Manuale d’uso / di manutenzione del prodotto GS724TS-100NAS del fabbricante NETGEAR
Vai alla pagina of 275
February 2012 202-10484-04 v1.0 350 East Plumeria Drive San Jose, CA 95134 USA GS716T and GS724T Smart Switches Software Administration Manual.
2 | GS716Tv2 and GS724Tv3 Software Administration Manual ©2012 NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc.
Table of Contents | 3 Table of Contents Chapter 1 Getting Started Getting Started with the GS716T and GS724T Gigabit Smart Switches . . 10 Switch Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Connecting the Switch to the Network .
GS716Tv2 and GS724Tv3 Software Administration Manual 4 | Table of Contents Services — DHCP Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 DHCP Filtering Configuration . . . . . . . . . . . . . . . . . . . . . . .
GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 5 DSCP to Queue Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 Differentiated Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
GS716Tv2 and GS724Tv3 Software Administration Manual 6 | Table of Contents Chapter 6 Monitoring the System Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200 Switch Statistics . . . . . .
GS716Tv2 and GS724Tv3 Software Administration Manual Table of Contents | 7 Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246 System Setup . . . . . . . . . . . . . . . . . . . . . . . . . . .
GS716Tv2 and GS724Tv3 Software Administration Manual 8 | Table of Contents.
Chapter 1: Getting Started | 9 1. Getting Started 1 The NETGEAR ® GS716T and GS724T Smart Switch Software Administration Manual describes how to configure and operate the GS716T and GS724T Gigabit Smart Switches by using the Web-based graphical user interface (GUI).
10 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Getting Started with the GS716T and GS724T Gigabit Smart Switches This chapter provides an overview of starting your NETGEAR GS716T or GS724T Smart Switch and accessing the user interface.
Chapter 1: Getting Started | 11 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Management Interface The NETGEAR GS716T and GS724T Smart Switches contain embedded Web server and management software for managing and monitoring switch functions.
12 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Connecting the Switch to the Network To enable remote management of the switch through a Web browser or SNMP, you must connect the switch to the network and configure it with network information (an IP address, subnet mask, and default gateway).
Chapter 1: Getting Started | 13 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network with a DHCP Server This section describes how to set up your switch in a network that has a DHCP server. The DHCP client on the switch is enabled by default.
14 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Use your Web browser to manage your switch. The default password is password . Then use this page to proceed to management of the switch covered in Using the Web Interface on page 24.
Chapter 1: Getting Started | 15 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Discovery in a Network without a DHCP Server This section describes how to use the Smart Control Center to set up your switch in a network without a DHCP server.
16 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 9. Click Apply to configure the switch with the network settings. Please ensure that your PC and the switch are in the same subnet. Make a note of these settings for later use.
Chapter 1: Getting Started | 17 GS716Tv2 and GS724Tv3 Software Administration Manual To modify the network settings on your administrative system: 1. On your PC, access the MS Windows operating system TCP/IP Properties. 2. Set the IP address of the administrative system to an address in the 192.
18 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Web Access To access the GS716T or GS724T management interface, use one of the following methods: • From the Smart Control Center, select the switch and click Web Browser Access .
Chapter 1: Getting Started | 19 GS716Tv2 and GS724Tv3 Software Administration Manual Smart Control Center Utilities In addition to device discovery and network address assignment, the Smart Control Center includes several maintenance features.
20 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click OK. 5. Enter the switch password and click Apply . The file is uploaded to the administrative computer as a *.cfg file. You can open it and view the contents with a text editor.
Chapter 1: Getting Started | 21 GS716Tv2 and GS724Tv3 Software Administration Manual Firmware Upgrade The application software for the GS716T and GS724T Smart Switches is upgradeable, enabling your switch to take advantage of improvements and additional features as they become available.
22 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual 7. When the process is complete, the switch automatically reboots.
Chapter 1: Getting Started | 23 GS716Tv2 and GS724Tv3 Software Administration Manual Viewing and Managing Tasks From the Tasks tab, you can view information about configuration downloads and firmware upgrades that have already occurred, are in progress, or are scheduled to take place at a later time.
24 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Understanding the User Interfaces The switch software includes a set of comprehensive management functions for conf.
Chapter 1: Getting Started | 25 GS716Tv2 and GS724Tv3 Software Administration Manual Figure 1. Administrative Page Layout Navigation Tabs, Feature Links, and Page Menu The navigation tabs along the top of the Web interface give you quick access to the various switch functions.
26 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Configuration and Status Options The area directly under the feature links and to the right of the page menu displays the configuration information or status for the page you select.
Chapter 1: Getting Started | 27 GS716Tv2 and GS724Tv3 Software Administration Manual If you click the graphic, but do not click a specific port, the main menu appears, as the following figure shows. This menu contains the same option as the navigation tabs at the top of the page.
28 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual Help Page Access Every page contains a link to the online help , which contains information to assist in configuring and managing the switch. The online help pages are context sensitive.
Chapter 1: Getting Started | 29 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Naming Convention The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are gigabit interfaces and are numbered on the front panel.
30 | Chapter 1: Getting Started GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 2: Configuring System Information | 31 2. Configuring System Information 2 Use the features in the System tab to define the switch’s relationship to its environment.
32 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Management This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information.
Chapter 2: Configuring System Information | 33 GS716Tv2 and GS724Tv3 Software Administration Manual To define system information: 1. Open the System Information page. 2. Define the following fields: • System Name . Enter the name you want to use to identify this switch.
34 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the network information for the management interface: 1. Select the appropriate radio button to determine how to configure the network information for the switch management interface: • Dynamic IP Address (DHCP).
Chapter 2: Configuring System Information | 35 GS716Tv2 and GS724Tv3 Software Administration Manual port VLAN ID (PVID) of the port to be connected in that management VLAN be the same as the management VLAN ID. The management VLAN has the following requirements: • Only one management VLAN can be active at a time.
36 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual SNTP time definitions are assessed and determined by the following time levels: • T1 : Time at which the original request was sent by the client. • T2 : Time at which the original request was received by the server.
