User Manual Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Model s G C1 0 8P G C1 0 8P P November 2019 202-11958-02 NETGEAR, Inc.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Support Thank you for purchasing this NETGEAR product. You can visit https://www.netgear.com/support/ to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources Compliance and Conformity For regulatory compliance information including the EU Declaration of Conformity, visit https://www.netgear.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Contents Chapter 1 Getting Started Available publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Switch management options and default management mode . . . . . . . . .12 Manage the switch by using the local browser UI . . . . . . . . . . . . . . . . . . . . . 13 Software requirements for the local browser UI . . . . . . . . . . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the DNS settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Configure the global DNS settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .71 Configure and view host name-to-IP address information . . . . . . . . . . .73 Configure green Ethernet settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the Auto-VoIP global and protocol-based port settings . 140 Configure Auto-VoIP OUI-based properties . . . . . . . . . . . . . . . . . . . . . 141 Configure OUI-based port settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142 Manage the OUI table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144 Display the Auto-VoIP status . . . . . . . . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View entries in the ARP cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Create a static ARP entry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Configure the global ARP settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Remove ARP entries from the ARP cache . . . . . . . . . . . . . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Activate the access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 292 Display the access profile summary and the number of filtered packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 293 Deactivate an access profile . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 294 Remove an access profile. . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View the dual image status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 389 Perform troubleshooting tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .390 Ping an IPv4 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 390 Ping an IPv6 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Standard IP ACL sample configuration . . . . . . . . . . . . . . . . . . . . . . . . . 449 Differentiated Services (DiffServ) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450 Class. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451 DiffServ traffic classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1 1 Getting Started This manual describes how you can configure and monitor the following NETGEAR Insight managed switches by using their local browser user interface (UI): • 8-Port Gigabit Ethernet PoE+ Smart Cloud Switch (64W) with NETGEAR FlexPoE Power, Model GC108P • 8-Port Gigabit Ethernet Hi-Power PoE+ Smart Cloud Switch (126W) with NETGEAR FlexPoE Power, Model GC108PP This chapter contains the following sections: • Available publications • Switch management options and default management mode
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Note: Firmware updates with new features and bug fixes are automatically made available through the Insight app and, if selected, pushed straight from the cloud to the device. If you are not using the NETGEAR Insight app to manage your device, you can manually download and install the latest firmware by visiting netgear.com/support/download/.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Switch management options and default management mode If you prefer, you can use the switch as a plug-and-play device, so you do not need to set up a custom configuration. Just connect power, connect to your network and to your other devices, and you’re done.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Note: Changes to Insight-manageable settings from the local browser UI might also create conflicts with the rest of the Insight-managed network to which the device is connected. While you manage the switch with the local browser UI, you cannot use the Insight app or Insight Cloud portal.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power User-defined fields In the local browser UI, user-defined fields can contain 1 to 159 characters, unless otherwise noted in the field label on the configuration page. All alphanumeric and special characters can be used except for the following (unless specifically noted for that feature): Table 1. Disallowed characters in user-defined fields Character Definition Character Definition \ Backslash < Less than
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Access the switch on-network and connected to the Internet The DHCP client on the switch is enabled by default, allowing a DHCP server on the network (or router that functions as a DHCP server) to assign an IP address to the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Enter the email address and password for your account and tap LOG IN. After you log in to your account, the IP address of the switch displays in the device list. 6. Write down the IP address so that you can use it in Step 11. 7. Tap + in the upper-right corner. 8. Do one of the following: • Scan the QR code. • Scan the serial number bar code, and tap Go. • Type the serial number, and tap Go. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Note: For information about installing a security certificate, see Use an HTTP session to download and install an SSL security certificate file on the switch on page 382. 