Configuring Switching Information 3 Use the features in the Switching tab to define Layer 2 features. The Switching tab contains links to the following features: • Ports on page 70 • Link Aggregation Groups on page 74 • VLANs on page 80 • Voice VLAN on page 86 • Auto-VoIP on page 90 •[...]

70 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch. From the Ports link, you can access the following pages: • Port Configuration on page 70 • Flow Control on page[...]

Chapter 3: Configuring Switching Information | 71 GS716Tv2 and GS724Tv3 Software Administration Manual To configure port settings: 1. To configure settings for a physical port, click PORTS . 2. To configure settings for a Link Aggregation Group (LAG), click LAGS .[...]

72 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box [...]

Chapter 3: Configuring Switching Information | 73 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 7. If you make any changes to the page, click Apply to apply the changes to the system. Flow Control IEEE 802.3x flow con[...]

74 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link. Network devices treat the aggregation as if it were a single link, [...]

Chapter 3: Configuring Switching Information | 75 GS716Tv2 and GS724Tv3 Software Administration Manual LAG Configuration Use the LAG (Port Channel) Configuration page to group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel. The switch treats the LAG as if it w[...]

76 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Active Ports . A listing of the ports that are actively participating members of this Port Channel. A maximum of 4 ports can be assigned to a port channel. • LAG State . Indicates whether the link is Up or Down. 3. Click Cancel to cancel the[...]

Chapter 3: Configuring Switching Information | 77 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click the box below each port to include in the LAG. The following figure shows an example of how to configure LAG1 with ports e1–e4 as members. 5. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the[...]

78 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 4. If you make any changes to this page, click Apply to send the updated configuration to the switch. Configuration chang[...]

Chapter 3: Configuring Switching Information | 79 GS716Tv2 and GS724Tv3 Software Administration Manual Note: You cannot select ports that are not participating in a LAG 2. Configure the LACP Priority value for the selected port. The field range is 0–255. The default value is 128. 3. Configure the administrative LACP Timeout value. • Long . Spec[...]

80 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual VLANs Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the ne[...]

Chapter 3: Configuring Switching Information | 81 GS716Tv2 and GS724Tv3 Software Administration Manual To configure VLANs: 1. To add a VLAN, configure the VLAN ID, name, and type, and then click Add . • VLAN ID . Specify the VLAN Identifier for the new VLAN. (You can enter data in this field only when you are creating a new VLAN.) The range of th[...]

82 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To display the VLAN Membership Configuration page, click Switching  VLAN  Advanced  VLAN Membership . To configure VLAN membership: 1. From the VLAN ID field, select the VLAN to which you want to add ports. 2. Click the orange bar belo[...]

Chapter 3: Configuring Switching Information | 83 GS716Tv2 and GS724Tv3 Software Administration Manual • Tag All : Select the ports on which all frames transmitted for this VLAN will be tagged. All the ports will be included in the VLAN. • Remove All : This selection has the effect of excluding all ports from the selected VLAN. 6. Click Cancel [...]

84 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure PVID information: 1. To configure PVID settings for a physical port, click PORTS . 2. To configure PVID settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure PVID settings for both physical ports and LAGs, click AL[...]

Chapter 3: Configuring Switching Information | 85 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Specify how you want the port to handle untagged and priority tagged frames. Whichever you select, VLAN tagged frames will be forwarded in accordance with the IEEE 802.1Q VLAN standard. The factory default is Admit All. • VLAN Only : The port[...]

86 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Voice VLAN Configure the Voice VLAN settings for ports that carry traffic from IP phones. The Voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high. Fro[...]

Chapter 3: Configuring Switching Information | 87 GS716Tv2 and GS724Tv3 Software Administration Manual 5. From the Voice VLAN Aging Time field, specify the amount of time after the last IP phone’s OUI is aged out for a specific port. The port will age out after the bridge and voice aging time. 6. Click Cancel to cancel the configuration on the sc[...]

88 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure Voice VLAN port settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. 2. From the Voice VLAN Mode menu, specify whether to enable or disab[...]

Chapter 3: Configuring Switching Information | 89 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

90 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Auto-VoIP The Auto-VoIP automatically makes sure that time-sensitive voice traffic is given priority over data traffic on ports that have this feature enabled. Auto-VoIP checks for packets carrying the following VoIP protocols: • Session Initiat[...]

Chapter 3: Configuring Switching Information | 91 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Auto-VoIP settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports. 2. From the Auto-VoIP Mode menu, specify whether to enable or disable Auto[...]

92 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure OUI settings: 1. To add a new OUI prefix, type the VOIP OUI prefix in the Telephony OUI(s) field, provide a description of the prefix, and click Add . The OUI prefix must be in the format AA:BB:CC. 2. To delete an OUI prefix from the [...]

Chapter 3: Configuring Switching Information | 93 GS716Tv2 and GS724Tv3 Software Administration Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops. Spanning tree versions supported include Common STP, [...]

94 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure STP settings on the switch: 1. From the Spanning Tree State field, specify whether to enable or disable Spanning Tree operation on the switch. 2. From the STP Operation Mode field, Specifies the Force Protocol Version parameter for th[...]