Chapter 2: Configuring System Information | 37 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the time by using the CPU clock cycle as the source: 1. From the Clock Source field, select Local . 2. In the Date field, enter the date in the DD/MM/YYYY format.
38 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. Use the menu to select the Coordinated Universal Time (UTC) time zone in which the switch is located, expressed as the number of hours. 3. Click Apply to send the updated configuration to the switch.
Chapter 2: Configuring System Information | 39 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. SNTP Server Configuration Use the SNTP Server Configuration page to view and modify information for adding and modifying Simple Network Time Protocol SNTP servers.
40 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual • Priority . Specifies the priority of this server entry in determining the sequence of servers to which SNTP requests are sent. Enter a priority from 1–3, with 1 being the default and the highest priority.
Chapter 2: Configuring System Information | 41 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. Denial of Service Use the Denial of Service (DoS) page to configure DoS control.
42 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the Auto- DoS feature: 1. Select a radio button to enable or disable Auto-DoS: • Disable . Auto-DoS is disabled (default). • Enable . Auto-DoS is enabled.
Chapter 2: Configuring System Information | 43 GS716Tv2 and GS724Tv3 Software Administration Manual to drop packets that have a TCP header smaller than the configured Min TCP Hdr Size. The factory default is Disable. • Denial of Service Min TCP Hdr Size .
44 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure the global DNS settings: 1. Specify whether to enable or disable the administrative status of the DNS Client. • Enable . Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name.
Chapter 2: Configuring System Information | 45 GS716Tv2 and GS724Tv3 Software Administration Manual To add a static entry to the local DNS table: 1. Specify the static host name to add. Enter up to 158 characters. 2. Specify the IP address in standard IPv4 dot notation to associate with the hostname.
46 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Green Ethernet Configuration Use this page to configure Green Ethernet features. Using the Green Ethernet features allows for power consumption savings.
Chapter 2: Configuring System Information | 47 GS716Tv2 and GS724Tv3 Software Administration Manual License Key This page provides information about available License Keys for various features. By default those License Keys are not available. If License Key for feature is not available, the user will not be allowed to configure this functionality.
48 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Community Configuration To display this page, click System SNMP SNMP V1/V2 Community Configuration . By default, two SNMP Communities exist: • Private, with Read/Write privileges and status set to Enable .
Chapter 2: Configuring System Information | 49 GS716Tv2 and GS724Tv3 Software Administration Manual • Community String . Specify a community name. A valid entry is a case-sensitive string of up to 16 characters. • Access Mode . Specify the access level for this community by selecting Read/Write or Read Only from the menu.
50 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual 2. To modify information about an existing SNMP recipient, select the check box next to the recipient, change the desired fields, and then click Apply .
Chapter 2: Configuring System Information | 51 GS716Tv2 and GS724Tv3 Software Administration Manual SNMP v3 User Configuration This is the configuration for SNMP v3. To access this page, click System SNMP SNMP V3 User Configuration . The SNMPv3 Access Mode is a read-only field that shows the access privileges for the user account.
52 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual LLDP The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions.
Chapter 2: Configuring System Information | 53 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global LLDP settings: 1. Configure the following LLDP properties. • TLV Advertised Interval . Specify the interval at which frames are transmitted.
54 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure LLDP port settings: 1. Change the LLDP port settings described below: • Interface. Specifies the port to be affected by these parameters.
Chapter 2: Configuring System Information | 55 GS716Tv2 and GS724Tv3 Software Administration Manual • Tx and Rx : Enable both transmitting and receiving LLDP PDUs on the selected ports. • Disabled : Do not transmit or receive LLDP PDUs on the selected ports.
56 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. LLDP-MED Port Settings Use this page to enable LLDP-MED mode on an interface and configure its properties.
Chapter 2: Configuring System Information | 57 GS716Tv2 and GS724Tv3 Software Administration Manual 3. From the Notification field, specify whether the port should send a topology change notification if a device is connected or removed.
58 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the LLDP local information that displays for each port. Field Description Interface Select the interface with the information to display.
Chapter 2: Configuring System Information | 59 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to refresh the page with the most current data from the switch. To view additional details about a port, click the name of the port in the Interface column of the Port Information table.
60 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Neighbors Information Use the LLDP Neighbors Information page to view the data that a specified interface has received from other LLDP-enabled systems.
Chapter 2: Configuring System Information | 61 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information that displays for all LLDP neighbors that have been discovered. Click Refresh to update the information on the screen with the most current data.
62 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Field Description Port Details Local Port Displays the interface on the local system that received LLDP information from a remote system. MSAP Entry Displays the Media Service Access Point (MSAP) entry number for the remote device.
Chapter 2: Configuring System Information | 63 GS716Tv2 and GS724Tv3 Software Administration Manual Address Specifies the advertised management address of the remote system. Interface SubType Specifies the port subtype. Interface Number Identifies the port on the remote device that sent the information.
64 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Asset ID Displays the asset ID advertised by the remote device. Location Information Civic Displays the physical location, such as the street address, the remote device has advertised in the location TLV.
Chapter 2: Configuring System Information | 65 GS716Tv2 and GS724Tv3 Software Administration Manual Services — DHCP Filtering DHCP Filtering is a useful feature that can be employed as a security measure against unauthorized DHCP servers. A known attack is when an unauthorized DHCP server responds to a client that is requesting an IP address.
66 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual Interface Configuration Use the DHCP Filtering Interface Configuration page to view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded.
Chapter 2: Configuring System Information | 67 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure DHCP filtering settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces.
68 | Chapter 2: Configuring System Information GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 3: Configuring Switching Information | 69 3. Configuring Switching Information 3 Use the features in the Switching tab to define Layer 2 features.
70 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages on the Ports tab allow you to view and monitor the physical port information for the ports available on the switch.
Chapter 3: Configuring Switching Information | 71 GS716Tv2 and GS724Tv3 Software Administration Manual To configure port settings: 1. To configure settings for a physical port, click PORTS . 2. To configure settings for a Link Aggregation Group (LAG), click LAGS .
72 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. To configure settings for both physical ports and LAGs, click ALL . 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces.