13. Enter your credentials, which depend on the page that displays: • Register to unlock all features page displays. If this is the first time that you log in to the local browser UI, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 18. Enter the local device password or, if you already added the switch to an Insight network location, enter the Insight network password to access the local browser UI. Note: After you add the switch to an Insight network location, the Insight network password replaces the switch local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. If your browser displays a security message and does not let you proceed, do one of the following, depending on the browser that you are using: • Google Chrome. If Google Chrome displays a Your connection is not private message, click the ADVANCED link. Then, click the Proceed to x.x.x.x (unsafe) link, in which x.x.x.x represents the IP address of the switch. • Apple Safari.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Note: After you add the switch to an Insight network location, the Insight network password replaces the switch local device password. For more information about the credentials, see Credentials for the local browser UI on page 28. 11. Click the Login button. The System Information page displays. A limited menu of the local browser UI is available. 12. Select the Direct Connect Web-browser Interface radio button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You can use a WiFi or wired network connection. 4. Open the Safari browser. 5. Select Safari > Preferences. The General page displays. 6. Click the Advanced tab. The Advanced page displays. 7. Select the Include Bonjour in the Bookmarks Menu check box. 8. Close the Advanced page. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. Enter your credentials, which depend on the page that displays: • Register to unlock all features page displays. If this is the first time that you log in to the local browser UI, the Register to unlock all features page displays. Click the Log in with NETGEAR account button, and follow the directions onscreen to register the switch with your NETGEAR email address and password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 17. Click the Login button. The System Information page displays. The full menu of the local browser UI is now available.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power you confirm changes to your certificate trust settings, enter your Mac user name and password and click the Update Setting button. • Mozilla Firefox. If Mozilla Firefox displays a Your connection is not secure message, click the ADVANCED button. Then, click the Add Exception button. In the pop-up window that opens, click the Confirm Security Exception button. • Microsoft Internet Explorer.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select the Direct Connect Web-browser Interface radio button. An Alert pop-up window opens. 7. Read the text, and click the OK button. The pop-up window closes. 8. Click the Apply button. Your settings are saved. The System Information page closes and any current Insight-manageable device settings are saved to the cloud server. The Local Device Login page displays. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If the DHCP client of the switch is enabled and you remove the switch from the network with the DHCP server, the IP address reverts to the default IP address of 192.168.0.239 with a subnet mask of 255.255.255.0. Note: If you already disabled the DHCP client and assigned a static IP address to the switch, change the IP settings of your computer to be in the same subnet as the static IP address.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Microsoft Internet Explorer. If Microsoft Internet Explorer displays a There is a problem with this website’s security certificate message, click the Continue to this website (not recommended). • Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s security certificate message or a similar warning, select Details > Go on to the webpage.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 11. Click the Login button. The System Information page displays. The full menu of the local browser UI is now available and you can configure the switch. 12.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power the switch is registered only after you access the switch local browser UI with your NETGEAR account. After you do so, you can access the local browser UI with the local device password. The following table lists the essential credential options for access to the local browser UI. Table 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power After you register the switch and access the switch local browser UI with your NETGEAR account credentials, you can access the local browser UI with the local device password, or if you previously added the switch to an Insight network location, with the Insight network password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Microsoft Edge. If Microsoft Edge displays a There is a problem with this website’s security certificate message or a similar warning, select Details > Go on to the webpage. Note: For information about installing a security certificate, see Use an HTTP session to download and install an SSL security certificate file on the switch on page 382. 5.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the management mode of the switch By default, the management mode on the switch is NETGEAR Insight Mobile App and Insight Cloud Portal. With this setting you can manage the switch using the Insight app or the Insight Cloud portal.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the language of the local browser UI By default, the language is set to Auto. You can set the language to a specific one. To change the language of the local browser UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power How to configure interface settings The switch supports physical and logical interfaces. Interfaces are identified by their type and the interface number. For all models, the physical ports include eight Gigabit Ethernet ports and two SFP fiber ports. The ports are numbered on the front panel. You configure the logical interfaces by using the software.