Chapter 3: Configuring Switching Information | 95 GS716Tv2 and GS724Tv3 Software Administration Manual 6. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes occur immediately. The following table describes the STP Status information displayed on the screen. Click Refresh to upda[...]

96 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST settings: 1. Specify values for CST in the appropriate fields: • Bridge Priority . When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes [...]

Chapter 3: Configuring Switching Information | 97 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes take place immediately. The following table describes the MSTP status information displayed on the Spanning Tree CST Confi[...]

98 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST port settings: 1. To configure CST settings for a physical port, click PORTS . 2. To configure CST settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure CST settings for both physical ports and LAGs, click ALL [...]

Chapter 3: Configuring Switching Information | 99 GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Link . Specifies if the specified port is an Edge Port with the CST. Possible values are Enable or Disable. The default is Disable. • Port State . The Forwarding state of this port. This field is read-only. • Path Cost . Set the Path [...]

100 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the CST Status information displayed on the screen.[...]

Chapter 3: Configuring Switching Information | 101 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. Field Description Interface Select a physical or port channel interface to configure. The port is associated with the VLAN(s) associated with the CST. Port Role Eac[...]

102 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Rapid STP Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status. To display the Rapid STP page, click Switching > STP > Advanced  RSTP . The following table describes the Rapid STP Status information dis[...]

Chapter 3: Configuring Switching Information | 103 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch. To display the Spanning Tree MST Configurati[...]

104 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • VLAN ID . The menu contains all VLANs configured on the switch. Select a VLAN to associate with the MST instance. 2. To delete an MST instance, select the check box next to the instance and click Delete . 3. To modify an MST instance, select [...]

Chapter 3: Configuring Switching Information | 105 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

106 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Note: If no MST instances have been configured on the switch, the page displays a “No MSTs Available” message. To configure MST port settings: 1. To configure MST settings for a physical port, click PORTS . 2. To configure MST settings for a [...]

Chapter 3: Configuring Switching Information | 107 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the screen with the latest MST information. STP Statistics Use the Spanning Tree Statistics page to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To[...]

108 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the STP Statistics page. Click Refresh to update the screen with the latest STP statistics information. Field Description Interface Select a physical or port channel interface to view its[...]

Chapter 3: Configuring Switching Information | 109 GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255. From the Multicast link, you can access the following pages: • Auto-V[...]

110 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch. Multicast IP traffic is traffic that is destined to a host group. Host groups are identif[...]

Chapter 3: Configuring Switching Information | 111 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping: 1. Enable or disable IGMP Snooping on the switch. • Enable . The switch snoops all IGMP packets it receives to determine which segments should receive packets directed to the group address. • Disable . The switch d[...]

112 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table displays information about the global IGMP snooping status and statistics on the page. IGMP Snooping Interface Configuration Use the IGMP Snooping Interface Configuration page to configure IGMP snooping settings on specific in[...]

Chapter 3: Configuring Switching Information | 113 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping interface settings: 1. To configure IGMP Snooping settings for a physical port, click PORTS . 2. To configure IGMP Snooping settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure IGMP Snooping setting[...]

114 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Leave Admin Mode . Select the Fast Leave mode for a particular interface from the menu. The default is Disable. 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.[...]

Chapter 3: Configuring Switching Information | 115 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear one or all of the IGMP Snooping entries. • Click Refresh to reload the page and display the most current information. Multicast Forwarding Data[...]

116 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MFDB Statistics Use the multicast forwarding database Statistics page to view statistical information about the MFDB table. To access the MFDB Statistics page, clic[...]

Chapter 3: Configuring Switching Information | 117 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the MFDB Statistics page: Click Refresh to update the information on the screen with the most current data. IGMP Snooping VLAN Configuration Use the IGMP Snooping VLAN Configuration page [...]

118 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP snooping settings for VLANs: 1. To enable IGMP snooping on a VLAN, enter the VLAN ID in the appropriate field and configure the IGMP Snooping values: • Fast Leave Admin Mode . Enable or disable the IGMP Snooping Fast Leave Mod[...]

Chapter 3: Configuring Switching Information | 119 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To disable IGMP snooping on a VLAN and remove it from the list, select the check box next to the VLAN ID and click Delete . 4. To modify IGMP snooping settings for a VLAN, select the check box next to the VLAN ID, update the desired values, an[...]

120 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 1. From the Querier Admin Mode field, enable or disable the administrative mode for IGMP Snooping Querier. 2. In the Snooping Querier Address field, specify the IP address to be used as source address in periodic IGMP queries. This address is use[...]

Chapter 3: Configuring Switching Information | 121 GS716Tv2 and GS724Tv3 Software Administration Manual • Disabled . Upon seeing another querier of the same version in the VLAN, the snooping querier moves to the non-querier state. • Enabled . The snooping querier participates in querier election, in which the least IP address operates as the qu[...]

122 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to redisplay the page with the latest information from the switch. Forwarding Database The forwarding database maintains a list of MAC addresses after having received a packet from this MAC address. The transparent bridging function[...]