Chapter 3: Configuring Switching Information | 73 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 7. If you make any changes to the page, click Apply to apply the changes to the system.
74 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Link Aggregation Groups Link aggregation groups (LAGs), which are also known as port-channels, allow you to combine multiple full-duplex Ethernet links into a single logical link.
Chapter 3: Configuring Switching Information | 75 GS716Tv2 and GS724Tv3 Software Administration Manual LAG Configuration Use the LAG (Port Channel) Configuration page to group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel.
76 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Active Ports . A listing of the ports that are actively participating members of this Port Channel. A maximum of 4 ports can be assigned to a port channel.
Chapter 3: Configuring Switching Information | 77 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click the box below each port to include in the LAG. The following figure shows an example of how to configure LAG1 with ports e1–e4 as members.
78 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 3. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch. 4. If you make any changes to this page, click Apply to send the updated configuration to the switch.
Chapter 3: Configuring Switching Information | 79 GS716Tv2 and GS724Tv3 Software Administration Manual Note: You cannot select ports that are not participating in a LAG 2. Configure the LACP Priority value for the selected port. The field range is 0–255.
80 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual VLANs Adding Virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing.
Chapter 3: Configuring Switching Information | 81 GS716Tv2 and GS724Tv3 Software Administration Manual To configure VLANs: 1. To add a VLAN, configure the VLAN ID, name, and type, and then click Add . • VLAN ID . Specify the VLAN Identifier for the new VLAN.
82 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To display the VLAN Membership Configuration page, click Switching VLAN Advanced VLAN Membership . To configure VLAN membership: 1. From the VLAN ID field, select the VLAN to which you want to add ports.
Chapter 3: Configuring Switching Information | 83 GS716Tv2 and GS724Tv3 Software Administration Manual • Tag All : Select the ports on which all frames transmitted for this VLAN will be tagged. All the ports will be included in the VLAN. • Remove All : This selection has the effect of excluding all ports from the selected VLAN.
84 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure PVID information: 1. To configure PVID settings for a physical port, click PORTS . 2. To configure PVID settings for a Link Aggregation Group (LAG), click LAGS .
Chapter 3: Configuring Switching Information | 85 GS716Tv2 and GS724Tv3 Software Administration Manual 6. Specify how you want the port to handle untagged and priority tagged frames. Whichever you select, VLAN tagged frames will be forwarded in accordance with the IEEE 802.
86 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Voice VLAN Configure the Voice VLAN settings for ports that carry traffic from IP phones. The Voice VLAN feature can help ensure that the sound quality of an IP phone is safeguarded from deteriorating when the data traffic on the port is high.
Chapter 3: Configuring Switching Information | 87 GS716Tv2 and GS724Tv3 Software Administration Manual 5. From the Voice VLAN Aging Time field, specify the amount of time after the last IP phone’s OUI is aged out for a specific port. The port will age out after the bridge and voice aging time.
88 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure Voice VLAN port settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports.
Chapter 3: Configuring Switching Information | 89 GS716Tv2 and GS724Tv3 Software Administration Manual.
90 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Auto-VoIP The Auto-VoIP automatically makes sure that time-sensitive voice traffic is given priority over data traffic on ports that have this feature enabled.
Chapter 3: Configuring Switching Information | 91 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Auto-VoIP settings: 1. Select the check box next to the port to configure. You can select multiple check boxes to apply the same setting to all selected ports.
92 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure OUI settings: 1. To add a new OUI prefix, type the VOIP OUI prefix in the Telephony OUI(s) field, provide a description of the prefix, and click Add .
Chapter 3: Configuring Switching Information | 93 GS716Tv2 and GS724Tv3 Software Administration Manual Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of bridges. STP also provides one path between end stations on a network, eliminating loops.
94 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure STP settings on the switch: 1. From the Spanning Tree State field, specify whether to enable or disable Spanning Tree operation on the switch.
Chapter 3: Configuring Switching Information | 95 GS716Tv2 and GS724Tv3 Software Administration Manual 6. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes occur immediately. The following table describes the STP Status information displayed on the screen.
96 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST settings: 1. Specify values for CST in the appropriate fields: • Bridge Priority . When switches or bridges are running STP, each is assigned a priority.
Chapter 3: Configuring Switching Information | 97 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you make any configuration changes, click Apply to send the updated configuration to the switch. Configuration changes take place immediately.
98 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure CST port settings: 1. To configure CST settings for a physical port, click PORTS . 2. To configure CST settings for a Link Aggregation Group (LAG), click LAGS .
Chapter 3: Configuring Switching Information | 99 GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Link . Specifies if the specified port is an Edge Port with the CST. Possible values are Enable or Disable. The default is Disable. • Port State .
100 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the CST Status information displayed on the screen.
Chapter 3: Configuring Switching Information | 101 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. Field Description Interface Select a physical or port channel interface to configure.
102 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Rapid STP Use the Rapid STP page to view information about Rapid Spanning Tree (RSTP) port status. To display the Rapid STP page, click Switching > STP > Advanced RSTP .
Chapter 3: Configuring Switching Information | 103 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MST Configuration Use the Spanning Tree MST Configuration page to configure Multiple Spanning Tree (MST) on the switch.
104 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • VLAN ID . The menu contains all VLANs configured on the switch. Select a VLAN to associate with the MST instance. 2. To delete an MST instance, select the check box next to the instance and click Delete .
Chapter 3: Configuring Switching Information | 105 GS716Tv2 and GS724Tv3 Software Administration Manual.
106 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Note: If no MST instances have been configured on the switch, the page displays a “No MSTs Available” message. To configure MST port settings: 1.
Chapter 3: Configuring Switching Information | 107 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the screen with the latest MST information. STP Statistics Use the Spanning Tree Statistics page to view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port.
108 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the STP Statistics page. Click Refresh to update the screen with the latest STP statistics information.
Chapter 3: Configuring Switching Information | 109 GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.
110 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual IGMP Snooping Internet Group Management Protocol (IGMP) Snooping is a feature that allows a switch to forward multicast traffic intelligently on the switch.
