User Manual 16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management G S 7 1 6TP G S 7 1 6TP P May 2021 202-12114-02 NETGEAR, Inc.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Support and Community Visit netgear.com/support to get your questions answered and access the latest downloads. You can also check out our NETGEAR Community for helpful advice at community.netgear.com. Regulatory and Legal Si ce produit est vendu au Canada, vous pouvez accéder à ce document en français canadien à https://www.netgear.com/support/download/.
Contents Chapter 1 Get Started Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Switch management options and default management mode . . . . . . . . .12 Manage the switch by using the device UI . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Software requirements to use the device UI . . . . . . . . . . . . . . . . . . . . . . .13 Supported web browsers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the NETGEAR support website . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 Access the user manual online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Chapter 2 Configure System Information View or define switch system information . . . . . . . . . . . . . . . . . . . . . . . . . . .49 View or define system information . . . . . . . . . . . . . . . . . . . . . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View local LLDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111 View LLDP neighbors information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114 Configure DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .118 Configure the global DHCP snooping settings . . . . . . . . . . . . . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184 Configure IGMP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184 Configure IGMP snooping for interfaces. . . . . . . . . . . . . . . . . . . . . . . . 186 View, search, or clear the IGMP snooping table. . . . . . . . . . . . . . . . . . 188 Configure IGMP snooping for VLANs . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the TACACS+ settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256 Configure a TACACS+ server on the switch . . . . . . . . . . . . . . . . . . . . . 257 Modify the settings for a TACACS+ server on the switch . . . . . . . . . . 258 Remove a TACACS+ server from the switch . . . . . . . . . . . . . . . . . . . . . 259 Configure authentication lists . . . . . . . . . . . . . . . . . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View port statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 357 View and manage detailed port statistic . . . . . . . . . . . . . . . . . . . . . . . . 360 View or clear EAP and EAPoL statistics . . . . . . . . . . . . . . . . . . . . . . . . . 366 Perform a cable test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417 Creating policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417 DiffServ example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 418 802.1X access control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 Get Started This user manual describes how you can use the device user interface (UI) to configure and operate the following NETGEAR Smart Managed Pro switches: • GS716TP. NETGEAR 16-Port Gigabit PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 180W. • GS716TPP. NETGEAR 16-Port Gigabit Hi-Power PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and Cloud Management. This model provides a PoE power budget of 300W.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: In this manual, we refer to both switch models as the switch. Unless noted otherwise, all information applies to both switch models. Note: For more information about the topics covered in this manual, visit the support website at netgear.com/support. Note: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Switch management options and default management mode If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done. The switch provides administrative management options that let you configure, monitor, and control the network.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage the switch by using the device UI This manual describes how to use the device UI to manage and monitor the switch. For information about using the NETGEAR Insight app and Insight Cloud portal to manage the switch, visit netgear.com/insight and netgear.com/support/product/Insight.aspx. For knowledge base articles about NETGEAR Insight, visit netgear.com/support.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Navigation tabs, configuration menus, and page menu The following figure shows the System Information page for model GS716TP. Navigation tabs Configuration menus Logout button Language menu Help page Buttons Page menus Configuration status and options Figure 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Link Submenu links Figure 2. Switch page menu link and submenu links Configuration and status options The area directly under the configuration menus and to the right of the links displays the configuration information or status for the page you select. On pages that contain configuration options, you might be able to enter information into fields, select options from menus, select check boxes, and select radio buttons.
-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports User-defined fields User-defined fields can contain 1 to 159 characters, unless otherwise noted on the configuration web page. All characters can be used except for the ones stated in the following table (unless specifically noted in a procedure for a feature). Table 2. Invalid characters for user-defined fields Invalid characters for user-defined fields \ | / < > * ? Context-sensitive help When you log in to the swit
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the switch on-network and connected to the Internet The DHCP client on the switch is enabled by default, allowing a DHCP server or router on the network to assign an IP address to the switch. If the switch is on-network, connected to a DHCP server, and connected to the Internet, you can use a Windows-based computer to access the device UI of the switch and register the switch with NETGEAR.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use a Windows-based computer to access the switch on-network and connected to the Internet For the following procedure, the network must provide Internet access. To use a Windows-based computer to determine the switch IP address and access the switch on-network and connected to the Internet: 1. Cable the switch to a network with a router or DHCP server that manages IP addresses. 2. Power on the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To use the NETGEAR Insight app to discover the IP address of the switch in your network when the switch is connected to the Internet: 1. On your mobile device, go to the app store, search for NETGEAR Insight, and download the latest version of the app. 2. Connect your mobile device to the WiFi network of the WiFi router or access point to which the switch is connected. 3. Open the NETGEAR Insight mobile app. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Unzip the NSDT files, and click or double-click the .exe file (for example, NSDT-1.2.102.exe) to install the program on your computer. You might see the tool icon appear on your Mac dock or Windows desktop. 4. Reenable the security services on your computer. 5. Power on the switch. The DHCP server assigns the switch an IP address. 6. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Device UI login page displays: If you previously registered the switch with NETGEAR to activate your warranty, the Device UI login page displays. Enter one of the following credentials: - Device admin password: Enter the device admin password. The default device admin password is password.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Write down the switch IP address assigned by the DHCP server. For information about how to access the device UI of the switch, see Access the switch on-network and connected to the Internet when you know the switch IP address on page 23. Use other options to discover the switch IP address If the switch is on-network, you can use one of the following options to determine the switch IP address: • Access the DHCP server.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To access the switch on-network and connected to the Internet when you know the switch IP address: 1. Launch a web browser. 2. In the address field of your web browser, enter the IP address of the switch. The page that displays depends on whether your browser is connected to the Internet, whether the switch is connected to the Internet, and whether you activated the warranty. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Access the switch off-network and not connected to the Internet The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Do one of the following: • Enter a registration key. If you obtained a registration key, do the following: a. Type or paste the key. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 29. b. Click the Submit button. • Do not register at this time and access the device UI: Do the following: a. Click the Skip Registration & Access the UI button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports the switch online on page 28). If you do not have a NETGEAR account, you can create one. Alternatively, you can obtain a registration key and enter the key when the switch is offline so that you are no longer prompted to activate your warranty (see Register the switch with your NETGEAR account and get a registration key for offline access on page 29).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Register the switch You can register the switch online or offline to activate your warranty, after which you are no longer prompted to activate your warranty when you log in: • Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet create a NETGEAR account, click the Create account link, follow the directions onscreen to create an account, and register the switch with your email address and password. For information about the credentials, see Credentials for the device UI on page 26. 5.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The switch is registered with NETGEAR. 6. If the My Products page does not display, select My Products from the menu. The page adjusts. 7. Select the radio button for the newly registered switch, and click the Get Registration Key button. The registration key is displayed, and an email with the registration key is sent to your NETGEAR account email address.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Launch a web browser. 5. Open a web browser, and enter http://192.168.0.239. This is the default IP address of the switch. If you already disabled the DHCP client and assigned a static IP address to the switch, enter the static IP address of the switch. The Enter Registration Key page displays. 6. Enter the registration key. 7. Click the Submit button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Register to activate your warranty page displays. 4. Click the Skip Registration & Access the UI button. The Device UI login page displays. 5.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports configuration saved on the cloud server, including the switch device admin password (that is, the password is reset to the Insight network location password). - • If you use the Insight app or the Insight Cloud portal, you can temporarily change the management mode of the switch back to Directly Connect to Web Browser Interface.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select the NETGEAR Insight Mobile App and Insight Cloud Portal radio button. An Alert pop-up window displays. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A pop-up window displays. d. Navigate to a location on your computer and save the file. The file transfer begins. The page displays information about the file transfer progress. 12. Reset the switch to factory default settings: a. Select Maintenance > Reset > Factory Default. The Default Settings page displays. b.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically. 14. Reboot the switch: a. Select Maintenance > Reset > Device Reboot. The Device Reboot page displays. b. Select the check box. c. Click the Apply button. An Alert pop-up window displays. d. Click the OK button to confirm. The switch reboots. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select System > Device View.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the ports and port LEDs in the Device View. Port or port LED Color Description Ethernet port Black No Ethernet link is established. Solid green An Ethernet link is established. Solid red An error occurred on the port or the port is administratively disabled.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure interface settings The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. The physical ports are Gigabit interfaces and are numbered on the front panel. You configure the logical interfaces by using the software. The following table describes the naming convention for all interfaces available on the switch. Table 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use these links as follows: • To display all ports, click the 1 link. • To display all LAGs, click the LAG link. • To display all ports and LAGs, click the All link. The procedures in this section describe how to select the ports and LAGs to configure. The procedures assume that you are already logged in to the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Click the Go button. The check box associated with the interface is selected, the row for the selected interface is highlighted, and the interface number appears in the heading row. 4. Configure the desired settings. 5. Click the Apply button. Your settings are saved. To configure a single port: 1. Ensure that the page is displaying all ports, and not only the LAGs. 2. Select the check box next to the port number.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure multiple LAGs: 1. Click the LAG link or the All link to display the LAGs. 2. Select the check box next to each LAG to configure. The check box associated with each interface is selected, and the row for each selected interface is highlighted. 3. Configure the desired settings. 4. Click the Apply button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure all LAGs: 1. Click the LAG link to display only the LAG interfaces. 2. Select the check box in the heading row. The check box associated with every LAG is selected, and the rows for all LAGs are highlighted. 3. Configure the desired settings. 4. Click the Apply button. Your settings are saved. To configure multiple ports and LAGs: 1. Click the All link to display all ports and LAGs. 2.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Help > Online Help > User Guide.
