English dropdown-ico

Manual NETGEAR M4100

559 pages 29.59 mb
Download

Go to site of 559

Summary
  • NETGEAR M4100 - page 1

    350 East Plumeria Drive San Jose, CA 95134 USA February 2013 202-1 1 161-01 Pr oSaf e M4100 an d M7100 Managed S w itc he s So ft w ar e Adminis tr ati on Manu al 10. 0.1 ...

  • NETGEAR M4100 - page 2

    2 | ProSafe M4100 and M7100 Managed Switches Support Thank you for selecting NETGEAR products. After installing your device, locate the serial number on the label of your product and use it to register your product at https://my .netgear .com . Y ou must register your product before you can use NETGEAR telephone support. NETGEAR recommends register ...

  • NETGEAR M4100 - page 3

    Contents | 3 T a bl e of C on te n ts Chapter 1 Documentation Resources Chapter 2 VLANs Create Two VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 CLI: Create Two VLANS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Web Interface: Create Two VLANS . . . . . . . . . . . . . ...

  • NETGEAR M4100 - page 4

    4 | Contents ProSafe M4100 and M7100 Managed Switches Map Private-VLAN Promiscuous Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 CLI: Map Private-VLAN Promiscuous Port . . . . . . . . . . . . . . . . . . . . . . . 52 Web Interface: Map Private-VLAN Promiscuous Port . . . . . . . . . . . . . . 52 Chapter 3 LAGs Create Two LAGs . . ...

  • NETGEAR M4100 - page 5

    Contents | 5 ProSafe M4100 and M7100 Managed Switches CLI: Enable RIP on the Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Web Interface: Enable RIP on the Switch. . . . . . . . . . . . . . . . . . . . . . . . 79 RIP for Ports 1/0/2 and 1/0/3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 CLI: E ...

  • NETGEAR M4100 - page 6

    6 | Contents ProSafe M4100 and M7100 Managed Switches Chapter 10 ACLs MAC ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137 IP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137 ACL Configuration . . . . . . . . . . . . . . . . . . . . . . . . . ...

  • NETGEAR M4100 - page 7

    Contents | 7 ProSafe M4100 and M7100 Managed Switches Configure Traffic Shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197 CLI: Configure traffic-shape . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 198 Web Interface: Configure Traffic Shaping. . . . . . . . . . . . . . . . . . . . . . . 198 Cha ...

  • NETGEAR M4100 - page 8

    8 | Contents ProSafe M4100 and M7100 Managed Switches CLI: Configure MVR in Compatible Mode . . . . . . . . . . . . . . . . . . . . . . 257 Web Interface: Configure MVR in Compatible Mode . . . . . . . . . . . . . . 259 Configure MVR in Dynamic Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 263 CLI: Configure MVR in Dynamic Mode. ...

  • NETGEAR M4100 - page 9

    Contents | 9 ProSafe M4100 and M7100 Managed Switches Web Interface: Configure Dynamic ARP Inspection . . . . . . . . . . . . . . . 313 Chapter 16 SNTP Show SNTP (CLI Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317 show sntp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

  • NETGEAR M4100 - page 10

    10 | Contents ProSafe M4100 and M7100 Managed Switches Web Interface: Show Logging Buffered . . . . . . . . . . . . . . . . . . . . . . . . 343 Show Logging Traplogs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343 CLI: Show Logging Traplogs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 343 Web Inter ...

  • NETGEAR M4100 - page 11

    Contents | 11 ProSafe M4100 and M7100 Managed Switches Chapter 20 SNMP Add a New Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369 CLI: Add a New Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 369 Web Interface: Add a New Community. . . . . . . . . . . . . . . . . . . . . . . . ...

  • NETGEAR M4100 - page 12

    12 | Contents ProSafe M4100 and M7100 Managed Switches CLI: Create a Private VLAN Group. . . . . . . . . . . . . . . . . . . . . . . . . . . . 403 Web Interface: Create a Private VLAN Group . . . . . . . . . . . . . . . . . . . 404 Chapter 25 Spanning Tree Protocol Configure Classic STP (802.1d) . . . . . . . . . . . . . . . . . . . . . . . . . . . ...

  • NETGEAR M4100 - page 13

    Contents | 13 ProSafe M4100 and M7100 Managed Switches Chapter 29 DHCP L2 Relay and L3 Relay DHCP L2 Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 488 CLI: Enable DHCP L2 Relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 489 Web Interface: Enable DHCP L2 Relay . . . . . . . . . . ...

  • NETGEAR M4100 - page 14

    14 | Contents ProSafe M4100 and M7100 Managed Switches CLI: Set iSCSI Target Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 554 Web Interface: Set iSCSI Target Port. . . . . . . . . . . . . . . . . . . . . . . . . . 554 Show iSCSI Sessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555 ...

  • NETGEAR M4100 - page 15

    Chapter 1. Documentation Resources | 15 1 1. Doc umen t ati on R es our ces Before installation, read the Release Notes for this switch product. The Release Notes detail the platform-specific functionality of the switching, routing, SNMP , configuration, management, and other packages. In addition, see the following publications: • The NETGEAR in ...

  • NETGEAR M4100 - page 16

    Chapter 2. VLANs | 16 2 2. VL ANs V irtual LANs This chapter provides the following examples: • Create T wo VLANs on page 17 • Assign Ports to VLAN2 on page 19 • Create Three VLANs on page 20 • Assign Ports to VLAN3 on page 22 • Assign VLAN3 as the Default VLAN for Port 1/0/2 on page 24 • Create a MAC-Based VLAN on page 25 • Create a ...

  • NETGEAR M4100 - page 17

    Chapter 2. VLANs | 17 ProSafe M4100 and M7100 Managed Switches The Private Edge VLAN feature lets you set protection between ports located on the switch. This means that a protected port cannot forward traffic to another protected port on the same switch. The feature does not provide protection between ports located on different switches. The diagr ...

  • NETGEAR M4100 - page 18

    18 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches W eb Interface: Create T wo VLANS 1. Create VLAN2. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. Enter the following information: • In the VLAN ID field, enter 2 . • In the VLAN Name field, enter VLAN2 . • In the ...

  • NETGEAR M4100 - page 19

    Chapter 2. VLANs | 19 ProSafe M4100 and M7100 Managed Switches Assign P orts to VLAN2 This sequence shows how to assign ports to VLAN2, and to specify that frames will always be transmitted tagged from all member ports and that untagged frames will be rejected on receipt. CLI: Assign P orts to VLAN2 (Netgear Switch) #config (Netgear Switch) (Config ...

  • NETGEAR M4100 - page 20

    20 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under PVID Configuration, scroll down and select the check box for Interface 1/0/1 . Then scroll down and select the Interface 1/0/2 check box. c. Enter the following information: • In the Acceptable Frame T ype polyhedron list, select VL ...

  • NETGEAR M4100 - page 21

    Chapter 2. VLANs | 21 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information: • In the VLAN ID field, enter 100 . • In the VLAN Name field, enter VLAN100 . c. Click Add. 2. Create VLAN101. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the f ...

  • NETGEAR M4100 - page 22

    22 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches 3. Create VLAN102. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. Enter the following information: • In the VLAN ID field, enter 102 . • In the VLAN Name field, enter VLAN102 . c. Click Add. Assign P orts to VLAN3 Th ...

  • NETGEAR M4100 - page 23

    Chapter 2. VLANs | 23 ProSafe M4100 and M7100 Managed Switches W eb Interface: Assign P orts to VLAN3 1. Assign ports to VLAN3. a. Select Switching > VLAN > Advanced > VLAN Membership . A screen similar to the following displays. b. In the VLAN ID list, select 3 . c. Click Unit 1. The ports display . d. Click the gray boxes under ports 2, ...

  • NETGEAR M4100 - page 24

    24 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches Assign VLAN3 as the Default VLAN for P ort 1/0/2 This example shows how to assign VLAN 3 as the default VLAN for port 1/0/2. CLI: Assign VLAN3 as the Default VLAN for P ort 1/0/2 (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#vlan p ...

  • NETGEAR M4100 - page 25

    Chapter 2. VLANs | 25 ProSafe M4100 and M7100 Managed Switches Create a MA C -Based VLAN The MAC-based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classify traffic based on the source MAC address of the packet. Y ou define a MAC to VLAN mapping by configuring an entry in the MAC to VLAN table. An entry is specifi ...

  • NETGEAR M4100 - page 26

    26 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches 3. Map MAC 00:00:0A:00:00:02 to VLAN3. (Netgear Switch)(Config)#exit (Netgear Switch)#vlan data (Netgear Switch)(Vlan)#vlan association mac 00:00:00A:00:00:02 3 (Netgear Switch)(Vlan)#exit 4. Add all the ports to VLAN3. (Netgear Switch)#config (Netgear Switch)(Config)#interface range 1/ ...

  • NETGEAR M4100 - page 27

    Chapter 2. VLANs | 27 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID list, select 3 . c. Click Unit 1. The ports display . d. Click the gray box before Unit 1 until U displays. e. Click Apply . 3. Assign VPID3 to port 1/0/23. a. Select Switching > VLAN > Advanced > Port PVID Configura ...

  • NETGEAR M4100 - page 28

    28 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches b. Enter the following information: • In the MAC Address field, enter 00:00:0A:00:00:02 . • In the PVID (1 to 4093) field, enter 3 . c. Click Add . Create a P rotocol-Based VLAN Create two protocol VLAN groups. One is for IPX and the other is for IP/ARP . The untagged IPX packets ar ...

  • NETGEAR M4100 - page 29

    Chapter 2. VLANs | 29 ProSafe M4100 and M7100 Managed Switches 5. Enable protocol VLAN group 1 and 2 on the interface. (Netgear Switch)(Vlan)#exit (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/11 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 1 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 2 (Netgear Switch)(Interf ...

  • NETGEAR M4100 - page 30

    30 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches b. Enter the following information: • In the Group Name field, enter vlan_ip . • In the Protocol list, select IP and ARP while holding down the Ctrl key . • In the VLAN field, enter 5. c. Click Add . 3. Add port 1 1 to the group vlan_ipx. a. Select Switching > VLAN > Advance ...

  • NETGEAR M4100 - page 31

    Chapter 2. VLANs | 31 ProSafe M4100 and M7100 Managed Switches Virtual VLANs: Create an IP Subnet–Based VLAN In an IP subnet–based VLAN, all the end workstations in an IP subnet are assigned to the same VLAN. In this VLAN, users can move their workstations without reconfiguring their network addresses. IP subnet VLANs are based on Layer 3 infor ...

  • NETGEAR M4100 - page 32

    32 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches Assign all the ports to VLAN 2000. (Netgear Switch) #show mac-addr-table vlan 2000 MAC Address Interface Status ----------------- --------- ------------ 00:00:24:58:F5:56 1/0/1 Learned 00:00:24:59:00:62 1/0/24 Learned W eb Interface: Create an IP Subnet–Based VLAN 1. Create VLAN 2000. ...

  • NETGEAR M4100 - page 33

    Chapter 2. VLANs | 33 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID list, select 2000 . c. Click Unit 1 . The ports display . d. Click the gray box before Unit 1 until U displays. e. Click Apply . 3. Associate the IP subnet with VLAN 2000. a. Select Switching > VLAN > Advanced > IP S ...

  • NETGEAR M4100 - page 34

    34 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches management control and that clients attached to the network cannot initiate a direct attack on voice components. PBX 1/0/1 GSM73xxS V oice traffic Data traffic 1/0/3 1/0/2 PC V oIP phone V oIP phone PC Figure 3. V oice VLAN The script in this section shows how to configure V oice VLAN a ...

  • NETGEAR M4100 - page 35

    Chapter 2. VLANs | 35 ProSafe M4100 and M7100 Managed Switches 2. Include the ports 1/0/1 and 1/0/2 in VLAN 10. (Netgear Switch) (Config)#interface range 1/0/1-1/0/2 (Netgear Switch) (conf-if-range-1/0/1-1/0/2)#vlan participation include 10 (Netgear Switch) (conf-if-range-1/0/1-1/0/2)#vlan tagging 10 (Netgear Switch) (conf-if-range-1/0/1-1/0/2)#exi ...

  • NETGEAR M4100 - page 36

    36 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure Voice VLAN and Prioritize V oice T raffic 1. Create VLAN 10. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. In the VLAN ID field, enter 10. c. In the VLAN Name field, enter V oice VLAN . d. Clic ...

  • NETGEAR M4100 - page 37

    Chapter 2. VLANs | 37 ProSafe M4100 and M7100 Managed Switches b. In the VLAN Membership table, in the VLAN ID list, select 10 . c. Select Port 1 and Port 2 as tagged. A screen similar to the following displays. d. Click Apply . 3. Configure V oice VLAN globally . a. Select Switching > VLAN > Advanced > V oice VLAN Configuration . A screen ...

  • NETGEAR M4100 - page 38

    38 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 4. Configure V oice VLAN mode in the interface 1/0/2. a. Select Switching > VLAN > Advanced > V oice VLAN Configuration . b. Select the 1/0/2 check box. c. In the Interface Mode list, select VLAN ID . d. In the V alue field, enter 10 ...

  • NETGEAR M4100 - page 39

    Chapter 2. VLANs | 39 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Class Name field, enter ClassV oiceVLAN . c. In the Class T ype list, select All . A screen similar to the following displays. d. Click Add . The Class Name screen displays, as shown in the next step in this procedure. 6. Configure m ...

  • NETGEAR M4100 - page 40

    40 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. c. In the DiffServ Class Configuration table, select VLAN . d. In the VLAN ID field, enter 10. A screen similar to the following displays. e. Click Apply . A screen similar to the following displays. 7. Create the DiffServ policy PolicyV oiceV ...

  • NETGEAR M4100 - page 41

    Chapter 2. VLANs | 41 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Policy Name field, enter PolicyV oiceVLAN . c. In the Policy T ype list, select In . d. In the Member Class list, select ClassV oiceVLAN . A screen similar to the following displays. e. Click Add . The Policy Configuration screen dis ...

  • NETGEAR M4100 - page 42

    42 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches b. Click the Policy PolicyV oiceVLAN . A screen similar to the following displays. c. In the field next to the Assign Queue radio button, select 3 . A screen similar to the following displays. d. Click Apply . 9. Assign it to interfaces 1/0/1 and 1/0/2. a. Select QoS > DiffServ > ...

  • NETGEAR M4100 - page 43

    Chapter 2. VLANs | 43 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. d. Click Apply . A screen similar to the following displays. ...

  • NETGEAR M4100 - page 44

    44 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches P rivate VLANs The Private VLANs feature separates a regular VLAN domain into two or more subdomains. Each subdomain is defined (represented) by a primary VLAN and a secondary VLAN. The primary VLAN ID is the same for all subdomains that belong to a private VLAN. The secondary VLAN ID d ...

  • NETGEAR M4100 - page 45

    Chapter 2. VLANs | 45 ProSafe M4100 and M7100 Managed Switches Figure 2 illustrates the private VLAN traffic flow . Five ports A, B, C, D, and E make up a private VLAN. Port A is a promiscuous port which is associated with the primary VLAN 100. Ports B and C are the host ports which belong to the isolated VLAN 101. Ports D and E are the community p ...

  • NETGEAR M4100 - page 46

    46 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches Assign P rivate - VLAN T ypes (Primary , Isolated, Community) The example is shown as CLI commands and as a Web interface procedure. CLI: Assign P rivate - VLAN T ype (Primary , Isolated, Community) Use the following commands to assign VLAN 100 to primary VLAN, VLAN 101 to isolated VLAN ...

  • NETGEAR M4100 - page 47

    Chapter 2. VLANs | 47 ProSafe M4100 and M7100 Managed Switches 2. Assign VLAN 101 as an isolated VLAN. a. Select Security > T raffic Control > Private VLAN > Private VLAN T ype Configuration . A screen similar to the following displays. b. Under Private VLAN T ype Configuration , select the VLAN ID 101 check box. Now 101 appears in the int ...

  • NETGEAR M4100 - page 48

    48 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches Configure P rivate - VLAN Association The example is shown as CLI commands and as a Web interface procedure. CLI: Configure P rivate - VLAN Association Use the following commands to associate VLAN 101-102 (secondary VLAN) to VLAN 100 (primary VLAN). (Netgear Switch) #config (Netgear Swi ...

  • NETGEAR M4100 - page 49

    Chapter 2. VLANs | 49 ProSafe M4100 and M7100 Managed Switches Configure P rivate - VLAN P ort Mode (Promiscuous, Host) The example is shown as CLI commands and as a Web interface procedure. CLI: Configure P rivate - VLAN P ort Mode (P romiscuous, Host) Use the following commands to assign port 1/0/1 to promiscuous port mode and ports 1/0/2-1/0/5 t ...

  • NETGEAR M4100 - page 50

    50 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. 2. Configure ports 1/0/2-1/0/5 to host port mode. a. Select Security > T raffic Control > Private VLAN > Private VLAN Port Mode Configuration . A screen similar to the following displays. b. Under Private VLAN Port Mode Configuration , selec ...

  • NETGEAR M4100 - page 51

    Chapter 2. VLANs | 51 ProSafe M4100 and M7100 Managed Switches W eb Interface: Assign Private- VLAN P ort Host P orts 1. Associate isolated ports 1/0/2-1/0/3 to a private-VLAN (primary=100, secondary=101). a. Select Security > T raffic Control > Private VLAN > Private VLAN Host Interface Configuration . A screen similar to the following di ...

  • NETGEAR M4100 - page 52

    52 | Chapter 2. VLANs ProSafe M4100 and M7100 Managed Switches b. Under Private VLAN Host Interface Configuration , select the 1/0/4 and 1/0/5 interface check box. c. In the Host Primary VLAN field, enter 100. d. In the Host Secondary VLAN field, enter 102. e. Click Apply to save the settings. Map P rivate - VLAN Promiscuous P ort The example is sh ...

  • NETGEAR M4100 - page 53

    Chapter 2. VLANs | 53 ProSafe M4100 and M7100 Managed Switches b. Under Private VLAN Promiscuous Interface Configuration , select the 1/0/1 interface check box. Now 1/0/1 appears in the Interface field at the top. c. In the Promiscuous Primary VLAN field, enter 100. d. In the Promiscuous Secondary VLAN field, enter 101-102. e. Click Apply to save t ...

  • NETGEAR M4100 - page 54

    Chapter 3. LAG s | 54 3 3. LA G s L ink Aggr egati on Gr oup s This chapter provides the following examples: • Create T wo LAGs on page 55 • Add Ports to LAGs on page 56 • Enable Both LAGs on page 59 Link aggregation allows the switch to treat multiple physical links between two endpoints as a single logical link. All the physical links in a ...

  • NETGEAR M4100 - page 55

    Chapter 3. LAG s | 55 ProSafe M4100 and M7100 Managed Switches • Better use of physical resources. T raffic can be load-balanced across the physical links. • Increased bandwidth. The aggregated physical links deliver higher bandwidth than each individual link. • Incremental increase in bandwidth. A physical upgrade could produce a tenfold inc ...

  • NETGEAR M4100 - page 56

    56 | Chapter 3. LAG s ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Lag Name field, enter lag_10 . c. Click Add . 2. Create LAG lag_20. a. Select Switching > LAG > LAG Configuration . A screen similar to the following displays. b. In the Lag Name field, enter lag_20 . c. Click Add . Add P orts ...

  • NETGEAR M4100 - page 57

    Chapter 3. LAG s | 57 ProSafe M4100 and M7100 Managed Switches CLI: Add P orts to the LA Gs (Netgear Switch) #config (Netgear Switch) (Config)#interface 0/2 (Netgear Switch) (Interface 0/2)#addport 1/1 (Netgear Switch) (Interface 0/2)#exit (Netgear Switch) (Config)#interface 0/3 (Netgear Switch) (Interface 0/3)#addport 1/1 (Netgear Switch) (Interfa ...

  • NETGEAR M4100 - page 58

    58 | Chapter 3. LAG s ProSafe M4100 and M7100 Managed Switches W eb Interface: Add P orts to LAGs 1. Add ports to lag_10. a. Select Switching > LAG > LAG Membership . A screen similar to the following displays. b. In the LAG ID list, select LAG 1 . c. Click Unit 1. The ports display . d. Click the gray boxes under port 2 and 3 . T wo check ma ...

  • NETGEAR M4100 - page 59

    Chapter 3. LAG s | 59 ProSafe M4100 and M7100 Managed Switches d. Click the gray boxes under ports 8 and 9 . T wo check marks display in the boxes. e. Click Apply to save the settings. Enable Both LA Gs The example is shown as CLI commands and as a Web interface procedure. CLI: Enable Both LA Gs By default, the system enables link trap notification ...

  • NETGEAR M4100 - page 60

    Chapter 4. Port Routing | 60 4 4. P ort R outin g This chapter provides the following sections: • Port Routing Configuration on page 61 • Enable Routing for the Switch on page 62 • Enable Routing for Ports on the Switch on page 62 • Add a Default Route on page 65 • Add a Static Route on page 66 The first networks were small enough for the ...

  • NETGEAR M4100 - page 61

    Chapter 4. Port Routing | 61 ProSafe M4100 and M7100 Managed Switches P ort R outing Configuration The M4100 and M7100 Managed Switch always supports Layer 2 bridging, but Layer 3 routing must be explicitly enabled, first for the M4100 and M7100 Managed Switch as a whole, and then for each port that is to be part of the routed network. The configur ...

  • NETGEAR M4100 - page 62

    62 | Chapter 4. Port Routing ProSafe M4100 and M7100 Managed Switches Enable R outing for the Switch The example is shown as CLI commands and as a Web interface procedure. CLI: Enable R outing for the Switch The following script shows the commands that you would use to configure a M4100 and M7100 Managed Switch to provide the port routing support s ...

  • NETGEAR M4100 - page 63

    Chapter 4. Port Routing | 63 ProSafe M4100 and M7100 Managed Switches CLI: Enable R outing for P orts on the Switch (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#routing (Netgear Switch) (Interface 1/0/2)#ip address 192.150.2.1 255.255.255.0 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Swi ...

  • NETGEAR M4100 - page 64

    64 | Chapter 4. Port Routing ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. 2. Assign IP address 192.150.3.1/24 to interface 1/0/3. a. Select Routing > IP> Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the interface 1/0/3 check box. Now 1/0/3 app ...

  • NETGEAR M4100 - page 65

    Chapter 4. Port Routing | 65 ProSafe M4100 and M7100 Managed Switches Now 1/0/5 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.150.5.1 . • In the Subnet Mask field, enter 255.255.255.0 . • In the Routing Mode field, select Enable . d. Click Apply to save the settings. Add a ...

  • NETGEAR M4100 - page 66

    66 | Chapter 4. Port Routing ProSafe M4100 and M7100 Managed Switches The Route Configuration screen displays. 2. In the Route T ype list, select DefaultRoute . 3. In the Next Hop IP Address field, enter one of the routing interface’s IP addresses. • The Network Address and Subnet Mask fields will not accept input as they are not needed. • Th ...

  • NETGEAR M4100 - page 67

    Chapter 4. Port Routing | 67 ProSafe M4100 and M7100 Managed Switches T o delete the static route, simply add “no” keyword in the front of the “ip route” command. W eb Interface: Add a Static Route 1. Select Routing > Routing T able > Basic > Route Configuration to display the Route Configuration screen. 2. In the Route T ype list, ...

  • NETGEAR M4100 - page 68

    Chapter 5. VLAN Routing | 68 5 5. VL AN R ou ting This chapter provides the following examples: • Create T wo VLANs on page 68 • Set Up VLAN Routing for the VLANs and the Switch on page 73 Y ou can configure the M4100 and M7100 Managed Switch with some ports supporting VLANs and some supporting routing. Y ou can also configure it to allow traff ...