Chapter 3: Configuring Switching Information | 111 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping: 1. Enable or disable IGMP Snooping on the switch. • Enable . The switch snoops all IGMP packets it receives to determine which segments should receive packets directed to the group address.
112 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table displays information about the global IGMP snooping status and statistics on the page.
Chapter 3: Configuring Switching Information | 113 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP Snooping interface settings: 1. To configure IGMP Snooping settings for a physical port, click PORTS . 2. To configure IGMP Snooping settings for a Link Aggregation Group (LAG), click LAGS .
114 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual • Fast Leave Admin Mode . Select the Fast Leave mode for a particular interface from the menu. The default is Disable. 6. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
Chapter 3: Configuring Switching Information | 115 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear one or all of the IGMP Snooping entries. • Click Refresh to reload the page and display the most current information.
116 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the information on the screen with the most current data. MFDB Statistics Use the multicast forwarding database Statistics page to view statistical information about the MFDB table.
Chapter 3: Configuring Switching Information | 117 GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available on the MFDB Statistics page: Click Refresh to update the information on the screen with the most current data.
118 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual To configure IGMP snooping settings for VLANs: 1. To enable IGMP snooping on a VLAN, enter the VLAN ID in the appropriate field and configure the IGMP Snooping values: • Fast Leave Admin Mode .
Chapter 3: Configuring Switching Information | 119 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To disable IGMP snooping on a VLAN and remove it from the list, select the check box next to the VLAN ID and click Delete .
120 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual 1. From the Querier Admin Mode field, enable or disable the administrative mode for IGMP Snooping Querier. 2. In the Snooping Querier Address field, specify the IP address to be used as source address in periodic IGMP queries.
Chapter 3: Configuring Switching Information | 121 GS716Tv2 and GS724Tv3 Software Administration Manual • Disabled . Upon seeing another querier of the same version in the VLAN, the snooping querier moves to the non-querier state.
122 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to redisplay the page with the latest information from the switch. Forwarding Database The forwarding database maintains a list of MAC addresses after having received a packet from this MAC address.
Chapter 3: Configuring Switching Information | 123 GS716Tv2 and GS724Tv3 Software Administration Manual To access this page, click Switching Address Table Basic Address Table . To search for an entry in the MAC Address Table: 1. Use the Search By field to search for MAC Addresses by MAC Address , VLAN ID , or Interface .
124 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information available for each entry in the address table. Dynamic Address Configuration Use the Dynamic Addresses page to set the amount of time to keep a learned MAC address entry in the forwarding database.
Chapter 3: Configuring Switching Information | 125 GS716Tv2 and GS724Tv3 Software Administration Manual Note: IEEE 802.1D recommends a default of 300 seconds, which is the factory default. 2. Click Cancel to cancel the configuration on the screen and reset the data on the screen to the latest value of the switch.
126 | Chapter 3: Configuring Switching Information GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 4: Configuring Quality of Service | 127 4. Configuring Quality of Service 4 Use the features in the QoS tab to configure Quality of Service (QoS) settings on the switch.
128 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing.
Chapter 4: Configuring Quality of Service | 129 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global CoS settings: 1. Select the Global radio button to configure the trust mode settings that apply to all interfaces. Alternatively, you can select the Interface radio button to apply trust mode settings to individual interfaces.
130 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure CoS settings for an interface: 1. To configure CoS settings for a physical port, click PORTS . 2. To configure CoS settings for a Link Aggregation Group (LAG), click LAGS .
Chapter 4: Configuring Quality of Service | 131 GS716Tv2 and GS724Tv3 Software Administration Manual Interface Queue Configuration Use the Interface Queue Configuration page to define what a particular queue does by configuring switch egress queues.
132 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Queue ID . Use the menu to select the queue to be configured. • Minimum Bandwidth . Enter a percentage of the maximum negotiated bandwidth for the selected queue on the interface.
Chapter 4: Configuring Quality of Service | 133 GS716Tv2 and GS724Tv3 Software Administration Manual If you map 802.1p priorities to individual interfaces, select the Interface radio button and then select the interface from the drop-down menu. The interface settings override the global settings for 802.
134 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To map DSCP values to queues: 1. For each DSCP value, select a hardware queue to associate with the value. The traffic class is the hardware queue for a port.
Chapter 4: Configuring Quality of Service | 135 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors.
136 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual Diffserv Configuration Use the Diffserv Configuration page to display DiffServ General Status Group.
Chapter 4: Configuring Quality of Service | 137 GS716Tv2 and GS724Tv3 Software Administration Manual Class Configuration Use the Class Configuration page to add a new DiffServ class name, or to rename or delete an existing class. The page also allows you to define the criteria to associate with a DiffServ class.
138 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual To configure the class match criteria: 1. Click the class name for an existing class. The class name is a hyperlink. The following figure shows the configuration fields for the class.
Chapter 4: Configuring Quality of Service | 139 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Define the criteria to associate with a DiffServ class: • Reference Class . Selects a class to start referencing for criteria. A specified class can reference at most one other class of the same type.
140 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Destination IP Address. Requires a packet’s destination port IP address to match the address listed here. In the IP Address field, enter a valid destination IP address in dotted decimal format.
Chapter 4: Configuring Quality of Service | 141 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a DiffServ policy: 1. To create a new policy, enter a policy name in the Policy Selector field, select the existing DiffServ class to associate with the policy, and click Add .
142 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual The policy name is a hyperlink. The following figure shows the configuration fields for the policy.
Chapter 4: Configuring Quality of Service | 143 GS716Tv2 and GS724Tv3 Software Administration Manual 2. Select the queue to which packets will of this policy-class will be assigned. 3. Configure the policy attributes:. • Drop . Select this option to drop packets for this policy-class.
144 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual • Simple Policy . Use this attribute to establish the traffic policing style for the specified class. The simple form of the policy command uses a single data rate and burst size, resulting in two outcomes: confirm and violate.
Chapter 4: Configuring Quality of Service | 145 GS716Tv2 and GS724Tv3 Software Administration Manual • Mark IP DSCP . These packets are marked by DiffServ with the specified DSCP value before being presented to the system forwarding element. This selection requires that the DSCP value field be set.