Chapter 3: Configuring Switching Information | 123 GS716Tv2 and GS724Tv3 Software Administration Manual To access this page, click Switching  Address Table  Basic  Address Table . To search for an entry in the MAC Address Table: 1. Use the Search By field to search for MAC Addresses by MAC Address , VLAN ID , or Interface . • MAC Addr[...]

124 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available for each entry in the address table. Dynamic Address Configuration Use the Dynamic Addresses page to set the amount of time to keep a learned MAC address entry in the forwarding database. Th[...]

Chapter 3: Configuring Switching Information | 125 GS716Tv2 and GS724Tv3 Software Administration Manual Note: IEEE 802.1D recommends a default of 300 seconds, which is the factory default. 2. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 3. Click Apply to apply to send the[...]

126 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 4: Configuring Quality of Service | 127 4. Configuring Quality of Service 4 Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch. The QoS tab contains links to the following features: • Class of Service on page 128 • Differentiated Services on page 135 In a typical switch, each physical port consi[...]

128 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not requ[...]

Chapter 4: Configuring Quality of Service | 129 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global CoS settings: 1. Select the Global radio button to configure the trust mode settings that apply to all interfaces. Alternatively, you can select the Interface radio button to apply trust mode settings to individual interfaces. Th[...]

130 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure CoS settings for an interface: 1. To configure CoS settings for a physical port, click PORTS . 2. To configure CoS settings for a Link Aggregation Group (LAG), click LAGS . 3. To configure CoS settings for both physical ports and LAGs, [...]

Chapter 4: Configuring Quality of Service | 131 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Queue Configuration Use the Interface Queue Configuration page to define what a particular queue does by configuring switch egress queues. User-configurable parameters control the amount of bandwidth used by the queue, the queue depth duri[...]

132 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Queue ID . Use the menu to select the queue to be configured. • Minimum Bandwidth . Enter a percentage of the maximum negotiated bandwidth for the selected queue on the interface. Specify a percentage from 0–100, in increments of 1. • Sche[...]

Chapter 4: Configuring Quality of Service | 133 GS716Tv2 and GS724Tv3 Software Administration Manual If you map 802.1p priorities to individual interfaces, select the Interface radio button and then select the interface from the drop-down menu. The interface settings override the global settings for 802.1p priority mapping. 2. Select the queue to m[...]

134 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To map DSCP values to queues: 1. For each DSCP value, select a hardware queue to associate with the value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower qu[...]

Chapter 4: Configuring Quality of Service | 135 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks ar[...]

136 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Diffserv Configuration Use the Diffserv Configuration page to display DiffServ General Status Group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ pr[...]

Chapter 4: Configuring Quality of Service | 137 GS716Tv2 and GS724Tv3 Software Administration Manual Class Configuration Use the Class Configuration page to add a new DiffServ class name, or to rename or delete an existing class. The page also allows you to define the criteria to associate with a DiffServ class. As packets are received, these DiffS[...]

138 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class.[...]

Chapter 4: Configuring Quality of Service | 139 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Define the criteria to associate with a DiffServ class: • Reference Class . Selects a class to start referencing for criteria. A specified class can reference at most one other class of the same type. • Class of Service . Select the field and[...]

140 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Destination IP Address. Requires a packet’s destination port IP address to match the address listed here. In the IP Address field, enter a valid destination IP address in dotted decimal format. • Destination Mas k. Enter a valid subnet mask [...]

Chapter 4: Configuring Quality of Service | 141 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a DiffServ policy: 1. To create a new policy, enter a policy name in the Policy Selector field, select the existing DiffServ class to associate with the policy, and click Add . The available policy type is In, which indicates the type i[...]

142 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual The policy name is a hyperlink. The following figure shows the configuration fields for the policy.[...]

Chapter 4: Configuring Quality of Service | 143 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Select the queue to which packets will of this policy-class will be assigned. 3. Configure the policy attributes:. • Drop . Select this option to drop packets for this policy-class. • Mark CoS . Enter the specified Class of Service queue numb[...]

144 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Simple Policy . Use this attribute to establish the traffic policing style for the specified class. The simple form of the policy command uses a single data rate and burst size, resulting in two outcomes: confirm and violate. 4. If you select th[...]

Chapter 4: Configuring Quality of Service | 145 GS716Tv2 and GS724Tv3 Software Administration Manual • Mark IP DSCP . These packets are marked by DiffServ with the specified DSCP value before being presented to the system forwarding element. This selection requires that the DSCP value field be set. 5. Click Cancel to cancel the configuration on t[...]

146 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply the same settings to all interfaces. 5. To ac[...]

Chapter 4: Configuring Quality of Service | 147 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the page with the most current information. Discarded Packets Displays the total number of packets discarded for all class instances in this service policy for any reason due to DiffServ treatment. This is the overall count p[...]

148 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 5: Managing Device Security | 149 5. Managing Device Security 5 Use the features available from the Security tab to configure management security settings for port, user, and server security. The Security tab contains links to the following features: • Management Security Settings on page 150 • Configuring Management Access on page 161 [...]