2 2 Configure System Information This chapter contains the following sections: • View or define switch system information • Configure the switch IP address settings • Configure the IPv6 network interface • Configure the time settings • Configure Denial of Service settings • Configure the DNS settings • Configure green Ethernet settings • Use the Device View • Configure Power over Ethernet • Configure SNMP • Configure LLDP • Configure DHCP snooping • Set up PoE timer schedules 48
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View or define switch system information You can view or define system information, view temperature information, view fan information, and view software information. View or define system information When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. The default is blank. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. The default is blank. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description System Object OID The base object ID for the switch's enterprise MIB. Date & Time The current date and time. System Up Time The time in days, hours, and minutes since the last switch reboot. Base Mac Address Universally assigned hardware address of the switch. View the fan status The fan removes the heat generated by the power, CPU, and other components, and allow the switch to function normally.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable temperature and fan status information. Table 5. Fan status Field Description FAN The fan index used to identify the fan for the switch. Description The description of the fan temperature sensor. Type Specifies whether the fan module is fixed or removable. Speed The fan speed. Duty level (%) The duty level of the fan.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Scroll down to the Versions section. The following table describes the nonconfigurable information displayed in the Versions section of the System Information page. Field Description Model Name The model name of the switch. Boot Version The version of the bootloader software of the switch. Software Version The version number of the code currently running on the switch. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select System > Management > IP Configuration. The IP Configuration page displays. 7. Select the appropriate radio button to specify how to configure the network information for the switch device UI: • Dynamic IP Address (DHCP). Specifies that the switch must obtain the IP address through a DHCP server. • Dynamic IP Address (BOOTP). Specifies that the switch must obtain the IP address through a BootP server.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • The management station must be reconnected to the port in the new management VLAN. 10. Click the Apply button. Your settings are saved. Configure the IPv6 network interface To access the switch over an IPv6 network, you must initially configure the switch with IPv6 information (IPv6 prefix, prefix length, and default gateway).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select System > Management > IPv6 Network Configuration. The IPv6 Network Global Configuration page displays. 7. Next to Admin Mode, ensure that the Enable radio button is selected. 8. Determine how the switch acquires an IPv6 address: • IPv6 Address Auto Configuration Mode.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the IPv6 network neighbors You can view information about the IPv6 neighbors that the switch discovered through the network interface by using the Neighbor Discovery Protocol (NDP). To view the IPv6 Network Neighbor Table: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 6. IPv6 network interface neighbor table information (continued) Field Description IsRtr • • Neighbor State The state of the neighboring switch: • reachable (1). The neighbor is reachable by this switch. • stale (2). Information about the neighbor is scheduled for deletion. • delay (3). No information was received from the neighbor during the delay period. • probe (4).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select System > Management > Time > Time Configuration. 7. Select the Clock Source Local radio button. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 13. Click the Apply button. Your settings are saved. Configure the time settings with SNTP and configure the global SNTP settings To configure the time by using SNTP and configure the global SNTP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The local clock can be set to SNTP only if the following two conditions are met: • An SNTP server is configured. • The switch can contact the SNTP server. 8. Next to Client Mode, select the mode of operation of the SNTP client: • Unicast. SNTP operates in a point-to-point fashion.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 12. In the Broadcast Poll Interval field, specify the number of seconds between broadcast poll requests expressed as a power of 2. Broadcasts received prior to the expiry of this interval are discarded. The allowed range is 6 to 10. The default value is 6. 13. In the Unicast Poll Timeout field, specify the number of seconds to wait for an SNTP response to a unicast poll request. The allowed range is 1 to 30.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the SNTP global status If you configure the time settings with SNTP, you can view information about the switch’s SNTP client and the global SNTP status. To view information about the switch’s SNTP client and the SNTP global status: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Refresh button to update the page with the latest information about the switch. The following table displays the nonconfigurable SNTP Global Status information. Table 7. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 7. SNTP Global Status information (continued) Field Description Reference Clock ID The reference clock identifier of the server for the last received valid packet. Server mode The mode of the server for the last received valid packet. Unicast Server Max Entries The maximum number of unicast server entries that can be configured on this client.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports method is selected, SNTP information is accepted only from SNTP servers defined on the device using the SNTP Server Configuration page. The device retrieves synchronization information, either by actively requesting information or at every poll interval. You can view and modify information for adding and modifying Simple Network Time Protocol SNTP servers. Add an SNTP server To add an SNTP server: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports address is a DNS host name, then that host name is resolved into an IP address each time an SNTP request is sent to it. 9. If the UDP port on the SNTP server to which SNTP requests are sent is not the standard port (123), specify the port number in the Port field. The valid range is 1 to 65535. The default is 123. 10. In Priority field, specify the priority order which to query the servers.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 8. SNTP Server Status information (continued) Field Description Last Attempt Status The status of the last SNTP request or unsolicited message for both unicast and broadcast modes. If no message was received from a server, a status of Other is displayed. These values are appropriate for all operational modes: • Other. The status of the last request is unknown, or no SNTP responses were received. • Success.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select System > Management > Time > SNTP Server Configuration. The SNTP Server Configuration page displays. 7. Select the check box next to the configured server. 8. Specify new values in the available fields. 9. Click the Apply button. Your settings are saved. Remove an SNTP server To remove an SNTP server: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure daylight saving time settings You can configure settings for summer time, which is also known as daylight saving time. Used in some countries around the world, summer time is the practice of temporarily advancing clocks during the summer months. Typically clocks are adjusted forward one or more hours near the start of spring and are adjusted backward in autumn. To configure the daylight saving time settings: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select a Daylight Saving (DST) radio button: • Disable. Disable daylight saving time. • Recurring. Daylight saving time occurs at the same time every year. The start and end times and dates for the time shift must be manually configured. • Recurring EU. The system clock uses the standard recurring summer time settings used in countries in the European Union.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 9. Daylight saving setting is Recurring, Recurring EU, or Recurring USA (continued) Field Description Ends At These fields are used to configure the end values of date and time. • Week. Configure the end week. • Day. Configure the end day. • Month. Configure the end month. • Hours. Configure the end hours. • Minutes. Configure the end minutes. Offset Configure recurring offset in minutes.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the daylight saving time status The Daylight Saving (DST) Status section shows information about the summer time settings and whether the time shift for summer time is currently in effect. To view the daylight saving time status: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table displays the nonconfigurable information on the page. Table 11. Daylight Saving (DST) Status information Field Description Daylight Saving (DST) The Daylight Saving value, which is one of the following: • Disable • Recurring • Recurring EU • Recurring USA • Non Recurring Begins At Displays when the daylight saving time begins. This field is not displayed when daylight saving time is disabled.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Denial of Service ICMPv6. Enabling ICMPv6 DoS prevention causes the switch to drop ICMPv6 packets with a type set to ECHO_REQ (ping) and a size greater than the configured ICMPv6 packet size. • Denial of Service Ping of Death. Enabling Ping of Death DoS prevention causes the switch to drop ICMP ping packets that are larger than 65535 bytes. • Denial of Service IPv6 Fragment.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the DNS settings You can configure information about DNS servers that the network uses and how the switch operates as a DNS client. Configure the global DNS settings and add a DNS server You can configure the global DNS settings and DNS server information. To configure the global DNS settings and add a DNS server: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Disable or Enable radio button to specify whether to disable or enable the administrative status of the DNS client. • Enable. Allow the switch to send DNS queries to a DNS server to resolve a DNS domain name. The DNS is enabled by default. • Disable. Prevent the switch from sending DNS queries. 8. In the DNS Default Name field, enter the default DNS domain name to include in DNS queries.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the fields that are shown in the DNS Server Configuration table. Table 12. DNS Server Configuration information Field Description ID The identification of the DNS Server. Preference Shows the preference of the DNS server. The preferences are determined by the order in which they were entered. Remove a DNS server You can remove a DNS server that you no longer need.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure and view host name-to-IP address information You can manually map host names to IP addresses and view dynamic host mappings. Add a static entry to the dynamic host mapping table To add a static entry to the local dynamic host mapping table: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a required field. 8. In the IPv4/IPv6 Address field, enter the IP address to associate with the host name. 9. Click the Add button. Your settings are saved. The entry displays in the Dynamic Host Mapping table.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the host name or IP address in an entry of the dynamic host mapping table, view all entries, or clear all entries To change the host name or IP address in an entry of the dynamic host mapping table, view all entries, or clear all entries: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 13. Dynamic Host Mapping information (continued) Field Description Elapsed Time since the dynamic entry was last updated. Type The type of the dynamic entry. Addresses Lists the IP address associated with the host name. Configure green Ethernet settings You can configure the green Ethernet features to reduce power consumption.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Auto Power Down Mode Disable or Enable radio button. By default, this mode is disabled. When a port link is down, the underlying physical layer goes down for a short period and then checks for port link pulses again so that auto-negotiation remains possible. In this way, the switch saves power when no link partner is present for the port. 8. Select the EEE Mode Disable or Enable radio button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports that auto-negotiation remains possible. In this way, the switch saves power when no link partner is present for the port. 9. From the EEE mode menu, select Enable or Disable. By default, this mode is disabled for the port. Energy Efficient Ethernet (EEE) combines the MAC with a family of physical layers that support operation in a low power mode. It is defined by the IEEE 802.3az standard.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports budget of the switch, the power to the device on the highest-numbered PoE+ port is disabled to make sure that the devices connected to the higher-priority, lower-numbered PoE+ ports are supported first. It is important to note that although a device is listed as an 802.3at (PoE+) powered or 802.3af (PoE) powered device, it might not require the maximum power limit that is specified.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports on a port, the port PoE LED lights yellow, and the attached device does not receive power from the port. However, the switch continues to send data through the port connection.