146 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual 4. Select the check box next to the port or LAG to configure. You can select multiple ports and LAGs to apply the same setting to the selected interfaces.
Chapter 4: Configuring Quality of Service | 147 GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to update the page with the most current information. Discarded Packets Displays the total number of packets discarded for all class instances in this service policy for any reason due to DiffServ treatment.
148 | Chapter 4: Configuring Quality of Service GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 5: Managing Device Security | 149 5. Managing Device Security 5 Use the features available from the Security tab to configure management security settings for port, user, and server security.
150 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Management Security Settings From the Management Security Settings page, you can configure the login pass.
Chapter 5: Managing Device Security | 151 GS716Tv2 and GS724Tv3 Software Administration Manual Note: In the case of a lost password, press the Factory Default Reset button on the front panel for more than one second to restore the factory default. The reset button will only reboot the device.
152 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual configured as the primary server. If no servers are configured as the primary server, the current server is the most recently added RADIUS server. To configure global RADIUS server settings: 1.
Chapter 5: Managing Device Security | 153 GS716Tv2 and GS724Tv3 Software Administration Manual To configure a RADIUS server: 1. To add a RADIUS server, specify the settings the following list describes, and click Add . • In the Server Address field, specify the IP address of the RADIUS server to add.
154 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to clear the authentication server and RADIUS statistics to their default values.
Chapter 5: Managing Device Security | 155 GS716Tv2 and GS724Tv3 Software Administration Manual To configure the RADIUS accounting server: 1. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add.
156 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes RADIUS accounting server statistics available on the page. Use the buttons at the bottom of the page to perform the following actions: • Click Clear Counters to reset all statistics to their default value.
Chapter 5: Managing Device Security | 157 GS716Tv2 and GS724Tv3 Software Administration Manual The TACACS+ protocol ensures network security through encrypted protocol exchanges between the device and TACACS+ server.
158 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure TACACS+ server settings: 1. To add a new TACACS+ server, select Add from the TACACS+ Server field, enter the IP address of the server to add, and click Apply .
Chapter 5: Managing Device Security | 159 GS716Tv2 and GS724Tv3 Software Administration Manual Authentication List Configuration Use the Authentication List page to configure the default login list. A login list specifies one or more authentication methods to validate switch or port access for the admin user.
160 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual 3. Use the menu in the 2 column to select the authentication method, if any, that should appear second in the selected authentication login list. This is the method that will be used if the first method times out.
Chapter 5: Managing Device Security | 161 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Management Access From the Access page, you can configure HTTP and Secure HTTP access to the GS716T or GS724T management interface. You can also configure Access Control Profiles and Access Rules.
162 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual This timeout is unaffected by the activity level of the session. The value must be in the range of (0–168) hours. A value of zero corresponds to an infinite timeout.
Chapter 5: Managing Device Security | 163 GS716Tv2 and GS724Tv3 Software Administration Manual The currently configured value is shown when the Web page is displayed. The default value is Disable. You can only download SSL certificates when the HTTPS Admin mode is disabled.
164 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure the certificate download settings for HTTPS sessions: 1. From the File Type menu, select the type of SSL certificate to download, which can be one of the following: • SSL Trusted Root Certificate PEM File .
Chapter 5: Managing Device Security | 165 GS716Tv2 and GS724Tv3 Software Administration Manual Access Profile Configuration Use the Access Profile Configuration page to configure settings that control management access to the switch. Access profile configuration requires three steps: 1.
166 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The Profile Summary table shows the rules that are configured for the profile, as the following table describes. Click Refresh to update the page with the most current information.
Chapter 5: Managing Device Security | 167 GS716Tv2 and GS724Tv3 Software Administration Manual To configure access profile rules: 1. To add an access profile rule, configure the following settings and click Add . • Rule Type : Specify whether the rule permits or denies access to the GS716T or GS724T management interface.
168 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual Port Authentication In port-based authentication mode, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions.
Chapter 5: Managing Device Security | 169 GS716Tv2 and GS724Tv3 Software Administration Manual To configure global 802.1X settings: 1. Select the appropriate radio button in the Port Based Authentication State field to enable or disable 802.1X administrative mode on the switch.
170 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure 802.1X settings for the port:.
Chapter 5: Managing Device Security | 171 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the select ports, or select the check box in the heading row to apply the same settings to all ports.
172 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Supplicant Timeout . Defines the amount of time that lapses before EAP requests are resent to the user. The field value is in seconds. The field default is 30 seconds.
Chapter 5: Managing Device Security | 173 GS716Tv2 and GS724Tv3 Software Administration Manual 4. Click Initialize to begin the initialization sequence on the selected port(s). This button is only selectable if the control mode is auto . If the button is not selectable, it will be grayed out.
174 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the fields on the Port Summary page.
Chapter 5: Managing Device Security | 175 GS716Tv2 and GS724Tv3 Software Administration Manual • Security MAC Address on page 181 • Protected Ports Membership on page 181 MAC Filter Configuration Use the MAC Filter Configuration page to create MAC filters that limit the traffic allowed into and out of specified ports on the system.
176 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual e. Click the orange bar under the Destination Port Members heading to display the available ports.
Chapter 5: Managing Device Security | 177 GS716Tv2 and GS724Tv3 Software Administration Manual Storm Control A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port. Forwarded message responses can overload network resources and/or cause the network to time out.
178 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual • Disable . Do not use storm control. • Unknown Unicast . If the rate of unknown L2 unicast (destination lookup failure) traffic ingressing on an interface increases beyond the configured threshold, the traffic will be dropped.
Chapter 5: Managing Device Security | 179 GS716Tv2 and GS724Tv3 Software Administration Manual 3. If you change the mode, click Apply to apply the change to the system. The Port Security Violation table shows information about violations that occurred on ports that are enabled for port security.
180 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure port security settings: 1. To configure port security settings for a physical port, click PORTS. 2. To configure port security settings for a Link Aggregation Group (LAG), click LAGS.