150 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Management Security Settings From the Management Security Settings page, you can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS+) settings, and authentica[...]

Chapter 5: Managing Device Security | 151 GS716Tv2 and GS724Tv3 Software Administration Manual Note: In the case of a lost password, press the Factory Default Reset button on the front panel for more than one second to restore the factory default. The reset button will only reboot the device. RADIUS Configuration RADIUS servers provide additional s[...]

152 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual configured as the primary server. If no servers are configured as the primary server, the current server is the most recently added RADIUS server. To configure global RADIUS server settings: 1. In the Max Number of Retransmits field, specify the value of [...]

Chapter 5: Managing Device Security | 153 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a RADIUS server: 1. To add a RADIUS server, specify the settings the following list describes, and click Add . • In the Server Address field, specify the IP address of the RADIUS server to add. • In the Authentication Port field, specify [...]

154 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to clear the authentication server and RADIUS statistics to their default values. • Click Refresh to refresh the page with the most current data from th[...]

Chapter 5: Managing Device Security | 155 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the RADIUS accounting server: 1. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. 2. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server a[...]

156 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes RADIUS accounting server statistics available on the page. Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to reset all statistics to their default value. • Click Refresh[...]

Chapter 5: Managing Device Security | 157 GS716Tv2 and GS724Tv3 Software Administration Manual The TACACS+ protocol ensures network security through encrypted protocol exchanges between the device and TACACS+ server. The TACACS+ folder contains links to the following features: • Configuring TACACS+ on page 156 • TACACS+ Server Configuration on [...]

158 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure TACACS+ server settings: 1. To add a new TACACS+ server, select Add from the TACACS+ Server field, enter the IP address of the server to add, and click Apply . Note: The Add option is available if fewer than five TACACS+ servers are configure[...]

Chapter 5: Managing Device Security | 159 GS716Tv2 and GS724Tv3 Software Administration Manual Authentication List Configuration Use the Authentication List page to configure the default login list. A login list specifies one or more authentication methods to validate switch or port access for the admin user. Note: Admin is the only user on the sys[...]

160 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual 3. Use the menu in the 2 column to select the authentication method, if any, that should appear second in the selected authentication login list. This is the method that will be used if the first method times out. If you select a method that does not time[...]

Chapter 5: Managing Device Security | 161 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the GS716T or GS724T management interface. You can also configure Access Control Profiles and Access Rules. The Security  Access tab contains the follo[...]

162 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual This timeout is unaffected by the activity level of the session. The value must be in the range of (0–168) hours. A value of zero corresponds to an infinite timeout. The default value is 24 hours. The currently configured value is shown when the Web pag[...]

Chapter 5: Managing Device Security | 163 GS716Tv2 and GS724Tv3 Software Administration Manual The currently configured value is shown when the Web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled. 2. Use the radio buttons in the SSL Version 3 field to enable or disable Se[...]

164 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure the certificate download settings for HTTPS sessions: 1. From the File Type menu, select the type of SSL certificate to download, which can be one of the following: • SSL Trusted Root Certificate PEM File . SSL Trusted Root Certificate File[...]

Chapter 5: Managing Device Security | 165 GS716Tv2 and GS724Tv3 Software Administration Manual Access Profile Configuration Use the Access Profile Configuration page to configure settings that control management access to the switch. Access profile configuration requires three steps: 1. Use the Access Profile Configuration page to create an access [...]

166 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The Profile Summary table shows the rules that are configured for the profile, as the following table describes. Click Refresh to update the page with the most current information. Access Rule Configuration Use the Access Rule Configuration page to config[...]

Chapter 5: Managing Device Security | 167 GS716Tv2 and GS724Tv3 Software Administration Manual To configure access profile rules: 1. To add an access profile rule, configure the following settings and click Add . • Rule Type : Specify whether the rule permits or denies access to the GS716T or GS724T management interface. • Select Permit to allo[...]

168 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions. At any given[...]

Chapter 5: Managing Device Security | 169 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global 802.1X settings: 1. Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch. • Enable . Port-based authentication is permitted on the switch. Note[...]

170 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure 802.1X settings for the port:[...]

Chapter 5: Managing Device Security | 171 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the select ports, or select the check box in the heading row to apply the same settings to all ports. 2. For the selected port(s)[...]

172 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Supplicant Timeout . Defines the amount of time that lapses before EAP requests are resent to the user. The field value is in seconds. The field default is 30 seconds. • Server Timeout . Defines the amount of time that lapses before the switch resen[...]

Chapter 5: Managing Device Security | 173 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click Initialize to begin the initialization sequence on the selected port(s). This button is only selectable if the control mode is auto . If the button is not selectable, it will be grayed out. When this button is clicked, the action is immediate. It[...]

174 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the fields on the Port Summary page. Click Refresh to update the information on the screen. Traffic Control From the Traffic Control link, you can configure MAC Filters, Storm Control, Port Security, and Protected Port settin[...]

Chapter 5: Managing Device Security | 175 GS716Tv2 and GS724Tv3 Software Administration Manual • Security MAC Address on page 181 • Protected Ports Membership on page 181 MAC Filter Configuration Use the MAC Filter Configuration page to create MAC filters that limit the traffic allowed into and out of specified ports on the system. To display t[...]