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select System > PoE > Advanced > PoE Port Configuration. The delivered power is stated in the Output Power (mW) column. Configure the global PoE settings and view PoE information You can configure the global PoE settings and view PoE information such as total power, threshold power, and consumed power. To configure the global PoE settings and view PoE information: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the System Usage Threshold field, enter a number from 1 to 99 to set the threshold level at which a trap is sent if the consumed power exceeds the threshold power. 8. From the Power Management mode menu, select the power management algorithm that the switch uses to deliver power to the requesting powered devices (PDs): • Static.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Medium. Medium priority. • High. High priority. • Critical. Critical priority. The port priority determines which ports can still deliver power after the total power delivered by the switch exceeds the total power budget. (In such a situation, the switch might not be able to deliver power to all connected devices.) If the same priority applies to two ports, the lower-numbered port receives higher priority. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 14. From the Timer Schedule menu, select a timer schedule or select None, which is the default selection. For information about setting up and configuring PoE timer schedules, see Set up PoE timer schedules on page 126. 15. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields on the page. Table 17.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 17. PoE Port Configuration (continued) Field Description Fault Status The error description when the PoE port is in a fault state. The possible values are as follows: • No Error. The port is not in any error state and can provide power. • MPS Absent. The port detected the absence of the main power supply, preventing the port from providing power. • Short.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Add an SNMP community: To add an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports access from only one station, use a management station IP mask value of 255.255.255.255, and use that machine’s IP address for client address. 9. In the Community String field, specify a community name. 10. From the Access Mode menu, select the access level for this community, which is either Read/Write or Read Only. 11. From the Status menu, select to enable or disable the community.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Click the Apply button. Your settings are saved. Delete an SNMP community To delete an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Add an SNMP trap receiver To add an SNMP trap receiver: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Add button. The receiver configuration is added. Modify information about an existing SNMP recipient To modify information about an existing SNMP recipient: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the supported MIBs You can view a list of all MIBs that are supported by the switch. To view the supported MIBs: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 18. SNMP supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description. Configure SNMPv3 users Any user can connect to the switch using the SNMPv3 protocol, but for authentication and encryption, the switch supports only one user (admin).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To enable authentication, select an Authentication Protocol radio button. You can select the MD5 radio button or the SHA radio button. With either of these options, the user login password is used as SNMPv3 authentication password. For information about how to configure the login password, see Change the device admin password for the device UI on page 245. 8. To enable encryption: a.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure LLDP global settings You can specify the global LLDP and LLDP-MED parameters that are applied to the switch. To configure global LLDP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Re-initializing Delay. The number of seconds to wait before attempting to re-initialize LLDP on a port after the LLDP operating mode on the port changes. • Transmit Delay. The minimum number of seconds to wait between transmissions of remote data change notifications to one or more SNMP trap receivers configured on the switch. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about how to configure the system name, see View or define switch system information on page 49. For information about how to configure the port description, see Configure the port settings and maximum frame size on page 135. 9. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes nonconfigurable information on the page. Table 19. LLDP-MED network policy information Field Description Network Policy Number The policy number.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • After registration, enter the device admin password.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description Port ID Subtype The type of information used to identify the interface in the Port ID field. Port ID The port number. Port Description The user-defined description of the port. For information about how to configure the port description, see Configure the port settings and maximum frame size on page 135. Advertisement The TLV advertisement status of the port. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description VLAN Type Specifies whether the VLAN associated with the policy is tagged or untagged. User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type. View LLDP neighbors information You can view the data that a specific interface receives from other LLDP-enabled systems. To view LLDP information received from a neighbor device: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If no information was received from a neighbor device, or if the link partner is not LLDP-enabled, no information displays. The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description Basic Details Chassis ID Subtype The type of data displayed in the Chassis ID field on the remote system. Chassis ID The remote 802 LAN device’s chassis. Port ID Subtype The type of data displayed in the remote system’s Port ID field. Port ID The physical address of the port on the remote system from which the data was sent. Port Description The user-defined description of the port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description Device Class The LLDP-MED endpoint device class. The possible device classes are as follows: • Endpoint Class 1 Indicates a generic endpoint class, offering basic LLDP services. • Endpoint Class 2 Indicates a media endpoint class, offering media streaming capabilities as well as all Class 1 features.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Field Description LLDP Unknown TLVs Type The unknown TLV type field. Value The unknown TLV value field. Configure DHCP snooping DHCP snooping is a useful feature that provides security by filtering untrusted DHCP messages and by building and maintaining a DHCP snooping binding table.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select System > Services > DHCP Snooping > Global Configuration. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • DHCP packets are dropped when the source MAC address does not match the client hardware address if MAC address validation is globally enabled. Enabled. The interface is considered to be trusted and forwards DHCP server messages without validation. 10. From the Invalid Packets menu, select the packet logging mode.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select System> Services > DHCP Snooping > Binding Configuration. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure DHCP snooping persistent settings You can configure the persistent location of the DHCP snooping bindings database. The bindings database can be stored locally on the device or on a remote system somewhere else in the network. The device must be able to reach the IP address of the remote system to send bindings to a remote database. To configure DHCP snooping persistent settings: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The delay allows the switch to collect as many entries as possible (new and removed) before writing them to the persistent file. You can specify from 15 to 86400 seconds. By default, the delay is 300 seconds. 9. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the DHCP snooping statistics. Table 21. DHCP Snooping Statistics information Field Description Interface The interface associated with the rest of the data in the row. MAC Verify Failures The number of DHCP messages that were dropped because the source MAC address and client hardware address did not match. MAC address verification is performed only if it is globally enabled.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • After registration, enter the device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Specify the settings for a recurring PoE timer schedule A recurring schedule allows you to set up a single schedule that starts at a particular date and that recurs either with a specific end date or indefinitely. For a single recurring PoE timer schedule, you can add a daily, weekly, and monthly schedule configuration. That is, these schedule configurations are not mutually exclusive but complement each other.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports c. Timer Schedule Entry. To add a new entry, select new. Selecting an existing entry lets you make changes to that entry. 8. In the Timer Schedule Configuration section, specify the recurrence pattern: a. In the Time Start field, enter the time of day in the HH:MM format to specify when the timer schedule must start. b.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the settings for a recurring PoE timer schedule entry You can change the settings for an existing recurring PoE timer schedule entry. (You cannot do this for an existing absolute PoE timer schedule.) To change the settings for an existing recurring PoE timer schedule entry: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete a PoE timer schedule entry You can delete a PoE timer schedule entry that you no longer need. To delete a PoE timer schedule entry: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete a PoE timer schedule You can delete a PoE timer schedule that you no longer need. All entries that are part of the PoE timer schedule are also deleted. To delete a PoE timer schedule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
3 3 Configure Switching This chapter contains the following sections: • Configure the port settings and maximum frame size • Configure link aggregation groups • Configure VLANs • Configure a voice VLAN • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure multicast • Manage IGMP snooping • View, search, and manage the MAC address table • Configure Layer 2 loop protection 134
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the port settings and maximum frame size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure the port settings and maximum frame size: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Frame Size field, specify the maximum Ethernet frame size that each interface can support. The frame size includes the Ethernet header, CRC, and payload. The range is 1522 to 10000. The default maximum frame size is 1522. 8. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 14. From the Duplex Mode menu, select the duplex mode for the selected port. The options are as follows: • Half. Indicates that the interface supports transmission between the devices in only one direction at a time. • Full. Indicates that the interface supports transmission between the devices in both directions simultaneously. • Auto. Indicates that speed is set by the auto-negotiation process. The default is Auto.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable data that is displayed. Table 22. Port Configuration information Field Description Port Type For normal ports this field is blank. Otherwise, the options are as follows: • Mirrored. The port is a mirrored port on which all the traffic is copied to the probe port. • Probe. Use the port to monitor a mirrored port. • Trunk Member.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure LAG settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. From the Hash Mode menu, select the load-balancing mode for a port channel (LAG): • 1 Src/Dest MAC, incoming port. This mode uses the source MAC address, destination MAC address, and incoming port that are associated with the packet. • 2 Src/Dest IP and TCP/UDP Port Fields. This mode uses the source and destination IP addresses and source and destination TCP or UDP port values that are associated with the packet.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure LAG membership: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Set the LACP system priority You can set the LACP system priority that applies to all LAGs on the switch. To set the LACP system priority: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Set the LACP port priority settings You can configure the LACP priority value and administrative LACP time-out value for a port. To configure LACP port priority settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. 8. In the LACP Priority field, specify the LACP priority value for the selected interfaces.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure VLAN settings You can configure the various VLAN settings. Add a VLAN To add a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The VLAN name can be up to 32 alphanumeric characters long, including blanks. The default is blank. VLAN ID 1 always uses the name Default. 9. The VLAN Type field displays the type of the VLAN that you are configuring. The VLAN name can be up to 32 alphanumeric characters long, including blanks. You cannot change the names of the default VLANs (that is, the VLANs with ID 1 and 4088). 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The range of the VLAN ID can be from 2 to 4093. You cannot delete VLANs 1 and 4088, which are predefined. 