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure a single port or LAG: 1. Click the All link to display the all ports and LAGs. 2. Do one of the following: a. In the Go To Interface field, type the port number and click the Go button. For example, type g4 for a port or type l3 for a LAG. For more information, see Table 3 on page 36.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Use the Device View of the local browser UI The Device View page in the local-only mode browser interface displays the ports and system LEDs on the switch. This graphic provides an alternate way to navigate to configuration and monitoring options. The graphic also provides information about device ports, current configuration and status, tables, feature components, and LED status. To use the Device View: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The color of the port itself and the port LEDs indicate the status that is described in the following table. Port or port LED Color and description Port color The port color indicates the port link status: • Green. The port is linked up. • Black. No link is present. Left port LED The color indicates the connection, speed, and traffic status: • Off. The port is not connected. This is the default state.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The previous figure shows the Device View page for model GC108PP. 8. To display the main menu that contains the same options as the navigation menu at the top of the page, right-click the graphic without clicking a specific port. The previous figure shows the Device View page for model GC108PP. 9. To return to the Device View page, select System > Device View.
2 2 Configure System Information This chapter covers the following topics: • View or define system information • Configure the IP network settings for management access • Configure the time settings • Manage the denial of service settings • Configure the DNS settings • Configure green Ethernet settings • Manage the Bonjour settings and view Bonjour information • Control the LEDs • Use the Device View • Configure Power over Ethernet • Configure SNMP • Configure Link Layer Discovery Pr
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View or define system information Note: When the management mode is NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote), which means that the local browser UI provides a limited menu only, you can still perform this task. When you log in, the System Information page displays. You can configure and view general device information. To view or define system information: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. • System Location. Enter the location of this switch. You can use up to 255 alphanumeric characters. • System Contact. Enter the contact person for this switch. You can use up to 255 alphanumeric characters. 7. Click the Apply button. Your settings are saved.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View the temperature sensor information Note: When the management mode is NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote), which means that the local browser UI provides a limited menu only, you can still perform this task. You can view the current temperature of the temperature sensors.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable Temperature Sensors information. Table 5. Temperature Sensors information Field Description Sensor The temperature sensor for the switch. Description The description of the temperature sensor. Temp (C) The temperature of the switch in degrees Centigrade. State The switch temperature state. Max Temp (C) The maximum temperature value of CPU.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Scroll down to the Versions section. 7. To refresh the page, click the Refresh button. The following table describes the nonconfigurable information displayed in the Versions section of the System Information page. Table 6. Versions information Field Description Model Name The model name of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Management > System CPU Status > System CPU Status. The CPU Utilization section shows the memory information, task-related information, and percentage of CPU utilization per task.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the CPU thresholds The CPU utilization threshold notification feature allows you to configure thresholds that, when exceeded, trigger a notification. The notification occurs through SNMP trap and syslog messages. To configure the CPU thresholds: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power period is optional. If the Falling CPU utilization parameters are not configured, the parameters automatically get the same values as the Rising CPU utilization parameters. The range is 1 to 100. • Falling Interval. The utilization monitoring time period can be configured from 5 seconds to 86400 seconds in multiples of 5 seconds. • Free Memory Threshold. The free memory threshold value for the CPU in KB. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power of the port to be connected in that management VLAN must be the same as the management VLAN ID. Note: Make sure that the VLAN that you want to assign as the management VLAN exists. Also make sure that the PVID of at least one port in the VLAN is the same as the management VLAN ID. For information about creating VLANs and configuring the PVID for a port, see Configure VLANs on page 121. 10. Click the Apply button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View the IPv6 network neighbors You can view information about the IPv6 neighbors that the switch discovers through the Neighbor Discovery Protocol (NDP). To view the IPv6 neighbors: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 8. IPv6 network interface neighbor table information (continued) Field Description Neighbor State The state of the neighboring switch: • reachable (1). The neighbor is reachable from the switch. • stale (2). Information about the neighbor is scheduled for deletion. • delay (3). No information was received from the neighbor during the delay period. • probe (4).