  • NETGEAR M4100 - page 69

    Chapter 5. VLAN Routing | 69 ProSafe M4100 and M7100 Managed Switches shows the commands that you would use to configure a M4100 and M7100 Managed Switch to provide the VLAN routing support shown in the diagram. Layer 3 switch Port 1/0/2 VLAN Router port 1/3/1 192.150.3.1 Port 1/0/3 VLAN Router port 1/3/2 192.150.4.1 Layer 2 Switch Layer 2 Switch V ...

  • NETGEAR M4100 - page 70

    70 | Chapter 5. VLAN Routing ProSafe M4100 and M7100 Managed Switches W eb Interface: Create T wo VLANs 1. Create VLAN 10 and VLAN20. a. Select Switching > VLAN > Advanced > VLAN Configuration . A screen similar to the following displays. b. In the VLAN ID field, enter 10 . c. In the VLAN Name field, enter VLAN10 . d. In the VLAN T ype lis ...

  • NETGEAR M4100 - page 71

    Chapter 5. VLAN Routing | 71 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID field, select 10 . c. Click the Unit 1. The ports display . d. Click the gray boxes under ports 1 and 2 until T displays. The T specifies that the egress packet is tagged for the port. e. Click Apply . f. Select Switch ...

  • NETGEAR M4100 - page 72

    72 | Chapter 5. VLAN Routing ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select 1/0/1 and 1/0/2 check boxes . c. In the PVID (1 to 4093) field, enter 10 . d. Click Apply to save the settings. e. Select Switching > VLAN > Advanced > Port PVID Configuraton . A screen similar to the ...

  • NETGEAR M4100 - page 73

    Chapter 5. VLAN Routing | 73 ProSafe M4100 and M7100 Managed Switches Set Up VLAN R outing for the VLANs and the Switch The example is shown as CLI commands and as a Web interface procedure. CLI: Set Up VLAN R outing for the VLANs and the Switch 1. The following code sequence shows how to enable routing for the VLANs: (Netgear Switch) #vlan data (N ...

  • NETGEAR M4100 - page 74

    74 | Chapter 5. VLAN Routing ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Enter the following information: • In the VLAN ID (1 to 4093) list, select 10 . • In the IP Address field, enter 192.150.3.1 . • In the Subnet Mask field, enter 255.255.255.0 . 3. Click Add to save the settings. 4. Select Routi ...

  • NETGEAR M4100 - page 75

    Chapter 6. RIP | 75 6 6. RIP R outing Inf or mati on Pr ot ocol This chapter provides the following examples: • Routing for the Switch on page 76 • Routing for Ports on page 77 • RIP for the Switch on page 78 • RIP for Ports 1/0/2 and 1/0/3 on page 79 • VLAN Routing with RIP on page 82 Routing Information Protocol (RIP) is a protocol that ...

  • NETGEAR M4100 - page 76

    Subnet 2 Subnet 3 Subnet 5 Port 1/0/3 192.130.3.1 Port 1/0/5 192.64.4.1 Port 1/0/2 192.150.2.2 Layer 3 sIwitch acting as a router 76 | Chapter 6. RIP ProSafe M4100 and M7100 Managed Switches Figure 9. Network with RIP on ports 1/0/2 and 1/0/3 R outing for the Switch The example is shown as CLI commands and as a Web interface procedure. CLI: Enable ...

  • NETGEAR M4100 - page 77

    Chapter 6. RIP | 77 ProSafe M4100 and M7100 Managed Switches 3. Click Apply to save the settings. R outing for P orts The example is shown as CLI commands and as a Web interface procedure. CLI: Enable R outing and Assigning IP Addresses for P orts 1/0/2 and 1/0/3 (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (I ...

  • NETGEAR M4100 - page 78

    78 | Chapter 6. RIP ProSafe M4100 and M7100 Managed Switches • In the Routing Mode field, select Enable . d. Click Apply to save the settings. 2. Assign IP address 192.150.3.1/24 to interface 1/0/3. a. Select Routing > Advanced >IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the interface ...

  • NETGEAR M4100 - page 79

    Chapter 6. RIP | 79 ProSafe M4100 and M7100 Managed Switches CLI: Enable RIP on the Switch This sequence enables RIP for the switch. The route preference defaults to 15. (Netgear Switch) #config (Netgear Switch) (Config)#router rip (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router)#exit (Netgear Switch) (Config)#exit W eb Inte ...

  • NETGEAR M4100 - page 80

    80 | Chapter 6. RIP ProSafe M4100 and M7100 Managed Switches CLI: Enable RIP for P orts 1/0/2 and 1/0/3 This command sequence enables RIP for ports 1/0/2 and 1/0/3. Authentication defaults to none, and no default route entry is created. The commands specify that both ports receive both RIPv1 and RIPv2 frames, but send only RIPv2-formatted frames. ( ...

  • NETGEAR M4100 - page 81

    Chapter 6. RIP | 81 ProSafe M4100 and M7100 Managed Switches 4. Select Routing > RIP > Advanced > RIP Configuration . A screen similar to the following displays. 5. Enter the following information: • In the Interface field, select 1/0/3 . • For RIP Admin Mode, select the Enable radio button. • In the Send V ersion list, select RIP-2 ...

  • NETGEAR M4100 - page 82

    82 | Chapter 6. RIP ProSafe M4100 and M7100 Managed Switches VLAN R outing with RIP Routing Information Protocol (RIP) is one of the protocols that routers can use to exchange network topology information. It is characterized as an interior gateway protocol, and is typically used in small to medium-sized networks. Layer 3 switch Router VLAN 10 VLAN ...

  • NETGEAR M4100 - page 83

    (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#vlan port tagging all 10 (Netgear Switch) (Config)#vlan port tagging all 20 (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#vlan participation include 10 (Netgear Switch) (Interface 1/0/2)#vlan pvid 10 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) ...

  • NETGEAR M4100 - page 84

    84 | Chapter 6. RIP ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure VLAN Routing with RIP Support 1. Configure a VLAN and include ports 1/0/2 in the VLAN: a. Select Routing > VLAN > VLAN Routing W izard . A screen similar to the following displays. b. Enter the following information: • In the VLAN ID field, enter 10. • ...

  • NETGEAR M4100 - page 85

    Chapter 6. RIP | 85 ProSafe M4100 and M7100 Managed Switches • In the Network Mask field, enter 255.255.255.0 . c. Click Unit 1 . The ports display . d. Click the gray box under port 3 until T displays. The T specifies that the egress packet is tagged for the port. e. Click Apply to save the VLAN that includes port 3. 3. Enable RIP on the switch ...

  • NETGEAR M4100 - page 86

    Chapter 7. OSPF | 86 7 7. O SPF Open Sho rte st P ath F irst This chapter provides the following examples: • Inter-area Router on page 87 • OSPF on a Border Router on page 92 • Stub Areas on page 98 • nssa Areas on page 107 • VLAN Routing OSPF on page 11 6 • OSPFv3 on page 122 For larger networks Open Shortest Path First (OSPF) is gener ...

  • NETGEAR M4100 - page 87

    Chapter 7. OSPF | 87 ProSafe M4100 and M7100 Managed Switches Inter -area R outer The examples in this section show you how to configure a M4100 and M7100 Managed Switch first as an inter-area router and then as a border router . They show two areas, each with its own border router connected to one inter-area router . The following figure shows a n ...

  • NETGEAR M4100 - page 88

    88 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches 2. Assign IP addresses to ports. (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#routing (Netgear Switch) (Interface 1/0/2)#ip address 192.150.2.1 255.255.255.0 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config)#interfa ...

  • NETGEAR M4100 - page 89

    Chapter 7. OSPF | 89 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure an Inter -area Router 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign ...

  • NETGEAR M4100 - page 90

    90 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/3 check box. Now 1/0/3 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.150.3.1 . • In the Network Mask field, enter 255.255.255. ...

  • NETGEAR M4100 - page 91

    Chapter 7. OSPF | 91 ProSafe M4100 and M7100 Managed Switches • In the RFC 1583 Compatibility field, select Disable . c. Click Apply to save the settings. 5. Enable OSPF on port 1/0/2. a. Select Routing > OSPF > Advanced > Interface Configuration . A screen similar to the following displays. b. Scroll downand select the interface 1/0/2 c ...

  • NETGEAR M4100 - page 92

    92 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches Now 1/0/3 appears in the Interface field at the top. • In the OSPF Area ID field, enter 0.0.0.3 . • In the OSPF Admin Mode field, select Enable . • In the Priority field, enter 255 . • In the Metric Cost field, enter 64 . c. Click Apply to save the settings. OSPF on a Border R ou ...

  • NETGEAR M4100 - page 93

    Chapter 7. OSPF | 93 ProSafe M4100 and M7100 Managed Switches Set disable 1583compatibility to prevent a routing loop. (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router)#router-id 192.130.1.1 (Netgear Switch) (Config router)#no 1583compatibility (Netgear Switch) (Config router)#exit (Netge ...

  • NETGEAR M4100 - page 94

    94 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.150.2.2 to port 1/0/2. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the followin ...

  • NETGEAR M4100 - page 95

    Chapter 7. OSPF | 95 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/3 check box. Now 1/0/3 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.130.3.1 . • In the Network Mask field, enter 255.255.255. ...

  • NETGEAR M4100 - page 96

    96 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. 5. Specify the router ID, and enable OSPF for the switch. a. Select Routing > OSPF > Advanced > OSPF Configuration . A screen similar to the following displays. b. Under OSPF Configuration, enter the following information: • In the Router I ...

  • NETGEAR M4100 - page 97

    Chapter 7. OSPF | 97 ProSafe M4100 and M7100 Managed Switches • In the OSPF Area ID field, enter 0.0.0.2 . • In the OSPF Admin Mode field, select Enable . • In the Router Priority (0 to 255) field, enter 128 . • In the Metric Cost field, enter 32 . c. Click Apply to save the settings. 7. Enable OSPF on port 1/0/3. a. Select Routing > OSP ...

  • NETGEAR M4100 - page 98

    98 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Interface Configuration, scroll down and select the interface 1/0/4 check box. Now 1/0/4 appears in the Interface field at the top. • In the OSPF Area ID field, enter 0.0.0.2 . • In the OSPF Admin Mode field, select the Enable . ? ...

  • NETGEAR M4100 - page 99

    Chapter 7. OSPF | 99 ProSafe M4100 and M7100 Managed Switches 2. Set the router IDd to 1.1.1.1. (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config-router)#router-id 1.1.1.1 3. Configure area 0.0.0.1 as a stub area (Netgear Switch) (Config-router)#area 0.0.0.1 stub . 4. Switch A injects a default route only to area 0.0.0.1. (Netgear Swit ...

  • NETGEAR M4100 - page 100

    (Netgear Switch) (Config)#ex (Netgear Switch) #show ip ospf neighbor interface all Router ID IP Address Neighbor Interface State ---------------- ----------- ------------------- --------- 4.4.4.4 192.168.10.2 2/0/11 Full 2.2.2.2 192.168.20.2 2/0/19 Full (Netgear Switch) #show ip route Total Number of Routes......................... 4 Network Subnet ...

  • NETGEAR M4100 - page 101

    Chapter 7. OSPF | 101 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 2/0/1 1 check box. Now 2/0/1 1 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.10.1 . • In the Network Mask field, enter 255.25 ...

  • NETGEAR M4100 - page 102

    102 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches a. Select Routing > OSPF > Basic > OSPF Configuration . A screen similar to the following displays. b. Under OSPF Configuration, in the Router ID field, enter 1.1.1.1 . c. Click Apply to save the settings. 5. Enable OSPF on the port 2/0/1 1. a. Select Routing > OSPF > Adv ...

  • NETGEAR M4100 - page 103

    Chapter 7. OSPF | 103 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Interface Configuration, scroll down and select the interface 2/0/19 check box. Now 2/0/19 appears in the Interface field at the top. • In the OSPF Area ID field, enter 0.0.0.1 . • In the OSPF Admin Mode field, select Enable . c. ...

  • NETGEAR M4100 - page 104

    104 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches 2. Set the router ID to 2.2.2.2. (Netgear Switch) (Config-router)#router-id 2.2.2.2 3. Configure area 0.0.0.1 as a stub area. (Netgear Switch) (Config-router)#area 0.0.0.1 stub 4. Enable OSPF area 0.0.0.1 on the 1/0/15. (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config-rout ...

  • NETGEAR M4100 - page 105

    Chapter 7. OSPF | 105 ProSafe M4100 and M7100 Managed Switches b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.168.10.1 to port 1/0/15. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the ...

  • NETGEAR M4100 - page 106

    106 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Interface Configuration, scroll down and select the interface 1/0/15 check box. Now 1/0/15 appears in the Interface field at the top. • In the OSPF Area ID field, enter 0.0.0.1 . • In the OSPF Admin Mode field, select Enable . c. ...

  • NETGEAR M4100 - page 107

    Chapter 7. OSPF | 107 ProSafe M4100 and M7100 Managed Switches nssa Areas Port 2/0/1 1 Port 2/0/191 Port 1/0/151 Layer 3 Switch Area 0 Area 1 Layer 3 switch Figure 13. nssa Area The example is shown as CLI commands and as a Web interface procedure. CLI: Configure Area 1 as an nssa Area 1. Enable routing on the switch. (Netgear Switch) #config (Netg ...

  • NETGEAR M4100 - page 108

    108 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches 4. Enable area 0.0.0.1 on port 2/0/19. (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config)#interface 2/0/11 (Netgear Switch) (Interface 2/0/11)#routing (Netgear Switch) (Interface 2/0/11)#ip address 192.168.10.1 255.255.255.0 (Netgear Switch) (Interface 2/0/11)#ip ospf (Netg ...

  • NETGEAR M4100 - page 109

    Chapter 7. OSPF | 109 ProSafe M4100 and M7100 Managed Switches c. Click Apply to save the settings. 2. Assign IP address 192.168.10.1 to port 2/0/1 1. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the interface 2/0/1 1 check box. Now 2/0/1 1 appears in ...

  • NETGEAR M4100 - page 110

    11 0 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches • In the Subnet Mask field, enter 255.255.255.0 . • In the Admin Mode field, select Enable . d. Click Apply to save the settings. 4. Specify the router ID, and enable OSPF for the switch. a. Select Routing > OSPF > Basic > OSPF Configuration . A screen similar to the follo ...

  • NETGEAR M4100 - page 111

    Chapter 7. OSPF | 111 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 2/0/19 check box. 2/0/19 now appears in the Interface field at the top. c. Enter the following information: • In the OSPF Area ID field, enter 0.0.0.1 . • In the OSPF Admin Mode field, select Enable ...

  • NETGEAR M4100 - page 112

    11 2 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches 2. Set the router ID to 2.2.2.2. (Netgear Switch) (Config-router)#router-id 2.2.2.2 3. Configure the area 0.0.0.1 as an nssa area. (Netgear Switch) (Config-router)# area 0.0.0.1 nssa 4. Redistribute the RIP routes into the OSPF . (Netgear Switch) (Config-router)#redistribute rip (Netge ...

  • NETGEAR M4100 - page 113

    Chapter 7. OSPF | 11 3 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure Area 1 as an nssa Area on A2 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. ...

  • NETGEAR M4100 - page 114

    11 4 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Configuration, scroll down and select the interface 1/0/15 check box. Now 1/0/15 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.20.2 . • In the Network Mask ...

  • NETGEAR M4100 - page 115

    Chapter 7. OSPF | 11 5 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information: • In the Interface field, select 1/0/1 1 . • For RIP Admin Mode, select the Enable radio button. c. Click Apply to save the settings. 6. Enable OSPF on port 1/0/15. a. Select Routing > OSPF > Adva ...

  • NETGEAR M4100 - page 116

    11 6 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Area ID field, enter 0.0.0.1 . c. Click Add to save the settings. 8. Redistribute the RIP routes into the OSPF area. a. Select Routing > OSPF > Advanced > Route Redistribution . A screen similar to the following displays. b ...

  • NETGEAR M4100 - page 117

    Chapter 7. OSPF | 11 7 ProSafe M4100 and M7100 Managed Switches The M4100 and M7100 Managed Switch operating as a router and running OSPF will determine the best route using the assigned cost and the type of the OSPF route. The order for choosing a route if more than one type of route exists is as follows: - Intra-area - Inter-area - External type ...

  • NETGEAR M4100 - page 118

    11 8 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches CLI: Configure VLAN R outing OSPF This example adds support for OSPF to the configuration created in the base VLAN routing example in Figure 8, Layer 3 switch configured for port routing on page 69. 1. Configure the M4100 and M7100 Managed Switch as an inter-area router . (Netgear Swit ...

  • NETGEAR M4100 - page 119

    Chapter 7. OSPF | 11 9 ProSafe M4100 and M7100 Managed Switches 3. Enable OSPF for the VLAN and physical router ports. (Netgear Switch) (Config)#interface vlan 10 (Netgear Switch) (Interface vlan 10)#ip ospf areaid 0.0.0.2 (Netgear Switch) (Interface vlan 10)#ip ospf (Netgear Switch) (Interface vlan 10)#exit (Netgear Switch) (Config)#interface vlan ...

  • NETGEAR M4100 - page 120

    120 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches c. Click Unit 1 . The ports display: Click the gray box under port 2 until T displays. The T specifies that the egress packet is tagged for the port. d. Click Apply to save the VLAN that includes ports 2. 2. Configure a VLAN, and include port 1/0/3 in the VLAN. a. Select Routing > VL ...

  • NETGEAR M4100 - page 121

    Chapter 7. OSPF | 121 ProSafe M4100 and M7100 Managed Switches a. Select Routing > OSPF > Advanced > Interface Configuration . A screen similar to the following displays. b. Under Interface Configuration, click VLANS to show all the VLAN interfaces. c. Scroll down and select the interface 0/2/1 check box. Now 0/2/1 appears in the Interface ...

  • NETGEAR M4100 - page 122

    122 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches b. Under Interface Configuration, click VLANS to show all the VLAN interfaces. c. Scroll down and select the interface 0/2/2 check box. Now 0/2/2 appears in the Interface field at the top. d. Enter the following information: • In the OSPF Area ID field, enter 0.0.0.3 . • In the OSPF ...

  • NETGEAR M4100 - page 123

    Chapter 7. OSPF | 123 ProSafe M4100 and M7100 Managed Switches 2. Enable OSPFv3, and assign 1.1.1.1 to router ID. (Netgear Switch) (Config)#ipv6 router ospf (Netgear Switch) (Config-rtr)#enable (Netgear Switch) (Config-rtr)#router-id 1.1.1.1 (Netgear Switch) (Config-rtr)#exit 3. Enable routing mode on the interface 1/0/1, and assign the IP address ...

  • NETGEAR M4100 - page 124

    124 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches 8. Enable OSPFv3 on interface 1/0/13, and set the OSPF network mode to broadcast. (Netgear Switch) (Interface 1/0/13)#ipv6 ospf (Netgear Switch) (Interface 1/0/13)#ipv6 ospf network broadcast (Netgear Switch) #show ipv6 ospf neighbor Router ID Priority IntfID Interface State DeadTime -- ...

  • NETGEAR M4100 - page 125

    Chapter 7. OSPF | 125 ProSafe M4100 and M7100 Managed Switches a. Select Routing > IPv6 > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the interface 1/0/1 check box. Now 1/0/1 appears in the Interface field at the top. c. Enter the following information: • In the IPv6 Mode ...

  • NETGEAR M4100 - page 126

    126 | Chapter 7. OSPF ProSafe M4100 and M7100 Managed Switches a. Select Routing > OSPFv3 > Advanced > Interface Configuration . A screen similar to the following displays. b. Under IP Interface Configuration, scroll down and select the interface 1/0/1 check box. Now 1/0/1 appears in the Interface field at the top. • In the OSPF Area ID ...

  • NETGEAR M4100 - page 127

    Chapter 8. ARP | 127 8 8. ARP Pr o xy Addr es s R es oluti on Pr ot ocol Proxy ARP allows a router to answer ARP requests when the target IP address is not that of the router itself but a destination that the router can reach. If a host does not know the default gateway , proxy ARP can learn the first hop. Machines in one physical network appear to ...

  • NETGEAR M4100 - page 128

    128 | Chapter 8. ARP ProSafe M4100 and M7100 Managed Switches CLI: ip proxy -arp (Netgear Switch) (Interface 0/24)#ip proxy-arp ? <cr> Press Enter to execute the command. (Netgear Switch) (Interface 0/24)#ip proxy-arp W eb Interface: Configure Proxy ARP on a P ort 1. Select Routing > IP > Advanced > IP Interface Configuration . A scr ...

  • NETGEAR M4100 - page 129

    Chapter 9. VRRP | 129 9 9. VRRP V irtual R ou te r R edundan cy Pr o tocol This chapter provides the following examples: • VRRP on a Master Router on page 130 • VRRP on a Backup Router on page 132 When an end station is statically configured with the address of the router that will handle its routed traf fic, a single point of failure is introd ...

  • NETGEAR M4100 - page 130

    130 | Chapter 9. VRRP ProSafe M4100 and M7100 Managed Switches VRRP on a Master R outer This example shows how to configure the M4100 and M7100 Managed Switch to support VRRP . Router 1 is the default master router for the virtual route, and Router 2 is the backup router . CLI: Configure VRRP on a Master R outer 1. Enable routing for the switch. IP ...

  • NETGEAR M4100 - page 131

    Chapter 9. VRRP | 131 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure VRRP on a Master Router 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Ass ...

  • NETGEAR M4100 - page 132

    132 | Chapter 9. VRRP ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Global Configuration, next to the Admin Mode, select Enable radio button. c. Enter the following information in the VRRP Configuration: • In the VRID (1 to 255) field, enter 20 . • In the Interface field, select 1/0/2 . • In the ...

  • NETGEAR M4100 - page 133

    Chapter 9. VRRP | 133 ProSafe M4100 and M7100 Managed Switches 4. Assign virtual router IDs to port that will participate in the protocol. (Netgear Switch) (Config)#interface 1/0/4 (Netgear Switch) (Interface 1/0/4)#ip vrrp 20 5. Specify the IP address that the virtual router function will recognize. Since the virtual IP address on port 1/0/4 is th ...

  • NETGEAR M4100 - page 134

    134 | Chapter 9. VRRP ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/4 check box. Now 1/0/4 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.150.4.1 . • In the Network Mask field, enter 255.255.0.0 ...

  • NETGEAR M4100 - page 135

    Chapter 9. VRRP | 135 ProSafe M4100 and M7100 Managed Switches d. Click Add to save the settings. ...

  • NETGEAR M4100 - page 136

    Chapter 10. ACLs | 136 10 10. AC L s Acce ss Co ntr ol L ists This chapter describes the Access Control Lists (ACLs) feature. The following examples are provided: • MAC ACLs on page 137 • Set Up an IP ACL with T wo Rules on page 138 • One-Way Access Using a TCP Flag in an ACL on page 142 • Use ACLs to Configure Isolated VLANs on a Layer 3 S ...

  • NETGEAR M4100 - page 137

    Chapter 10. ACLs | 137 ProSafe M4100 and M7100 Managed Switches MA C A CLs MAC ACLs are Layer 2 ACLs. Y ou can configure the rules to inspect the following fields of a packet (limited by platform): • Source MAC address with mask. • Destination MAC address with mask. • VLAN ID (or range of IDs). • Class of Service (CoS) (802.1p) . • EtherT ...

  • NETGEAR M4100 - page 138

    138 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches 4. Apply the ACL to one or more interfaces. Set Up an IP A CL with T wo R ules This section shows you how to set up an IP ACL with two rules, one applicable to TCP traf fic and one to UDP traffic. The content of the two rules is the same. TCP and UDP packets will be accepted by the M41 ...

  • NETGEAR M4100 - page 139

    Chapter 10. ACLs | 139 ProSafe M4100 and M7100 Managed Switches 2. Define the second rule for ACL 101 to set conditions for UDP traffic similar to those for TCP traffic. (Netgear Switch) (Config)#access-list 101 permit udp 192.168.77.0 0.0.0.255 192.178.77.0 0.0.0.255 3. Apply the rule to inbound traffic on port 1/0/2. Only traf fic matching the cr ...