Chapter 5: Managing Device Security | 181 GS716Tv2 and GS724Tv3 Software Administration Manual 7. If you make changes to the page, click Apply to apply the changes to the system. Security MAC Address Use the Security MAC Address page to convert a dynamically learned MAC address to a statically locked address.
182 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To display the Protected Ports Membership page, click the Security Traffic Control Protected Ports link. To configure protected ports: 1. Click the orange bar to display the available ports.
Chapter 5: Managing Device Security | 183 GS716Tv2 and GS724Tv3 Software Administration Manual Configuring Access Control Lists Access Control Lists (ACLs) ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources.
184 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To use the ACL Wizard: 1. Determine the type of ACL to configure and create a MAC ACL, standard IP ACL, or extended IP ACL. • To permit or deny traffic based on the Source MAC Address, create a MAC ACL.
Chapter 5: Managing Device Security | 185 GS716Tv2 and GS724Tv3 Software Administration Manual 1. Use the MAC ACL page to create the ACL ID. 2. Use the MAC Rules page to create rules for the ACL. 3. Use the MAC Binding Configuration page to assign the ACL by its ID number to a port.
186 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual MAC Rules Use the MAC Rules page to define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded.
Chapter 5: Managing Device Security | 187 GS716Tv2 and GS724Tv3 Software Administration Manual • Deny: Drops packets that meet the ACL criteria. • Assign Queue . Specifies the hardware egress queue identifier used to handle all packets matching this ACL rule.
188 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual the value given for that bit. The valid format is xx:xx:xx:xx:xx:xx. A MAC mask of 00:00:00:00:00:00 matches a single MAC address. • VLAN . Requires a packet’s VLAN ID to match the ID listed here.
Chapter 5: Managing Device Security | 189 GS716Tv2 and GS724Tv3 Software Administration Manual A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number.
190 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the information displayed in the MAC Binding Table . To delete a MAC ACL-to-interface binding, select the check box next to the interface and click Delete .
Chapter 5: Managing Device Security | 191 GS716Tv2 and GS724Tv3 Software Administration Manual The IP ACL area shows the current size of the ACL table versus the maximum size of the ACL table. The current size is equal to the number of configured IPv4 plus the number of configured MAC ACLs.
192 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule, select the ACL ID to add the rule to, complete the fields described in the following list, and click Add .
Chapter 5: Managing Device Security | 193 GS716Tv2 and GS724Tv3 Software Administration Manual subnet mask. A wildcard mask is in essence the inverse of a subnet mask. For example, to apply the rule to all hosts in the 192.168.1.0/24 subnet, you type 0.
194 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual To configure rules for an IP ACL: 1. To add an IP ACL rule to an extended IP ACL, select the ACL ID to add the rule to, select the check box in the Extended ACL Rule table, and click Add .
Chapter 5: Managing Device Security | 195 GS716Tv2 and GS724Tv3 Software Administration Manual • Protocol Type . Requires a packet’s protocol to match the protocol listed here. Select a type from the drop down menu or enter the protocol number in the available field.
196 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual DSCP value from the menu. To specify a numeric value in the available field, select Other from the menu and type an integer from 0 to 63 in the field.
Chapter 5: Managing Device Security | 197 GS716Tv2 and GS724Tv3 Software Administration Manual To configure IP ACL interface bindings: 1. Select an existing IP ACL from the ACL ID menu. The packet filtering direction for ACL is Inbound, which means the IP ACL rules are applied to traffic entering the port.
198 | Chapter 5: Managing Device Security GS716Tv2 and GS724Tv3 Software Administration Manual IP Binding Table Use the IP Binding Table page to view or delete the IP ACL bindings. To display the IP Binding Table, click Security ACL, then click the Advanced Binding Table link.
Chapter 6: Monitoring the System | 199 6. Monitoring the System 6 Use the features available from the Monitoring tab to view a variety of information about the switch and its ports and to configure how the switch monitors events.
200 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Ports The pages available from the Ports link contain a variety of information about the number and type of traffic transmitted from and received on the switch.
Chapter 6: Monitoring the System | 201 GS716Tv2 and GS724Tv3 Software Administration Manual Switch Statistics The Switch Statistics page displays detailed statistical information about the traffic the switch handles. To access the Switch Statistics page, click Monitoring Ports Switch Statistics .
202 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Multicast Packets Received The total number of packets received that were directed to a multicast address. This number does not include packets directed to the broadcast address.
Chapter 6: Monitoring the System | 203 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the statistics counters, resetting all switch summary and detailed statistics to default values.
204 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • To clear all the counters for all ports on the switch, select the check box in the row heading and click Clear .
Chapter 6: Monitoring the System | 205 GS716Tv2 and GS724Tv3 Software Administration Manual Port Detailed Statistics The Port Detailed Statistics page displays a variety of per-port traffic statistics. To access the Port Detailed page, click the Monitoring Ports tab, and then click Port Detailed Statistics .
206 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Channel ID If the port is a member of a port channel, the port channel's interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree.
Chapter 6: Monitoring the System | 207 GS716Tv2 and GS724Tv3 Software Administration Manual Packets RX and TX 128-255 Octets The total number of packets (including bad packets) received or transmitted that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
208 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of good packets received that were directed to a multicast address.
Chapter 6: Monitoring the System | 209 GS716Tv2 and GS724Tv3 Software Administration Manual Reserved Address Discards The number of frames discarded that are destined to an IEEE 802.
210 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Broadcast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to the Broadcast address, including those that were discarded or not sent.
Chapter 6: Monitoring the System | 211 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear all the counters. This resets all statistics for this port to the default values.
212 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual The following table describes the EAP statistics displayed on the screen.
Chapter 6: Monitoring the System | 213 GS716Tv2 and GS724Tv3 Software Administration Manual System Logs The switch may generate messages in response to events, faults, or errors occurring on the platform as well as changes in configuration or other occurrences.
214 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Memory Logs The in-memory log stores messages in memory based upon the settings for message component and severity. Use the Memory Logs page to set the administrative status and behavior of logs in the system buffer.