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Management > Time > Time Configuration. The Time Configuration page displays. 7. Select the Clock Source Local radio button. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the time settings with SNTP and configure the global SNTP settings To configure the time by using SNTP and configure the global SNTP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The allowed range is 1025 to 65535 and 123. The default value is 123. When the default value is configured, the actual client port value used in SNTP packets is assigned by the switch. 10. In the Unicast Poll Interval field, specify the number of seconds between unicast poll requests expressed as a power of 2. The allowed range is 6 to 10. The default value is 6. 11.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View the SNTP global status When you select the SNTP option as the clock source, the SNTP global status is displayed below the SNTP Global Configuration section of the page. The SNTP Global Status table displays information about the system’s SNTP client. To view SNTP global status: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table displays the nonconfigurable SNTP Global Status information. Table 9. SNTP Global Status information Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client. Last Update Time The local date and time (UTC) that the SNTP client last updated the system clock.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure an SNTP server SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. The switch operates only as an SNTP client and cannot provide time services to other systems. Time sources are established by strata. Strata define the accuracy of the reference clock.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add an SNTP server By default, certain SNTP servers are predefined on the switch. To add an SNTP server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The SNTP client on the device continues sending SNTP requests to different servers until a successful response is received, or all servers are exhausted. The priority indicates the order in which to query the servers. The request is sent to an SNTP server with a priority value of 1 first, then to a server with a priority value of 2, and so on.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the settings for an existing SNTP server To change the settings for an existing SNTP server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Field Description Ends At These fields are used to configure the end values of date and time. • Week. Configure the end week. • Day. Configure the end day. • Month. Configure the end month. • Hours. Configure the end hour. • Minutes. Configure the end minutes. Offset Configure recurring offset in minutes. The valid range is 1–1440 minutes. Zone Configure the time zone.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View the daylight saving time status The Daylight Saving (DST) Status section shows information about the summer time settings and whether the time shift for summer time is currently in effect. To view the daylight saving time status: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 11. Daylight Saving (DST) Status information (continued) Field Description Begins At The start date of daylight saving time. This field is not displayed when daylight saving time is disabled. Ends At The end date of daylight saving time. This field is not displayed when daylight saving time is disabled. Offset (in Minutes) The offset value in minutes.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Management > Denial of Service > Auto-DoS Configuration.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Management > Denial of Service > Denial of Service Configuration. The Denial of Service Configuration page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Denial of Service TCP Flag&Sequence. Enabling TCP Flag DoS prevention causes the switch to drop packets with TCP control flags set to 0 and the TCP sequence number set to 0. • Denial of Service TCP Fragment. Enabling TCP Fragment DoS prevention causes the switch to drop packets with a TCP payload for which the IP payload length minus the IP header size is less than the minimum allowed TCP header size.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table displays DNS Server Configuration information. Table 12. DNS Server Configuration information Field Description ID The identification of the DNS Server. Preference Shows the preference of the DNS server. The preferences are determined by the order in which they were entered.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. In the IPv4/IPv6 Address field, enter the IP address to associate with the host name. 9. Click the Add button. The entry is added to the Dynamic Host Mapping table. Remove an entry from the dynamic host mapping table To remove an entry from the dynamic host mapping table: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the host name or IP address in an entry of the dynamic host mapping table and view all entries To change the host name or IP address in an entry of the dynamic host mapping table and view all entries: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The dynamic host mapping table shows host name-to-IP address entries that the switch learned. The following table describes the dynamic host fields. Table 13. Dynamic Host Mapping information Field Description Host Lists the host name that you assign to the specified IP address. Total Time since the dynamic entry was first added to the table. Elapsed Time since the dynamic entry was last updated.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Management > Green Ethernet > Green Ethernet Configuration. The Green Ethernet Configuration page displays. 