  • NETGEAR M4100 - page 140

    140 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For ACL ID, select 101 . c. Click Add to create a new rule. 3. Create a new ACL rule and add it to ACL 101. a. After you click the Add button in step 2. A screen similar to the following displays. a. In the Extended ACL Rule Configuration, ...

  • NETGEAR M4100 - page 141

    Chapter 10. ACLs | 141 ProSafe M4100 and M7100 Managed Switches a. After you click the Add button in step 3, a screen similar to the following displays. b. Under Extended ACL Rule Configuration, enter the following information: • In the Rule ID (1 to 23) field, enter 22 . • For Action, select the Permit radio button. • In the Protocol T ype l ...

  • NETGEAR M4100 - page 142

    142 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches • In the ACL ID list, select 10 . • In the Sequence Number field, enter 1 . c. Click Unit 1. The ports display . d. Click the gray box under port 2 . A check mark displays in the box. e. Click Apply to save the settings. One - W ay Access Using a T CP Flag in an A CL This example s ...

  • NETGEAR M4100 - page 143

    Chapter 10. ACLs | 143 ProSafe M4100 and M7100 Managed Switches 1. Create VLAN 30 with port 0/35 and assign IP address 192.168.30.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 30 (Netgear Switch) (Vlan)#vlan routing 30 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 0/35 (Netgear Switch ...

  • NETGEAR M4100 - page 144

    144 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches 3. Create VLAN 200 with port 0/44 and assign IP address 192.168.200.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 200 (Netgear Switch) (Vlan)#vlan routing 200 (Netgear Switch) (Vlan)#exit (Netgear Switch) #configure (Netgear Switch) (Config)#interface 0/44 (Netgear ...

  • NETGEAR M4100 - page 145

    Chapter 10. ACLs | 145 ProSafe M4100 and M7100 Managed Switches 2. Create VLAN 40 with port 1/0/24 and assign IP address 192.168.40.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 40 (Netgear Switch) (Vlan)#vlan routing 40 (Netgear Switch) #configure (Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#v ...

  • NETGEAR M4100 - page 146

    146 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches 4. Create VLAN 200 with port 1/0/48 and assign IP address 192.168.200.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 200 (Netgear Switch) (Vlan)#vlan routing 200 (Netgear Switch) (Config)#interface 1/0/48 (Netgear Switch) (Interface 1/0/48)#vlan pvid 200 (Netgear Sw ...

  • NETGEAR M4100 - page 147

    Chapter 10. ACLs | 147 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays.n the VLAN Routing Wizard, b. In the VLAN Routing Wizard, enter the following information: • In the Vlan ID field, enter 30 . • In the IP Address field, enter 192.168.30.1 . • In the Network Mask field, enter 255.255.255.0 . c. Click Uni ...

  • NETGEAR M4100 - page 148

    148 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches • In the IP Address field, enter 192.168.100.1 . • In the Network Mask field, enter 255.255.255.0 . c. Click Unit 1 . The ports display . d. Click the gray box under port 13 twice until U displays. The U specifies that the egress packet is untagged for the port. e. Click Apply to s ...

  • NETGEAR M4100 - page 149

    Chapter 10. ACLs | 149 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Configuration, make the following selections: • For Routing Mode, select the Enable radio button. • For IP Forwarding Mode, select the Enable radio button. c. Click Apply to enable IP routing. 5. Add a static route with IP add ...

  • NETGEAR M4100 - page 150

    150 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Configure Routes, make the following selection and enter the following information: • In the Route T ype list, select Static . • In the Network Address field, enter 192.168.50.0 . • In the Subnet Mask field, enter 255.255.255.0 ...

  • NETGEAR M4100 - page 151

    Chapter 10. ACLs | 151 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the IP ACL T able, in the IP ACL ID field, enter 102 . c. Click Add . 9. Add and configure an IP extended rule that is associated with ACL 101. a. Select Security > ACL > Advanced > IP Extended Rules . A screen similar to the f ...

  • NETGEAR M4100 - page 152

    152 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches The Extended ACL Rule Configuration screen displays. d. Under Extended ACL Rule Configuration (100-199), enter the following information and make the following selections: • In the Rule ID field, enter 1 . • For Action mode, select the Deny radio button. • In the Match Every fiel ...

  • NETGEAR M4100 - page 153

    Chapter 10. ACLs | 153 ProSafe M4100 and M7100 Managed Switches The Extended ACL Rule Configuration screen displays. d. Under Extended ACL Rule Configuration (100-199), enter the following information and make the following selections: • In the Rule ID field, enter 1 . • For Action, select the Permit radio button. • In the Match Every field, ...

  • NETGEAR M4100 - page 154

    154 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches c. Click Unit 1 . The ports display . d. Click the gray box under port 44 . A check mark displays in the box. e. Click Apply to save the settings. 12. Apply ACL 102 to port 44. a. Select Security > ACL > Advanced > IP Binding Configuration . A screen similar to the following d ...

  • NETGEAR M4100 - page 155

    Chapter 10. ACLs | 155 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information: • In the Vlan ID field, enter 40 . • In the IP Address field, enter 192.168.40.1 . • In the Network Mask field, enter 255.255.255.0 . c. Click Unit 1 . The ports display . d. Click the gray box under ...

  • NETGEAR M4100 - page 156

    156 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches d. Click the gray box under port 25 twice until U displays. The U specifies that the egress packet is untagged for the port. e. Click Apply to save VLAN 50. 3. Create VLAN 200 with IP address 192.168.200.2/24. a. Select Routing > VLAN > VLAN Routing W izard . A screen similar to ...

  • NETGEAR M4100 - page 157

    Chapter 10. ACLs | 157 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Configure Routes, make the following selections and enter the following information: • Select Static in the Route T ype field. • In the Network Address field, enter 192.168.100.0 . • In the Subnet Mask field, enter 255.255.255. ...

  • NETGEAR M4100 - page 158

    158 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches c. Click Add . Use A CLs to Configure Isolated VLANs on a Layer 3 Switch This example shows how to isolate VLANs on a Layer 3 switch by using ACLs. In this example, PC 1 is in VLAN 24, PC 2 is in VLAN 48, and the server is in VLAN 38. PC 1 and PC 2 are isolated by an ACL but can both a ...

  • NETGEAR M4100 - page 159

    Chapter 10. ACLs | 159 ProSafe M4100 and M7100 Managed Switches CLI: Configure One - W ay Access Using a T CP Flag in ACL Commands 1. Enter the following CLI commands. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 24 (Netgear Switch) (Vlan)#vlan routing 24 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config ...

  • NETGEAR M4100 - page 160

    160 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches 3. Create VLAN 38, add port 1/0/38 to it, and assign IP address 10.100.5.34 to it. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 38 (Netgear Switch) (Vlan)#vlan routing (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/38 (Netg ...

  • NETGEAR M4100 - page 161

    Chapter 10. ACLs | 161 ProSafe M4100 and M7100 Managed Switches 9. Deny all traffic with the destination IP address 192.168.48.0/24, and permit all other traf fic. (Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#ip access-group 102 in 1 (Netgear Switch) (Interface 1/0/24)#ip access-group 103 in 2 (Netgear Switch) (Int ...

  • NETGEAR M4100 - page 162

    162 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches a. Select Routing > VLAN > VLAN Routing Wizard . A screen similar to the following displays. b. Enter the following information: • In the Vlan ID field, enter 48 . • In the IP Address field, enter 192.168.48.1 . • In the Network Mask field, enter 255.255.255.0 . c. Click Un ...

  • NETGEAR M4100 - page 163

    Chapter 10. ACLs | 163 ProSafe M4100 and M7100 Managed Switches • In the Network Mask field, enter 255.255.255.0 . c. Click Unit 1 . The ports display . d. Click the gray box under port 38 twice until U displays. The U specifies that the egress packet is untagged for the port. e. Click Apply to save VLAN 38. 4. Enable IP routing: a. Select Routin ...

  • NETGEAR M4100 - page 164

    164 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the IP ACL T able, in the IP ACL ID field, enter 102 . c. Click Add . 7. Create an ACL with ID 103. a. Select Security > ACL > Advanced > IP ACL . A screen similar to the following displays. b. In the IP ACL ID field of the IP ...

  • NETGEAR M4100 - page 165

    Chapter 10. ACLs | 165 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Extended Rules, in the ACL ID field, select 101 . c. Click Add . The Extended ACL Rule Configuration screen displays. d. Under Extended ACL Rule Configuration (100-199), enter the following information and make the following selec ...

  • NETGEAR M4100 - page 166

    166 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Extended Rules, in the ACL ID field, select 102 . c. Click Add . The Extended ACL Rule Configuration screen displays. d. Under Extended ACL Rule Configuration (100-199), enter the following information and make the following selec ...

  • NETGEAR M4100 - page 167

    Chapter 10. ACLs | 167 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Extended Rules, in the ACL ID field, select 103 . c. Click Add . The Extended ACL Rule Configuration screen displays. d. Under Extended ACL Rule Configuration (100-199), enter the following information and make the following selec ...

  • NETGEAR M4100 - page 168

    168 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Binding Configuration, make the following selection and enter the following information: • In the ACL ID field, select 102 . • In the Sequence Number field, enter 1 . c. Click Unit 1 . The ports display . d. Click the gray box un ...

  • NETGEAR M4100 - page 169

    Chapter 10. ACLs | 169 ProSafe M4100 and M7100 Managed Switches b. Under Binding Configuration, make the following selection and enter the following information: • In he ACL ID field, select 101 . • In the Sequence Number field, enter 1 . c. Click Unit 1 . The ports display . d. Click the gray box under port 48 . A check mark displays in the bo ...

  • NETGEAR M4100 - page 170

    170 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches CLI: Set up a MA C A CL with T wo Rules 1. Create a new MAC ACL acl_bpdu. (Netgear Switch) # (Netgear Switch) #config (Netgear Switch) (Config)#mac access-list extended acl_bpdu 2. Deny all the traffic that has destination MAC 01:80:c2:xx:xx:xx. (Netgear Switch) (Config-mac-access-list ...

  • NETGEAR M4100 - page 171

    Chapter 10. ACLs | 171 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. a. In the ACL Name field, select acl_bpdu . b. In the Action field, select Deny . c. Enter the following information in the Rule T able. • In the ID field, enter 1 . • In the Destination MAC field, enter 01:80:c2:00:00:00 . • In the Des ...

  • NETGEAR M4100 - page 172

    172 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information in the MAC Binding Configuration. • IN the ACL ID field, select acl_bpdu . • In the Sequence Number field, enter 1 . c. Click the Unit 1. The ports display . d. Click the gray box under port 2 . A check ...

  • NETGEAR M4100 - page 173

    Chapter 10. ACLs | 173 ProSafe M4100 and M7100 Managed Switches desired traffic with the option mirror to an interface. Any traffic matching this rule will be copied to the specified mirrored interface. GSM73xxS Probing station 10.0.0.2 1/0/19 Packets from 10.0.0.1 workstation Packets from 10.0.0.2 workstation L2 switch 1/0/1 Other network workstat ...

  • NETGEAR M4100 - page 174

    174 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches 3. Bind the ACL with interface 1/0/1. (Netgear Switch) (Interface 1/0/1)#ip access-group monitorHost in 1 4. V iew the configuration. (Netgear Switch) # show ip access-lists Current number of ACLs: 1 Maximum number of ACLs: 100 ACL ID/Name Rules Direction Interface(s) VLAN(s) --------- ...

  • NETGEAR M4100 - page 175

    Chapter 10. ACLs | 175 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the IP ACL ID field, enter monitorHost . c. Click Add to create ACL monitorHost, and the following screen displays: 2. Create a rule to match host 10.0.0.1 in the ACL monitorHost. a. Select Security > ACL > Advanced > IP Extend ...

  • NETGEAR M4100 - page 176

    176 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches b. Click Add , and the Extended ACL Rule Configuration screen displays. c. In the Rule ID field, enter 1 . d. For Action, select the Permit radio button. e. In the Mirror Interface list, select 1/0/19 . f. In the Src IP Address field, enter 10.0.0.1 . g. In the Src IP Mask field, enter ...

  • NETGEAR M4100 - page 177

    Chapter 10. ACLs | 177 ProSafe M4100 and M7100 Managed Switches b. Click Add , and a screen similar to the following displays. c. In the Rule ID field, enter 2 . d. Select the Permit radio button. e. In the Match Every field, select T rue . f. Click Apply . At the end of this configuration a screen similar to the following displays. 4. Bind the ACL ...

  • NETGEAR M4100 - page 178

    178 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. A CL R edirect This feature redirects a specified traffic stream to a specified interface. GSM73xxS 1/0/1 Workstation W orkstation Web server Other network 1/0/19 HTTP packets Other packets Figure 20. ACL Redirect CLI: R edirect a T raffic St ...

  • NETGEAR M4100 - page 179

    Chapter 10. ACLs | 179 ProSafe M4100 and M7100 Managed Switches 1. Create an IP access control list with the name redirectHTTP . (Netgear Switch) (Config)#ip access-list redirectHTTP 2. Define a rule to match the HTTP stream and define a rule to permit all others. (Netgear Switch) (Config-ipv4-acl)# permit tcp any any eq http redirect 1/0/19 (Netge ...

  • NETGEAR M4100 - page 180

    180 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the IP ACL field, enter redirectHTTP . c. Click Add to create the IP ACL redirectHTTP . A screen similar to the following displays. 2. Create a rule to redirect HTTP traffic. a. Select Security > ACL > Advanced > IP Extended Ru ...

  • NETGEAR M4100 - page 181

    Chapter 10. ACLs | 181 ProSafe M4100 and M7100 Managed Switches b. Click Add , and the Extended ACL Rule Configuration screen displays. c. In the Rule ID field, enter 1 . d. For Action, select the Permit radio button. e. In the Redirect Interface list, select 1/0/19 . f. In the Dst L4 Por t list, select http . g. Click Apply . The Extended ACL Rule ...

  • NETGEAR M4100 - page 182

    182 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches b. Click Add , and the Extended ACL Rule Configuration screen displays. c. In the Rule ID field, enter 2 . d. For Action, select the Permit radio button. e. In the Match Every field, select T rue . f. Click Apply . A screen similar to the following displays. 4. Bind the ACL with interf ...

  • NETGEAR M4100 - page 183

    Chapter 10. ACLs | 183 ProSafe M4100 and M7100 Managed Switches c. In the Port Selection T able, click Unit 1 to display all the ports. d. Select the check box below Port 1. e. Click Apply . At the end of this configuration a screen similar to the following displays. Configure IPv6 A CLs This feature extends the existing IPv4 ACL by providing suppo ...

  • NETGEAR M4100 - page 184

    184 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches Note that the order of the rules is important: When a packet matches multiple rules, the first rule takes precedence. Also, once you define an ACL for a given port, all traffic not specifically permitted by the ACL is denied access. GSM73xxS 2001:0DB8:c0ab:ac1 1::/64 2001:0DB8:c0ab:ac1 ...

  • NETGEAR M4100 - page 185

    Chapter 10. ACLs | 185 ProSafe M4100 and M7100 Managed Switches • Permit IPv6 T elnet traffic to the destination network 2001:DB8:C0AB:AC13::/64 from the source network 2001:DB8:C0AB:AC1 1::/64. • Permit IPv6 HTTP traf fic to any destination network from the source network 2001:DB8:C0AB:AC1 1::/64. (Netgear Switch) (Config-ipv6-acl)# permit ipv ...

  • NETGEAR M4100 - page 186

    Rule Number: 3 Action......................................... permit Protocol....................................... 6(tcp) Source IP Address.............................. 2001:DB8:C0AB:AC11::/64 Destination L4 Port Keyword.................... 80(www/http) 186 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure an ...

  • NETGEAR M4100 - page 187

    Chapter 10. ACLs | 187 ProSafe M4100 and M7100 Managed Switches b. In the ACL Name list, select ipv6-acl . c. Click Add . d. In the Rule ID field, enter 1 . e. For Action, select the Permit radio button. f. In the Source Prefix field, enter 2001:DB8:C0AB:AC1 1:: . g. In the Source Prefix Length field, enter 64 . h. In the Destination Prefix field, ...

  • NETGEAR M4100 - page 188

    188 | Chapter 10. ACLs ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. i. Click Apply . 4. Add Rule 3. a. In the Rule ID field, enter 3 . b. For Action, select the Permit radio button. c. In the Protocol T ype list, select TCP . d. In the Source Prefix field, enter 2001:DB8:C0AB:AC1 1:: . e. In the Source Prefix ...

  • NETGEAR M4100 - page 189

    Chapter 10. ACLs | 189 ProSafe M4100 and M7100 Managed Switches b. In the ACL ID list, select ipv6-acl . c. In the Sequence Number list, select 1 . d. Click Unit 1 . e. Select Port 1 . A screen similar to the following displays. f. Click Apply . A screen similar to the following displays. 6. View the binding table. Select Security > ACL > Adv ...

  • NETGEAR M4100 - page 190

    Chapter 1 1. CoS Queuing | 190 11 1 1. CoS Que uing Cl ass o f Ser v ice Queuing This chapter describes Class of Service (CoS) queue mapping, CoS Configuration, and traf fic shaping features. This chapter provides the following examples: • Show classofservice T rust on page 192 • Set classofservice T rust Mode on page 193 • Show classofservic ...

  • NETGEAR M4100 - page 191

    Chapter 1 1. CoS Queuing | 191 ProSafe M4100 and M7100 Managed Switches CoS Queue Mapping CoS queue mapping uses trusted and untrusted ports. T rusted P orts • The system takes at face value certain priority designations for arriving packets. • T rust applies only to packets that have that trust information. • There can be only one trust fiel ...

  • NETGEAR M4100 - page 192

    192 | Chapter 1 1. CoS Queuing ProSafe M4100 and M7100 Managed Switches CoS Queue Configuration CoS queue configuration involves port egress queue configuration and drop precedence configuration (per queue). The design of these on a per-queue, pe- drop precedence basis allows you to create the service characteristics that you want for different typ ...

  • NETGEAR M4100 - page 193

    Chapter 1 1. CoS Queuing | 193 ProSafe M4100 and M7100 Managed Switches W eb Interface: Show classofservice T rust Select QoS > CoS > Basic > CoS Configuration . A screen similar to the following displays. Set classofservice T rust Mode The example is shown as CLI commands and as a Web interface procedure. (Netgear Switch) (Config)#classof ...

  • NETGEAR M4100 - page 194

    194 | Chapter 1 1. CoS Queuing ProSafe M4100 and M7100 Managed Switches 2. Select the Global radio button. 3. In the Global T rust Mode list, select trust dot1p . 4. Click Apply to save the settings. Show classofservice IP -P recedence Mapping The example is shown as CLI commands and as a Web interface procedure. CLI: Show classofservice IP -P rece ...

  • NETGEAR M4100 - page 195

    Chapter 1 1. CoS Queuing | 195 ProSafe M4100 and M7100 Managed Switches The IP precedence to queue mapping of the interface is displayed. Configure Cos - queue Min-bandwidth and Strict P riority Scheduler Mode The example is shown as CLI commands and as a Web interface procedure. CLI: Configure Cos - queue Min-bandwidth and Strict P riority Schedul ...

  • NETGEAR M4100 - page 196

    196 | Chapter 1 1. CoS Queuing ProSafe M4100 and M7100 Managed Switches c. Under Interface Queue Configuration, scroll down and select the interface 1/0/2 check box. Now 1/0/2 appears in the Interface field at the top. d. Enter the following information: • In the Minimum Bandwidth field, enter 15 . • In the Scheduler T ype list, select Weighted ...

  • NETGEAR M4100 - page 197

    Chapter 1 1. CoS Queuing | 197 ProSafe M4100 and M7100 Managed Switches CLI: Set CoS T rust Mode for an Interface (Netgear Switch) (Interface 1/0/3)#classofservice trust? dot1p Sets the Class of Service Trust Mode of an Interface to 802.1p. ip-dscp Sets the Class of Service Trust Mode of an Interface to IP DSCP. (Netgear Switch) (Interface 1/0/3)#c ...

  • NETGEAR M4100 - page 198

    198 | Chapter 1 1. CoS Queuing ProSafe M4100 and M7100 Managed Switches command to enable traffic shaping by specifying the maximum transmission bandwidth limit for all interfaces (Global Config) or for a single interface (Interface Config). The <bw> value is a percentage that ranges from 0 to 100 in increments of 5. The default bandwidth val ...

  • NETGEAR M4100 - page 199

    Chapter 1 1. CoS Queuing | 199 ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. ...

  • NETGEAR M4100 - page 200

    Chapter 12. DiffServ | 200 12 12. DiffServ Diff er en ti ated Se rvi ces This chapter provides the following examples: • DiffServ on page 201 • DiffServ for V oIP on page 218 • Auto V oIP on page 225 • DiffServ for IPv6 on page 229 • Color Conform Policy on page 237 Differentiated services (Dif fServ) is one technique for implementing Qua ...

  • NETGEAR M4100 - page 201

    Chapter 12. DiffServ | 201 ProSafe M4100 and M7100 Managed Switches • Class . A class consists of a set of rules that identify which packets belong to the class. Inbound traffic is separated into traf fic classes based on Layer 3 and Layer 4 header data and the VLAN ID, and marked with a corresponding DSCP value. One type of class is supported: A ...

  • NETGEAR M4100 - page 202

    202 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches CLI: Configure DiffServ 1. Ensure that the DiffServ operation is enabled for the switch. (Netgear Switch) #config (Netgear Switch) (Config)#diffserv 2. Create a DiffServ class of type all for each of the departments, and name them. Define the match criteria of source IP address for ...

  • NETGEAR M4100 - page 203

    Chapter 12. DiffServ | 203 ProSafe M4100 and M7100 Managed Switches This policy uses the assign-queue attribute to put each department’s traf fic on a different egress queue. This is how the Dif fServ inbound policy connects to the CoS queue settings established in the following example. (Netgear Switch) (Config)#policy-map internet_access in (Ne ...

  • NETGEAR M4100 - page 204

    204 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches assign-queue attribute. It is presumed that the switch will forward this traffic to interface 1/0/5 based on a normal destination address lookup for Internet traffic. (Netgear Switch) (Config)#interface 1/0/5 (Netgear Switch) (Interface 1/0/5)#cos-queue min-bandwidth 0 25 25 25 25 ...

  • NETGEAR M4100 - page 205

    Chapter 12. DiffServ | 205 ProSafe M4100 and M7100 Managed Switches d. Click the finance_dept to configure this class. e. Under Diffserv Class Configuration, enter the following information: • In the Source IP Address field, enter 172.16.10.0 . • In the Source Mask field, enter 255.255.255.0 . f. Click Apply . 3. Create the class marketing_dept ...

  • NETGEAR M4100 - page 206

    206 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches d. Click marketing_dept to configure this class. e. Under Diffserv Class Configuration, enter the following information: • In the Source IP Address field, enter 172.16.20.0 . • In the Source Mask field, enter 255.255.255.0 . f. Click Apply . 4. Create the class test_dept: a. Se ...

  • NETGEAR M4100 - page 207

    Chapter 12. DiffServ | 207 ProSafe M4100 and M7100 Managed Switches d. Click test_dept to configure this class. e. Under Diffserv Class Configuration, enter the following information: • In the Source IP Address field, enter 172.16.30.0 . • In the Source Mask field, enter 255.255.255.0 . f. Click Apply . 5. Create class development_dept. a. Sele ...

  • NETGEAR M4100 - page 208

    208 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches d. Click development_dept to configure this class. e. Under Diffserv Class Configuration, enter the following information: • In the Source IP Address field, enter 172.16.40.0 . • In the Source Mask field, enter 255.255.255.0 . f. Click Apply . 6. Create a policy named internet_ ...