176 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual e. Click the orange bar under the Destination Port Members heading to display the available ports. Select the port(s) to include in the outbound filter. Packets with the MAC address and VLAN ID you selected will be transmitted only out of ports that are i[...]

Chapter 5: Managing Device Security | 177 GS716Tv2 and GS724Tv3 Software Administration Manual Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out. The s[...]

178 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Disable . Do not use storm control. • Unknown Unicast . If the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped. • Multicast . If the [...]

Chapter 5: Managing Device Security | 179 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you change the mode, click Apply to apply the change to the system. The Port Security Violation table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port [...]

180 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure port security settings: 1. To configure port security settings for a physical port, click PORTS. 2. To configure port security settings for a Link Aggregation Group (LAG), click LAGS. 3. To configure port security settings for both physical p[...]

Chapter 5: Managing Device Security | 181 GS716Tv2 and GS724Tv3 Software Administration Manual 7. If you make changes to the page, click Apply to apply the changes to the system. Security MAC Address Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address. To display the Security MAC Address pag[...]

182 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To display the Protected Ports Membership page, click the Security  Traffic Control  Protected Ports link. To configure protected ports: 1. Click the orange bar to display the available ports. 2. Click the box below each port to configure as a prote[...]

Chapter 5: Managing Device Security | 183 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restric[...]

184 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To use the ACL Wizard: 1. Determine the type of ACL to configure and create a MAC ACL, standard IP ACL, or extended IP ACL. • To permit or deny traffic based on the Source MAC Address, create a MAC ACL. • To permit or deny traffic based on the Destina[...]

Chapter 5: Managing Device Security | 185 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Use the MAC ACL page to create the ACL ID. 2. Use the MAC Rules page to create rules for the ACL. 3. Use the MAC Binding Configuration page to assign the ACL by its ID number to a port. 4. Optionally, use the MAC Binding Table page to view the configur[...]

186 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual MAC Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default 'deny all' rule is the last rule of e[...]

Chapter 5: Managing Device Security | 187 GS716Tv2 and GS724Tv3 Software Administration Manual • Deny: Drops packets that meet the ACL criteria. • Assign Queue . Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule. Enter an identifying number from 0–3 in this field. • Redirect Interface . Specifi[...]

188 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual the value given for that bit. The valid format is xx:xx:xx:xx:xx:xx. A MAC mask of 00:00:00:00:00:00 matches a single MAC address. • VLAN . Requires a packet’s VLAN ID to match the ID listed here. Enter the VLAN ID to apply this criteria. The valid ra[...]

Chapter 5: Managing Device Security | 189 GS716Tv2 and GS724Tv3 Software Administration Manual A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number. If the sequence number is not specifie[...]

190 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information displayed in the MAC Binding Table . To delete a MAC ACL-to-interface binding, select the check box next to the interface and click Delete . IP ACL IP ACLs allow network managers to define classification actio[...]

Chapter 5: Managing Device Security | 191 GS716Tv2 and GS724Tv3 Software Administration Manual The IP ACL area shows the current size of the ACL table versus the maximum size of the ACL table. The current size is equal to the number of configured IPv4 plus the number of configured MAC ACLs. The maximum size is 100. To configure an IP ACL: 1. In the[...]

192 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule, select the ACL ID to add the rule to, complete the fields described in the following list, and click Add . • Rule ID . Specify a number from 1–10 to identify the IP ACL rule. You can create u[...]

Chapter 5: Managing Device Security | 193 GS716Tv2 and GS724Tv3 Software Administration Manual subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, you type 0.0.0.255 in the Source IP Mask field. This field is required when you configure a source IP addres[...]

194 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule to an extended IP ACL, select the ACL ID to add the rule to, select the check box in the Extended ACL Rule table, and click Add . Note: The ACL you select must have an ACL ID between 100 and 199. [...]

Chapter 5: Managing Device Security | 195 GS716Tv2 and GS724Tv3 Software Administration Manual • Protocol Type . Requires a packet’s protocol to match the protocol listed here. Select a type from the drop down menu or enter the protocol number in the available field. • Src IP Address . Requires a packet’s source IP address to match the addr[...]

196 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual DSCP value from the menu. To specify a numeric value in the available field, select Other from the menu and type an integer from 0 to 63 in the field. • IP Precedence: The IP Precedence field in a packet is defined as the high-order three bits of the Se[...]

Chapter 5: Managing Device Security | 197 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IP ACL interface bindings: 1. Select an existing IP ACL from the ACL ID menu. The packet filtering direction for ACL is Inbound, which means the IP ACL rules are applied to traffic entering the port. 2. Specify an optional sequence number to [...]

198 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual IP Binding Table Use the IP Binding Table page to view or delete the IP ACL bindings. To display the IP Binding Table, click Security  ACL, then click the Advanced  Binding Table link. The following table describes the information displayed in the M[...]

Chapter 6: Monitoring the System | 199 6. Monitoring the System 6 Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events. The Monitoring tab contains links to the following features: • Ports on page 200 • System Logs on page 213 • Port [...]