8. Click the Delete button. The VLAN is removed. Reset the VLAN configuration on the switch to the default settings If you reset the VLAN configuration on the switch to the default settings, all VLANs that you added are deleted. (The predefined VLANS are not deleted).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Reset Configuration check box. 8. Click the Apply button. Your settings are saved. Except for the predefined default VLANs, all VLANs are deleted. Configure VLAN membership To configure VLAN membership: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the VLAN ID menu, select the VLAN ID. 8. In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Untag All. For all ports and LAGs that are members of the VLAN, tags are removed from all egress packets. • Tag All. For all ports and LAGs that are members of the VLAN, all egress packets are tagged. • Remove All.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 24. Advanced VLAN membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks. The names for the following VLANs are predefined: • VLAN 1. Default. • VLAN 4088. Auto-VoIP. VLAN Type The type of the VLAN you selected: • Default (VLAN ID = 1). Always present.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 25. VLAN status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093. VLAN Name The name of the VLAN. VLAN ID 1 is always named Default. VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present. • Auto-VoIP (VLAN ID = 4088). Always present. • Static. A VLAN that you configured.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports VLAN IDs range from 1 to 4093. Use a hyphen (-) to specify a range or a comma (,) to separate VLAN IDs in a list. Spaces and zeros are not permitted. You can specify port tagging for the VLAN only if the port that you want to add as a tagged port is also member of the VLAN. To reset the VLAN tag configuration to the defaults, use the None keyword. 12.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure a voice VLAN You can configure the settings for a voice VLAN. To configure a voice VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Admin Mode Disable or Enable radio button. This specifies the administrative mode for the voice VLAN for the switch. The default is Disable. 8. Select the interface by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The default is Enable. When the authentication mode is enabled, voice traffic is allowed on an unauthorized voice VLAN port. When the authentication mode is disabled, devices are authorized through dot1x. Note: Authentication through dot1x is possible only if dot1x is enabled. 13. In the DSCP Value field, configure the Voice VLAN DSCP value for the port. The valid range is 0 to 64. The default is 0. 14.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • To configure all interfaces with the same settings, select the check box in the heading row. c. From the Auto VoIP Mode menu, select to enable or disable the Auto VoIP mode for the interface or interfaces. 10. Click the Apply button. Your settings are saved. The Operational Status field displays the current operational status of each interface.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. From the OUI-based priority menu, select the OUI-based priority of the switch, from 0 to 7. The default value is 7. 9. Click the Apply button. Your settings are saved. Configure the OUI-based port settings You can configure the OUI port settings. To configure OUI-based port settings: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • 00:12:43: CISCO2 • 00:60:B9: NITSUKO • 00:D0:1E: PINTEL • 00:E0:75: VERILINK • 00:E0:BB: 3COM • 00:04:0D: AVAYA1 • 00:1B:4F: AVAYA2 You can select an existing OUI or add a new OUI and description to identify the IP phones on the network. Configure the OUI table To configure the OUI table: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The maximum length of description is 32 characters. 9. Click the Add button. The telephony OUI entry is added. Delete one or more OUI prefixes from the OUI table To delete one or more OUI prefixes from the OUI table: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Display the Auto-VoIP status You can display the Auto-VoIP status. To view the Auto-VoIP status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure Spanning Tree Protocol The Spanning Tree Protocol (STP) provides a tree topology for any arrangement of network devices. STP also provides one path between end stations on a network, eliminating loops. STP (also referred to as “classic” STP) provides a single path between end stations, avoiding and eliminating loops.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports This setting specifies whether spanning tree BPDUs are forwarded while spanning tree is disabled on the switch. 8. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable STP Status fields displayed on the page. Table 28. STP Configuration status Field Description Global Settings Configuration Digest Key The identifier used to identify the configuration currently being used.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the CST settings You can configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch. To configure CST settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports the root bridge. Specify the bridge priority value for the Common and Internal Spanning Tree (CST). The valid range is 0–61440. The bridge priority is a multiple of 4096. If you specify a priority that is not a multiple of 4096, the priority is automatically set to the next lowest priority that is a multiple of 4096.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The possible values are Enable, Disable, and Auto. The default value is Auto, which specifies that the switch waits three seconds (with no BPDUs received on the interface) before placing the interface into the PortFast mode. 11. From the BPDU Forwarding menu, configure BPDU forwarding. The possible values are Enable and Disable. The default value is Disable.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the CST port status You can display Common Spanning Tree (CST) and Internal Spanning Tree on a specific port on the switch. To view the CST port status: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the CST port status information on the page. Table 30. CST port status Field Description Interface The physical port or LAG that is associated with the CST. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage the MST settings You can configure Multiple Spanning Tree (MST) on the switch. Configure an MST instance To configure an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports value between 0 and 4095, the switch automatically sets the value to 0. The default is 32768. The valid range is 0–61440. • VLAN ID The menu includes all VLANs that are configured on the switch. You can select VLANs that must be associated with the MST instance or clear VLANs that are already associated with the MST instance. 8. Click the Add button. The MST is added.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The MST Configuration page displays. 7. Select the check box for the instance. 8. Click the Delete button. The MST instance is removed. Configure and view the port settings for an MST instance You can configure and display Multiple Spanning Tree (MST) settings on a specific port on the switch. A port can become diagnostically disabled (D-Disable) when DOT1S experiences a severe error condition.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: If no MST instances are configured on the switch, the page displays a “No MSTs Available” message. 7. From the Select MST menu, select the MST instance. You can select only instances that you added to the switch (see Configure an MST instance on page 174). 8. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 33. MST port status information Field Description Auto-calculated Port Path Cost Displays whether the path cost is automatically calculated (Enabled) or not (Disabled). Path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the STP statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. To view Spanning Tree statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • All. Both physical interfaces and LAGs are displayed. 8. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information on the page. Table 34. STP Statistics Field Description Interface The physical port or LAG on the switch. STP BPDUs Received The number of STP BPDUs received at the selected port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the MFDB statistics To view the MFDB statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage IGMP snooping Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward IPv4 multicast traffic intelligently. Multicast IPv4 traffic is traffic that is destined to a host group. Host groups are identified by class D IP addresses, which range from 224.0.0.0 to 239.255.255.255.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 37. IGMP Snooping Configuration information Field Description Multicast Control Frame Count The number of multicast control frames that are processed by the switch. Interfaces Enabled for IGMP Snooping The interfaces that are enabled for IGMP snooping.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Enter a value between 0 and 3600 seconds. The default is 0 seconds. A value of zero indicates an infinite time-out, that is, no expiration. 13. From the Fast Leave Mode menu, select whether fast leave mode is enabled. The option are Enable and Disable. The default is Disable. 14. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Go button. If the address exists, the entry is displayed. An exact match is required. The following table describes the nonconfigurable information on the page. Table 38. IGMP Snooping Table information Field Description MAC Address The multicast MAC address for which the switch holds forwarding and/or filtering information.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Switching > Multicast > IGMP Snooping > IGMP Snooping VLAN Configuration. 7. Select the check boxes for one or more VLANs. If you select the check box for a single VLAN, the VLAN ID displays in the VLAN ID field. 8. Configure the IGMP snooping values for the selected VLAN or VLANs: • Admin Mode. Enable or disable IGMP snooping for the specified VLAN ID. The default is Disable.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Modify IGMP snooping settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. Click the Apply button. Your settings are saved. Configure an IGMP multicast router VLAN You can configure an interface to forward only snooped IGMP packets from a specific VLAN to the multicast router connected to the interface. This configuration is usually not required because the switch automatically detects a multicast router and forwards the IGMP packets accordingly.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the Interface menu, select the interface. 8. In the VLAN ID field, enter the VLAN ID. 9. From the Multicast Router menu, select Enable or Disable. 10. Click the Apply button. Your settings are saved. IGMP snooping querier overview IGMP snooping requires that one central switch or router periodically queries all end-devices on the network to announce their multicast memberships.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure an IGMP snooping querier for a VLAN You can configure IGMP queriers for use with VLANs on the network. To configure IGMP snooping for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - • Enable. The snooping querier participates in querier election, in which the lowest IP address operates as the querier in that VLAN. The other querier moves to non-querier state. Snooping Querier VLAN Address. Specify the snooping querier IP address to be used as the source address in periodic IGMP queries that are sent to the VLAN. 9. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information on the page. Table 39. Querier VLAN Status information Field Description VLAN ID The VLAN ID on which IGMP snooping querier is administratively enabled and the VLAN exists in the VLAN database.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View, search, or clear the MAC address table To view, search, or clear the MAC address table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If the address exists, that entry is displayed as the first entry followed by the remaining (higher) MAC addresses. An exact match is required. • VLAN ID. From the Search menu, select VLAN ID, and enter the VLAN ID, for example, 100. Then click the Go button. • Interface. From the Search menu, select Interface, and enter the interface ID using the respective interface naming convention (for example, g1 or l1).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If the source MAC address matches the MAC address of the switch, the switch can perform one of the following actions, depending on how you configure the action: • The port is shut down. • A log message is generated. (If a syslog server is configured, the log message can be sent to the syslog server.) • The port is shut down and a log message is generated.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To enable or disable loop protection feature, select the Admin Mode Enable or Disable radio button. By default, the Disable radio button is selected. 8. From the Transmit Interval menu, select the time in seconds between transmission of loop packets. The default transmit interval is 5 seconds. 9. From the Max PDU Receive menu, select the maximum number of packets to be received before an action is taken. The default is 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Switching > L2 Loop Protection > L2 Loop Protection Configuration. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Apply button. Your settings are saved. 12. Click the Clear button to clear all the statistics in the table. 13. Click the Refresh button to update the page to show the latest information. The following table describes the nonconfigurable information displayed on the page. Table 41. L2 Loop Protection Interface Information Field Description Loop Detected Shows whether a loop is detected on the interface.