  • NETGEAR M4100 - page 209

    Chapter 12. DiffServ | 209 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Policy Configuration, scroll down and select the internet_access check box. internet_access now appears in the Policy Selector field at the top. c. In the Member Class list, select marketing_dept . d. Click Apply to add the class ...

  • NETGEAR M4100 - page 210

    210 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Policy Configuration, scroll down and select the internet_access check box. Now internet_access appears in the Policy Selector field at the top. c. In the Member Class list, select development_dept . d. Click Apply to add the cla ...

  • NETGEAR M4100 - page 211

    Chapter 12. DiffServ | 21 1 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. c. In the Assign Queue list, select 1 . d. Click Apply . 1 1. Assign queue 2 to marketing_dept. a. Select QoS > DiffServ > Advanced > Policy Configuration . A screen similar to the following displays. b. Click the internet_acces ...

  • NETGEAR M4100 - page 212

    212 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. c. In the Assign Queue list, select 2 . d. Click Apply . 12. Assign queue 3 to test_dept. a. Select QoS > DiffServ > Advanced > Policy Configuration . A screen similar to the following displays. b. Click the internet_access check ...

  • NETGEAR M4100 - page 213

    Chapter 12. DiffServ | 213 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. c. In the Assign Queue list, select 3 . d. Click Apply . 13. Assign queue 4 to development_dept. a. Select QoS > DiffServ > Advanced > Policy Configuration . A screen similar to the following displays. b. Click the internet_acces ...

  • NETGEAR M4100 - page 214

    214 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. c. In the Assign Queue list, select 4 . d. Click Apply . 14. Attach the defined policy to interfaces 1/0/1 through 1/0/4 in the inbound direction. a. Select QoS > DiffServ > Advanced > Service Configuration . A screen similar to ...

  • NETGEAR M4100 - page 215

    Chapter 12. DiffServ | 215 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/5 check box. Now 1/0/5 appears in the Interface field at the top. c. In the Queue ID list, select 1 . d. In the Minimum Bandwidth field, enter 25 . e. Click Apply . 16. Set the CoS queue 2 confi ...

  • NETGEAR M4100 - page 216

    216 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches a. Select QoS > CoS > Advanced > Interface Queue Configuration . A screen similar to the following displays. b. Under Interface Queue Configuration, scroll down and select the interface 1/0/5 check box. Now 1/0/5 appears in the Interface field at the top. c. In the Queue I ...

  • NETGEAR M4100 - page 217

    Chapter 12. DiffServ | 217 ProSafe M4100 and M7100 Managed Switches c. In the Queue ID list, select 4 . d. In the Minimum Bandwidth field, enter 25 . e. Click Apply . ...

  • NETGEAR M4100 - page 218

    218 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches DiffServ for V oIP One of the most valuable uses of DiffServ is to support V oice over IP (V oIP). V oIP traffic is inherently time sensitive: For a network to provide acceptable service, a guaranteed transmission rate is vital. This example shows one way to provide the necessary q ...

  • NETGEAR M4100 - page 219

    Chapter 12. DiffServ | 219 ProSafe M4100 and M7100 Managed Switches 2. Create a DiffServ classifier named class_voip and define a single match criterion to detect UDP packets. The class type match-all indicates that all match criteria defined for the class must be satisfied in order for a packet to be considered a match. (Netgear Switch) (Config)#c ...

  • NETGEAR M4100 - page 220

    220 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches W eb Interface: Diffserv for V oIP 1. Set queue 5 on all interfaces to use strict mode. a. Select QoS > CoS > Advanced > CoS Interface Configuration . A screen similar to the following displays. b. Under Interface Queue Configuration, select all the interfaces. c. In the Q ...

  • NETGEAR M4100 - page 221

    Chapter 12. DiffServ | 221 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Class Name field, enter class_voip . c. In the Class T ype list, select All . d. Click Add to create a new class. e. Click class_voip . A screen similar to the following displays: f. In the Protocol T ype list, select UDP . g. C ...

  • NETGEAR M4100 - page 222

    222 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Class Name field, enter class_ef . c. In the Class T ype list, select All . d. Click Add to create a new class. e. Click class_ef . Another screen similar to the following displays: f. In the IP DSCP list, select ef . g. Click A ...

  • NETGEAR M4100 - page 223

    Chapter 12. DiffServ | 223 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Policy Selector field, enter pol_voip . c. In the Member Class list, select class_voip . d. Click Add to create a new policy . e. Click the pol_voip whose class member is class_voip. A screen similar to the following displays. f ...

  • NETGEAR M4100 - page 224

    224 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Policy Configuration, scroll down and select the pol_voip check box. Pol_voip now appears in the Policy Selector field at the top. c. In the Member Class list, select class_ef in. d. Click Apply to add the class class_ef to the p ...

  • NETGEAR M4100 - page 225

    Chapter 12. DiffServ | 225 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/2 check box. Now 1/0/2 appears in the Interface field at the top. c. In the Policy In list, select pol_voip . d. Click Apply to create a new policy . Auto V oIP The Auto-V oIP feature makes it e ...

  • NETGEAR M4100 - page 226

    226 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches installed to assign the highest priority to VOIP data packets. As soon as the call ends, the filters are removed. PBX GSM73xxS V oice traffic Data traffic V oIP phone V oIP phone V oIP phone PC PC PC Data server Figure 24. Auto V oIP The example is shown as CLI commands and as a We ...

  • NETGEAR M4100 - page 227

    Chapter 12. DiffServ | 227 ProSafe M4100 and M7100 Managed Switches 2. View the auto V oIP information: (Netgear Switch) # show auto-voip interface all Interface Auto VoIP Mode Traffic Class --------- -------------- ------------- 1/0/1 Enabled 6 1/0/2 Enabled 6 1/0/3 Enabled 6 1/0/4 Enabled 6 1/0/5 Enabled 6 1/0/6 Enabled 6 1/0/7 Enabled 6 1/0/8 En ...

  • NETGEAR M4100 - page 228

    228 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure Auto - V oIP 1. Enable auto V oIP for all the interfaces in the device. a. Select QoS > DiffServ > Auto V oIP . A screen similar to the following displays. b. Select the check box in the first row to select all the interfaces. c. In the Auto V oIP Mo ...

  • NETGEAR M4100 - page 229

    Chapter 12. DiffServ | 229 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. DiffServ for IPv6 This feature extends the existing QoS ACL and DiffServ functionality by providing support for IPv6 packet classification. Internet IPv6 Workstation IPv6 Workstation IPv6 Workstation ICMPv6 traffic Other traffic GSM73xxS ...

  • NETGEAR M4100 - page 230

    230 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches CLI: Configure DiffServ for IPv6 The script in this section shows how to prioritize ICMPv6 traffic over other IPv6 traf fic. 1. Create the IPv6 class classicmpv6. (Netgear Switch) (Config)# class-map match-all classicmpv6 ipv6 2. Define matching criteria as protocol ICMPv6. (Netgea ...

  • NETGEAR M4100 - page 231

    Chapter 12. DiffServ | 231 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure DiffServ for IPv6 1. Create the IPv6 class classicmpv6. a. Select QoS > DiffServ > Advanced > IPv6 Class Configuratio n. A screen similar to the following displays. b. In the Class Name field, enter classicmpv6 . c. In the Class T ype list, select ...

  • NETGEAR M4100 - page 232

    232 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Click the class classicmpv6 . A screen similar to the following displays. c. Select the Protocol T ype radio button, select Other , and enter 58 . A screen similar to the following displays. d. Click Apply . ...

  • NETGEAR M4100 - page 233

    Chapter 12. DiffServ | 233 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 3. Create the policy policyicmpv6, and associate the previously created class classicmpv6. a. Select QoS > DiffServ > Advanced > Policy Configuration . A screen similar to the following displays. b. In the Policy Name field, ente ...

  • NETGEAR M4100 - page 234

    234 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches a. Select QoS > DiffServ > Advanced > Policy Configuration . A screen similar to the following displays. b. Click the policy policyicmpv6 . A screen similar to the following displays. ...

  • NETGEAR M4100 - page 235

    Chapter 12. DiffServ | 235 ProSafe M4100 and M7100 Managed Switches c. In the Assign Queue list, select 6 . d. Click Apply . 5. Attach the policy policyicmpv6 to interfaces 1/0/1,1/0/2 and 1/0/3. a. Select QoS > DiffServ > Advanced > Service Interface Configuration . A screen similar to the following displays. b. In the Policy Name list, s ...

  • NETGEAR M4100 - page 236

    236 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. d. Click Apply . A screen similar to the following displays. ...

  • NETGEAR M4100 - page 237

    Chapter 12. DiffServ | 237 ProSafe M4100 and M7100 Managed Switches Color Conform P olicy This example shows how to create a policy to police the traffic to a committed rate. The packets with IP precedence value of 7 are colored green to ensure that these packets are the last to be dropped when there is congestion. The example is shown as CLI comma ...

  • NETGEAR M4100 - page 238

    238 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches means these packets will be the last packets to be dropped in the event of congestion beyond the policed rate. (Netgear Switch) (Config)#policy-map policy_vlan in (Netgear Switch) (Config-policy-map)#class class_vlan (Netgear Switch) (Config-policy-classmap)#police-simple 1000 64 c ...

  • NETGEAR M4100 - page 239

    Chapter 12. DiffServ | 239 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID list, select 5 . c. Click Unit 1 . The ports display . d. Click the gray boxes under ports 13 and 25 until T displays. The T specifies that the egress packet is tagged for the port. e. Click Apply . 3. Create a class cla ...

  • NETGEAR M4100 - page 240

    240 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches c. Click Add to create a new class class_vlan. d. Click class_vlan to configure this class. A screen similar to the following displays: e. Under Diffserv Class Configuration, in the VLAN field, enter 5 . f. Click Apply . 4. Create a class class_color . a. Select QoS > DiffServ & ...

  • NETGEAR M4100 - page 241

    Chapter 12. DiffServ | 241 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information: • In the Class Name field, enter class_color . • In the Class T ype list, select All . c. Click Add to create a new class class_color . ...

  • NETGEAR M4100 - page 242

    242 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches d. Click class_color to configure this class. A screen similar to the following displays: e. Under Diffserv Class Configuration, in the Precedence V alue list, select 7 . f. Click Apply . 5. Create a policy policy_vlan. a. Select QoS > DiffServ > Advanced > Policy Configur ...

  • NETGEAR M4100 - page 243

    Chapter 12. DiffServ | 243 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Policy Configuration, scroll down and select the policy_vlan check box. c. In the Member Class field, enter class_vlan . d. Click Apply . 7. Configure policy_vlan. a. Select QoS > DiffServ > Advanced > Policy Configurati ...

  • NETGEAR M4100 - page 244

    244 | Chapter 12. DiffServ ProSafe M4100 and M7100 Managed Switches h. For Violate Action, select the Drop radio button. i. Click Apply . 8. Apply policy_vlan to interface 1/0/13. a. Select QoS > DiffServ > Advanced > Service Interface Configuration . A screen similar to the following displays. b. Under Service Interface Configuration, scr ...

  • NETGEAR M4100 - page 245

    Chapter 13. IGMP Snooping and Querier | 245 13 13. IGMP Sn oop ing an d Que r i er This chapter provides the following examples: • IGMP Snooping • Show igmpsnooping on page 246 • Show mac-address-table igmpsnooping on page 247 • External Multicast Router on page 248 • Multicast Router Using VLAN on page 249 • IGMP Querier on page 250 ? ...

  • NETGEAR M4100 - page 246

    246 | Chapter 13. IGMP Snooping and Querier ProSafe M4100 and M7100 Managed Switches IGMP Snooping The following are examples of the commands used in the IGMP snooping feature. CLI: Enable IGMP Snooping The following example shows how to enable IGMP snooping. (Netgear Switch) #config (Netgear Switch) (Config)#set igmp (Netgear Switch) (Config)# set ...

  • NETGEAR M4100 - page 247

    Chapter 13. IGMP Snooping and Querier | 247 ProSafe M4100 and M7100 Managed Switches CLI: Show igmpsnooping (Netgear Switch) #show igmpsnooping Admin Mode..................................... Disable Unknown Multicast Filtering.................... Disable Multicast Control Frame Count.................. 0 Interfaces Enabled for IGMP Snooping........ ...

  • NETGEAR M4100 - page 248

    248 | Chapter 13. IGMP Snooping and Querier ProSafe M4100 and M7100 Managed Switches CLI: Show mac-address -table igmpsnooping (Netgear Switch) #show mac-address-table igmpsnooping ? <cr> Press Enter to execute the command. (Netgear Switch) #show mac-address-table igmpsnooping Type Description Interfaces ----------------------- ------- ------ ...

  • NETGEAR M4100 - page 249

    Chapter 13. IGMP Snooping and Querier | 249 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure the Switch with an External Multicast R outer 1. Select Switching > Multicast > Multicast Router Configuration . A screen similar to the following displays. 2. Under Multicast Router Configuration, scroll down and select the Interfac ...

  • NETGEAR M4100 - page 250

    250 | Chapter 13. IGMP Snooping and Querier ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Under Multicast Router VLAN Configuration, scroll down and select the Interface 1/0/3 check box. 3. Enter the following information in the Multicast Router VLAN Configuration. • In the VLAN ID field, enter 2 . • In ...

  • NETGEAR M4100 - page 251

    Chapter 13. IGMP Snooping and Querier | 251 ProSafe M4100 and M7100 Managed Switches respond. With the built-in IGMP querier feature inside the switch, such an external device is no longer needed. Figure 26. IGMP querier Since the IGMP querier is designed to work with IGMP snooping, it is necessary to enable IGMP snooping when using it. The followi ...

  • NETGEAR M4100 - page 252

    252 | Chapter 13. IGMP Snooping and Querier ProSafe M4100 and M7100 Managed Switches address in querier packets. See the Command Line Reference for more details about other IGMP querier command options. (Netgear switch) #vlan database (Netgear switch) (vlan)#set igmp 1 (Netgear switch) (vlan)#set igmp querier 1 (Netgear switch) (vlan)#exit (Netgear ...

  • NETGEAR M4100 - page 253

    Chapter 13. IGMP Snooping and Querier | 253 ProSafe M4100 and M7100 Managed Switches • In the Admin Mode field, select Enable . c. Click Add . 3. Enable the IGMP snooping querier globally . a. Select Switching > Multicast > IGMP Snooping > IGMP VLAN Configuration . A screen similar to the following displays. b. Enter the following inform ...

  • NETGEAR M4100 - page 254

    254 | Chapter 13. IGMP Snooping and Querier ProSafe M4100 and M7100 Managed Switches Show IGMP Querier Status The example is shown as CLI commands and as a Web interface procedure. CLI: Show IGMP Querier Status T o see the IGMP querier status, use the following command. (Netgear Switch) #show igmpsnooping querier vlan 1 VLAN 1 : IGMP Snooping queri ...

  • NETGEAR M4100 - page 255

    Chapter 14. MVR (Multicast VLAN Registration) | 255 14 14. MVR (Multi cas t VL AN R egistr a ti on) This chapter provides the following examples: • Configure MVR in Compatible Mode • Configure MVR in Dynamic Mode The IGMP Layer 3 protocol is widely used for IPv4 network multicasting. In Layer 2 networks, the IGMP protocol uses resources ineffic ...

  • NETGEAR M4100 - page 256

    256 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches multicast streams for clients in different VLANs. A diagram of a network configured for MVR is shown in the following illustration. SP is the source port and RP is the receiver port. Multicast source IGMP (GSM7328Sv2) SP (VLAN999) RP (VLAN 1001) RP (VLAN 10 ...

  • NETGEAR M4100 - page 257

    Chapter 14. MVR (Multicast VLAN Registration) | 257 ProSafe M4100 and M7100 Managed Switches CLI: Configure MVR in Compatible Mode 1. Create MVlan, VLAN1, VLAN2, and VLAN3. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 999,1001, 1002, 1003 (Netgear Switch) (Vlan)#vlan name 999 mVlan (Netgear Switch) (Vlan)#vlan name 1001 Vlan1 (Netge ...

  • NETGEAR M4100 - page 258

    258 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches Note: The receive port can participate in only one VLAN. (Netgear Switch) (Config)#interface 0/1 (Netgear Switch) (Interface 0/1)#vlan participation include 1001 (Netgear Switch) (Interface 0/1)#vlan pvid 1001 (Netgear Switch) (Interface 0/1)#vlan participa ...

  • NETGEAR M4100 - page 259

    Chapter 14. MVR (Multicast VLAN Registration) | 259 ProSafe M4100 and M7100 Managed Switches 5. Show mvr status. (Netgear Switch) #show mvr MVR Running....................... TRUE MVR multicast VLAN................ 999 MVR Max Multicast Groups.......... 256 MVR Current multicast groups...... 1 MVR Global query response time.... 5 (tenths of sec) MV ...

  • NETGEAR M4100 - page 260

    260 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays: b. In the VLAN ID list, select 999 . c. Click Unit 1 . The ports display . d. Click the gray box under port 9 until T displays. The T specifies that the egress packet is tagged for the ports. e. Click Apply to sav ...

  • NETGEAR M4100 - page 261

    Chapter 14. MVR (Multicast VLAN Registration) | 261 ProSafe M4100 and M7100 Managed Switches c. Click Add . 5. Configure a receiver on interface 0/1, 0/5, and 0/7. a. Select Switching > MVR > Basic > MVR Interface Configuration . A screen similar to the following displays: b. Under MVR Interface Configuration, scroll down and select the In ...

  • NETGEAR M4100 - page 262

    262 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches b. Under MVR Interface Configuration, scroll down and select the Interface 0/9 check box. c. Enter the following information: • In the Admin Mode list, select Enable . • In the T ype list, select source . d. Click Apply to save the settings. 7. Configur ...

  • NETGEAR M4100 - page 263

    Chapter 14. MVR (Multicast VLAN Registration) | 263 ProSafe M4100 and M7100 Managed Switches Configure MVR in Dynamic Mode CLI: Configure MVR in Dynamic Mode In dynamic mode, the MVR switch learns existing multicast groups by snooping the IGMP queries from router on source ports and forwarding the IGMP reports from the hosts to the IGMP router on t ...

  • NETGEAR M4100 - page 264

    264 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches 5. Configure the receive ports. Note: A receive port can participate in only one VLAN. (Netgear Switch) (Config)#interface 0/1 (Netgear Switch) (Interface 0/1)#vlan participation include 1001 (Netgear Switch) (Interface 0/1)#vlan pvid 1001 (Netgear Switch) ...

  • NETGEAR M4100 - page 265

    Chapter 14. MVR (Multicast VLAN Registration) | 265 ProSafe M4100 and M7100 Managed Switches 6. Show the MVR status. (Netgear Switch) #show mvr MVR Running....................... TRUE MVR multicast VLAN................ 999 MVR Max Multicast Groups.......... 256 MVR Current multicast groups...... 1 MVR Global query response time.... 5 (tenths of sec ...

  • NETGEAR M4100 - page 266

    266 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches f. Select Switching > VLAN > Advanced > VLAN Membership . A screen similar to the following displays: g. In the VLAN ID list, select 999 . h. Click Unit 1 . The ports display . i. Click the gray boxes under port 9 until T displays. The T specifies ...

  • NETGEAR M4100 - page 267

    Chapter 14. MVR (Multicast VLAN Registration) | 267 ProSafe M4100 and M7100 Managed Switches 3. Add multicast group 224.1.2.3 to the MVR. a. Select Switching > MVR > Basic > MVR Group Configuration . A screen similar to the following displays: b. In the MVR Group IP field, enter 224.1.2.3 . c. Click Add . 4. Configure a receiver on interfa ...

  • NETGEAR M4100 - page 268

    268 | Chapter 14. MVR (Multicast VLAN Registration) ProSafe M4100 and M7100 Managed Switches 5. Configure a source interface. a. Select Switching > MVR > Basic > MVR Interface Configuration . A screen similar to the following displays: b. Under MVR Interface Configuration, scroll down and select the Interface 0/9 check box. c. Enter the fo ...

  • NETGEAR M4100 - page 269

    Chapter 15. Security Management | 269 15 15. Sec ur it y Manage ment In this chapter , examples are provided for the following topics: • Port Security • Set the Dynamic and Static Limit on Port 1/0/1 on page 270 • Convert the Dynamic Address Learned from 1/0/1 to a Static Address on page 271 • Create a Static Address on page 272 • Protect ...

  • NETGEAR M4100 - page 270

    270 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches given in the software Release Notes. After the limit is reached, additional MAC addresses are not learned. Only frames with an allowable source MAC addresses are forwarded. Note: If you want to set a specific MAC address for a port, set the dynamic entries to 0, then all ...

  • NETGEAR M4100 - page 271

    Chapter 15. Security Management | 271 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Port Security Configuration, next to Port Security Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Set the dynamic and static limit on the port 1/0/1: a. Select Security > T raffic Cont ...

  • NETGEAR M4100 - page 272

    272 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches CLI: Convert the Dynamic Address Learned from 1/0/1 to the Static Address (Netgear Switch)(Interface 1/0/1)#port-security mac-address move Convert the dynamic address learned from 1/0/1 to the static address (Netgear Switch)(Interface 1/0/1)#exit (Netgear Switch)(Config) ...

  • NETGEAR M4100 - page 273

    Chapter 15. Security Management | 273 ProSafe M4100 and M7100 Managed Switches CLI: Create a Static Address (Netgear Switch) (Interface 1/0/1)#port-security mac-address 00:13:00:01:02:03 W eb Interface: Create a Static Address 1. Select Security > T raffic Control > Port Security > Static MAC address . A screen similar to the following dis ...

  • NETGEAR M4100 - page 274

    274 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches In following example, PC 1 and PC 2 can access the Internet as usual, but PC 1 cannot see the traffic that is generated by PC 2, that is, no traf fic is forwarded between PC 1 and PC 2. Internet PC 1 PC 2 Layer 2 switch 10.100.5.34 192.168.1. 192.168.1. 192.168.1.252 192 ...

  • NETGEAR M4100 - page 275

    Chapter 15. Security Management | 275 ProSafe M4100 and M7100 Managed Switches 2. Create one VLAN 202 connected to the Internet. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 202 (Netgear Switch) (Vlan)#vlan routing 202 (Netgear Switch) (Vlan)#exit (Netgear Switch) #configure (Netgear Switch) (Config)#interface 1/0/48 (Netgear Switch ...

  • NETGEAR M4100 - page 276

    276 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure a Protected P ort to Isolate P orts on the Switch 1. Create a DHCP pool: Note: This example assumes that the DHCP service is enabled. For information about how to enable the DHCP service, see the Web interface procedure in Configure a DHCP Serve ...

  • NETGEAR M4100 - page 277

    Chapter 15. Security Management | 277 ProSafe M4100 and M7100 Managed Switches • In the T ype of Binding field, select Dynamic . • In the Network Number field, enter 192.168.1.0 . • In the Network Mask field, enter 255.255.255.0 . • In the Days field, enter 1 . • Click Default Router Addresses . The DNS server address fields display . In ...

  • NETGEAR M4100 - page 278

    278 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Enter the following information: • In the Vlan ID field, enter 202 . • In the IP Address field, enter 10.100.5.34 . • In the Network Mask field, enter 255.255.255.0 . c. Click Unit 1 . The ports display: d. Click the g ...

  • NETGEAR M4100 - page 279

    Chapter 15. Security Management | 279 ProSafe M4100 and M7100 Managed Switches a. Select Routing > Routing T able > Basic > Route Configuration . A screen similar to the following displays. b. Under Configure Routes, in the Route T ype list, select Default Route . c. In the Next Hop IP Address field, enter 10.100.5.252 . d. Click Add to ad ...

  • NETGEAR M4100 - page 280

    280 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches 802.1x P ort Security This section describes how to configure the 802.1x port security feature on a switch port. IEEE 802.1x authentication prevents unauthorized clients from connecting to a VLAN unless these clients are authorized by the server . 802.1x port security pr ...