200 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages available from the Ports link contain a variety of information about the number and type of traffic transmitted from and received on the switch. From the Ports link, you can access the following pages: • Switch Statistics on page 201 • Po[...]

Chapter 6: Monitoring the System | 201 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Statistics The Switch Statistics page displays detailed statistical information about the traffic the switch handles. To access the Switch Statistics page, click Monitoring  Ports  Switch Statistics . The following table describes the Switch Sta[...]

202 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Packets Received The total number of packets received that were directed to a multicast address. This number does not include packets directed to the broadcast address. Broadcast Packets Received The total number of packets received that were direc[...]

Chapter 6: Monitoring the System | 203 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the statistics counters, resetting all switch summary and detailed statistics to default values. The discarded packets count cannot be cleared. • Click[...]

204 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • To clear all the counters for all ports on the switch, select the check box in the row heading and click Clear . The button resets all statistics for all ports to default values.[...]

Chapter 6: Monitoring the System | 205 GS716Tv2 and GS724Tv3 Software Administration Manual Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click the Monitoring  Ports tab, and then click Port Detailed Statistics . (The Port Detailed Statistics figure[...]

206 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Channel ID If the port is a member of a port channel, the port channel's interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role will[...]

Chapter 6: Monitoring the System | 207 GS716Tv2 and GS724Tv3 Software Administration Manual Packets RX and TX 128-255 Octets The total number of packets (including bad packets) received or transmitted that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets). Packets RX and TX 256-511 Octets The tota[...]

208 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of good packets received that were directed to a multicast address. This number does not include packets direc[...]

Chapter 6: Monitoring the System | 209 GS716Tv2 and GS724Tv3 Software Administration Manual Reserved Address Discards The number of frames discarded that are destined to an IEEE 802.1 reserved address and are not supported by the system. Broadcast Storm Recovery The number of frames discarded that are destined for FF:FF:FF:FF:FF:FF when Broadcast S[...]

210 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Broadcast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent. Total Transmit Errors The sum of Single, Multiple, and Excessive Collisi[...]

Chapter 6: Monitoring the System | 211 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the counters. This resets all statistics for this port to the default values. • Click Refresh to refresh the data on the screen and display the most cu[...]

212 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the EAP statistics displayed on the screen. Use the buttons at the bottom of the page to perform the following actions: • To clear all the EAP counters for all ports on the switch, select the check box in the row heading and c[...]

Chapter 6: Monitoring the System | 213 GS716Tv2 and GS724Tv3 Software Administration Manual System Logs The switch may generate messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences. These messages are stored locally and can be forwarded to one or more centralized points[...]

214 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Memory Logs The in-memory log stores messages in memory based upon the settings for message component and severity. Use the Memory Logs page to set the administrative status and behavior of logs in the system buffer. These log messages are cleared when the s[...]

Chapter 6: Monitoring the System | 215 GS716Tv2 and GS724Tv3 Software Administration Manual The Memory Log table also appears on the Memory Log page. The rest of the page displays the Memory Log messages. The format of the log message is the same for messages that are displayed for the message log, persistent log, or console log. Messages logged to[...]

216 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual • The second log type is the system operation log . The system operation log stores the last N messages received during system operation. This log always has the log full operation attribute set to overwrite. This log can store up to 1000 messages. Either [...]

Chapter 6: Monitoring the System | 217 GS716Tv2 and GS724Tv3 Software Administration Manual • Critical (2): The third highest warning level. A critical log is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional. • Error (3): A device error has occ[...]

218 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual To configure local log server settings: 1. Use the radio buttons in the Admin Status field to determine whether to send log messages to the remote syslog hosts configured on the switch. • Enable : Messages will be sent to all configured hosts (syslog colle[...]

Chapter 6: Monitoring the System | 219 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To modify the settings for an existing host, select the check box next to the host, change the desired information, and click Apply . 4. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the swi[...]

220 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values. Event Logs Use the Event Log page to display the event log, which is used to hold error messages for catastrophic events. After the event is l[...]

Chapter 6: Monitoring the System | 221 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear the messages out of the Event Log. • Click Refresh to refresh the data on the screen and display the most current information. Code The event code passed t[...]

222 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Mirroring The page under the Mirroring link allows you to view and configure port mirroring on the system. Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the swit[...]

Chapter 6: Monitoring the System | 223 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Port Mirroring: 1. Select the check box next to a port to configure it as a source port. 2. In the Destination Port field, specify the port to which port traffic is be copied. Use the e1, e2,...format to specify the port. You can configure only [...]

224 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 7: Maintenance | 225 7. Maintenance 7 Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Reset on page 226 • Upload File From Switch on page 228 • Download File To Switch on page 230 • File Management on page 234 • Troubleshooting on pa[...]

226 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Reset The Reset menu contains links to the following options: • Device Reboot on page 226 • Factory Default on page 226 Device Reboot Use the Device Reboot page to reboot the GS716T or GS724T. To access the Device Reboot page, click Maintenance  Reset  Devic[...]