7. Select the Auto Power Down Mode Disable or Enable radio button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manage the Bonjour settings and view Bonjour information A Mac OS device that supports Bonjour can discover the switch in the network so that you can find the switch IP address and log in to the local browser UI of the switch. Bonjour is enabled by default on the switch. You can disable Bonjour for security reasons. Manage the Bonjour settings To manage the Bonjour settings: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. Click the Apply button. Your settings are saved. View Bonjour information To view Bonjour information: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 14. Published Services information (continued) Field Description Port The Bonjour service port number. TXT data The Bonjour service text. Control the LEDs Note: When the management mode is NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote), which means that the local browser UI provides a limited menu only, you can still perform this task.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select System > Management > LED Control. 7. Select the Port LEDs On or Off radio button. By default, the On radio button is selected and the port LEDs are enabled. If you select the Off radio button, the port LEDs are disabled. 8. Click the Apply button. Your settings are saved. Use the Device View For information about the device view, see Use the Device View of the local browser UI on page 38.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add an SNMP community: To add an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 10. From the Access Mode menu, select the access level for this community, which is either ReadOnly or ReadWrite. 11. From the Status menu, select to enable or disable the community. If you select Enable, the community name must be unique among all valid community names or the set requests are rejected. If you select Disable, the community name becomes invalid. 12. Click the Add button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an SNMP community To delete an SNMP community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure SNMPv1 and SNMP2 trap settings You can configure settings for each SNMPv1 or SNMPv2 management host that must receive notifications about traps generated by the device. The SNMP management host is also known as the SNMP trap receiver. Add an SNMP trap receiver To add an SNMP trap receiver: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power This name can be up to 16 characters and is case-sensitive. 10. From the Status menu, select Enable to send traps to the receiver or select Disable to prevent the switch from sending traps to the receiver. 11. Click the Add button. The receiver configuration is added. Modify information about an existing SNMP trap recipient To modify information about an existing SNMP trap recipient: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an SNMP trap recipient To delete an SNMP trap recipient: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure authentication and encryption settings for the SNMPv3 admin profile by using the web interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure Link Layer Discovery Protocol The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN. LLDP is a one-way protocol without any request/response sequences.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The default is Auto Advertise. • Notification. When notifications are enabled, LLDP interacts with the trap manager to notify subscribers of remote data change statistics. The default is Disable. • Optional TLVs. Enable or disable the transmission of optional type-length value (TLV) information from the interface. The default is Enable.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The LLDP-MED Network Policy page displays. 7. From the Interface menu, select the interface for which you want to view the information. The page displays the data transmitted in the network policy TLVs for the interface. 8. Click the Refresh button to update the page with the latest information about the switch. The following table describes the LLDP-MED network policy information that displays on the page.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Field Description Port Description The user-defined description of the port. For information about how to configure the port description, see Configure the port settings and maximum frame size on page 113. Advertisement The TLV advertisement status of the port. 8. To view additional details about a port, click the port number in the Interface column of the Port Information table.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Field Description User Priority The priority associated with the policy. DSCP The DSCP associated with a particular policy type. View the LLDP neighbors information You can view the data that a specific port received from other LLDP-enabled systems. To view the LLDP information received from a neighbor device: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the information that displays for all LLDP neighbors that were discovered. Field Description MSAP Entry The Media Service Access Point (MSAP) entry number for the remote device. Local Port The interface on the local system that received LLDP information from a remote system. Chassis ID Subtype The type of data displayed in the Chassis ID field on the remote system.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Field Description Managed Addresses Address SubType The type of the management address. Address The advertised management address of the remote system. Interface SubType The port subtype. Interface Number The port on the remote device that sent the information. MAC/PHY Details Auto-Negotiation Supported Specifies whether the remote device supports port-speed autonegotiation.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Field Description Model Name The model name advertised by the remote device. Asset ID The asset ID advertised by the remote device. Location Information Civic The physical location, such as the street address, that the remote device advertised in the location TLV, for example, 123 45th St. E. The field value length range is 6–160 characters.