  • NETGEAR M4100 - page 281

    Chapter 15. Security Management | 281 ProSafe M4100 and M7100 Managed Switches 2. Use RADIUS to authenticate the dot1x users. (Netgear Switch) (Config)#aaa authentication dot1x default radius 3. Configure a RADIUS authentication server . (Netgear Switch) (Config)#radius server host auth 10.100.5.17 4. Configure the shared secret between the RADIUS ...

  • NETGEAR M4100 - page 282

    282 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.168.1.1/24 to the interface 1/0/1. a. Select Routing > Advanced > IP Interface Configuration . A screen si ...

  • NETGEAR M4100 - page 283

    Chapter 15. Security Management | 283 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/19 check box. Now 1/0/19 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 10.100.5.33 . • In the Subnet Mask field, ...

  • NETGEAR M4100 - page 284

    284 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/19 check box. Now 1/0/19 appears in the Interface field at the top. c. In the Control Mode list, select Force Authorized . d. Click Apply to save the settings. 6. Enable dot1x on the ...

  • NETGEAR M4100 - page 285

    Chapter 15. Security Management | 285 ProSafe M4100 and M7100 Managed Switches b. In the Server Address field, enter 10.100.5.17 . c. In the Secret Configured field, select Ye s . d. In the Secret field, enter 123456 . e. In the Primary Server field, select Ye s . f. In the Message Authenticator field, select Enable . g. Click Add . 8. Enable accou ...

  • NETGEAR M4100 - page 286

    286 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches Create a Guest VLAN The guest VLAN feature allows a switch to provide a distinguished service to dot1x unaware clients (not rogue users who fail authentication). This feature provides a mechanism to allow visitors and contractors to have network access to reach an extern ...

  • NETGEAR M4100 - page 287

    Chapter 15. Security Management | 287 ProSafe M4100 and M7100 Managed Switches CLI: Create a Guest VLAN 1. Enter the following commands: (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 2000 (Netgear Switch) (Vlan)#exit (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#vlan participation include 2000 (Netgear ...

  • NETGEAR M4100 - page 288

    288 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches 4. Enable the guest VLAN on ports 1/0/1 and 1/0/24. (Netgear Switch) #show dot1x detail 1/0/1 Protocol Version............................... 1 PAE Capabilities............................... Authenticator Control Mode................................... auto Authenticato ...

  • NETGEAR M4100 - page 289

    Chapter 15. Security Management | 289 ProSafe M4100 and M7100 Managed Switches c. In the VLAN T ype field, select Static . d. Click Add . 2. Add ports to VLAN 2000. a. Select Switching > VLAN > Advanced > VLAN Membership . A screen similar to the following displays. b. In the VLAN ID list, select 2000 . c. Click Unit 1 . The ports display ...

  • NETGEAR M4100 - page 290

    290 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches Make sure that 1/0/12 and 1/0/6 are configured as force authorized before you do this step; otherwise you cannot access the switch through the Web Interface. a. Select Security > Port Authentication > Basic > 802.1x Configuration . A screen similar to the follow ...

  • NETGEAR M4100 - page 291

    Chapter 15. Security Management | 291 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Radius Server IP Address field, enter 192.168.0.1 . c. In the Secret Configured field, select Ye s . d. In the Secret field, enter 12345 . e. Click Add . 7. Configure the guest VLAN. a. Select Security > Port Authe ...

  • NETGEAR M4100 - page 292

    292 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches • After a port is in an authorized state, if any client initiates dot1x authentication, the port clears authenticated clients’ states, and in the process clears the VLAN assigned to the port (if any). Then the port continues with the new client authentication and aut ...

  • NETGEAR M4100 - page 293

    Chapter 15. Security Management | 293 ProSafe M4100 and M7100 Managed Switches 2. Enable dot1x authentication on the switch (Netgear Switch) (Config)#dot1x system-auth-control 3. Use the RADIUS as the authenticator . (Netgear Switch) (Config)#aaa authentication dot1x default radius 4. Enable the switch to accept VLAN assignment by the RADIUS server ...

  • NETGEAR M4100 - page 294

    294 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches 8. Show the dot1x detail for 1/0/5. (Netgear Switch) #show dot1x detail 1/0/5 Port........................................... 1/0/5 Protocol Version............................... 1 PAE Capabilities............................... Authenticator Control Mode............... ...

  • NETGEAR M4100 - page 295

    Chapter 15. Security Management | 295 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Current Network Configuration Protocol, select the None radio button. c. In the IP Address field, enter 192.168.0.5 . d. In the Subnet Mask field, enter 255.255.255.0 . e. Click Apply . 2. Create VLAN 2000. a. Select Swi ...

  • NETGEAR M4100 - page 296

    296 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Port Authentication, scroll down and select the 1/0/6 and 1/0/12 check boxes. c. In the Control Mode list, select Force Authorized . d. Click Apply to save settings. 4. Enable dot1x on the switch. Make sure that 1/0/12 ...

  • NETGEAR M4100 - page 297

    Chapter 15. Security Management | 297 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Select the defaultList check box. c. In the 1 list, select RADIUS . d. Click Add . 6. Configure the RADIUS authentication server . a. Select Security > Management Security > Radius > Server Configuration . A screen ...

  • NETGEAR M4100 - page 298

    298 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches DAI relies on DHCP snooping. DHCP snooping listens to DHCP message exchanges and builds a bindings database of valid tuples (MAC address, IP address, VLAN interface). When DAI is enabled, the switch drops ARP packet if the sender MAC address and sender IP address do not ...

  • NETGEAR M4100 - page 299

    Chapter 15. Security Management | 299 ProSafe M4100 and M7100 Managed Switches 3. Configure the port through which the DHCP server is reached as trusted. (Netgear Switch) (Config)# interface 1/0/1 (Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust 4. View the DHCP Snooping Binding table. (GSM7328S) #show ip dhcp snooping binding Total numbe ...

  • NETGEAR M4100 - page 300

    300 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For DHCP Snooping Mode, select the Enable radio button. c. Click Apply . 2. Enable DHCP snooping in a VLAN. a. Select Security > Control > DHCP Snooping Global Configuration . A screen similar to the following displays ...

  • NETGEAR M4100 - page 301

    Chapter 15. Security Management | 301 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Select the check box for Interface 1/0/1 . c. For Interface 1/0/1, set the T rust Mode as Enable . d. Click Apply . A screen similar to the following displays. 4. View the DHCP Snooping Binding table. a. Select Security > ...

  • NETGEAR M4100 - page 302

    302 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID field, enter 1 . c. In the Dynamic ARP Inspection field, select Enable . A screen similar to the following displays. d. Click Apply . A screen similar to the following displays. Now all the ARP packets receive ...

  • NETGEAR M4100 - page 303

    Chapter 15. Security Management | 303 ProSafe M4100 and M7100 Managed Switches Note: Make sure the administrator PC has a DHCP snooping entry or can access the device through the trusted port for ARP . Otherwise, you might get disconnected from the device. 6. Configure port 1/0/1 as trusted. a. Select Security > Control > Dynamic ARP Inspecti ...

  • NETGEAR M4100 - page 304

    304 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches 3. Configure ARP ACL used for VLAN 1. (Netgear Switch) (Config)# ip arp inspection filter ArpFilter vlan 1 4. Now the ARP packets from the static client will go through since it has an entry in the ARP . ACL ARP packets from the DHCP client is also through since it has a ...

  • NETGEAR M4100 - page 305

    Chapter 15. Security Management | 305 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 3. Configure the ARP ACL used for VLAN 1. a. Select Security > Control > Dynamic ARP Inspection > DAI VLAN Configuration . b. In the ARP ACL Name field, enter ArpFilter . c. Click Apply . A screen similar to the follow ...

  • NETGEAR M4100 - page 306

    306 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches within the VLAN to be trusted or untrusted. DHCP servers must be reached through trusted ports. Interface 1/0/1 Interface 1/0/1 GSM73xxS DHCP server DHCP client Figure 33. DHCP Snooping The example is shown as CLI commands and as a Web interface procedure. CLI: Configure ...

  • NETGEAR M4100 - page 307

    Chapter 15. Security Management | 307 ProSafe M4100 and M7100 Managed Switches 4. View the DHCP Snooping Binding table. (GSM7328S) #show ip dhcp snooping binding Total number of bindings: 1 MAC Address IP Address VLAN Interface Type Lease (Secs) ----------------- --------------- ---- ----------- ------- ----------- 00:16:76:A7:88:CC 192.168.10.89 1 ...

  • NETGEAR M4100 - page 308

    308 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the VLAN ID list, select 1 . c. For DHCP Snooping Mode, select the Enable radio button. A screen similar to the following displays. d. Click Apply . 3. Configure the port through which DHCP server is reached as trusted. a ...

  • NETGEAR M4100 - page 309

    Chapter 15. Security Management | 309 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 4. Select Security > Control > DHCP Snooping Binding Configuration . A screen similar to the following displays. Enter Static Binding into the Binding Database Y ou can also enter the static binding into the binding datab ...

  • NETGEAR M4100 - page 310

    310 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches 2. Check to make sure the binding database has the static entry . (GSM7328S) #show ip dhcp snooping binding Total number of bindings: 2 MAC Address IP Address VLAN Interface Type Lease (Secs) ------------------------ --------------- -------- ----------- ------- --------- ...

  • NETGEAR M4100 - page 311

    Chapter 15. Security Management | 31 1 ProSafe M4100 and M7100 Managed Switches CLI: Configure the Maximum R ate of DHCP Messages 1. Control the maximum rate of DHCP messages. (Netgear Switch) (Interface 1/0/2)# ip dhcp snooping limit rate 5 2. View the rate configured. (GSM7328S) #show ip dhcp snooping interfaces 1/0/2 Interface Trust State Rate L ...

  • NETGEAR M4100 - page 312

    312 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches IP Source Guard IP Source Guard uses the DHCP snooping bindings database. When IP Source Guard is enabled, the switch drops incoming packets that do not match a binding in the bindings database. IP Source Guard can be configured to enforce just the source IP address or b ...

  • NETGEAR M4100 - page 313

    Chapter 15. Security Management | 313 ProSafe M4100 and M7100 Managed Switches 2. Enable DHCP snooping in a VLAN. (Netgear Switch) (Config)# ip dhcp snooping vlan 1 3. Configure the port through which the DHCP server is reached as trusted. (Netgear Switch) (Config)# interface 1/0/1 (Netgear Switch) (Interface 1/0/1)# ip dhcp snooping trust 4. View ...

  • NETGEAR M4100 - page 314

    314 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches b. For DHCP Snooping Mode, select the Enable radio button. c. Click Apply . 2. Enable DHCP snooping in a VLAN. a. Select Security > Control > DHCP Snooping Global Configuration . A screen similar to the following displays. b. In the VLAN Configuration table, in the ...

  • NETGEAR M4100 - page 315

    Chapter 15. Security Management | 315 ProSafe M4100 and M7100 Managed Switches a. Select Security > Control > DHCP Snooping Interface Configuration . A screen similar to the following displays. b. Select Interface 1/0/1 check box. c. For interface 1/0/1, in the T rust Mode field, select Enable . d. Click Apply . A screen similar to the follow ...

  • NETGEAR M4100 - page 316

    316 | Chapter 15. Security Management ProSafe M4100 and M7100 Managed Switches d. Click Apply . A screen similar to the following displays. 6. Set up IP source guard static binding. a. Select Security > Control > IP Source Guard > Binding Configuration . b. Select the Interface 1/0/2 check box. c. In the MAC Address field, enter 00:05:05:0 ...

  • NETGEAR M4100 - page 317

    Chapter 16. SNTP | 317 16 16. S NTP Simp le Netw or k Time Pr otocol This chapter provides the following examples: • Show SNTP (CLI Only) • Configure SNTP on page 319 • Set the Time Zone (CLI Only) on page 321 • Set the Named SNTP Server on page 321 The SNTP feature offers these benefits: • It can be used to synchronize network resources ...

  • NETGEAR M4100 - page 318

    318 | Chapter 16. SNTP ProSafe M4100 and M7100 Managed Switches show sntp client (Netgear Switch Routing) #show sntp client Client Supported Modes: unicast broadcast SNTP Version: 4 Port: 123 Client Mode: unicast Unicast Poll Interval: 6 Poll Timeout (seconds): 5 Poll Retry: 1 show sntp server (Netgear Switch Routing) #show sntp server Server IP Ad ...

  • NETGEAR M4100 - page 319

    Chapter 16. SNTP | 319 ProSafe M4100 and M7100 Managed Switches Configure SNTP The example is shown as CLI commands and as a Web interface procedure. CLI: Configure SNTP NETGEAR switches do not have a built-in real-time clock. However , it is possible to use SNTP to get the time from a public SNTP/NTP server over the Internet. Y ou may need permiss ...

  • NETGEAR M4100 - page 320

    320 | Chapter 16. SNTP ProSafe M4100 and M7100 Managed Switches command to confirm that the time has been received. The time will be used in all logging messages. (Netgear Switch) #show sntp server Server IP Address: 208.14.208.19 Server Type: ipv4 Server Stratum: 4 Server Reference Id: NTP Srv: 208.14.208.3 Server Mode: Server Server Maximum Entri ...

  • NETGEAR M4100 - page 321

    Chapter 16. SNTP | 321 ProSafe M4100 and M7100 Managed Switches • Iin the Server T ype field, select IPV4 . • In the Address field, enter 208.14.208.19 . • In the Port field, enter 123 . • In the Priority field, enter 1 . • In the V ersion field, enter 4 . c. Click Add . 2. Configure SNTP globally . a. Select System > Management > T ...

  • NETGEAR M4100 - page 322

    322 | Chapter 16. SNTP ProSafe M4100 and M7100 Managed Switches CLI: Set the Named SNTP Server NETGEAR provides SNTP servers accessible by NETGEAR devices. Because NETGEAR might change IP addresses assigned to its time servers, it is best to access an SNTP server by DNS name instead of using a hard-coded IP address. The public time servers availabl ...

  • NETGEAR M4100 - page 323

    Chapter 16. SNTP | 323 ProSafe M4100 and M7100 Managed Switches a. Select System > Management > DNS > DNS Configuration . A screen similar to the following displays. b. Enter the following information: • For DNS Status, select the Enable radio button • In the DNS Server field, enter 192.168.1.1 . c. Click Add . ...

  • NETGEAR M4100 - page 324

    Chapter 17. T ools | 324 17 17. To o l s This chapter provides the following examples: • T raceroute • Configuration Scripting on page 326 • Pre-Login Banner on page 329 • Port Mirroring on page 330 • Dual Image on page 331 • Outbound T elnet on page 334 T raceroute This section describes the traceroute feature. Use traceroute to discov ...

  • NETGEAR M4100 - page 325

    Chapter 17. T ools | 325 ProSafe M4100 and M7100 Managed Switches CLI: T raceroute (Netgear Switch) #traceroute? <ipaddr> Enter IP address. (Netgear Switch) #traceroute 216.109.118.74 ? <cr> Press Enter to execute the command. <port> Enter port no. (Netgear Switch) #traceroute 216.109.118.74 racing route over a maximum of 20 hops ...

  • NETGEAR M4100 - page 326

    326 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. Use this screen to tell the switch to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. Once you click the Apply button, the switch will send three traceroute packe ...

  • NETGEAR M4100 - page 327

    Chapter 17. T ools | 327 ProSafe M4100 and M7100 Managed Switches • Application of scripts is partial if a script fails. For example, if the script executes 5 of 10 commands and the script fails, the script stops at 5. • Scripts cannot be modified or deleted while being applied. • V alidation of scripts checks for syntax errors only . It does ...

  • NETGEAR M4100 - page 328

    328 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches script apply running - config .scr (Netgear Switch) #script apply running-config.scr Are you sure you want to apply the configuration script? (y/n) y The system has unsaved changes. Would you like to save them now? (y/n) y Configuration Saved! Create a Configuration Script (Netgear S ...

  • NETGEAR M4100 - page 329

    Chapter 17. T ools | 329 ProSafe M4100 and M7100 Managed Switches P re -Login Banner Pre-login banner: • Allows you to create message screens that display when a user logs in to the CLI. • By default, no banner file exists. • Y ou can upload or download. • File size cannot be larger than 2 K. The Pre-Login Banner feature is only for the CLI ...

  • NETGEAR M4100 - page 330

    330 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches P ort Mirroring The port ,irroring feature: • Allows you to monitor network traf fic with an external network analyzer . • Forwards a copy of each incoming and outgoing packet to a specific port. • Is used as a diagnostic tool, debugging feature, or means of fending of f attack ...

  • NETGEAR M4100 - page 331

    Chapter 17. T ools | 331 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Scroll down and select the Source Port 1/0/2 check box. The value 1/0/2 now appears in the Interface field at the top. 3. Enter the following information: • In the Destination Port field, enter 1/0/3. • In the Session Mode field, sel ...

  • NETGEAR M4100 - page 332

    332 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches • When any node is unable to execute the active-imag e successfully , it attempts to execute the backup-image, as mentioned in the section above. Such cases will require user intervention to correct the problem, by using appropriate stacking commands. CLI: Download a Backup Image a ...

  • NETGEAR M4100 - page 333

    -------------------------------------------------------------------- unit image1 image2 current-active next-active -------------------------------------------------------------------- 1 5.11.2.51 8.0.0.2 image1 image1 (Netgear Switch) #boot system image2 Activating image image2 .. (Netgear Switch) #show bootvar Image Descriptions image1 : default i ...

  • NETGEAR M4100 - page 334

    334 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Dual Image Configuration, scroll down and select the Image 2 check box. The image2 now appears in the Image name field at the top. c. In the Active Image field, select TRUE . d. Click Apply . Outbound T elnet In this section, the f ...

  • NETGEAR M4100 - page 335

    Chapter 17. T ools | 335 ProSafe M4100 and M7100 Managed Switches CLI: show network (Netgear Switch Routing) >telnet 192.168.77.151 Trying 192.168.77.151... (Netgear Switch Routing) User:admin Password: (Netgear Switch Routing) >en Password: (Netgear Switch Routing) #show network IP Address............................... 192.168.77.151 Subnet ...

  • NETGEAR M4100 - page 336

    336 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches CLI: transport output telnet (Netgear Switch Routing) (Config)#lineconfig ? <cr> Press Enter to execute the command. (Netgear Switch Routing) (Config)#lineconfig (Netgear Switch Routing) (Line)#transport ? input Displays the protocols to use to connect to a specific line of the ...

  • NETGEAR M4100 - page 337

    Chapter 17. T ools | 337 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Under Outbound T elnet, for Admin Mode, select the Enable radio button. 3. Click Apply . CLI: Configure the session-limit and session-timeout (Netgear Switch Routing) (Line)#session-limit ? <0-5> Configure the maximum number of out ...

  • NETGEAR M4100 - page 338

    338 | Chapter 17. T ools ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Enter the following information: • In the Session T imeout field, enter 15 . • In the Maximum number of sessions field, enter 5 . 3. Click Apply . ...

  • NETGEAR M4100 - page 339

    Chapter 18. Syslog | 339 18 18. S y slog This chapter provides the following examples: • Show Logging on page 340 • Show Logging Buffered on page 342 • Show Logging T raplogs on page 343 • Show Logging Hosts on page 344 • Configure Logging for a Port on page 345 • Email Alerting on page 347 The syslog feature: • Allows you to store sy ...

  • NETGEAR M4100 - page 340

    340 | Chapter 18. Syslog ProSafe M4100 and M7100 Managed Switches Show Logging The example is shown as CLI commands and as a Web interface procedure. CLI: Show Logging (Netgear Switch Routing) #show logging Logging Client Local Port : 514 CLI Command Logging : disabled Console Logging : disabled Console Logging Severity Filter : alert Buffered Logg ...

  • NETGEAR M4100 - page 341

    Chapter 18. Syslog | 341 ProSafe M4100 and M7100 Managed Switches a. Select Monitoring > Logs > Command Log . b. Under Command Log, for Admin Status, select the Disable radio button. c. Click Apply . 3. Configure the console log. a. Select Monitoring > Logs > Console Log . b. Under Console Log Configuration, for Admin Status , select th ...

  • NETGEAR M4100 - page 342

    342 | Chapter 18. Syslog ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under Buffer Logs, for Admin Status , select the Enable radio button. c. Click Apply . Show Logging Buffered The example is shown as CLI commands and as a Web interface procedure. CLI: Show Logging Buffered (Netgear Switch Routing) #show ...

  • NETGEAR M4100 - page 343

    Chapter 18. Syslog | 343 ProSafe M4100 and M7100 Managed Switches W eb Interface: Show Logging Buffered Select Monitoring > Logs > Buffer Logs . A screen similar to the following displays. Show Logging T raplogs The example is shown as CLI commands and as a Web interface procedure. CLI: Show Logging T raplogs (Netgear Switch Routing) #show lo ...

  • NETGEAR M4100 - page 344

    344 | Chapter 18. Syslog ProSafe M4100 and M7100 Managed Switches Select Monitoring > Logs > T rap Logs . A screen similar to the following displays. Show Logging Hosts The example is shown as CLI commands and as a Web interface procedure. CLI: Show Logging Hosts (Netgear Switch Routing) #show logging hosts ? <cr> Press Enter to execute ...

  • NETGEAR M4100 - page 345

    Chapter 18. Syslog | 345 ProSafe M4100 and M7100 Managed Switches W eb Interface: Show Logging Hosts Select Monitoring > Logs > Sys Log Configuration . A screen similar to the following displays. Configure Logging for a P ort The example is shown as CLI commands and as a Web interface procedure. CLI: Configure Logging for the P ort (Netgear S ...

  • NETGEAR M4100 - page 346

    (Netgear Switch Routing) (Config)#logging host 192.168.21.253 4 ? <cr> Press Enter to execute the command. <severitylevel> Enter Logging Severity Level (emergency|0, alert|1, critical|2, error|3, warning|4, notice|5, info|6, debug|7). (Netgear Switch Routing) (Config)#logging host 192.168.21.253 4 1 ? <cr> Press Enter to execute t ...

  • NETGEAR M4100 - page 347

    Chapter 18. Syslog | 347 ProSafe M4100 and M7100 Managed Switches Email Alerting Email Alerting is an extension of the logging system. The logging system allows you to configure a set of destinations for log messages. This feature adds the email configuration, through which the log message are sent to a configured SMTP server such that an administr ...

  • NETGEAR M4100 - page 348

    348 | Chapter 18. Syslog ProSafe M4100 and M7100 Managed Switches CLI: Send Log Messages to admin@switch.com Using Account aaaa@netgear .com 1. Configure an SMTP server , for example, smtp.netgear .com. Before you configure the smtp server , you need to have an account on SMTP server . (Netgear Switch) (Config)#mail-server "smtp.netgear.com&qu ...

  • NETGEAR M4100 - page 349

    Chapter 19. Switch Stacks | 349 19 19. S w itc h St ac ks This chapter describes the concepts and recommended operating procedures to manage NETGEAR stackable managed switches running release 4.x.x.x or newer . This chapter includes the following topics: • Switch Stack Management and Connectivity • The Stack Master and Stack Members on page 350 ...

  • NETGEAR M4100 - page 350

    350 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches The Stack Master and Stack Members A switch stack is a set of up to 8 switches connected through their stacking ports. The switch that controls the operation of the stack is the stack master . The stack master and the other switches in the stack are stack members. Stack member ...

  • NETGEAR M4100 - page 351

    Chapter 19. Switch Stacks | 351 ProSafe M4100 and M7100 Managed Switches 1. The switch that is currently the stack master . 2. The switch with the highest stack member priority value. Note: NETGEAR recommends assigning the highest priority value to the switch that you prefer to be the stack master . This ensures that the switch is re-elected as sta ...

  • NETGEAR M4100 - page 352

    352 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches joins a switch stack, its default stack member number changes to the lowest available member number in the stack. Stack members in the same switch stack cannot have the same stack member number . Every stack member , including a standalone switch, retains its member number unt ...