Chapter 7: Maintenance | 227 GS716Tv2 and GS724Tv3 Software Administration Manual To reset the switch to the factory default settings: 1. Select the check box on the page. 2. Click Apply . The switch resets immediately.[...]

228 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Upload File From Switch The switch supports system file uploads from the switch to a remote system by using TFTP. Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to an TFTP server on the network. To displ[...]

Chapter 7: Maintenance | 229 GS716Tv2 and GS724Tv3 Software Administration Manual 5. In the Transfer File Path field, specify the path on the TFTP server where you want to put the file. You may enter up to 32 characters. Include the backslash at the end of the path. A path name with a space is not accepted. Leave this field blank to save the file t[...]

230 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP. The Download menu contains links to the following options: • TFTP File Download on page 230 • HTTP File Download on page 232 TFTP Fil[...]

Chapter 7: Maintenance | 231 GS716Tv2 and GS724Tv3 Software Administration Manual while the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupt, the system automatically boots from the non-active image. This is a safety feature for faults occurring during the boot upgrade process. • Te[...]

232 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual To activate a software image that you download to the switch, see File Management on page 234. HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser). To display thi[...]

Chapter 7: Maintenance | 233 GS716Tv2 and GS724Tv3 Software Administration Manual • SSL DH Strong Encryption Parameter PEM File : SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). 2. If you are downloading an GS716T or GS724T image (Code), select the image on the switch to overwrite. This field is only visible when Code is select[...]

234 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual File Management The system maintains two versions of the GS716T or GS724T software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded during subsequent switch restarts. This feature reduces switch [...]

Chapter 7: Maintenance | 235 GS716Tv2 and GS724Tv3 Software Administration Manual Note: After activating an image, you must perform a system reset of the switch in order to run the new code. 4. To remove the selected image from permanent storage on the switch, select the Delete Image check box. You cannot delete the active image. 5. Click Cancel to[...]

236 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to display the latest information from the switch. For information about how to update or change the system images, see File Management on page 234. Current-active Displays the currently active image on this switch. Next-active Displays the image to be u[...]

Chapter 7: Maintenance | 237 GS716Tv2 and GS724Tv3 Software Administration Manual Troubleshooting The Troubleshooting menu contains links to the following options: • Ping on page 237 • Traceroute on page 238 Ping Use the Ping page to tell the switch to send a Ping request to a specified IP address. You can use this feature to check whether the [...]

238 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual • If successful, you will see “Reply From IP/Host: icmp_seq = 0. time = xx usec. Tx = x, Rx = x Min/Max/Avg RTT = x/x/x msec.” • If a reply to the ping is not received, you will see “Reply From IP/Host: Destination Unreachable. Tx = x, Rx = 0 Min/Max/Avg RTT[...]

Chapter 7: Maintenance | 239 GS716Tv2 and GS724Tv3 Software Administration Manual • MaxFail . Specify the maximum number of failures allowed in the session. The valid range is 0–255. • Interval . Specify the time between probes in seconds. The valid range is 1–60. • Port . Specify the UDP destination port in probe packets. The valid range[...]

240 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Chapter 8: Help | 241 8. Help 8 Use the features available from the Help tab to connect to online resources for assistance. The Help tab contains a link to Online Help . Online Help The Online Help includes the following pages: • Support on page 241 • User Guide on page 242 Support Use the Support page to connect to the Online Support site at n[...]

242 | Chapter 8: Help GS716Tv2 and GS724Tv3 Software Administration Manual User Guide Use the User Guide page to access the GS716Tv2 and GS724Tv3 Software Administration Manual (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help  User Guide . To access to the User Guide that is avai[...]

Chapter 8: Help | 243 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Appendix A: Hardware Specifications and Default Values | 244 A. Hardware Specifications and Default Values A GS716T and GS724T Gigabit Smart Switches Specifications The GS716T and GS724T Gigabit Smart Switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. GS716T Specifications GS724T Specif[...]

Appendix A: Hardware Specifications and Default Values | 245 GS716Tv2 and GS724Tv3 Software Administration Manual GS716T and GS724T Switch Performance GS716T and GS724T Switch Features and Defaults Port Characteristics Feature Value Switching capacity Non-Blocking Full WireSpeed on all packet sizes Forwarding method Store and Forward Packet forward[...]

246 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Traffic Control Quality Of Service Security Feature Sets Supported Default Storm control All ports Disabled Jumbo frame All ports Disabled Max = 9216 bytes Feature Sets Supported Default Number of queues 4 N/A Port based N/A N/A 802.1p [...]

Appendix A: Hardware Specifications and Default Values | 247 GS716Tv2 and GS724Tv3 Software Administration Manual System Setup Management Feature Sets Supported Default Boot code update 1 N/A DHCP/manual IP 1 DHCP enabled/192.168.0.239 Default gateway 1 192.168.0.254 System name configuration 1 NULL Configuration save/restore 1 N/A Firmware upgrade[...]

248 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Other Features Feature Sets Supported Default IGMP snooping v1/v2 All ports Disabled Configurations upload/download 1 N/A EAPoL flooding All ports Disabled BPDU flooding All ports Disabled Static multicast groups 8 Disabled Filter multi[...]