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Enable the global DHCP snooping settings You can view and configure the global settings for DHCP snooping. To enable the global DHCP snooping settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Enable DHCP for all interfaces in a VLAN To enable DHCP snooping for all interfaces that are members of a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure DHCP snooping interface settings You can view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded. If a port is configured as untrusted, any DHCP (or BootP) responses received on that port are discarded. To configure DHCP snooping interface settings: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • To configure all interfaces with the same settings, select the check box in the table header. 9. From the Trust Mode menu, select the desired trust mode: • Disabled. The interface is considered to be untrusted and could potentially be used to launch a network attack. DHCP server messages are checked against the bindings database.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the persistent location of the DHCP snooping bindings database You can configure the persistent location of the DHCP snooping bindings database. The bindings database can be stored locally on the device or on a remote system somewhere else in the network. The device must be able to reach the IP address of the remote system to send bindings to a remote database.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The delay allows the device to collect as many entries as possible (new and removed) before writing them to the persistent file. 9. Click the Apply button. Your settings are saved. View or clear the DHCP snooping statistics You can view and clear per-interface statistics about the DHCP messages filtered by the DHCP snooping feature on untrusted interfaces. To view or clear the DHCP snooping statistics: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. Click the Refresh button to update the page with the latest information about the switch. 9. To clear all interfaces statistics, click the Clear button. The following table describes the DHCP snooping statistics. Table 18. DHCP Snooping Statistics information Field Description Interface The interface associated with the rest of the data in the row.
3 3 Configure Switching This chapter covers the following topics: • Configure the port settings and maximum frame size • Configure link aggregation groups • Configure VLANs • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure multicast • Configure multicast VLAN registration • View, search, and configure the MAC address table • Configure Layer 2 loop protection 112
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the port settings and maximum frame size You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. To configure the port settings and maximum frame size: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 9. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Half. Indicates that the interface supports transmission between the devices in only one direction at a time. The default is Auto. Note: After you change the duplex mode, the switch might be inaccessible for a number of seconds while the new settings take effect. 15. From the Link Trap menu, select whether or not to send a trap when the link status changes. By default, the switch sends a link trap. 16.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 19. Port Configuration information (continued) Field Description Frame Size The maximum Ethernet frame size the interface supports or is configured to use, including Ethernet header, CRC, and payload. The range is 1522 to 10000. The default maximum frame size is 1522. MAC Address The physical address of the specified interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Enable. Spanning tree is enabled for this LAG. Enable is the default. 13. From the Link Trap menu, select Enable or Disable to specify whether to send a trap when the link status changes. The default is Enable, which causes the trap to be sent. 14. From the LAG Type menu, select Static or LACP: • Static. Disables Link Aggregation Control Protocol (LACP) on the selected LAG. The LAG is configured manually.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power the tag, or the VLAN portion of the tag, in which case the first switch port to receive the packet can either reject it or insert a tag using its default VLAN ID. A given port can handle traffic for more than one VLAN, but it can support only one default VLAN ID. You can define VLAN groups stored in the VLAN membership table. The switch supports up to 64 VLANs.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Switching> VLAN > Basic > VLAN Configuration. The VLAN Configuration page displays. 7. In the VLAN ID field, specify the VLAN identifier for the new VLAN. The range of the VLAN ID can be from 2 to 4093, excluding 4088 and 4089. (The default VLANs are 1, 4088, and 4089). 8. In the VLAN Name field, specify a name for the VLAN. The VLAN name can be up to 32 alphanumeric characters long, including blanks.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Switching> VLAN > Basic > VLAN Configuration. The VLAN Configuration page displays. 7. In the VLAN ID field, specify the VLAN identifier. The range of the VLAN ID can be from 1 to 4093. Note: You cannot delete VLANs 1, 4088, and 4089, all of which are predefined. 8. Click the Delete button. The VLAN is removed.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The VLAN Configuration page displays. 7. Select the Reset Configuration check box. 8. Click the Apply button. Your settings are saved. With the exception of the default VLANs (1, 4088, and 4089), all VLANs are deleted. The default values are as follows: • All ports are assigned to the default VLAN of 1. • All ports are configured with a PVID of 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. In the VLAN ID menu, select the VLAN ID. 8. In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: • Untag All. For all ports that are members of the VLAN, tags are removed from all egress packets. • Tag All. For all ports that are members of the VLAN, all egress packets are tagged. • Remove All. All ports are removed from the VLAN. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 21. Advanced VLAN membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks. The names for the following VLANs are predefined: • VLAN 1. Default. • VLAN 4088. Auto-VoIP. • VLAN 4089.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Switching > VLAN > Advanced > VLAN Status. The VLAN Status page displays. 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 22. VLAN status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 12. From the Acceptable Frame menu, specify the types of frames that can be received on this port: • Admit All. Untagged frames or priority-tagged frames received on this port are accepted and assigned the value of the port VLAN ID for this port. With either option, VLAN-tagged frames are forwarded in accordance to the 802.1Q VLAN specification. • VLAN only.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power When untagged or priority-tagged packets arrive at the switch and entries exist in the MAC-to-VLAN table, the source MAC address of the packet is looked up. If an entry is found, the corresponding VLAN ID is assigned to the packet. If the packet is already priority tagged it maintains this value. Otherwise, the priority is set to zero. The assigned VLAN ID is verified against the VLAN table.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete a MAC address from the VLAN mapping To delete a MAC address from the VLAN mapping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you assign a port to a protocol-based VLAN for a specific protocol, untagged frames received on that port for that protocol are assigned the protocol-based VLAN ID. Untagged frames received on the port for other protocols are assigned the port VLAN ID, either the default PVID (1) or a PVID you specifically assigned to the port using the Port VLAN Configuration page.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You can enter keywords such as arp, ip, and ipx. Separate keywords with a comma. You can also enter hexadecimal or decimal values in the range of 0x0600 (1536) to 0xFFFF (65535). 10. In the VLAN ID field, enter the VLAN ID. The ID can be any number in the range of 1 to 4093. All the ports in the group assign this VLAN ID to untagged packets received for the protocols that you included in this group. 11.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Membership. The protocol Based VLAN Group Membership page displays. 7. From the Group ID menu, select the protocol-based VLAN group ID. The Group Name field shows the name that is associated with the group. 8. In the Ports table and LAG table, click each port and LAG that you want to include in the protocol-based VLAN group.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Switching> VLAN > Advanced > Voice VLAN Configuration. The page that displays shows the Voice VLAN Global Admin section and Voice VLAN Configuration section. 7. Select the Admin Mode Disable or Enable radio button. This enables or disables the voice VLAN for the switch. The default is Disable. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the GARP switch settings The Generic Attribute Registration Protocol (GARP) is used to exchange information between GARP participants to register and deregister attribute values within a bridged LAN.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Switching> VLAN > Advanced > GARP Switch Configuration. 7. Select the GVRP Mode Disable or Enable radio button. This selection specifies the global administrative mode for GARP on the switch. The default is Disable, which causes the protocol to be inactive. 8. Click the Apply button. Your settings are saved.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure Auto-VoIP Voice over Internet Protocol (VoIP) enables telephone calls over a data network. Because voice traffic is typically more time-sensitive than data traffic, the Auto-VoIP feature helps provide a classification mechanism for voice packets so that they can be prioritized above data packets in order to provide better Quality of Service (QoS).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The page displays the Protocol Based Global Settings section and the Protocol Based Port Settings section. 7. From the Prioritization Type menu, select Traffic Class or Remark. This specifies the type of prioritization. 8. From the Class Value menu, specify the CoS tag value to be reassigned for packets received on the voice VLAN when Remark CoS is enabled. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manage the OUI table Device hardware manufacturers can include an OUI in a network adapter to help identify a hardware device. The OUI is a unique 24-bit number assigned by the IEEE registration authority.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Switching > Auto-VoIP > OUI-based > OUI Table. The OUI Table page displays. 7. In the Telephony OUIs field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. You can configure up to 32 OUIs. 8. In the Description field, enter the description for the OUI. The maximum length of description is 32 characters. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select the check box next to each OUI prefix to be removed. 8. Click the Delete button. The telephony OUI entries are removed. Display the Auto-VoIP status You can display the Auto-VoIP status. To view the Auto-VoIP status: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable Auto-VoIP status information. Table 25. Auto-VoIP status Field Description Auto-VoIP VLAN ID The Auto-VoIP VLAN ID. Maximum Number of Voice Channels Supported The maximum number of voice channels supported. Number of Voice Channels Detected The number of VoIP channels prioritized successfully.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the STP settings You can configure the STP settings on the switch. To configure the STP settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Forward BPDU while STP Disabled. Enable or disable the BPDU Flood. The BPDU flood option specifies whether spanning tree BPDUs are forwarded while spanning tree is disabled on the switch. 8. Click the Apply button. Your settings are saved. 