  • NETGEAR M4100 - page 353

    Chapter 19. Switch Stacks | 353 ProSafe M4100 and M7100 Managed Switches Install a Switch Stack Note: Many models of switches have a Hardware Installation Guide that includes additional information about rack mounting and switch stack cabling. 1. Install the switches in a rack. 2. Install all stacking cables, including the redundant stack link. It ...

  • NETGEAR M4100 - page 354

    354 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches Code Mismatch If a switch is added to a stack and it does not have the same version of code as that of the master , the following occurs: • The new unit boots up and becomes a member of the stack. • Ports on the added unit remain in the detached state. • A message displa ...

  • NETGEAR M4100 - page 355

    Chapter 19. Switch Stacks | 355 ProSafe M4100 and M7100 Managed Switches 4. Continue with the boot of operational code. 5. Once the stack is up, download the saved configuration back to the master . This configuration should then be automatically propagated to all members of the stack. Copy Master Firmware to a Stack Member (W eb Interface) 1. Sele ...

  • NETGEAR M4100 - page 356

    356 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches CLI: Configure a Stacking P ort as an Ethernet P ort 1. On Switch A, Configure the Stack Port and Reboot (Netgear Switch) #show stack-port Configured Running Link Stack Stack Link Speed Unit Intf SlotId Type XFP Adapter Mode Mode Status (Gb/s) ---- ----- ------ ------ -------- ...

  • NETGEAR M4100 - page 357

    Chapter 19. Switch Stacks | 357 ProSafe M4100 and M7100 Managed Switches 2. On Switch B, Configure the stack port and reboot (Netgear Switch) # (Netgear Switch) #show stack-port Configured Running Link Stack Stack Link Speed Unit Intf SlotId Type XFP Adapter Mode Mode Status (Gb/s) ---- ----- ------ ------ ----------- ------- ------ ----- ----- 1 0 ...

  • NETGEAR M4100 - page 358

    358 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches a. Select Maintenance > Reset > Device Reboot . A screen similar to the following displays. b. In the Reboot Unit No. list, select 2 . c. Click Apply . 3. On Switch B, configure a stack port as an Ethernet port a. Select System > Stacking > Advanced > Stack Port ...

  • NETGEAR M4100 - page 359

    Chapter 19. Switch Stacks | 359 ProSafe M4100 and M7100 Managed Switches Stack Switches Using 10G Fiber This example shows how to stack two switches in different buildings at long distance using 10G fiber . First insert AX741 to I/O slot on Switch A, and insert AX741 to I/O slot on Switch B. Then connect the two AX741 with fiber . Switch A AX741 Ax ...

  • NETGEAR M4100 - page 360

    360 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches 3. Since 2/0/28 is in Ethernet mode, it must be changed to stack mode. (Netgear Switch) (Config)#stack (Netgear Switch) (Config-stack)#stack-port 2/0/28 stack (Netgear Switch) (Config-stack)#exit (Netgear Switch) (Config) 4. Reboot Switch B. (Netgear Switch) #reload Management ...

  • NETGEAR M4100 - page 361

    Chapter 19. Switch Stacks | 361 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the 2/0/28 check box. c. In the Configured Stack Mode list, select Stack . d. Click Apply to save the settings. 3. Reboot the switch. a. Select Maintenance > Reset > Device Reboot . A screen similar to ...

  • NETGEAR M4100 - page 362

    362 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches 4. Install the new switches in the rack. This procedure assumes installation below the bottom-most switch, or above the top-most switch. 5. Disconnect the redundant stack cable that connects the last switch in the stack back up to the first switch in the stack at the position ...

  • NETGEAR M4100 - page 363

    Chapter 19. Switch Stacks | 363 ProSafe M4100 and M7100 Managed Switches 1. Power off the newly created switch stacks. 2. Reconnect them to the original switch stack through their stacking ports. 3. Power on the switches. R eplace a Stack Member 1. Make sure the redundant stack connection is in place and functional. All stack members should be conn ...

  • NETGEAR M4100 - page 364

    364 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches The following table provides switch stack configuration scenarios. Most of the scenarios assume at least two switches are connected through their stacking ports. T able 1. Switch Stack Master Scenarios Scenario Action Result Stack master election specifically determined by exi ...

  • NETGEAR M4100 - page 365

    Chapter 19. Switch Stacks | 365 ProSafe M4100 and M7100 Managed Switches 1. Issue the member <unit-id> <switchindex> command. T o view the supported unit types, use the show supported switchtype command. 2. Next, configure the unit you just defined with configuration commands, just as if the unit were physically present. Ports for the p ...

  • NETGEAR M4100 - page 366

    366 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches CLI: R enumber Stack Members Note: When issuing a command (such as move management, or renumber), NETGEAR recommends that you wait until the command has fully executed before issuing the next command. For example, if a reset is issued to a stack member , use the show port comm ...

  • NETGEAR M4100 - page 367

    Chapter 19. Switch Stacks | 367 ProSafe M4100 and M7100 Managed Switches e. Now the unit ID of the stacking member is 2. ...

  • NETGEAR M4100 - page 368

    368 | Chapter 19. Switch Stacks ProSafe M4100 and M7100 Managed Switches Move the Stack Master to a Different Unit This example is provided as CLI commands and a Web interface procedure. CLI: Move the Stack Master to a Different Unit 1. Using the movemanagement command, move the master to a different unit number . The operation takes between 30 sec ...

  • NETGEAR M4100 - page 369

    Chapter 20. SNMP | 369 20 20. S NMP This chapter provides the following examples: • Add a New Community • Enable SNMP T rap on page 370 • SNMP V3 on page 371 • sFlow on page 373 • Time-Based Sampling of Counters with sFlow on page 377 Add a New Community The example is shown as CLI commands and as a Web interface procedure. CLI: Add a New ...

  • NETGEAR M4100 - page 370

    370 | Chapter 20. SNMP ProSafe M4100 and M7100 Managed Switches W eb Interface: Add a New Community 1. Select System > SNMP > SNMP V1/V2 > Community Configuration . A screen similar to the following displays. 2. In the Community Name field, enter public@4 . 3. In the Client Address field, enter 0.0.0.0 . 4. In the Client IP Mask field, ent ...

  • NETGEAR M4100 - page 371

    Chapter 20. SNMP | 371 ProSafe M4100 and M7100 Managed Switches W eb Interface: Enable SNMP T rap 1. Enable SNMP trap for the server 10.100.5.17. a. Select System > SNMP > SNMP V1/V2 > T rap Configuration . A screen similar to the following displays. b. In the Community Name field, enter public . c. In the V ersion list, select SNMPv1 . d. ...

  • NETGEAR M4100 - page 372

    372 | Chapter 20. SNMP ProSafe M4100 and M7100 Managed Switches CLI: Configure SNMP V3 (Netgear Switch) #config (Netgear Switch) (Config)#users passwd admin Enter old password: Enter new password:12345678 Confirm new password:12345678 Password Changed! change the password to “12345678” (Netgear Switch) (Config)#users snmpv3 authentication admin ...

  • NETGEAR M4100 - page 373

    Chapter 20. SNMP | 373 ProSafe M4100 and M7100 Managed Switches a. Select System > Management > User Configuration . A screen similar to the following displays. b. In the User Name field, select the admin . c. For Authentication Protocol, select the MD5 radio button. d. For Encryption Protocol, select the DES radio button. e. In the Encryptio ...

  • NETGEAR M4100 - page 374

    374 | Chapter 20. SNMP ProSafe M4100 and M7100 Managed Switches The sFlow agent uses two forms of sampling: statistical packet-based sampling of switched or routed packet flows, and time-based sampling of counters. PC Interface 1/0/2 Interface 1/0/1 GSM73xxS Interface 1/0/3 Switch/Router Uplink interface 1/0/24 PC Sflow collector IP address: 192.16 ...

  • NETGEAR M4100 - page 375

    Chapter 20. SNMP | 375 ProSafe M4100 and M7100 Managed Switches 3. Here the default maxiumum satagram size is 1400. It can be modified to a value between 200 and 91 16 using the command sflow receiver 1 maxdatagram <size> . (GSM7328S) #show sflow receivers Receiver Owner Time out Max Datagram Port IP Address Index String Size -------- ------- ...

  • NETGEAR M4100 - page 376

    376 | Chapter 20. SNMP ProSafe M4100 and M7100 Managed Switches e. In the Receiver Address field, enter 192.168.10.2 . A screen similar to the following displays. f. Click Apply . A screen similar to the following displays. 2. Configure the sampling ports sFlow receiver index, sampling rate, and sampling maximum header size. a. Select Monitoring &g ...

  • NETGEAR M4100 - page 377

    Chapter 20. SNMP | 377 ProSafe M4100 and M7100 Managed Switches Time -Based Sampling of Counters with sFlow CLI: Configure Time -Based Sampling of Counters with sFlow 1. Configure the sampling port sFlow receiver index, and polling interval. Y ou need to repeat this for all the ports to be polled. (Netgear Switch) (Config)# interface 1/0/1 (Netgear ...

  • NETGEAR M4100 - page 378

    Chapter 21. DNS | 378 21 21. DN S Domain Name S ys te m This chapter provides the following examples: • Specify T wo DNS Servers • Manually Add a Host Name and an IP Address on page 379 This section describes the Domain Name System (DNS) feature. The DNS protocol maps a host name to an IP address, allowing you to replace the IP address with the ...

  • NETGEAR M4100 - page 379

    Chapter 21. DNS | 379 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Under DNS Server Configuration, in the DNS Server field, enter 12.7.210.170 . 3. Click Add . 4. In the DNS Server field, enter 219.141.140.10 . 5. Click Add . Both DNS servers now show in the DNS Server Configuration table. Manually Add a H ...

  • NETGEAR M4100 - page 380

    380 | Chapter 21. DNS ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Under DNS Host Configuration, enter the following information: • In the Host Name field, enter www .netgear .com . • In the IP Address field, enter 206.82.202.46 . 3. Click Add . The host name and IP address now show in the DNS Host Con ...

  • NETGEAR M4100 - page 381

    Chapter 22. DHCP Server | 381 22 22. DHCP Se r v er This chapter provides the following examples: • Figure on page 381 • Configure a DHCP Reservation on page 384 When a client sends a request to a DHCP server , the DHCP server assigns the IP address from address pools that are specified on the switch. The network in the DHCP pool must belong to ...

  • NETGEAR M4100 - page 382

    382 | Chapter 22. DHCP Server ProSafe M4100 and M7100 Managed Switches Note: If there is no DHCP L3 relay between client PC and DHCP server , there must be an active route whose subnet is the same as the DHCP dynamic pool’s subnet. W eb Interface: Configure a DHCP Server in Dynamic Mode 1. Create VLAN 200. a. Select Switching > VLAN > Basic ...

  • NETGEAR M4100 - page 383

    Chapter 22. DHCP Server | 383 ProSafe M4100 and M7100 Managed Switches d. Click the gray boxes under ports 1 and 24 until U displays. The U specifies that the egress packet is untagged for the port. e. Click Apply . 3. Assign PVID to the VLAN 200. a. Select Switching > VLAN> Advanced > Port PVID Configuration . A screen similar to the foll ...

  • NETGEAR M4100 - page 384

    384 | Chapter 22. DHCP Server ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. e. Under DHCP Pool Configuration, enter the following information: • In the Pool Name list, select Create . • In the Pool Name field, enter pool_dynamic . • In the T ype of Binding list, select Dynamic . • In the Network Number ...

  • NETGEAR M4100 - page 385

    Chapter 22. DHCP Server | 385 ProSafe M4100 and M7100 Managed Switches CLI: Configure a DHCP R eservation (Netgear Switch)#config (Netgear Switch) (Config)#service dhcp (Netgear Switch) (Config)#ip dhcp pool pool_manual (Netgear Switch) (Config)#client-name dhcpclient (Netgear Switch) (Config)#hardware-address 00:01:02:03:04:05 (Netgear Switch) (Co ...

  • NETGEAR M4100 - page 386

    386 | Chapter 22. DHCP Server ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 5. Under DHCP Pool Configuration, enter the following information: • In the Pool Name list, select Create . • In the Pool Name field, enter pool_manual . • In the T ype of Binding list, select Manual . • In the Client Name fiel ...

  • NETGEAR M4100 - page 387

    Chapter 23. DHCPv6 Server | 387 23 23. DHCPv6 Se r v er This chapter provides the following examples: • CLI: Configure DHCPv6 on page 389 • Web Interface: Configure an Inter -area Router on page 390 • Configure Stateless DHCPv6 Server on page 394 Dynamic Host Configuration Protocol for IPv6 (DHCPv6) is used to assign IPv6 addresses statefully ...

  • NETGEAR M4100 - page 388

    388 | Chapter 23. DHCPv6 Server ProSafe M4100 and M7100 Managed Switches In the following case, the CPE router requests prefix from the PE router . The PE router chooses prefix (2001:1::/64) for delegation, and responds with the prefix to the requesting CPE router . The CPE router subnets the prefix and assigns the longer prefixes to links in the u ...

  • NETGEAR M4100 - page 389

    Chapter 23. DHCPv6 Server | 389 ProSafe M4100 and M7100 Managed Switches CLI: Configure DHCPv6 1. Enable IPv6 routing. (Netgear Switch) #configure (NETGEAR SWITCH) (Config)#ip routing (NETGEAR SWITCH) (Config)#ipv6 unicast routing 2. Create a DHCPv6 pool and enable DHCP service. (NETGEAR SWITCH) (Config)#service dhcpv6 (NETGEAR SWITCH) (Config)#ipv ...

  • NETGEAR M4100 - page 390

    390 | Chapter 23. DHCPv6 Server ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure an Inter -area R outer 1. Enable IP routing globally a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply to apply the settings. 2. ...

  • NETGEAR M4100 - page 391

    Chapter 23. DHCPv6 Server | 391 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/9 check box. Now 1/0/9 appears in the Interface field at the top. c. Enter the following information: • In the IPv6 Mode field, select Enable . • In the Routing Mode field, select Enabl ...

  • NETGEAR M4100 - page 392

    392 | Chapter 23. DHCPv6 Server ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, Select the Enable radio button. c. Click Apply to apply the setting. 6. Create a DHCPv6 pool named pool1. a. Select System > Services > DHCP Server > DHCPv6 Pool Configuration . A screen similar to the fol ...

  • NETGEAR M4100 - page 393

    Chapter 23. DHCPv6 Server | 393 ProSafe M4100 and M7100 Managed Switches b. From the Pool Name drop-down list, select Pool1 . c. Enter 2001:1:: in the Prefix field. d. in the Prefix Length field, enter 64 . e. In the Prefix field, enter 00:01:00:01:15:40:14:4f:00:00:00:4d:aa:d0 . f. Click Apply to apply the setting. 8. Configure DHCPv6 on interface ...

  • NETGEAR M4100 - page 394

    394 | Chapter 23. DHCPv6 Server ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. Configure Stateless DHCPv6 Server This example uses the DHCPv6 server to configure the information about DNS server to those clients which get IPv6 in autoconfig mode or manual mode. The configured DHCP pool doesn’t contain a prefi ...

  • NETGEAR M4100 - page 395

    Chapter 23. DHCPv6 Server | 395 ProSafe M4100 and M7100 Managed Switches Note: In this case, you have to configure the command ipv6 nd other-config-flag on the interface, otherwise, the host cannot update the DNS with it. (Netgear Switch) (Config)#interface 2/0/21 (Netgear Switch) (Interface 2/0/21)#routing (Netgear Switch) (Interface 2/0/21)#ipv6 ...

  • NETGEAR M4100 - page 396

    396 | Chapter 23. DHCPv6 Server ProSafe M4100 and M7100 Managed Switches c. In the IPv6 Mode field, select Enable . d. In the Routing Mode field, select Enable . e. In the Adv Other Config Flag field, select Enable . f. Click Apply to save the settings. 3. Configure IPv6 address on the interface 2/0/21. a. Select Routing > IPv6 > Advanced > ...

  • NETGEAR M4100 - page 397

    Chapter 23. DHCPv6 Server | 397 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays: b. From the Pool Name drop-down list, select Create . c. In the Pool Name field, enter ipv6_server . d. In the DNS Server Addresses fields, enter 2001 1:9:18::1 (the DNS server IPv6 address). e. Click Apply . 6. Enable DHCPv6 pool on ...

  • NETGEAR M4100 - page 398

    Chapter 24. Double VLANs and Private VLAN Groups | 398 24 24. Dou ble VL ANs and Pr i v at e VL AN Gr ou ps This chapter includes the following examples: • Double VLANs • Private VLAN Groups on page 402 Double VLANs This section describes how to enable the double DVLAN feature. Double VLANs pass traffic from one customer domain to another throu ...

  • NETGEAR M4100 - page 399

    Chapter 24. Double VLANs and Private VLAN Groups | 399 ProSafe M4100 and M7100 Managed Switches The following example shows how to configure the NETGEAR switch shown in the preceding figure to add a double VLAN tag for traffic going from the subnet domain connected to port 1/0/24. This example assumes there is a Layer 2 switch connecting all these ...

  • NETGEAR M4100 - page 400

    400 | Chapter 24. Double VLANs and Private VLAN Groups ProSafe M4100 and M7100 Managed Switches a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. Under VLAN Configuration, enter the following information: • In the VLAN ID field, enter 200 . • In the VLAN Name field, enter vlan200 . ...

  • NETGEAR M4100 - page 401

    Chapter 24. Double VLANs and Private VLAN Groups | 401 ProSafe M4100 and M7100 Managed Switches • Click the gray box under port 48 once until T displays. The T specifies that the egress packet is tagged for the port. d. Click Apply to save the settings. 3. Change the port VLAN ID (PVID) of port 24 to 200: a. Select Switching > VLAN > Advanc ...

  • NETGEAR M4100 - page 402

    402 | Chapter 24. Double VLANs and Private VLAN Groups ProSafe M4100 and M7100 Managed Switches b. Scroll down and select the Interface 1/0/48 check box. Now 1/0/48 appears in the Interface field at the top. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. P rivate VLAN Groups The private VLAN group allows you to cre ...

  • NETGEAR M4100 - page 403

    Chapter 24. Double VLANs and Private VLAN Groups | 403 ProSafe M4100 and M7100 Managed Switches CLI: Create a P rivate VLAN Group 1. Enter the following commands. (Netgear Switch) # (Netgear Switch) #vlan data (Netgear Switch) (Vlan)#vlan 200 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/6 (Netgear Sw ...

  • NETGEAR M4100 - page 404

    404 | Chapter 24. Double VLANs and Private VLAN Groups ProSafe M4100 and M7100 Managed Switches 5. Add 1/0/16 and 1/0/7 to the private group 1. (Netgear Switch) (Config)#interface range 1/0/16-1/0/17 (Netgear Switch) (conf-if-range-1/0/16-1/0/17)#switchport private-group 2 6. Add 1/0/16 and 1/0/7 to the private group 2. (Netgear Switch) (conf-if-ra ...

  • NETGEAR M4100 - page 405

    Chapter 24. Double VLANs and Private VLAN Groups | 405 ProSafe M4100 and M7100 Managed Switches b. Under VLAN Membership, in the VLAN ID list, select 200 . c. Click Unit 1. The ports display . d. Click the gray boxes under ports 6 , 7 , 16 and 17 until U displays. The U specifies that the egress packet is untagged for the port. e. Click Apply . 3. ...

  • NETGEAR M4100 - page 406

    406 | Chapter 24. Double VLANs and Private VLAN Groups ProSafe M4100 and M7100 Managed Switches e. Click Add . 5. Add port 6 and 7 to group1. a. Select Security > T raffic Control > Private Group VLAN >Private Group Membership . A screen similar to the following displays. b. In the Group ID list, select 1 . c. Click Unit 1. The ports displ ...

  • NETGEAR M4100 - page 407

    Chapter 24. Double VLANs and Private VLAN Groups | 407 ProSafe M4100 and M7100 Managed Switches a. Select Security > T raffic Control > Private Group VLAN > Private Group VLAN > Private Group Membership . A screen similar to the following displays. b. In the Group ID list, select 2 . c. Click Unit 2. The ports display . d. Click the gra ...

  • NETGEAR M4100 - page 408

    Chapter 25. Spanning T ree Protocol | 408 25 25. S panning T r ee Pr o toco l This chapter provides the following examples: • Configure Classic STP (802.1d) • Configure Rapid STP (802.1w) on page 410 • Configure Multiple STP (802.1s) on page 41 1 The purpose of Spanning T ree is to eliminate loops in the switch system. There are three STPs: C ...

  • NETGEAR M4100 - page 409

    Chapter 25. Spanning T ree Protocol | 409 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure Classic STP (802.1d) 1. Enable 802.1d on the switch. a. Select Switching > STP > STP Configuration . A screen similar to the following displays. b. Enter the following information: • For Spanning T ree Admin Mode, select the Enable r ...

  • NETGEAR M4100 - page 410

    410 | Chapter 25. Spanning T ree Protocol ProSafe M4100 and M7100 Managed Switches Configure R apid STP (802.1w) The example is shown as CLI commands and as a Web interface procedure. CLI: Configure R apid STP (802.1w) (Netgear switch) (Config)# spanning-tree (Netgear switch) (Config)# spanning-tree forceversion 802.1w (Netgear switch) (Interface 1 ...

  • NETGEAR M4100 - page 411

    Chapter 25. Spanning T ree Protocol | 41 1 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under CST Port Configuration, scroll down and select the Interface 1/0/3 check box. Now 1/0/3 appears in the Interface field at the top. c. In the Port Mode field, select Enable . d. Click Apply . Configure Multiple STP ...

  • NETGEAR M4100 - page 412

    412 | Chapter 25. Spanning T ree Protocol ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure Multiple STP (802.1s) 1. Enable 802.1s on the switch. a. Select Switching > STP > STP Configuration . A screen similar to the following displays. b. Enter the following information: • For Spanning T ree Admin Mode, select the Enable ...

  • NETGEAR M4100 - page 413

    Chapter 25. Spanning T ree Protocol | 413 ProSafe M4100 and M7100 Managed Switches • In the Priority field, enter 4096 . • In the VLAN Id field, enter 2 . • Click Add . • In the VLAN Id field, enter 3 . • Click Apply . c. Configure MST ID 2. • In the MST ID field, enter 2 . • In the Priority field, enter 4096 . • In the VLAN Id fiel ...

  • NETGEAR M4100 - page 414

    Chapter 26. T unnel | 414 26 26. T unnel There are two methods for Pv6 sites to communicate with each other over the IPv4 network: 6in4 tunnel and 6to4 tunnel. The 6in4 tunnel encapsulates IPv6 traf fic over an explicitly configured IPv4 destination or end port of the tunnel with the IP protocol number set to 41. The 6to4 tunnel IPv6 prefix is cons ...

  • NETGEAR M4100 - page 415

    Chapter 26. T unnel | 415 ProSafe M4100 and M7100 Managed Switches CLI: Create a T unnel Configure (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ipv6 forwarding (Netgear Switch) (Config)#ipv6 unicast-routing (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#routing (Netgear Switch ...

  • NETGEAR M4100 - page 416

    416 | Chapter 26. T unnel ProSafe M4100 and M7100 Managed Switches Configure (Netgear Switch) #show interfacet tunnel 0 Interface Link Status.......................... Up IPv6 is enabled IPv6 Prefix is ................................ FE80::C0A8:101/128 2000::1/64 MTU size....................................... 1280 bytes #show interface tunnel Tun ...

  • NETGEAR M4100 - page 417

    Chapter 26. T unnel | 417 ProSafe M4100 and M7100 Managed Switches W eb Interface: Create a T unnel Configure Switch GSM7328S_1 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Enable I ...

  • NETGEAR M4100 - page 418

    418 | Chapter 26. T unnel ProSafe M4100 and M7100 Managed Switches a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Under IP Interface Configuration, scroll down and select the Port 1/0/1 check box. Now 1/0/1 appears in the Interface field at the top. • In the IP Address fiel ...