4 4 Configure Quality of Service This chapter contains the following sections: • Quality of Service concepts • Manage Class of Service • Manage Differentiated Services 208
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports ports, in accordance with the configured default priority of the ingress port. This process is also used for cases where a trusted port mapping cannot be honored, such as when a non-IP packet arrives at a port configured to trust the IP DSCP value. Configure the global CoS settings A global configuration setting is automatically applied to all interfaces on the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Either configure the same CoS trust mode settings for all CoS-configurable interfaces or configure CoS settings per interface: • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b. From the Global Trust Mode menu, select one of the following trust mode options for ingress traffic on the switch: - Untrusted.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • DSCP. The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 10. In the Interface Shaping Rate field, specify the maximum outbound transmission rate bandwidth in kbps. This setting is used to shape the outbound transmission rate in increments of 1 percent in a range of 0–100.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. From the Scheduler Type menu, select one of the following options: • Strict. The interface services traffic with the highest priority on a queue first. • Weighted. The interface uses weighted round robin to associate a weight to each queue. This is the default setting. 11. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the 802.1p to Queue Mapping table, map each of the eight 802.1p priorities to a queue (internal traffic class) from 0 to 7. The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped. The priority goes from low (0) to high (7). For example, traffic with a priority of 0 is for most data traffic and is sent using best effort.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select QoS > CoS > Advanced > DSCP to Queue Mapping. The previous figure does not show all information on the page. 7. For each DSCP value, select from the corresponding Queue menu which internal traffic class must be mapped to the DSCP value. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks provide best-effort data delivery service. Best-effort service implies that the network delivers the data in a timely fashion, although there is no guarantee.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the DiffServ mode and display the entries in the DiffServ private MIB tables You can enable or disable DiffServ and display the current and maximum number of rows in each of the main DiffServ private MIB tables. To configure the DiffServ mode and display the entries in the DiffServ private MIB tables: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active. 8. Click the Apply button. Your settings are saved. The following table describes the information displayed in the Status table on the page. Table 42.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. Define the criteria that must be associated the DiffServ class by selecting one of the following radio buttons: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports mapped to their Ethertype value. You can also select User Value from the menu and enter a value in the hexadecimal range from 600 to ffff. • • Source MAC. Select this radio button to require a packet’s source MAC address to match the specified MAC address. After you select this radio button, use the following fields to configure the source MAC address match criteria: - Address. The source MAC address to match.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - Mask. The bit mask in IP dotted-decimal format indicating which parts of the destination IP address to use for matching against packet content. • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol. You can also select Other from the menu and enter a port number from 0 to 65535. • IP DSCP.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Class Configuration. The Class Name page displays. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the check box next to the class name. 8. Click the Delete button. The class is removed. Configure DiffServ IPv6 class settings The switch supports QoS ACL and DiffServ functionality for IPv6 by providing support for IPv6 packet classification. An IPv6 ACL serves the same purpose as an IPv4 ACL.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The IPv6 Class Name page displays. 7. Enter a class name in the Class Name field. The Class Name field also lists all the existing IPv6 class names, from which one can be selected for modification or deletion. 8. From the Class Type menu, select the class type. The switch supports only the class type value All, which means that all the various match criteria defined for the class are satisfied for a packet match.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Reference Class. Select this radio button to reference another class for criteria. The match criteria defined in the reference class function as match criteria in addition to the match criteria that you define for the selected class. After selecting this option, the classes that can be referenced are displayed. Select the class to reference. A class can reference one other class of the same type. • Protocol Type.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Rename an existing IPv6 DiffServ class To rename an existing IPv6 DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. The Class Name page displays. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 7. Enter a policy name in the Policy Name field. You cannot specify the policy type. By default, the policy type is In, indicating that the policy applies to ingress packets. 8. From the Member Class menu, select an existing class that you want to associate with the new policy. 9. Click the Add button. The new policy is added.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Mark IP Precedence. Select this radio button to require packets to be marked with an IP precedence value before being forwarded. You must select an IP precedence value from 0 to 7 from the menu. • Mirror. Select this radio button to require packets to be mirrored to an interface or LAG, one of which you must select from the menu. • Redirect.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Rename an existing DiffServ policy To rename an existing DiffServ policy: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select QoS > DiffServ > Advanced > Policy Configuration. The Policy Configuration page displays. 7. Select the check box next to the policy name. 8. Click the Delete button. The policy is removed. Configure the DiffServ service interface You can assign (attach) a policy to an interface. Attach a DiffServ policy to an interface To attach a DiffServ policy to an interface: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the DiffServ policy for an interface To change the DiffServ policy for an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Remove a DiffServ policy from an interface To remove a DiffServ policy from an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View DiffServ service statistics You can display service-level statistical information about all interfaces to which DiffServ policies are attached. To view the DiffServ service statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 46. DiffServ Service Statistics information (continued) Field Description Operational Status The operational status of the policy that is attached to the specified interface and direction. The value is either Up or Down. Member Classes All DiffServ classes that are defined as members of the selected policy name. Select a member class name to display its statistics.
5 5 Manage Device Security This chapter contains the following sections: • Change the device admin password for the device UI • Manage the RADIUS settings • Configure the TACACS+ settings • Manage the Smart Control Center • Configure management access • Control access with profiles and rules • Configure port authentication • Set up traffic control • Configure access control lists 244
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the device admin password for the device UI You can change the device admin password for the user with the user name admin. To change the device admin password for the device UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The password is displayed in dots. 10. Click the Apply button. Your settings are saved. Manage the RADIUS settings RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, which can authenticate a user name and password before authorizing use of the network.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. In the Timeout Duration field, specify the time-out value, in seconds, for request retransmissions. The range is from 1 to 30. The default value is 5. 9. From the Accounting Mode menu, select to enable or disable RADIUS accounting on the server. The default is Disabled. 10. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields displayed on the page. Table 47.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information in the Statistics table on the page. Table 48. RADIUS authentication server statistics information Field Description Server Address The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Accounting Server Configuration. The previous figure does not show the Accounting Server Statistics section. 7. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 49. RADIUS accounting server statistics information (continued) Field Description Accounting Retransmissions The number of RADIUS accounting-request packets retransmitted to this RADIUS accounting server. Accounting Responses The number of RADIUS packets received on the accounting port from this server.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Accounting Server Configuration. The Accounting Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Modify the configuration for the selected accounting server. 9. Click the Apply button. Your settings are saved.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure the TACACS+ settings TACACS+ provides a centralized user management system, while still retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication. Provides authentication during login and through user names and user-defined passwords. • Authorization. Performed at login.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The range is from 0 to 128. The key must match the key configured on the TACACS+ server. 8. In the Connection Timeout field, specify the maximum number of seconds allowed to establish a TCP connection between the switch and the TACACS+ server. The range is from 1 to 30 seconds.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Management Security > TACACS+ > TACACS+ Server Configuration. 7. In the TACACS+ Server field, enter the TACACS+ server IP address. 8. In the Priority field, specify the priority for the TACACS+ server. The priority determines the order in which the TACACS+ servers are contacted when attempting to authenticate a user. A value of 0 is the highest priority. The range is from 0 to 65535. 9.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Management Security> TACACS+ > TACACS+ Server Configuration. The TACACS+ Server Configuration page displays. 7. Select the check box next to the server IP address. 8. Click the Delete button. The TACACS+ server is removed. Configure authentication lists A login list specifies one or more authentication methods to validate switch or port access for the admin user. You can configure a default login list.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Management Security > Authentication List > HTTP Authentication List. 7. Select the check box next to the httpList name. 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure an HTTPS authentication list You can configure the default login list for secure HTTP (HTTPS). To configure an HTTPS authentication list: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports other method is tried, even if you specified more than one method. This is the default selection for Method 1. • RADIUS. The user’s ID and password are authenticated using the RADIUS server. If you select RADIUS or Tacacs+ as the first method and an error occurs during the authentication, the switch uses Method 2 to authenticate the user. • Tacacs+. The user’s ID and password are authenticated using the TACACS+ server.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure management access You can configure the global settings for HTTP and secure HTTP (HTTPS) access to the switch’s device UI. You can also configure access control profiles and access rules. Configure HTTP access settings You can configure the HTTP access settings on the switch. If you access the switch device UI, HTTP is the default access method. To configure the HTTP access settings: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports This selection enables or disables HTTP. The default value is Enable. 8. In the HTTP Session Soft Timeout field, specify the number of minutes an HTTP session can be idle before a time-out occurs. The value must be in the range from 0 to 60 minutes. The default value is 5 minutes. After the session is inactive for the configured time, you are automatically logged out and must reenter the password to access the device UI.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Access > HTTPS > HTTPS Configuration. 7. Select the Admin Mode Enable or Disable radio button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If such as security warning displays, you cannot proceed but must take one of the following actions, depending on the browser that you are using: • Google Chrome: If Google Chrome displays a Your connection is not private warning, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe) link, in which x.x.x.x represents the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete an SSL certificate Note: Before you can delete a certificate, you must disable HTTPS (see Configure HTTPS access settings on page 267) and log back in to the device UI over an HTTP session. After you delete the certificate, you can reenable HTTPS and log back in to the device UI over an HTTPS session. To delete an SSL certificate: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Transfer an existing certificate from a TFTP server to the switch You can transfer a certificate file to the switch. Note: For information about downloading and installing an SSL certificate over an HTTP session, see Use an HTTP session to download and install an SSL security certificate file on the switch on page 395. For the switch to accept HTTPS connections from a device, the switch requires a public key certificate.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Access > HTTPS > Certificate Update. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Control access with profiles and rules Access control allows you to configure an access control profile and set rules for access to the device UI, access by SNMP stations, and client access to a TFTP server. We refer to an access control profile as an access profile. You can add a single access profile, which you can configure, activate, or deactivate.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Access > Access Control > Access Profile Configuration. 7. In the Access Profile Name field, enter the name of the access profile to be added. The maximum length is 32 characters. 8. Click the Apply button. Your settings are saved. By default, the access profile is deactivated. After you add rules, you can activate the access profile.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Activate the access profile After you add rules to the access profile, you can activate the access profile. CAUTION: If you configure a security access profile incorrectly and you activate the access profile, you might no longer be able to access the switch’s device UI. If that situation occurs, you must reset the switch to factory default settings (see Reset the switch to its factory default settings on page 384).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Display the access profile summary and the number of filtered packets After you added rules to the active profile, you can view the entries in the summary. If the access profile is active, you can also view the number of filtered packets. To display the access profile summary and the number of filtered packets: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Packets Filtered field displays the number of packets filtered (none in the previous figure). 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable data that is displayed. Table 50. Access profile configuration profile summary Field Description Rule Type The action performed when the rules match.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Access > Access Control > Access Profile Configuration. The Access Profile Configuration page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If RADIUS-assigned VLANs are enabled, the RADIUS server includes the VLAN ID in the 802.1X tunnel attributes of its response message to the device. If dynamic VLAN creation is enabled on the switch and the RADIUS-assigned VLAN does not exist, the assigned VLAN is dynamically created on the switch. This means that the client can connect from any port and is assigned to the appropriate VLAN.