Chapter 6: Monitoring the System | 215 GS716Tv2 and GS724Tv3 Software Administration Manual The Memory Log table also appears on the Memory Log page. The rest of the page displays the Memory Log messages. The format of the log message is the same for messages that are displayed for the message log, persistent log, or console log.
216 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual • The second log type is the system operation log . The system operation log stores the last N messages received during system operation. This log always has the log full operation attribute set to overwrite.
Chapter 6: Monitoring the System | 217 GS716Tv2 and GS724Tv3 Software Administration Manual • Critical (2): The third highest warning level. A critical log is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional.
218 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual To configure local log server settings: 1. Use the radio buttons in the Admin Status field to determine whether to send log messages to the remote syslog hosts configured on the switch.
Chapter 6: Monitoring the System | 219 GS716Tv2 and GS724Tv3 Software Administration Manual 3. To modify the settings for an existing host, select the check box next to the host, change the desired information, and click Apply .
220 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Click Clear Counters to clear all the counters. This resets all statistics for the trap logs to the default values. Event Logs Use the Event Log page to display the event log, which is used to hold error messages for catastrophic events.
Chapter 6: Monitoring the System | 221 GS716Tv2 and GS724Tv3 Software Administration Manual Use the buttons at the bottom of the page to perform the following actions: • Click Clear to clear the messages out of the Event Log. • Click Refresh to refresh the data on the screen and display the most current information.
222 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual Port Mirroring The page under the Mirroring link allows you to view and configure port mirroring on the system. Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer.
Chapter 6: Monitoring the System | 223 GS716Tv2 and GS724Tv3 Software Administration Manual To configure Port Mirroring: 1. Select the check box next to a port to configure it as a source port. 2. In the Destination Port field, specify the port to which port traffic is be copied.
224 | Chapter 6: Monitoring the System GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 7: Maintenance | 225 7. Maintenance 7 Use the features available from the Maintenance tab to help you manage the switch. The Maintenance tab contains links to the following features: • Reset.
226 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Reset The Reset menu contains links to the following options: • Device Reboot on page 226 • Factory Default on page 226 Device Reboot Use the Device Reboot page to reboot the GS716T or GS724T.
Chapter 7: Maintenance | 227 GS716Tv2 and GS724Tv3 Software Administration Manual To reset the switch to the factory default settings: 1. Select the check box on the page.
228 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Upload File From Switch The switch supports system file uploads from the switch to a remote system by using TFTP. Use the File Upload page to upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to an TFTP server on the network.
Chapter 7: Maintenance | 229 GS716Tv2 and GS724Tv3 Software Administration Manual 5. In the Transfer File Path field, specify the path on the TFTP server where you want to put the file. You may enter up to 32 characters. Include the backslash at the end of the path.
230 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Download File To Switch The switch supports system file downloads from a remote system to the switch by using either TFTP or HTTP.
Chapter 7: Maintenance | 231 GS716Tv2 and GS724Tv3 Software Administration Manual while the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupt, the system automatically boots from the non-active image.
232 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual To activate a software image that you download to the switch, see File Management on page 234. HTTP File Download Use the HTTP File Download page to download files of various types to the switch using an HTTP session (for example, via your Web browser).
Chapter 7: Maintenance | 233 GS716Tv2 and GS724Tv3 Software Administration Manual • SSL DH Strong Encryption Parameter PEM File : SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded). 2. If you are downloading an GS716T or GS724T image (Code), select the image on the switch to overwrite.
234 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual File Management The system maintains two versions of the GS716T or GS724T software in permanent storage. One image is the active image, and the second image is the backup image.
Chapter 7: Maintenance | 235 GS716Tv2 and GS724Tv3 Software Administration Manual Note: After activating an image, you must perform a system reset of the switch in order to run the new code. 4. To remove the selected image from permanent storage on the switch, select the Delete Image check box.
236 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual Click Refresh to display the latest information from the switch. For information about how to update or change the system images, see File Management on page 234. Current-active Displays the currently active image on this switch.
Chapter 7: Maintenance | 237 GS716Tv2 and GS724Tv3 Software Administration Manual Troubleshooting The Troubleshooting menu contains links to the following options: • Ping on page 237 • Traceroute on page 238 Ping Use the Ping page to tell the switch to send a Ping request to a specified IP address.
238 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual • If successful, you will see “Reply From IP/Host: icmp_seq = 0. time = xx usec. Tx = x, Rx = x Min/Max/Avg RTT = x/x/x msec.” • If a reply to the ping is not received, you will see “Reply From IP/Host: Destination Unreachable.
Chapter 7: Maintenance | 239 GS716Tv2 and GS724Tv3 Software Administration Manual • MaxFail . Specify the maximum number of failures allowed in the session. The valid range is 0–255. • Interval . Specify the time between probes in seconds. The valid range is 1–60.
240 | Chapter 7: Maintenance GS716Tv2 and GS724Tv3 Software Administration Manual.
Chapter 8: Help | 241 8. Help 8 Use the features available from the Help tab to connect to online resources for assistance. The Help tab contains a link to Online Help .
242 | Chapter 8: Help GS716Tv2 and GS724Tv3 Software Administration Manual User Guide Use the User Guide page to access the GS716Tv2 and GS724Tv3 Software Administration Manual (the guide you are now reading) that is available on the NETGEAR Website. To access the User Guide page, click Help User Guide .
Chapter 8: Help | 243 GS716Tv2 and GS724Tv3 Software Administration Manual.
Appendix A: Hardware Specifications and Default Values | 244 A. Hardware Specifications and Default Values A GS716T and GS724T Gigabit Smart Switches Specifications The GS716T and GS724T Gigabit Smart Switches conform to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.
Appendix A: Hardware Specifications and Default Values | 245 GS716Tv2 and GS724Tv3 Software Administration Manual GS716T and GS724T Switch Performance GS716T and GS724T Switch Features and Defaults Po.
246 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Traffic Control Quality Of Service Security Feature Sets Supported Default Storm control All ports Disabled Jumbo frame All ports Disabled Max = 9216 bytes Feature Sets Supported Default Number of queues 4 N/A Port based N/A N/A 802.