  • NETGEAR M4100 - page 419

    Chapter 26. T unnel | 419 ProSafe M4100 and M7100 Managed Switches a. Select Routing > IPv6 > Advanced > Prefix Configuration . A screen similar to the following displays. b. In the Interface list, select 0/7/1 . c. In the IPv6 Prefix field, enter 2000::1 . d. In the Length field, enter 64 . e. In the EUI64 field, select Disable . f. Click ...

  • NETGEAR M4100 - page 420

    420 | Chapter 26. T unnel ProSafe M4100 and M7100 Managed Switches a. Select Routing > IPv6 > Basic > Global Configuration . A screen similar to the following displays. b. For IPv6 Unicast Routing, select the Enable radio button. c. For IPv6 Forwarding, select the Enable radio button. d. Click Apply . 3. Create a routing interface and assi ...

  • NETGEAR M4100 - page 421

    Chapter 26. T unnel | 421 ProSafe M4100 and M7100 Managed Switches a. Select Routing > IPv6 > Advanced > T unnel Configuration . A screen similar to the following displays. b. In the T unnel Id list, select 0 . c. In the Mode list, select 6-in-4-configured . d. In the Source Address field, enter 192.168.1.2 . e. In the Destination Address ...

  • NETGEAR M4100 - page 422

    Chapter 27. IPv6 Interface Configuration | 422 27 27. IPv6 In te rf ace C onf i gur a ti on This chapter provides the following examples: • Create an IPv6 Routing Interface • Create an IPv6 Network Interface on page 425 • Create an IPv6 Routing VLAN on page 427 • Configure DHCPv6 Mode on the Routing Interface on page 432 Create an IPv6 R ou ...

  • NETGEAR M4100 - page 423

    Chapter 27. IPv6 Interface Configuration | 423 ProSafe M4100 and M7100 Managed Switches 2. Assign an IPv6 address to interface 1/0/1. (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#ipv6 enable (Netgear Switch) (Interface 1/0/1)#ipv6 address 2000::2/64 (Netgear Switch) (Interface 1/0/1)#routing (Netgear Switch) (Interfa ...

  • NETGEAR M4100 - page 424

    424 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches W eb Interface: Create an IPv6 Routing Interface 1. Enable IPv6 forwarding and unicast routing on the switch. a. Select Routing > IPv6 > Basic > Global Configuration . A screen similar to the following displays. b. For IPv6 Unicast Routing, select the E ...

  • NETGEAR M4100 - page 425

    Chapter 27. IPv6 Interface Configuration | 425 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/1 . c. In the IPv6 Prefix field, enter 2000::2 . d. In the Length field, enter 64 . e. In the EUI64 field, select Disable . f. Click Add . Create an IPv6 Network Interface The IPv6 ...

  • NETGEAR M4100 - page 426

    426 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches CLI: Configure the IPv6 Network Interface (Netgear Switch) #network ipv6 enable (Netgear Switch) #network ipv6 address 2001:1::1/64 (Netgear Switch) #network ipv6 gateway 2001:1::2 (Netgear Switch) #show network Interface Status............................... Al ...

  • NETGEAR M4100 - page 427

    Chapter 27. IPv6 Interface Configuration | 427 ProSafe M4100 and M7100 Managed Switches 2. Add an IPv6 gateway to the network interface. a. Select System > Management > Network Interface > IPv6 Network Configuration . A screen similar to the following displays. b. In the IPv6 Gateway field, enter 2001:1::2 . c. Click Apply . Create an IPv6 ...

  • NETGEAR M4100 - page 428

    428 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches 3. (Netgear Switch) (Config)#interface vlan 0/4/1 (Netgear Switch) (Interface 0/4/1)#routing (Netgear Switch) (Interface 0/4/1)#ipv6 enable (Netgear Switch) (Interface 0/4/1)#ipv6 address 2000::1/64 (Netgear Switch) (Interface 0/4/1)#exit Assign IPv6 address 200 ...

  • NETGEAR M4100 - page 429

    Chapter 27. IPv6 Interface Configuration | 429 ProSafe M4100 and M7100 Managed Switches W eb Interface: Create an IPv6 VLAN Routing Interface 1. Create VLAN 500. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. In the VLAN ID field, enter 500 . c. In the VLAN T ype field, select Stati ...

  • NETGEAR M4100 - page 430

    430 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under PVID Configuration, scroll down and select the Interface 1/0/1 check box. c. In the PVID (1 to 4093) field, enter 500 . d. Click Apply to save the settings. 4. Enable IPv6 forwarding and unicast routing on the ...

  • NETGEAR M4100 - page 431

    Chapter 27. IPv6 Interface Configuration | 431 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Click VLANS. The logical VLAN interface 0/4/2 displays. c. Select the 0/4/2 check box. d. Under IPv6 Interface Configuration, in the IPv6 Mode field, select Enable . e. Click Apply . 6. Assign an IPv6 address to the ...

  • NETGEAR M4100 - page 432

    432 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches Configure DHCPv6 Mode on the R outing Interface The routing interface supports DHCPv6 mode, which can get the IPv6 address from a DHCPv6 server (address allocation). Note: Before you enable DHCPv6 mode, you have to disable IPv6 unitcast mode globally . CLI: Conf ...

  • NETGEAR M4100 - page 433

    Chapter 27. IPv6 Interface Configuration | 433 ProSafe M4100 and M7100 Managed Switches 3. Show the ipv6 address assigned from 1/0/23. (Netgear Switch) #show ipv6 interface 1/0/23 IPv6 is enabled IPv6 Prefix is ................................ FE80::E291:F5FF:FE06:2BF6/128 2000::1D5C:7CFE:828F:8144/128 [DHCP] Routing Mode........................... ...

  • NETGEAR M4100 - page 434

    434 | Chapter 27. IPv6 Interface Configuration ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/23 check box. Now 1/0/23 appears in the Interface field at the top. c. Enter the following information: • In the IPv6 Mode field, select Enable . • In the Routing Mode fi ...

  • NETGEAR M4100 - page 435

    Chapter 28. PIM | 435 28 28. PI M Pr ot ocol-Inde pende nt -Multi cast This chapter provides the following examples: • PIM-DM • PIM-SM on page 460 Note: The PIM protocol can be configured to operate on IPv4 and IPv6 networks. Separate CLI commands are provided for IPv4 and IPv6 operation; however , most configuration options are common to both ...

  • NETGEAR M4100 - page 436

    Subnet 192.168.1.0/24 Source Port Port 1/0/9 Port Subnet 192.168.3.0/24 IP 192.168.1.1 1/0/13 1/0/1 Subnet 192.168.6.0/24 Subnet 192.168.2.0/24 Subnet 192.168.5.0/24 Subnet 192.168.4.0/24 Host IP 192.168.4.2 Port 1/0/10 Port 1/0/1 1 Port 1/0/21 Port 1/0/22 Switch A Switch D Switch B Switch C Port 1/0/22 Port 1/0/24 Port 1/0/21 436 | Chapter 28. PIM ...

  • NETGEAR M4100 - page 437

    Chapter 28. PIM | 437 ProSafe M4100 and M7100 Managed Switches received by a router on its RPF interface, the state refresh message causes an existing prune state to be refreshed. State refresh messages are generated periodically by the router directly attached to the source. There are two versions of PIM-DM. V ersion 2 does not use IGMP messages; ...

  • NETGEAR M4100 - page 438

    438 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches 5. Enable PIM-DM on the interface. (Netgear Switch) (Interface 1/0/1)#ip pim dense (Netgear Switch) (Interface 1/0/1)#exit (Netgear Switch) (Config)#interface 1/0/9 (Netgear Switch) (Interface 1/0/9)#routing (Netgear Switch) (Interface 1/0/9)#ip address 192.168.3.1 255.255.255.0 (Netgea ...

  • NETGEAR M4100 - page 439

    Chapter 28. PIM | 439 ProSafe M4100 and M7100 Managed Switches PIM-DM on Switch C (Netgear Switch) #configure (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ip pim dense (Netgear Switch) (Config)#ip multicast (Netgear Switch) (Config)#interface 1/0/21 (Netgear Switch) (Interface 1/0/21)#routing (Netgear Switch) (Interface 1/0/21)#ip ...

  • NETGEAR M4100 - page 440

    440 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches 2. Enable IGMP on 1/0/24. (Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#routing (Netgear Switch) (Interface 1/0/24)#ip pim dense (Netgear Switch) (Interface 1/0/24)#ip igmp (Netgear Switch) (Interface 1/0/24)#ip rip (Netgear Switch) (Interface 1/0/24)#ip ...

  • NETGEAR M4100 - page 441

    Chapter 28. PIM | 441 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure PIM-DM PIM-DM on Switch A 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/1 as a ...

  • NETGEAR M4100 - page 442

    442 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/9 check box. Now 1/0/9 appears in the Port field at the top. c. Enter the following information : • In the IP Address field, enter 192.168.3.1 . • In the Subnet Mask field, enter 255.255.255.0 . • I ...

  • NETGEAR M4100 - page 443

    Chapter 28. PIM | 443 ProSafe M4100 and M7100 Managed Switches • In the IP Address field, enter 192.168.1.2 . • In the Subnet Mask field, enter 255.255.255.0 . • In the Routing Mode field, select Enable . d. Click Apply to save the settings. 5. Enable RIP on the interface 1/0/1. a. Select Routing > RIP > Advanced > Interface Configur ...

  • NETGEAR M4100 - page 444

    444 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/13 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 8. Enable multicast globally . a. Select Routing > Multicast > Global Configuration . A screen similar to the following dis ...

  • NETGEAR M4100 - page 445

    Chapter 28. PIM | 445 ProSafe M4100 and M7100 Managed Switches b. For PIM Protocol T ype, select the PIM-DM radio button. c. For Admin Mode, select the Enable radio button. d. Click Apply . 10. Enable PIM-DM on interfaces 1/0/1,1/0/9, and 1/0/13. a. Select Routing > Multicast > PIM > Interface Configuration . A screen similar to the follow ...

  • NETGEAR M4100 - page 446

    446 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches PIM-DM on Switch B: 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/10 as a routing port and assign an IP a ...

  • NETGEAR M4100 - page 447

    Chapter 28. PIM | 447 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Interface Configuration, scroll down and select the Port 1/0/1 1 check box. Now 1/0/1 1 appears in the Port field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.5.1 . • In the Subnet Ma ...

  • NETGEAR M4100 - page 448

    448 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/1 1 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 6. Enable multicast globally . a. Select Routing > Multicast > Global Configuration . A screen similar to the following di ...

  • NETGEAR M4100 - page 449

    Chapter 28. PIM | 449 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For PIM Protocol T ype, select the PIM-DM radio button. c. For Admin Mode, select the Enable radio button. d. Click Apply . 8. Enable PIM-SM on interfaces 1/0/10 and 1/0/1 1. a. Select Routing > Multicast > PIM > Interface Configur ...

  • NETGEAR M4100 - page 450

    450 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/21 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the follo ...

  • NETGEAR M4100 - page 451

    Chapter 28. PIM | 451 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/22 check box. Now 1/0/22 appears in the Port field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.6.1 . • In the Subnet Mask field, enter 255.255.255.0 . • ...

  • NETGEAR M4100 - page 452

    452 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/22 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 6. Enable mulicast globally . a. Select Routing > Multicast > Global Configuratio n. A screen similar to the following disp ...

  • NETGEAR M4100 - page 453

    Chapter 28. PIM | 453 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For PIM Protocol T ype, select the PIM-DM radio button. c. For Admin Mode, select the Enable radio button. d. Click Apply . 8. Enable PIM-DM on interfaces 1/0/21 and 1/0/22. a. Select Routing > Multicast > PIM > Interface Configura ...

  • NETGEAR M4100 - page 454

    454 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/21 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the follo ...

  • NETGEAR M4100 - page 455

    Chapter 28. PIM | 455 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/22 check box. Now 1/0/22 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.6.2 . • In the Subnet Mask field, enter 255.255.255.0 . ...

  • NETGEAR M4100 - page 456

    456 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches a. Select Routing > RIP > Advanced > Interface Configuration . A screen similar to the following displays. b. In the Interface list, select t 1/0/21 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 6. Enable RIP on interface 1/0/22. a. Select Routing &g ...

  • NETGEAR M4100 - page 457

    Chapter 28. PIM | 457 ProSafe M4100 and M7100 Managed Switches b. In the Interface list, select 1/0/24 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 8. Enable multicast globally . a. Select Routing > Multicast > Global Configuration . A screen similar to the following displays. b. For Admin Mode, select the Enable ...

  • NETGEAR M4100 - page 458

    458 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/21 , 1/0/22 , and 1/0/24 check boxes. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 1 1. Enable IGMP globally . a. Select Routing > Multicast > IGMP > Glob ...

  • NETGEAR M4100 - page 459

    Chapter 28. PIM | 459 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/24 check box. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. ...

  • NETGEAR M4100 - page 460

    460 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches PIM- SM Protocol-independent multicast sparse mode (PIM-SM) is used to efficiently route multicast traffic to multicast groups that can span wide area networks where bandwidth is a constraint. Subnet 192.168.1.0/24 Source Port Port 1/0/9 Port Subnet 192.168.3.0/24 IP 192.168.1.1 1/0/13 ...

  • NETGEAR M4100 - page 461

    Chapter 28. PIM | 461 ProSafe M4100 and M7100 Managed Switches between trees. PIM-SM uses a bootstrap router (BSR), which advertises information to other multicast routers about the RP . In a given network, a set of routers can be administratively enabled as candidate bootstrap routers. If it is not apparent which router should be the BSR, the cand ...

  • NETGEAR M4100 - page 462

    (Netgear Switch) (Interface 1/0/1)#ip pim sparse (Netgear Switch) (Interface 1/0/1)#exit (Netgear Switch) (Config)#interface 1/0/9 (Netgear Switch) (Interface 1/0/9)#routing (Netgear Switch) (Interface 1/0/9)#ip address 192.168.3.1 255.255.255.0 (Netgear Switch) (Interface 1/0/9)#ip rip (Netgear Switch) (Interface 1/0/9)#ip pim sparse (Netgear Swit ...

  • NETGEAR M4100 - page 463

    Chapter 28. PIM | 463 ProSafe M4100 and M7100 Managed Switches 2. Enable the switch to announce its candidacy as a bootstrap router (BSR). (Netgear Switch) (Config)#ip pim sparse bsr-candidate interface 1/0/10 30 7 (Netgear Switch) (Config)#interface 1/0/10 (Netgear Switch) (Interface 1/0/10)#routing (Netgear Switch) (Interface 1/0/10)#ip address 1 ...

  • NETGEAR M4100 - page 464

    464 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches PIM-SM on Switch D (Netgear Switch)#configure (Netgear Switch) (Config)#ip multicast (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ip igmp (Netgear Switch) (Config)#ip pim sparse (Netgear Switch) (Config)#ip pim rp-candidate interface 1/0/22 225.1.1.1 255.255.255.0 (Net ...

  • NETGEAR M4100 - page 465

    Chapter 28. PIM | 465 ProSafe M4100 and M7100 Managed Switches PIM-SM builds the multicast route table on each switch. The following tables show the routes that are built after PIM-SM switches to the source-specific tree from the shared tree. (A) #show ip mcast mroute summary Multicast Route Table Summary Incoming Outgoing Source IP Group IP Protoc ...

  • NETGEAR M4100 - page 466

    466 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/1 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the follow ...

  • NETGEAR M4100 - page 467

    Chapter 28. PIM | 467 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/9 check box. Now 1/0/9 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.3.1 . • In the Subnet Mask field, enter 255.255.255. ...

  • NETGEAR M4100 - page 468

    468 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches • In the IP Address field, enter 192.168.1.2 . • In the Subnet Mask field, enter 255.255.255.0 . • In the Routing Mode field, select Enable . d. Click Apply to save the settings. 5. Enable RIP on interface 1/0/1. a. Select Routing > RIP > Advanced > Interface Configuratio ...

  • NETGEAR M4100 - page 469

    Chapter 28. PIM | 469 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Select 1/0/13 in the Interface field. c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 8. Enable multicast globally . a. Select Routing > Multicast > Global Configuration . A screen similar to the following disp ...

  • NETGEAR M4100 - page 470

    470 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches b. For PIM Protocol T ype, select the PIM-SM radio button. c. For Admin Mode, select the Enable radio button. d. Click Apply . 10. Enable PIM-SM on interfaces 1/0/1,1/0/9, and 1/0/13. a. Select Routing > Multicast > PIM > Interface Configuration . A screen similar to the follow ...

  • NETGEAR M4100 - page 471

    Chapter 28. PIM | 471 ProSafe M4100 and M7100 Managed Switches c. Click Apply . 2. Configure 1/0/10 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the interface 1/0/10 check box. Now 1/0/10 appears in th ...

  • NETGEAR M4100 - page 472

    472 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches • In the Routing Mode field, select Enable . d. Click Apply to save the settings. 4. Enable RIP on interface 1/0/10. a. Select Routing > RIP > Advanced > Interface Configuration . A screen similar to the following displays. b. In the Interface field, select 1/0/10 . c. For RI ...

  • NETGEAR M4100 - page 473

    Chapter 28. PIM | 473 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 7. Enable PIM-SM globally . a. Select Routing > Multicast > PIM > Global Configuration . A screen similar to the following displays. b. For PIM Protocol T ype, select ...

  • NETGEAR M4100 - page 474

    474 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/10 and 1/0/1 1 check boxes. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 9. Set up the candidate RP configuration. a. Select Routing > Multicast > PIM > C ...

  • NETGEAR M4100 - page 475

    Chapter 28. PIM | 475 ProSafe M4100 and M7100 Managed Switches a. Select Routing > Multicast > PIM > BSR Candidate Configuration . A screen similar to the following displays. b. In the Interface list, select the 1/0/10 . c. In the Hash Mask Length field, enter 30 . d. In the Priority field, enter 7 . e. Click Apply . PIM-SM on Switch C : 1 ...

  • NETGEAR M4100 - page 476

    476 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/21 check box. Now 1/0/21 appears in the Interface field at the top. c. Enter the following information: • In the IP address , enter 192.168.5.2 . • In the Subnet Mask field, enter 255.255.255.0 . • ...

  • NETGEAR M4100 - page 477

    Chapter 28. PIM | 477 ProSafe M4100 and M7100 Managed Switches a. Select Routing > RIP > Advanced > Interface Configuration . A screen similar to the following displays. b. In the Interface field, select 1/0/21 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 5. Enable RIP on interface 1/0/22. a. Select Routing > ...

  • NETGEAR M4100 - page 478

    478 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 7. Enable PIM-SM globally . a. Select Routing > Multicast > PIM > Global Configuration . A screen similar to the following displays. b. For PIM Protocol T ype, select ...

  • NETGEAR M4100 - page 479

    Chapter 28. PIM | 479 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/21 and 1/0/22 check boxes. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 9. Candidate RP Configuration. a. Select Routing > Multicast > PIM > Candidate RP ...

  • NETGEAR M4100 - page 480

    480 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select the 1/0/21 . c. In the Hash Mask Length field, enter 30 . d. In the Priority field, enter 5 . e. Click Apply . PIM-SM on Switch D 1. Enable IP routing on the switch. a. Select Routing > IP > Basic > IP ...

  • NETGEAR M4100 - page 481

    Chapter 28. PIM | 481 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/21 check box. Now 1/0/21 appears in the Interface field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.2.1 . • In the Subnet Mask field, enter 255.255.25 ...

  • NETGEAR M4100 - page 482

    482 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches 4. Configure 1/0/24 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the Interface 1/0/24 check box. Now 1/0/24 appears in the Interface field ...

  • NETGEAR M4100 - page 483

    Chapter 28. PIM | 483 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/22 . c. For RIP Admin Mode, select the Enable radio button. d. Click Apply . 7. Enable RIP on interface 1/0/24. a. Select Routing > RIP > Advanced > Interface Configuration . A screen similar to th ...

  • NETGEAR M4100 - page 484

    484 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 9. Enable PIM-SM globally . a. Select Routing > Multicast > PIM > Global Configuration . A screen similar to the following displays. b. For PIM Protocol T ype, select ...

  • NETGEAR M4100 - page 485

    Chapter 28. PIM | 485 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/21, 1/0/22 , and 1/0/24 check boxes. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 1 1. Set up Candidate RP configuration. a. Select Routing > Multicast > PIM ...

  • NETGEAR M4100 - page 486

    486 | Chapter 28. PIM ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Interface list, select 1/0/22 . c. In the Hash Mask Length field, enter 30 . d. In the Priority field, enter 3 . e. Click Apply . 13. Enable IGMP globally . a. Select Routing > Multicast > IGMP > Global Configuration . A scr ...

  • NETGEAR M4100 - page 487

    Chapter 28. PIM | 487 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IGMP Routing Interface Configuration, scroll down and select the Interface 1/0/24 check box. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. ...

  • NETGEAR M4100 - page 488

    Chapter 29. DHCP L2 Relay and L3 Relay | 488 29 29. DHCP L2 R el a y and L3 R e la y This chapter includes the following sections: • DHCP L2 Relay • DHCP L3 Relay on page 494 • Configure a DHCP L3 Switch on page 499 DHCP L2 R elay DHCP relay agents eliminate the need to have a DHCP server on each physical network. Relay agents populate the gi ...

  • NETGEAR M4100 - page 489

    Chapter 29. DHCP L2 Relay and L3 Relay | 489 ProSafe M4100 and M7100 Managed Switches These Layer 2 devices typically operate only as bridges for the network and might not have an IPv4 address on the network. Lacking a valid IPv4 source address, they cannot relay packets directly to a DHCP server located on another network. These Layer 2 devices ap ...

  • NETGEAR M4100 - page 490

    490 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches 6. Enable DHCP L2 relay on port 1/0/5. (Netgear Switch) (Config)#interface 1/0/5 (Netgear Switch) (Interface 1/0/5)# dhcp l2relay (Netgear Switch) (Interface 1/0/5)# vlan pvid 200 (Netgear Switch) (Interface 1/0/5)# vlan participation include 200 (Netgear Switch) ...

  • NETGEAR M4100 - page 491

    Chapter 29. DHCP L2 Relay and L3 Relay | 491 ProSafe M4100 and M7100 Managed Switches a. Select Switching > VLAN > Advanced > VLAN Membership . A screen similar to the following displays. b. In the VLAN ID field, select 200 . c. Click Unit 1 . The ports display . d. Click the gray boxes under ports 4 , 5 , and 6 until U displays. The U spe ...

  • NETGEAR M4100 - page 492

    492 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Scroll down and select the VLAN ID 200 check box. d. Enter the following information: • In the Admin Mode field, select Enable . • In the Circuit ID Mode field, s ...

  • NETGEAR M4100 - page 493

    Chapter 29. DHCP L2 Relay and L3 Relay | 493 ProSafe M4100 and M7100 Managed Switches a. Select System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Configuration . A screen similar to the following displays. b. Under DHCP L2 Relay Configuration, scroll down and select the Interface 1/0/6 check box. c. In the 82 Option T rust Mode f ...

  • NETGEAR M4100 - page 494

    494 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches DHCP L3 R elay This case has two steps, DHCP server configuration and DHCP L3 relay configuration. This example shows how to configure a DHCP L3 relay on a NETGEAR switch and how to configure DHCP pool to assign IP addresses to DHCP clients using DHCP L3 relay . D ...

  • NETGEAR M4100 - page 495

    Chapter 29. DHCP L2 Relay and L3 Relay | 495 ProSafe M4100 and M7100 Managed Switches 2. Create a routing interface and enable RIP on it so that the DHCP server learns the route 10.200.1.0/24 from the DHCP L3 relay . (Netgear Switch) (Config)#interface 1/0/3 (Netgear Switch) (Interface 1/0/3)#routing (Netgear Switch) (Interface 1/0/3)#ip address 10 ...