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns. 7. Use the horizontal scroll bar at the bottom of the page to view all the fields. 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Unauthenticated VLAN ID. Specify the VLAN ID of the unauthenticated VLAN for the selected port. The range is from 0 to 4093. The default value is 0. Hosts that fail the authentication might be denied access to the network or placed on a VLAN created for unauthenticated clients. This VLAN might be configured with limited network access. • Periodic Reauthentication.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 51. Port authentication status information (continued) Field Description PAE Capabilities The port access entity (PAE) functionality of the selected port. The option is Authenticator or Supplicant. Authenticator PAE State The current state of the authenticator PAE state machine.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > Port Authentication > Advanced > Port Authentication. The Port Authentication page displays. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the check box for the port. 8. Click the Reauthenticate button. The selected port is forced to restart the authentication process.This button is available only if the control mode is auto. If the button is not selectable, it is grayed out. When you click this button, the action is immediate. You do not need to click the Apply button for the action to occur.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the fields on the Port Summary page. Table 52. Port summary Field Description Port The port whose settings are displayed in the current table row. Control Mode This field indicates the configured control mode for the port. The options are as follows: • Force Unauthorized.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View the client summary You can view information about supplicant devices that are connected to the local authenticator ports. If no active 802.1X sessions exist, the table is empty. To view the client summary: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 53. Client Summary information (continued) Field Description Filter ID The policy filter ID assigned by the authenticator to the supplicant device. VLAN ID The VLAN ID assigned by the authenticator to the supplicant device. VLAN Assigned The reason for the VLAN ID assigned by the authenticator to the supplicant device. Session Timeout The session time-out imposed by the RADIUS server on the supplicant device.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 10. In the Port and LAG tables in the Source Port Members section, select the ports and LAGs that must be included in the inbound filter. If a packet with the MAC address and VLAN ID that you specify is received on a port that is not part of the inbound filter, the packet is dropped. 11. In the Port and LAG tables in the Destination Port Members section, select the ports and LAGs that must be included in the outbound filter.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the MAC Filter menu, select the filter. 8. Click the Delete button. The filter is removed. View the MAC filter summary You can view the MAC filters that are configured on the switch. To view the MAC filter summary: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 54. MAC Filter Summary information (continued) Field Description Source Port Members The ports to be used for filtering inbound packets. Destination Port Members The ports to be used for filtering outbound packets. Configure storm control settings A broadcast storm is the result of an excessive number of broadcast messages simultaneously transmitted across a network by a single port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Security > Traffic Control > Storm Control. 7. In the Storm Control section, from the Ingress Control Mode menu, select one of the following modes for storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure storm control settings for one or more ports After you configure the global settings, you can specify storm control settings for one or more ports. To configure storm control settings for one or more ports: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The default settings in the Port Settings section depends on the global storm control settings (see Configure global storm control settings on page 295), which apply to all ports. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure port security Port security lets you lock one or more ports on the switch. When a port is locked, the port can only forward packets with a source MAC addresses that you specifically allowed. The port discards all other packets. Configure the global port security mode To configure the global port security mode: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Apply button. Your settings are saved. By default, port security is disabled for individual ports. Note: After you enable port security for individual ports (see Configure a port security interface on page 300), you can return to this page and click the Refresh button to refresh the page with the latest information about the ports.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Max Learned MAC Address. Specify the maximum number of dynamically learned MAC addresses on the selected interfaces. The default is 4096. If you specify 0, the selected interfaces do not learn any MAC addresses. • Max Static MAC Address. Specify the maximum number of statically locked MAC addresses on the selected interfaces. The default is 48. • Enable Violation Shutdown.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Traffic Control > Port Security > Security MAC Address. 7. From the Port List menu, select the individual interface. Port security must be enabled on the selected interface. The Dynamic MAC Address Table displays the MAC addresses and their associated VLANs that were learned on the selected port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports To configure an ACL: 1. Create an IPv4-based, IPv6-based, or MAC-based ACL ID. 2. Create a rule and assign it to a unique ACL ID. 3. Define the rules, which can identify protocols, source, and destination IP and MAC addresses, and other packet-matching criteria. 4. Use the ID number to assign the ACL to a port or to a LAG. To view ACL configuration examples, see Access control lists (ACLs) on page 413.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > ACL Wizard. 7. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN. • ACL Based on Source MAC. Creates an ACL based on the source MAC address, source MAC mask, and VLAN.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created (one for TCP and one for UDP). 8. In the Sequence Number field, enter a number in the range of 1 to 2147483647 that is used to identify the rule. 9. From the Action menu, select Permit or Deny to specify the action that must be taken if a packet matches the rule’s criteria. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports ACL Based On Fields Destination IPv4 L4 Port • • Destination L4 port (protocol). Specify the destination IPv4 L4 port protocol. Destination L4 port (value). Specify the destination IPv4 L4 port value. Source IPv4 L4 Port • • Source L4 port (protocol). Specify the source IPv4 L4 port protocol. Source L4 port (value). Specify the source IPv4 L4 port value. Destination IPv6 L4 Port • • Destination L4 port (protocol).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Modify an ACL rule that you created with the ACL Wizard To modify an ACL rule that you created with the ACL Wizard: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the ACL Wizard, see Use the ACL Wizard to create a simple ACL on page 305. Configure a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The MAC ACL Table displays the number of ACLs currently configured in the switch and the maximum number of ACLs that can be configured. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. 7. In the Name field, specify a name for the MAC ACL. The name string can include alphabetic, numeric, hyphen, underscore, or space characters only.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. 7. Select check box that is associated with the rule.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Delete button. The rule is removed. Configure MAC ACL rules You can define rules for MAC-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. A default deny all rule is the last rule of every list. Add a rule to a MAC ACL To add a rule to a MAC ACL: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns. 7. From the ACL Name menu, select the MAC ACL. 8. In the Sequence Number field, enter a number in the range from 1 to 2147483647 to identify the rule. 9. From the Action menu, select the action that must be taken if a packet matches the rule’s criteria: • Permit. Forwards packets that meet the ACL criteria. • Deny. Drops packets that meet the ACL criteria. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The values are as follows: • Apple Talk • IBM SNA • IPv4 • IPv6 • IPX • MPLS Multicast • MPLS Unicast • NetBios • Novell • PPPOE • RARP • User Value 18. If you select User Value from the EtherType Key menu, in the EtherType User Value field, specify the customized EtherType value that must be used. This value must be compared against the information in an Ethernet frame.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the match criteria for a MAC rule To change the match criteria for a MAC rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Ports and LAG tables display the available and valid interfaces for ACL binding. All nonrouting physical interfaces, VLAN interfaces, and interfaces participating in LAGs are listed. 10. Click the Apply button. Your settings are saved. The following table describes the columns in the Interface Binding Status table on the page. Table 56.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Security > ACL > Basic > MAC Binding Table. The previous figure shows examples. 7. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Numbered ACL from 100 to 199. Creates an extended IPv4 ACL, which allows you to permit or deny specific types of Layer 3 or Layer 4 traffic from a source IP address to a destination IP address. This type of ACL provides more granularity and filtering capabilities than the basic IP ACL. • Named IP ACL. Create an extended IPv4 ACL with a name string that is up to 31 alphanumeric characters in length.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure shows an example. The IP ACL page shows the current size of the ACL table compared to the maximum size of the ACL table. The current size is equal to the number of configured IPv4 and IPv6 ACLs plus the number of configured MAC ACLs. The maximum size is 100. The Current Number of ACL field displays the current number of all ACLs configured on the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Change the number or name of an IPv4 ACL To change the number or name of an IPv4 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Specify the following match criteria for the rule: • Sequence Number. Enter an ACL sequence number in the range from 1 to 2147483647 that is used to identify the rule. An IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action, which is one of the following: - Permit. Forward packets that meet the ACL criteria. Egress Queue.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Source IP Mask. Specify the IP mask in dotted-decimal notation to be used with the source IP address value. 10. Click the Apply button. Your settings are saved. Modify the match criteria for a basic IPv4 ACL rule To modify the match criteria for a basic IPv4 ACL rule: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete a basic IPv4 ACL rule To delete a basic IPv4 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure rules for an extended IPv4 ACL You can define rules for extended IPv4 ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all columns on the page. If no rules exists, the Extended ACL Rule Table might show the message No rules were configured for this ACL. If one or more rules exist for the ACL, the rules display in the Extended ACL Rule Table. 7. From the ACL ID/Name menu, select the IP ACL for which you want to add a rule. For extended IP ACLs, this must be an ID in the range from 100 to 199 or a name. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - • Select the Redirect radio button and use the menu to specify the egress interface to which the matching traffic stream is forced, bypassing any forwarding decision normally performed by the device. Match Every. Select one of the radio buttons to specify whether all packets must match the selected IP ACL rule: - False. Not all packets need to match the selected IP ACL rule.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports - Range. If you select the Range radio button, the IP ACL rule matches only if the Layer 4 source port number is within the specified port range. The starting port, ending port, and all ports in between are a part of the Layer 4 port range. The Start Port and End Port fields identify the first and last ports that are part of the port range. The values can range from 0 to 65535.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The only relevant matching condition for L4 port numbers is Equal. This means that an IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol. - Range.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports ICMP message is decoded into the corresponding ICMP type and ICMP code within the ICMP type. The IPv4 ICMP message types are echo, echo-reply, host-redirect, mobile-redirect, net-redirect, net-unreachable, redirect, packet-too-big, port-unreachable, source-quench, router-solicitation, router-advertisement, ttl-exceeded, time-exceeded, and unreachable. • Fragments.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information displayed on the page. Table 58. IPv6 Configuration and IPv6 ACL Table information Field Description Current Number of ACL The current number of the IP ACLs configured on the switch. Maximum ACL The maximum number of IP ACLs that can be configured on the switch. Rules The number of the rules associated with the IP ACL. Type The type is IPv6 ACL.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete an IPv6 ACL To delete an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 9. Configure the following match criteria for the rule: • Action. Select the ACL forwarding action by selecting one of the following radio buttons: - Permit. Forward packets that meet the ACL criteria. - Deny. Drop packets that meet the ACL criteria. • Egress Queue. If you select the Permit radio button, select the hardware egress queue identifier that is used to handle all packets matching this IPv6 ACL rule.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • • True. All packets must match the selected IPv6 ACL rule and are either permitted or denied. In this case, you cannot configure other match criteria on the page. Protocol Type. Specify the IPv6 protocol type in one of the following ways: - From the Protocol Type menu, select IPv6, ICMPv6, TCP, or UDP. - From the Protocol Type menu, select Other, and in the associated field, specify an integer ranging from 0 to 255.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The source IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp. Each of these values translates into its equivalent port number, which is used as both the start and end of the port range. Select Other from the menu to enter port numbers.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports You can either enter the port range yourself or select one of the following protocols from the menu: • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. • The destination IP UDP port protocols are domain, echo, snmp, ntp, rip, time, who, and tftp.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The DSCP is defined as the high-order 6 bits of the service type octet in the IPv6 header. Enter an integer from 0 to 63. To select the IPv6 DSCP, select one of the DSCP keywords. To specify a numeric value, select Other and enter the numeric value of the DSCP. 10. Click the Apply button. Your settings are saved. Modify the match criteria for an IPv6 ACL rule To modify the match criteria for an IPv6 ACL rule: 1.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Delete an IPv6 ACL rule To delete an IPv6 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A low number indicates high precedence order. If a sequence number is already in use for the interface and direction, the specified access list replaces the currently attached access list using that sequence number. If you do not specify the sequence number (meaning that the value is 0), a sequence number that is one number greater than the highest sequence number currently in use for the interface and direction is used.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure VLAN ACL bindings You can associate a MAC ACL, any type of IPv4 ACL, or an IPv6 ACL with a VLAN. When you do so, the ACL is applied to all interfaces that are members of the VLAN. Add a VLAN ACL binding To add a VLAN ACL binding: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports number (the value is 0), a sequence number that is one greater than the highest sequence number currently in use for the VLAN ID and selected direction is used.The range is from 1 to 4294967295. 9. From the ACL Type menu, select the type of ACL. You can select a MAC ACL, IPv4 ACL, or IPv6 ACL. 10. From the ACL ID list, select the ID or name of the ACL that must be bound to the specified VLAN. 11. Click the Add button.