Appendix B: Configuration Examples | 249 B. Configuration Examples B This chapter contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 250 • Access Control Lists (ACLs) on page 252 • Differentiated Services (DiffServ) on page 255 • 802.1X on page 260 • MSTP on page 263[...]

250 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other witho[...]

Appendix B: Configuration Examples | 251 GS716Tv2 and GS724Tv3 Software Administration Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port mea[...]

252 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Access Control Lists (ACLs) ACLs ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents of routing updates[...]

Appendix B: Configuration Examples | 253 GS716Tv2 and GS724Tv3 Software Administration Manual • Destination MAC Mask: 00:00:00:00:FF:FF • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see MAC Rules on page 186. 3. From the MAC Binding Configuration screen, assign th[...]

254 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual departments. Traffic from the Finance department is identified by each packet’s network IP address. 1. From the IP ACL screen, create a new IP ACL with an IP ACL ID of 1 (See IP ACL on page 190). 2. From the IP Rules screen, create a rule for IP ACL 1 wi[...]

Appendix B: Configuration Examples | 255 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will. During [...]

256 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.) • Layer 4 source/destination ports • Source/destination IP address From a DiffServ point of view, there are two types of classes: •[...]

Appendix B: Configuration Examples | 257 GS716Tv2 and GS724Tv3 Software Administration Manual • Dropping : drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface. • Marking IP DSCP or IP Precedence : marking/re-marking the Diff[...]

258 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: 1. From the QoS Class Configuration screen, create a new class with the following settings: • Class Name: Class1 • Class Type: All[...]

Appendix B: Configuration Examples | 259 GS716Tv2 and GS724Tv3 Software Administration Manual All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3. On this n[...]

260 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such[...]

Appendix B: Configuration Examples | 261 GS716Tv2 and GS724Tv3 Software Administration Manual A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator : A Port that enforces authentication before allowing access to services available via that Port. 2. Supplicant : A Port that attem[...]

262 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 3. In the Guest VLAN field for ports e1–e8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports. See Port Security Interface Configuration on page 179 for information[...]

Appendix B: Configuration Examples | 263 GS716Tv2 and GS724Tv3 Software Administration Manual MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of Spanning Tree to eff[...]

264 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs. The MST Configuration Identifier has the following compone[...]

Appendix B: Configuration Examples | 265 GS716Tv2 and GS724Tv3 Software Administration Manual Perform the following procedures on each switch to configure MSTP: 1. Use the VLAN Configuration screen to create VLANs 300 and 500 (see VLAN Configuration on page 80). 2. Use the VLAN Membership screen to include ports g1–g8 as tagged (T) or untagged (U[...]

266 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the Forwarding state. 8. Click Apply . You can use the CST Port Status screen to view spanning tree information about each port. 9. From the MST Con[...]

Appendix B: Configuration Examples | 267 GS716Tv2 and GS724Tv3 Software Administration Manual[...]

Appendix C: Notification of Compliance | 268 C. Notification of Compliance NETGEAR Wired Products C Certificate of the Manufacturer/Importer It is hereby certified that the ProSafe™ GS716T and 724T Gigabit Smart Switches has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of [...]

Appendix C: Notification of Compliance | 269 GS716Tv2 and GS724Tv3 Software Administration Manual Europe – EU Declaration of Conformity Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC). This equipment meets the following conformance standards: EN300 328, [...]

270 | Appendix C: Notification of Compliance GS716Tv2 and GS724Tv3 Software Administration Manual FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only. Any product changes or modifications will invalidate all applicable[...]

Appendix C: Notification of Compliance | 271 GS716Tv2 and GS724Tv3 Software Administration Manual FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protecti[...]

Index | 272 Index Numerics 802.1X 151 , 168 example configuration 260 A access control ACL example configuration 252 ACLs 183 management interface 161 authentication 802.1X 168 , 260 enable 28 list 159 port-based 168 RADIUS 151 , 153 SNMP 28 , 50 , 51 TACACS+ 156 Auto-Video 109 C certificate 163 changing the password 19 , 150 Configuration 802.1X 1[...]

Index | 273 GS716Tv2 and GS724Tv3 Software Administration Manual E EAP 211 EAPOL 212 F file management 234 firmware 21 firmware download 230 G getting started 10 Green Ethernet 46 , 72 guest VLAN configuration 261 H help, HTML-based 26 HTTP 161 management interface access 18 secure 161 using to download files 232 HTTPS 162 I ICMP 41 IEEE 802.11x 26[...]

274 | Index GS716Tv2 and GS724Tv3 Software Administration Manual R RADIUS 150 server 151 statistics 153 reboot 19 , 226 reset button 151 configuration to defaults 226 switch 226 RSTP 93 S Security MAC Address 181 server, HTTP 161 severity, log message 216 Simple Network Time Protocol 35 SNMP traps 49 using 28 v1, v2 47 v3 51 SNTP 35 Global Status 3[...]

Index | 275 GS716Tv2 and GS724Tv3 Software Administration Manual[...]