  • NETGEAR M4100 - page 496

    496 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches 2. Create a routing interface and assign 10.100.1.1/24 to it. a. Select Routing > IP > Advanced > IP Interface Configuratio n. A screen similar to the following displays. b. Scroll down and select the 1/0/3 check box. c. In the IP Address field, enter 10. ...

  • NETGEAR M4100 - page 497

    Chapter 29. DHCP L2 Relay and L3 Relay | 497 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. In the IP Range From field, enter 10.200.1.1 . d. In the IP Range T o field, enter 10.200.1.1 . e. Click Add . 5. Exclude 10.200.2.1 from the DHCP pool. a. Select Sys ...

  • NETGEAR M4100 - page 498

    498 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under DHCP Pool Configuration, enter the following information: • In the Pool Name list, select Create . • In the Pool Name field, enter dhcp_server . • In the T ype of Binding list, select Dynamic . • In the ...

  • NETGEAR M4100 - page 499

    Chapter 29. DHCP L2 Relay and L3 Relay | 499 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under DHCP Pool Configuration, enter the following information: • In the Pool Name list, select Create . • In the Pool Name field, enter dhcp_server_second . • In the T ype of Binding list, select Dynamic . • ...

  • NETGEAR M4100 - page 500

    500 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches 3. Create a routing interface connecting to the client. (Netgear Switch) (Interface 1/0/16)#exit 4. Configure the DHCP Server IP address and enable the DHCP L3 relay . (Netgear Switch) (Config)#ip helper-address 10.100.1.1 dhcp (Netgear Switch) (Config)#ip helper ...

  • NETGEAR M4100 - page 501

    Chapter 29. DHCP L2 Relay and L3 Relay | 501 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/4 check box. c. In the IP Address field, enter 10.100.1.2 . d. In the Subnet Mask field, enter 255.255.255.0 . e. In the Routing Mode field, select Enable . f. Click Apply to save t ...

  • NETGEAR M4100 - page 502

    502 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under IP Interface Configuration, scroll down and select the Port 1/0/15 check box. c. In the IP Address Configuration Method field, enter Manual . d. In the IP Address field, enter 10.200.1.1 . e. In the Subnet Mask ...

  • NETGEAR M4100 - page 503

    Chapter 29. DHCP L2 Relay and L3 Relay | 503 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. In the Source field, select Connected . c. In the Redistribute Mode field, select Enable . d. Click Apply to save the settings. 7. Enable DHCP L3 relay . a. Select System > Services > DHCP Relay . A screen simil ...

  • NETGEAR M4100 - page 504

    504 | Chapter 29. DHCP L2 Relay and L3 Relay ProSafe M4100 and M7100 Managed Switches c. In the UDP Port field, enter dhcp . d. Click Add to save the settings. ...

  • NETGEAR M4100 - page 505

    Chapter 30. MLD | 505 30 30. MLD Multi cas t L istene r Disco v ery This chapter provides the following examples: • Configure MLD on page 506 • MLD Snooping on page 519 Multicast Listener Discovery (MLD) protocol enables IPv6 routers to discover multicast listeners, the nodes that are configured to receive multicast data packets, on its directl ...

  • NETGEAR M4100 - page 506

    506 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches Configure MLD In this case, PIM-DM is enabled on Switch A and Switch B, and MLD is enabled on Switch B’s port 1/0/24 to discover the multicast listeners. IPv6 multicast source 2001:2::/65 Port 1/0/13 Port 1/0/1 2001:1::/64 Port 1/0/21 Port 1/0/24 2001:3::/64 Host Switch A Switch B Fig ...

  • NETGEAR M4100 - page 507

    (Netgear Switch) (Config)#ipv6 unicast-routing (Netgear Switch) (Config)#ipv6 pim dense (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ip multicast (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#routing (Netgear Switch) (Interface 1/0/1)#ipv6 address 2001:1::1/64 (Netgear Switch) (Interface 1/0/1)#ipv6 ...

  • NETGEAR M4100 - page 508

    508 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches 5. Enable IP multicast forwarding on the switch. (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ip multicast 6. Enable MLD on interface 1/0/24. (Netgear Switch) (Config)#interface 1/0/21 (Netgear Switch) (Interface 1/0/21)#routing (Netgear Switch) (Interface 1/0/21)#ipv6 ...

  • NETGEAR M4100 - page 509

    Chapter 30. MLD | 509 ProSafe M4100 and M7100 Managed Switches a. Select Routing > IP > Basic > IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Enable IPv6 unicast routing on the switch. a. Select Routing > IPv6 > Basic > Global Configuration . ...

  • NETGEAR M4100 - page 510

    510 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/1 and 1/0/13 check boxes. c. Enter the following information: • In the IPv6 Mode field, select Enable . • In the Routing Mode field, select Enable . • In the Admin Mode field, select Enable . d ...

  • NETGEAR M4100 - page 511

    Chapter 30. MLD | 51 1 ProSafe M4100 and M7100 Managed Switches 5. Assign an IPv6 address to 1/0/13. a. Select Routing > IPv6 > Advanced > Prefix Configuration . A screen similar to the following displays. b. Select Interface 1/0/13 . c. Enter the following information: • In the IPv6 Prefix field, enter 2001:2::1 . • In the Prefix Leng ...

  • NETGEAR M4100 - page 512

    512 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/1 and 1/0/13 check boxes. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 8. Enable multicast globally . a. Select Routing > Multicast > Global Configuration . ...

  • NETGEAR M4100 - page 513

    Chapter 30. MLD | 513 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 10. Enable PIM-DM on interfaces 1/0/1 and 1/0/13. a. Select Routing > IPv6 Multicast > IPv6 PIM > Interface Configuration . A screen similar to the following displays ...

  • NETGEAR M4100 - page 514

    514 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Enable IPv6 unicast routing on the switch. a. Select Routing > IPv6 > Basic > Global Configuration . A screen similar to the following displays. b. For IPv6 Unic ...

  • NETGEAR M4100 - page 515

    Chapter 30. MLD | 515 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/21 and 1/0/24 check boxes. c. Enter the following information: • In the I Pv6 Mode field, select Enable . • In the Routing Mode field, select Enable . • In the Admin Mode field, select Enable . ...

  • NETGEAR M4100 - page 516

    516 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches 5. Assign an IPv6 address to 1/0/24. a. Select Routing > IPv6 > Advanced > Prefix Configuration . A screen similar to the following displays. b. Under IPv6 Interface Selection, in the Interface field, select 1/0/24 . c. Enter the following information: • In the IPv6 Prefix fi ...

  • NETGEAR M4100 - page 517

    Chapter 30. MLD | 517 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Under OSPFv3 Interface Configuration, scroll down and select the Interface 1/0/21 and 1/0/24 check boxes. c. In the OSPFv3 Interface Configuration, in the Admin Mode field, select Enable . d. Click Apply to save the settings. 8. Enable mult ...

  • NETGEAR M4100 - page 518

    518 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 10. Enable PIM-DM on interfaces 1/0/21 and 1/0/24. a. Select Routing > IPv6 Multicast > IPv6 PIM > Interface Configuration . A screen similar to the following display ...

  • NETGEAR M4100 - page 519

    Chapter 30. MLD | 519 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 12. Enable MLD on interface 1/0/24. a. Select Routing > IPv6 Multicast > MLD > Routing Interface Configuration . A screen similar to the following displays. b. Under ...

  • NETGEAR M4100 - page 520

    520 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches that want to receive the data, instead of being flooded to all ports in a VLAN. This list is constructed by snooping IPv6 multicast control packets. MLD is a protocol used by IPv6 multicast routers to discover the presence of multicast listeners (nodes configured to receive IPv6 multica ...

  • NETGEAR M4100 - page 521

    Chapter 30. MLD | 521 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure MLD Snooping 1. Create VLAN 300. a. Select Switching > VLAN > Basic > VLAN Configuration . A screen similar to the following displays. b. In the VLAN ID field, enter 300 . c. Click Add . 2. Assign all of the ports to VLAN 300. a. Select Switching > ...

  • NETGEAR M4100 - page 522

    522 | Chapter 30. MLD ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the interface 1/0/1 and 1/0/24 check boxes. c. In the PVID (1 to 4093) field, enter 300 . d. Click Apply to save the settings. 4. Enable MLD snooping on the switch. a. Select Routing > Multicast > MLD Snooping & ...

  • NETGEAR M4100 - page 523

    Chapter 30. MLD | 523 ProSafe M4100 and M7100 Managed Switches b. Enter the following information: • In the VLAN ID field, enter 300 . • In the Admin Mode field, select Enable . 6. Click Add . ...

  • NETGEAR M4100 - page 524

    Chapter 31. DVMRP | 524 31 31. D VMRP Dist ance V ecto r Multi cas t R outing Pr otocol The DVMRP is used for multicasting over IP networks without routing protocols to support multicast. The DVMRP is based on the RIP protocol but more complicated than RIP . DVRMP maintains a link-state database to keep track of the return paths to the source of mu ...

  • NETGEAR M4100 - page 525

    Chapter 31. DVMRP | 525 ProSafe M4100 and M7100 Managed Switches multicast streams are sent from the multicast resource to the host along the path built by DVMRP . 192.168.1.0/24 1/0/1 1/0/21 192.168.5.0/24 192.168.3.0/24 1/0/1 1 1/0/24 1/0/3 1/0/13 1/0/13 192.168.4.0/24 192.168.4.0/24 Switch A Switch C Switch B Host Multicast resource 1/0/20 Figur ...

  • NETGEAR M4100 - page 526

    526 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches 3. Enable DVMRP protocol on the switch. (Netgear Switch) (Config)#ip dvmrp 4. Enable DVMRP mode on the interfaces 1/0/1, 1/0/13, and 1/0/21. (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#ip dvmrp (Netgear Switch) (Interface 1/0/1)#exit (Netgear Switch) ( ...

  • NETGEAR M4100 - page 527

    (Netgear Switch) #show ip mcast mroute summary Multicast Route Table Summary Incoming Outgoing Source IP Group IP Protocol Interface Interface List ------------- ------------ ---------- --------- --------------- 192.168.1.2 225.0.0.1 DVMRP 1/0/1 1/0/21 Chapter 31. DVMRP | 527 ProSafe M4100 and M7100 Managed Switches D VRMP on Switch B 1. Create rou ...

  • NETGEAR M4100 - page 528

    (Netgear Switch) #show ip dvmrp neighbor Interface ..................................... 1/0/13 Neighbor IP Address ........................... 192.168.2.1 State ......................................... Active Up Time (hh:mm:ss) ............................ 00:02:26 Expiry Time (hh:mm:ss) ........................ 00:00:20 Generation ID ........... ...

  • NETGEAR M4100 - page 529

    Chapter 31. DVMRP | 529 ProSafe M4100 and M7100 Managed Switches D VRMP on Switch C : 1. Create routing interfaceS 1/0/1 1, 1/0/3, and 1/0/24. (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#ip interface 1/0/11 (Netgear Switch) (Interface 1/0/11)#ip routing (Netgear Switch) (Interface 1/0/11)#ip address 192.1 ...

  • NETGEAR M4100 - page 530

    530 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches 6. Enable IGMP mode on the interface 1/0/24. (Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#ip igmp (Netgear Switch) (Interface 1/0/24)#exit (Netgear Switch) #show ip dvmrp neighbor Interface ..................................... 1/0/11 Neighbor IP Addr ...

  • NETGEAR M4100 - page 531

    Chapter 31. DVMRP | 531 ProSafe M4100 and M7100 Managed Switches W eb Interface: Configure D VMRP D VMRP on Switch A 1. Enable IP routing on the switch. a. Select Routing > IP > Basic >IP Configuration . A screen similar to the following displays. b. For Routing Mode, select the Enable radio button. c. Click Apply . 2. Configure 1/0/1 as a ...

  • NETGEAR M4100 - page 532

    532 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the Port 1/0/13 check box. Now 1/0/13 appears in the Port field at the top. c. Enter the following information: • In the IP Address field, ...

  • NETGEAR M4100 - page 533

    Chapter 31. DVMRP | 533 ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. 5. Enable IP multicast on the switch. a. Select Routing > Multicast > Global Configuration . A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 6. Enable DVMRP on the switch. a. Sel ...

  • NETGEAR M4100 - page 534

    534 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down select the Interface 1/0/1 , 1/0/13 , and 1/0/21 check boxes. c. In the Interface Mode field, select 300 . d. Click Apply to save the settings. D VMRP on Switch B 1. Enable IP routing on the switch. a. Select Routing > IP & ...

  • NETGEAR M4100 - page 535

    Chapter 31. DVMRP | 535 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/13 check box. Now 1/0/13 appears in the Port field at the top. c. Enter the following information in the IP Interface Configuration. • In the IP Address field, enter 192.168.2.2 . • In the Subnet Ma ...

  • NETGEAR M4100 - page 536

    536 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches a. Select Routing > Multicast > Global Configuration . A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 5. Enable DVMRP on the switch. a. Select Routing > Multicast > DVMRP> Global Configuration . A screen s ...

  • NETGEAR M4100 - page 537

    Chapter 31. DVMRP | 537 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Interface 1/0/13 and 1/0/20 check boxes. c. In the Interface Mode field, select Enable . d. Click Apply to save the settings. D VMRP on Switch C 1. Enable IP routing on the switch. a. Select Routing > IP > ...

  • NETGEAR M4100 - page 538

    538 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the Port 1/0/1 1 check box. Now 1/0/1 1 appears in the Port field at the top. c. Enter the following information: • In the IP Address field, enter 192.168.3.1 . • In the Subnet Mask field, enter 255.255.255.0 . ...

  • NETGEAR M4100 - page 539

    Chapter 31. DVMRP | 539 ProSafe M4100 and M7100 Managed Switches d. Click Apply to save the settings. 4. Configure 1/0/24 as a routing port and assign an IP address to it. a. Select Routing > IP > Advanced > IP Interface Configuration . A screen similar to the following displays. b. Scroll down and select the Port 1/0/24 check box. Now 1/0 ...

  • NETGEAR M4100 - page 540

    540 | Chapter 31. DVMRP ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 7. Enable DVMRP on the interface. a. Select Routing > Multicast > DVMRP > Interface Configuration . A screen similar to the following displays. b. Scroll down and s ...

  • NETGEAR M4100 - page 541

    Chapter 31. DVMRP | 541 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. For Admin Mode, select the Enable radio button. c. Click Apply . 9. Enable IGMP on the interface. a. Select Routing > Multicast > IGMP > Routing Interface Configuration . A screen similar to the following displays. b. Scroll down ...

  • NETGEAR M4100 - page 542

    Chapter 32. Captive Portal | 542 32 32. Ca pti v e P ort al This chapter includes the following sections: • Captive Portal Configuration on page 543 • Enable Captive Portal on page 543 • Client Access, Authentication, and Control on page 545 • Block a Captive Portal Instance on page 546 • Local Authorization, Create Users and Groups on pa ...

  • NETGEAR M4100 - page 543

    Chapter 32. Captive Portal | 543 ProSafe M4100 and M7100 Managed Switches Y ou can enable captive portal on all the physical ports on the switch. It is not supported for VLAN interfaces, loopback interfaces or logical interfaces. The captive portal feature uses MAC-aaddress based authentication and not port-based authentication. This means that all ...

  • NETGEAR M4100 - page 544

    544 | Chapter 32. Captive Portal ProSafe M4100 and M7100 Managed Switches 2. Enable captive portal instance 1. (Netgear Switch) (Config-CP)#configuration 1 (Netgear Switch) (Config-CP 1)#enable 3. Enable captive portal instance 1 on port 1/0/1. (Netgear Switch) (Config-CP 1)#interface 1/0/1 W eb Interface: Enable Captive P ortal 1. Enable captive p ...

  • NETGEAR M4100 - page 545

    Chapter 32. Captive Portal | 545 ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. b. Scroll down and select the CP 1 check box. Now CP 1 appears in the CP ID field at the top. c. In the Admin Mode field, select Enable . d. Click Apply to save the settings. 3. Enable CP 1 on interface 1/0/1. a. Select Security > ...

  • NETGEAR M4100 - page 546

    546 | Chapter 32. Captive Portal ProSafe M4100 and M7100 Managed Switches captive portal instance is a temporary command executed by the administrator and not saved in the configuration. Block a Captive P ortal Instance CLI: Block a Captive P ortal Instance (Netgear Switch)(Config-CP 1)#block W eb Interface: Block a Captive P ortal Instance 1. Sele ...

  • NETGEAR M4100 - page 547

    Chapter 32. Captive Portal | 547 ProSafe M4100 and M7100 Managed Switches CLI: Create Users and Groups 1. Create a group whose group ID is 2. (Netgear Switch) #config (Netgear Switch) (config)#captive-portal (Netgear Switch)(Config-CP)# user group 2 2. Create a user whose name is user1. (Netgear Switch) (Config-CP)#user 2 name user1 3. Configure th ...

  • NETGEAR M4100 - page 548

    548 | Chapter 32. Captive Portal ProSafe M4100 and M7100 Managed Switches c. Click Add . 2. Create a user . a. Select Security > Control > Captive Portal > CP User Configuration . A screen similar to the following displays. b. Enter the following information: • In the User ID Field, enter 2 . • In the User Name field, enter user1 . • ...

  • NETGEAR M4100 - page 549

    Chapter 32. Captive Portal | 549 ProSafe M4100 and M7100 Managed Switches are used to configure captive portal. VSAs are denoted in the ID column and are comma delimited (vendor ID, attribute ID). T able 3. RADIUS Attributes for Configuring Captive Portal Users RADIUS Attribute No. Description Range Usage Default User-Name 1 User name to be authori ...

  • NETGEAR M4100 - page 550

    550 | Chapter 32. Captive Portal ProSafe M4100 and M7100 Managed Switches A screen similar to the following displays. 2. Scroll down and select the CP 1 check box. Now CP 1 appears in the CP ID field at the top. 3. Enter the following information: • In the V erification field, select RADIUS . • In the Radius Auth Server field, enter the RADIUS ...

  • NETGEAR M4100 - page 551

    Chapter 33. iSCSI | 551 33 33. iS C S I This chapter includes the following sections: • Enable iSCSI Awareness with VLAN Priority T ag on page 552 • Enable iSCSI Awareness with DSCP on page 553 • Set the iSCSI T arget Port on page 554 • Show iSCSI Sessions on page 555 The iSCSI feature is used in networks containing iSCSI initiators and tar ...

  • NETGEAR M4100 - page 552

    552 | Chapter 33. iSCSI ProSafe M4100 and M7100 Managed Switches Enable iSCSI A wareness with VLAN P riority T ag The example is shown as CLI commands and as Web interface procedure CLI: Enable iSCSI A wareness with VLAN P riority T ag Use the following commands to enable iSCSI awareness, select VPT , and set VLAN number and aging time. (Netgear Sw ...

  • NETGEAR M4100 - page 553

    Chapter 33. iSCSI | 553 ProSafe M4100 and M7100 Managed Switches Enable iSCSI A wareness with DSCP The example is shown as CLI commands and as Web interface procedure. CLI: Enable iSCSI A wareness with DSCP Use the following commands to enable iSCSI awareness, select DSCP , and set DSCP queue number and aging time. (Netgear Switch) #config (Netgear ...

  • NETGEAR M4100 - page 554

    554 | Chapter 33. iSCSI ProSafe M4100 and M7100 Managed Switches Set the iSCSI T arget P ort When working with iSCSI that does not use the standard IANA assigned iSCSI ports (3260/860), it is recommended that you specify the target IP address. Then the switch will only snoop frames where the TCP destination port is one of the configured TCP ports a ...

  • NETGEAR M4100 - page 555

    Chapter 33. iSCSI | 555 ProSafe M4100 and M7100 Managed Switches Show iSCSI Sessions The example is shown as CLI commands and as Web interface procedure CLI: Show iSCSI Sessions (Netgear Switch) #show iscsi sessions Session 0: ----------------------------------------------------------------------------- Target: iqn.2012-08.com.example:storage.lun1 ...

  • NETGEAR M4100 - page 556

    556 | Chapter 33. iSCSI ProSafe M4100 and M7100 Managed Switches 2. Click Refresh . 1. Show iSCSI session details. a. Select Switching > iSCSI > Advanced > Sessions detailed . A screen similar to the following displays: 2. Click Refresh . ...

  • NETGEAR M4100 - page 557

    Index | 557 Inde x Numerics 6to4 tunnels 414 802.1x port security 280 A ACL mirroring 172 ACL redirect 178 ACLs 136 IP ACL configuration 137 IPv6 183 isolated VLANs on a Layer 3 switch 158 MAC ACLs 137 , 169 TCP flag 142 ARP 127 dynamic ARP inspection 297 , 298 , 299 ARP , dynamic inspection 312 , 313 Auto V oIP 225 , 226 , 228 B banner , pre-login ...

  • NETGEAR M4100 - page 558

    558 | Index ProSafe M4100 and M7100 Managed Switches IGMP querier 250 , 251 enable 251 , 252 status 254 IGMP snooping 246 , 251 247 external multicast router 248 , 249 multicast router using VLAN 249 show igmpsnooping 246 show ignpsnooping 247 show mac-address-table 247 show mac-address-table igmpsnooping 248 IGMPv3 246 interpreting log files 339 I ...

  • NETGEAR M4100 - page 559

    Index | 559 ProSafe M4100 and M7100 Managed Switches 802.1x port security 280 , 281 DHCP messages, maxiumum rate 310 , 311 DHCP snooping 306 , 307 IP source guard 312 protected ports 273 , 276 static binding 309 , 310 static mapping 303 , 304 sFlow 373 , 374 , 375 sFlow , time-based sampling of counters 377 show logging 340 show logging buffered 34 ...

Manufacturer NETGEAR Category Switch

Documents that we receive from a manufacturer of a NETGEAR M4100 can be divided into several groups. They are, among others:
- NETGEAR technical drawings
- M4100 manuals
- NETGEAR product data sheets
- information booklets
- or energy labels NETGEAR M4100
All of them are important, but the most important information from the point of view of use of the device are in the user manual NETGEAR M4100.

A group of documents referred to as user manuals is also divided into more specific types, such as: Installation manuals NETGEAR M4100, service manual, brief instructions and user manuals NETGEAR M4100. Depending on your needs, you should look for the document you need. In our website you can view the most popular manual of the product NETGEAR M4100.

Similar manuals

A complete manual for the device NETGEAR M4100, how should it look like?
A manual, also referred to as a user manual, or simply "instructions" is a technical document designed to assist in the use NETGEAR M4100 by users. Manuals are usually written by a technical writer, but in a language understandable to all users of NETGEAR M4100.

A complete NETGEAR manual, should contain several basic components. Some of them are less important, such as: cover / title page or copyright page. However, the remaining part should provide us with information that is important from the point of view of the user.

1. Preface and tips on how to use the manual NETGEAR M4100 - At the beginning of each manual we should find clues about how to use the guidelines. It should include information about the location of the Contents of the NETGEAR M4100, FAQ or common problems, i.e. places that are most often searched by users in each manual
2. Contents - index of all tips concerning the NETGEAR M4100, that we can find in the current document
3. Tips how to use the basic functions of the device NETGEAR M4100 - which should help us in our first steps of using NETGEAR M4100
4. Troubleshooting - systematic sequence of activities that will help us diagnose and subsequently solve the most important problems with NETGEAR M4100
5. FAQ - Frequently Asked Questions
6. Contact detailsInformation about where to look for contact to the manufacturer/service of NETGEAR M4100 in a specific country, if it was not possible to solve the problem on our own.

Do you have a question concerning NETGEAR M4100?

Use the form below

If you did not solve your problem by using a manual NETGEAR M4100, ask a question using the form below. If a user had a similar problem with NETGEAR M4100 it is likely that he will want to share the way to solve it.

Copy the text from the picture

Captcha
New picture

Comments (0)