6 6 Monitor the System This chapter contains the following sections: • Monitor the switch and the ports • Configure and view the logs • Configure port mirroring 353
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Monitor the switch and the ports You can view and clear port and switch statistics and perform a cable test. View or clear switch statistics You can view detailed statistical information about the traffic that the switch processes. To view or clear the switch statistics: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Click the Refresh button to refresh the page with the latest information about the switch. 8. To clear all the statistics counters, click the Clear button. Clearing resets all switch summary and detailed statistics to default values. However, the discarded packets count cannot be cleared. The following table describes the switch statistics displayed on the page. Table 61.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 61. Switch statistics (continued) Field Description Receive Packets Discarded The number of inbound packets that were chosen to be discarded, even though no errors were detected, in order to prevent their being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports View port statistics You can view a summary of per-port traffic statistics on the switch. To view port statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Select one or more interfaces by taking one of the following actions: • To view a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To view multiple interfaces, select the check box associated with each interface. The following table describes the per-port statistics displayed on the page. Table 62.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table heading: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The previous figure does not show all fields on the Port Detailed Statistics page. 7. From the Interface menu, select the interface with the statistics to view. 8. From the MST ID menu, select the MST ID associated with the interface (if available). 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear all the counters, click the Clear button.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. Detailed port statistics (continued) Field Description Port Channel ID If the port is a member of a port channel (LAG), the port channel’s interface ID and name are shown. Otherwise, Disable is shown. Port Role Each MST bridge port that is enabled is assigned a port role for each spanning tree. The port role is one of the following values: Root, Designated, Alternate, Backup, Master, or Disabled.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. Detailed port statistics (continued) Field Description Packets RX and TX 256-511 Octets The total number of packets (including bad packets) received or transmitted that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. Detailed port statistics (continued) Field Description Broadcast Packets Received The total number of good packets received that were directed to the broadcast address. This does not include multicast packets. Receive Packets Discarded The number of inbound packets that were discarded even though no errors were detected to prevent their being delivered to a higher-layer protocol.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. Detailed port statistics (continued) Field Description Packets Transmitted 128-255 The total number of packets (including bad packets) received that were between Octets 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 63. Detailed port statistics (continued) Field Description Excessive Collision Frames The number of frames for which transmission on a particular interface fails due to excessive collisions. Dropped Transmit Frames The number of transmit frames discarded at the selected port. STP BPDUs Received The number of STP BPDUs received at the selected port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the EAP statistics displayed on the page. Table 64. EAP statistics Field Description Port The port number. EAPOL Frames Received The number of valid EAPoL frames of any type that were received by this authenticator. EAPOL Frames Transmitted The number of EAPoL frames of any type that were transmitted by this authenticator.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 65. Cable Test information Field Description Cable Status Indicates the cable status: • Normal. The cable is working correctly. • Open. The cable is disconnected or a faulty connector exists. • Short. An electrical short exists in the cable. • Cable Test Failed. The cable status could not be determined. The cable might in fact be working.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: A log records messages equal to or above a configured severity threshold. 10. Click the Apply button. Your settings are saved. The Memory Log table displays on the Memory Log page. The Total number of Messages field displays the number of messages the system logged in memory. Up to 450 of the most recent entries can be displayed. The rest of the page displays the Memory Log messages.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Previous Logs. The previous log messages are displayed, that is, the log messages that are still in the flash memory from before the switch was rebooted. 10. Click the Apply button. Your settings are saved. The Total Number of Messages field shows is the total number of persistent log messages that are stored on the switch. The maximum number of persistent log messages displayed on the switch is 64. 2019-01-01T01:20:10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Logs > Server Log. The Server Log page displays. 7. In the Server Log Configuration section, select one of the following Admin Status radio buttons: • Enable. Send log messages to all configured hosts (syslog collectors or relays) using the values configured for each host. • Disable. Stop logging to all syslog hosts.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Modify the settings for a remote syslog host To modify the settings for a remote syslog host: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6. Select Monitoring > Logs > Trap Logs. 7.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Configure port mirroring Port mirroring lets you select the network traffic of specific switch ports for analysis by a network analyzer. You can select many switch ports as source ports but a single switch port only as the destination port. You can configure how traffic is mirrored on a source port by selecting packets that are received, transmitted, or both.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select an Admin Mode radio button: • Disable. Port mirroring is disabled. This is the default setting. • Enabled. Port mirroring is enabled. 8. From the Destination Port menu, select the physical destination port to which port traffic must be copied. You can configure one destination port only. The port functions as a probe port and receives traffic from all configured source ports.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 12. From the Direction menu, specify the direction of the traffic that must be mirrored from the selected source ports: • None. No traffic direction is selected. This is the default setting. • Tx and Rx. Monitors both transmitted and received packets. • Rx. Monitors received (ingress) packets only. • Tx. Monitors transmitted (egress) packets only. 13. Click the Apply button. Your settings are saved.
7 Maintain or Troubleshoot the Switch 7 This chapter contains the following sections: • Reboot the switch • Reset the switch to its factory default settings • Export a file from the switch • Download a file to the switch or update the software • Manage software images • Perform diagnostics and troubleshooting 382
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Reboot the switch You can reboot the switch from the device UI. Note: If you can physically access the switch, you can reboot the switch by pressing the multi-function Reset button on the front panel for less than 5 seconds. (Do not press the button for more than 5 seconds!) To reboot the switch from the device UI: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Reset the switch to its factory default settings You can reset the system configuration to the factory default values. All changes that you made are lost. If the IP address changes, your web session might disconnect. Note: If you reset the switch to the default configuration, the IP address is reset to 192.168.0.239, and the DHCP client is enabled.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: If you can physically access the switch, you can reset the switch to factory default settings and reset the registration status by pressing the multi-function Reset button on the front panel for more than 10 seconds. To use the device UI to reset the switch to factory default settings and reset the registration status: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 8. Click the Apply button. An Alert pop-up window displays. 9. Click the OK button. All configuration settings are reset to their factory default values. All changes that you made are erased, even if you saved the configuration. This process takes about 135 seconds.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. From the File Type menu, select the type of file: • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use HTTP to export a file from the switch to a computer You can upload (export) files of various types from the switch to a computer through an HTTP session by using your web browser. To export a file from the switch to a computer by using HTTP: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The page displays information about the file transfer progress. The page refreshes automatically when the file transfer completes. Download a file to the switch or update the software You can manually check for the latest software version (also referred to as firmware version) through the device UI of the switch, download the firmware, and upload the firmware to the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 4. Enter one of the following passwords: • Enter your device admin password. • If you previously managed the switch through the Insight app or Cloud portal, enter the Insight network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 26. 5. Click the Go button. The System Information page displays. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Note: We recommended that you do not overwrite the active image. 9. From the Server Address Type menu, select the format for the TFTP Server IP field: • IPv4. Indicates that the TFTP server address is an IP address in dotted-decimal format. This is the default setting. • DNS. Indicates that the TFTP server address is a host name. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use HTTP to download a file to the switch or update the software image You can download a software (firmware) image, configuration files, and SSL files from a computer to the switch by using an HTTP session over a web browser. To download a file to the switch using HTTP: 1. Connect your computer to the same network as the switch.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports image. This is a safety feature for faults occurring during the boot upgrade process. This the default setting. • Text Configuration. A text-based configuration file enables you to edit a configured text file (startup-config) offline as needed.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Use an HTTP session to download and install an SSL security certificate file on the switch Note: You are not required to obtain an SSL certificate. The security warning that might display in your browser prompts you to confirm that the self-signed certificate of the switch is valid. Once you do so, the browser warning might no longer display when you log in.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The System Information page displays. 6. Select Security > Access > HTTPS. HTTPS Configuration page displays. 7. Select the Admin Mode Disable radio button. 8. Click the Apply button. Your settings are saved. Because you changed the access mode from HTTPS to HTTP, you are logged out of the switch. 9. Wait one minute, refresh your browser, and log back in to the switch (see steps 3 through 5). 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Manage software images The switch maintains two versions of the switch software in permanent storage. One image is the active image, and the second image is the backup image. The active image is loaded when the switch starts or reboots. This feature reduces switch down time when you are updating the switch software.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. Select the Source Image image1 or image2 radio button to specify the image to be copied. 8. Select the Destination Image image1 or image2 radio button to specify the destination image. 9. Click the Apply button. Your settings are saved. Configure dual image settings The Dual Image feature allows the switch to retain two images in permanent storage.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Maintenance > File Management > Dual Image Configuration. 7. As an option, specify a name for the selected image by entering one in the Image Description field. 8. Select the Activate Image check box. 9. Click the Apply button. Your settings are saved. 10. After activating the image, reboot the switch (see Reboot the switch on page 383).