Appendix A: Hardware Specifications and Default Values | 247 GS716Tv2 and GS724Tv3 Software Administration Manual System Setup Management Feature Sets Supported Default Boot code update 1 N/A DHCP/manual IP 1 DHCP enabled/192.168.0.239 Default gateway 1 192.
248 | Appendix A: Hardware Specifications and Default Values GS716Tv2 and GS724Tv3 Software Administration Manual Other Features Feature Sets Supported Default IGMP snooping v1/v2 All ports Disabled C.
Appendix B: Configuration Examples | 249 B. Configuration Examples B This chapter contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) on page 250 • Access Control Lists (ACLs) on page 252 • Differentiated Services (DiffServ) on page 255 • 802.
250 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices.
Appendix B: Configuration Examples | 251 GS716Tv2 and GS724Tv3 Software Administration Manual • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
252 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Access Control Lists (ACLs) ACLs ensure that only authorized users have access to specific resources while blocking off any unwarranted attempts to reach network resources.
Appendix B: Configuration Examples | 253 GS716Tv2 and GS724Tv3 Software Administration Manual • Destination MAC Mask: 00:00:00:00:FF:FF • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 For more information about MAC ACL rules, see MAC Rules on page 186.
254 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual departments. Traffic from the Finance department is identified by each packet’s network IP address. 1. From the IP ACL screen, create a new IP ACL with an IP ACL ID of 1 (See IP ACL on page 190).
Appendix B: Configuration Examples | 255 GS716Tv2 and GS724Tv3 Software Administration Manual Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network deliver the data in a timely fashion, although there is no guarantee that it will.
256 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP etc.
Appendix B: Configuration Examples | 257 GS716Tv2 and GS724Tv3 Software Administration Manual • Dropping : drop a packet upon arrival. This is useful for emulating access control list operation using DiffServ, especially when DiffServ and ACL cannot co-exist on the same interface.
258 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual DiffServ Example Configuration To create a DiffServ Class/Policy and attach it to a switch interface, follow these steps: 1.
Appendix B: Configuration Examples | 259 GS716Tv2 and GS724Tv3 Software Administration Manual All UDP packet flows destined to the 192.12.2.0 network with an IP source address from the 192.12.1.0 network that have a Layer 4 Source port of 4567 and Destination port of 4568 from this switch on ports 7 and 8 are assigned to hardware queue 3.
260 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 802.1X Local Area Networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached.
Appendix B: Configuration Examples | 261 GS716Tv2 and GS724Tv3 Software Administration Manual A Port Access Entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator : A Port that enforces authentication before allowing access to services available via that Port.
262 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual 3. In the Guest VLAN field for ports e1–e8, enter 150 to assign these ports to the guest VLAN. You can configure additional settings to control access to the network through the ports.
Appendix B: Configuration Examples | 263 GS716Tv2 and GS724Tv3 Software Administration Manual MSTP Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.
264 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual An MST Region comprises of one or more MSTP Bridges with the same MST Configuration Identifier, using the same MSTIs, and which have no Bridges attached that cannot receive and transmit MSTP BPDUs.
Appendix B: Configuration Examples | 265 GS716Tv2 and GS724Tv3 Software Administration Manual Perform the following procedures on each switch to configure MSTP: 1. Use the VLAN Configuration screen to create VLANs 300 and 500 (see VLAN Configuration on page 80).
266 | Appendix B: Configuration Examples GS716Tv2 and GS724Tv3 Software Administration Manual Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the Forwarding state. 8. Click Apply . You can use the CST Port Status screen to view spanning tree information about each port.
Appendix B: Configuration Examples | 267 GS716Tv2 and GS724Tv3 Software Administration Manual.
Appendix C: Notification of Compliance | 268 C. Notification of Compliance NETGEAR Wired Products C Certificate of the Manufacturer/Importer It is hereby certified that the ProSafe™ GS716T and 724T Gigabit Smart Switches has been suppressed in accordance with the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992.
Appendix C: Notification of Compliance | 269 GS716Tv2 and GS724Tv3 Software Administration Manual Europe – EU Declaration of Conformity Marking by the above symbol indicates compliance with the Essential Requirements of the R&TTE Directive of the European Union (1999/5/EC).
270 | Appendix C: Notification of Compliance GS716Tv2 and GS724Tv3 Software Administration Manual FCC Requirements for Operation in the United States FCC Information to User This product does not contain any user serviceable components and is to be used with approved antennas only.
Appendix C: Notification of Compliance | 271 GS716Tv2 and GS724Tv3 Software Administration Manual FCC Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.
Index | 272 Index Numerics 802.1X 151 , 168 example configuration 260 A access control ACL example configuration 252 ACLs 183 management interface 161 authentication 802.1X 168 , 260 enable 28 list 159 port-based 168 RADIUS 151 , 153 SNMP 28 , 50 , 51 TACACS+ 156 Auto-Video 109 C certificate 163 changing the password 19 , 150 Configuration 802.
Index | 273 GS716Tv2 and GS724Tv3 Software Administration Manual E EAP 211 EAPOL 212 F file management 234 firmware 21 firmware download 230 G getting started 10 Green Ethernet 46 , 72 guest VLAN configuration 261 H help, HTML-based 26 HTTP 161 management interface access 18 secure 161 using to download files 232 HTTPS 162 I ICMP 41 IEEE 802.
274 | Index GS716Tv2 and GS724Tv3 Software Administration Manual R RADIUS 150 server 151 statistics 153 reboot 19 , 226 reset button 151 configuration to defaults 226 switch 226 RSTP 93 S Security MAC.
Index | 275 GS716Tv2 and GS724Tv3 Software Administration Manual.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il NETGEAR GS724TS-100NAS è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del NETGEAR GS724TS-100NAS - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso NETGEAR GS724TS-100NAS imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul NETGEAR GS724TS-100NAS ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il NETGEAR GS724TS-100NAS, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del NETGEAR GS724TS-100NAS.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il NETGEAR GS724TS-100NAS. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo NETGEAR GS724TS-100NAS insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