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 6. Select Maintenance > File Management > Dual Image Configuration. The Dual Image Configuration page displays. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field. The Current-active field displays the name of the active image. You cannot delete the active image. 8. Select the Delete Image check box. 9. Click the Apply button. The image is removed.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The following table describes the nonconfigurable information on the page. Table 67. Dual Image Status information Field Description Image1 Ver The version of the image1 file. Image2 Ver The version of the image2 file. Current-active The currently active image on this switch. Next-active The image to be used after the switch reboots. Image1 Description The description, if any, associated with the image1 file.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 17 or Access the switch off-network and not connected to the Internet on page 25. The Device UI login page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 28. 4.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 11. Click the Apply button The specified address is pinged. The results are displayed below the configurable data in the Results field. Ping an IPv6 address You can configure the switch to send a ping request to a specified IPv6 address. You can use this option to check whether the switch can communicate with a particular IPv6 device.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 5. Click the Go button. The System Information page displays. 6. Select Maintenance > Troubleshooting > Ping IPv6. 7. In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station that must be pinged. The format is xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx. The maximum number of characters is 255. 8. In the Count field, enter the number of echo requests that must be sent. The range is 1 to 15.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Send an IPv4 traceroute You can configure the switch to send a traceroute request to a specified IPv4 address or host name. You can use this to discover the paths that packets take to a remote destination. When you send a traceroute, the switch displays the results below the configurable data. If a reply to the traceroute is received, the following message displays: traceroute to x.y.z.w (x.y.z.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IP Address/Hostname field, enter the IP address or host name of the device for which the path must be discovered. 8. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 15. Click the Apply button. A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Send an IPv6 traceroute You can configure the switch to send a traceroute request to a specified IPv6 address or host name. You can use this to discover the paths that packets take to a remote destination.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 7. In the IPv6 Address/Host Name field, enter the IPv6 address or host name of the device for which the path must be discovered. 8. In the Probes Per Hop field, enter the number of probes per hop. The default value is 3. The range is 1 to 10. 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 15. Click the Apply button. A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Enable remote diagnostics For enhanced security, the remote diagnostic option is disabled by default. You can enable the option to access the switch remotely.
A Configuration Examples A This appendix contains information about how to configure the following features. The appendix contains the following sections: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If the port is a member of the VLAN specified by the packet’s VLAN ID, the packet can be sent to other ports with the same VLAN ID. • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • If an untagged packet enters port 4, the switch tags it with VLAN ID 20. The packet can access port 5 and port 6. The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask. 00:00:00:00:FF:FF • VLAN ID. 2 For more information about MAC ACL rules, see Configure MAC ACL rules on page 314. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports • Source IP Address. 192.168.187.0 • Source IP Mask. 0.0.0.255 For additional information about IP ACL rules, see Configure rules for a basic IPv4 ACL on page 325. 3. Click the Add button. 4. On the IP Rules page, create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit • Match Every. True 5. Click the Add button. 6.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Two basic types of QoS are supported: • Integrated Services. Network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services. Network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements. The switch supports DiffServ.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports DiffServ traffic classes With DiffServ, you define which traffic classes to track on an ingress interface.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports based on a DiffServ forwarding class (such as the DSCP or IP precedence value) definition to convey some QoS characteristics to downstream switches that do not routinely look at the DSCP value in the IP header. • Policing. A method of constraining incoming traffic associated with a particular class so that it conforms to the terms of the TCS.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 3. Configure the following settings for Class1: • Protocol Type. UDP • Source IP Address. 192.12.1.0. • Source Mask. 255.255.255.0. • Source L4 Port. Other, and enter 4567 as the source port value. • Destination IP Address. 192.12.2.0. • Destination Mask. 255.255.255.0. • Destination L4 Port. Other, and enter 4568 as the destination port value.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 802.1X access control Local area networks (LANs) are often deployed in environments that permit unauthorized devices to be physically attached to the LAN infrastructure, or permit unauthorized users to attempt to access the LAN through equipment already attached. In such environments you might want to restrict access to the services offered by the LAN to those users and devices that are permitted to use those services.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports A port access entity (PAE) is able to adopt one of two distinct roles within an access control interaction: 1. Authenticator. A port that enforces authentication before allowing access to services available through that port. 2. Supplicant. A port that attempts to access services offered by the authenticator. Additionally, a third role exists: 3. Authentication server.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The selection from the Port Control menu for all other ports on which authentication is not needed must be Authorized. When the selection from the Port Control menu is Authorized, the port is unconditionally put in a force-authorized state and does not require any authentication. When the selection from the Port Control menu is Auto, the authenticator PAE sets the controlled port mode. 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports The difference between the RSTP and the traditional STP (IEEE 802.1D) is the ability to configure and recognize full-duplex connectivity and ports that are connected to end stations, resulting in rapid transitioning of the port to the Forwarding state and the suppression of Topology Change Notification. These features are represented by the parameters pointtopoint and edgeport. MSTP is compatible to both RSTP and STP.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports and only one MSTI or CIST). For example, port A can be forwarding for instance 1 while discarding for instance 2. The port states changed since IEEE 802.1D specification. To support multiple spanning trees, configure an MSTP bridge with an unambiguous assignment of VLAN IDs (VIDs) to spanning trees. For such a configuration, ensure the following: 1. The allocation of VIDs to FIDs is unambiguous. 2.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Perform the following procedures on each switch to configure MSTP: 1. On the VLAN Configuration page, create VLANs 300 and 500 (see Configure VLAN settings on page 145). 2. On the VLAN Membership page, include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure VLAN settings on page 145). 3.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports 12. Click the Add button. In this example, assume that Switch 1 became the root bridge for the MST instance 1, and Switch 2 became the root bridge for MST instance 2. Switch 3 supports hosts in the sales department (ports 1/0/1, 1/0/2, and 1/0/3) and in the HR department (ports 1/0/4 and 1/0/5). Switches 1 and 2 also include hosts in the sales and HR departments.
B B Specifications and Default Settings This appendix describes the default settings for the switch and for its software features.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Switch default settings The following table describes the switch default settings. Table 68. Switch default settings Feature Default IP address 192.168.0.239 Subnet mask 255.255.255.0 Default gateway 192.168.0.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 68. Switch default settings (continued) Feature Default MAC table address aging 300 seconds (dynamic addresses) Default VLAN IDs and names 1. Default VLAN. 4088. Auto-VoIP VLAN Note: All ports are members of VLAN 1. No ports are members of the Auto-VoIP VLAN or the Auto-Video VLAN.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 69. General feature default settings (continued) Feature Name/Setting Default 802.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 69.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 69. General feature default settings (continued) Feature Name/Setting Default Burst interval N/A Persistent Configuration Store Local Write delay 300 Differentiated Services (DiffServ) Admin mode Enabled Class of Service (CoS), Global Trust mode 802.1p 802.1p to queue mapping (802.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 69.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 69. General feature default settings (continued) Feature Name/Setting Default Class of Service (CoS), Interface Trust mode 802.1p Interface shaping rate 0 802.1p to queue mapping (802.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports System setup and maintenance settings The following table describes the system setup and maintenance settings. Table 70. System setup and maintenance settings Feature Sets Supported Default Boot code update 1 N/A DHCP 1 Enabled Static IP address 1 192.168.0.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 71. Port characteristics (continued) Feature Sets Supported Default Static 802.1Q tagging 256 VID = 1 Max member ports are equal to the number of ports on the switch Learning process Supports static and dynamic MAC entries Dynamic learning is enabled by default Traffic control settings The following table describes the traffic control settings. Table 72.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Security settings The following table describes the security settings. Table 74. Security settings Feature Sets Supported Default 802.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Settings for other features The following table describes the settings for other features. Table 76.
16-Port Gigabit (Hi-Power) PoE+ Ethernet Smart Managed Pro Switch with 2 SFP Ports Table 77. Hardware technical specifications for models GS716TP and GS716TPP (continued) Feature Description Idle power consumption Model GS716TP. 12.0W Model GS716TPP. 13.36W Dimensions (W x D x H) 17.3 x 8.0 x 1.7 in. (440 x 204 x 43 mm) Weight Model GS716TP. 6.61 lb (3.0 kg) Model GS716TPP. 6.79 lb (3.