9. To refresh the page with the latest information about the switch, click the Refresh button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power forwarding packets. The value must be greater or equal to (Bridge Max Age / 2) + 1. The time range is from 4 seconds to 30 seconds. The default value is 15 seconds. • Spanning Tree Maximum Hops. The maximum number of bridge hops the information for a particular CST instance can travel before being discarded. The valid range is 6–40. The default is 20 hops. 8. Click the Apply button. Your settings are saved. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Switching > STP > Advanced > CST Port Configuration. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The possible values are Enable and Disable. The default value is Enable. 13. In the Path Cost field, set the path cost to a new value for the specified port in the common and internal spanning tree. Specify a value in the range of 0 to 200000000. The default is 0. When the path cost is set to 0, the value is updated with the external path cost from a received STP packet. 14.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 29. CST port status (continued) Field Description Topology Change Acknowledge Identifies whether the topology change acknowledgement flag is set for the next BPDU to be transmitted for this port. It is either True or False. Edge Port Indicates whether the port is enabled as an edge port. It is either Enabled or Disabled. Point-to-Point MAC Derived value of the point-to-point status.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Rapid STP page displays. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 31. MST configuration (continued) Field Description Root Path Cost Path cost to the designated root for this MST instance. Root Port Port to access the designated root for this MST instance. Modify an MST instance To modify an MST instance: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an MST instance To delete an MST instance: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure MST port settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • To configure multiple interfaces with the same settings, select the check box associated with each interface. • To configure all interfaces with the same settings, select the check box in the table header. 10. Configure the MST values for the selected interfaces: • Port Priority. The priority for a particular port within the selected MST instance. The port priority is set in multiples of 16.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 32. MST port status information (continued) Field Description Port Forwarding State The current STP state of a port. If enabled, the port state determines what forwarding action is taken on traffic. The options are as follows: • Disabled. STP is currently disabled on the port. The port forwards traffic while learning MAC addresses. • Discarding. The port is currently blocked.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure multicast Multicast IP traffic is traffic that is destined to a host group. Host groups for IPv4 multicast are identified by class D addresses, which range from 224.0.0.0 to 239.255.255.255. Host groups for IPv6 multicast are identified by the prefix ff00::/8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. Click the Go button. If the address exists, the entry is displayed. An exact match is required. 9. To refresh the page with the latest information about the switch, click the Refresh button. 10. To clear the information, click the Clear button. The following table describes the information in the MFDB table. Table 34.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Switching > Multicast > MFDB > MFDB Statistics. The MFDB Statistics page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power addressed to unrequested group addresses, they cannot transmit new packets onto the shared media for the period of time that the multicast packet is flooded. The problem of wasting bandwidth is even worse when the LAN segment is not shared, for example in full-duplex links. Allowing switches to snoop IGMP packets is a creative effort to solve this problem.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Switching> Multicast > IGMP Snooping > IGMP Snooping Configuration. The IGMP Snooping Configuration page displays. 7. Select the IGMP Snooping Status Enable or Disable radio button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Enter a value greater or equal to 1 and less than the group membership interval in seconds. The default is 10 seconds. The configured value must be less than the group membership interval. 12. In the MRouter Timeout field, specify the time that the switch must wait to receive a query on an interface before removing it from the list of interfaces with multicast routers attached.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The IGMP Snooping Table page displays. 7. In the Search By MAC Address field, specify the MAC address whose MFDB table entry you want to view. Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67. 8. Click the Go button. If the address exists, the entry is displayed. An exact match is required. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Modify IGMP snooping settings for a VLAN To modify IGMP snooping settings for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure a multicast router VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power the current multicast group membership on a port-by-port basis. If the switch does not receive updated membership information in a timely fashion, it stops forwarding multicasts to the port where the end device is located. You can configure and display information about IGMP snooping queriers on the network and, separately, on VLANs.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • IGMP Version. Specify the IGMP protocol version used in periodic IGMP queries. The range is 1 to 2. The default value is 2. • Query Interval (secs). Specify the time interval in seconds between periodic queries sent by the snooping querier. The query interval must be a value in the range of 1 and 1800. The default value is 60. • Querier Expiry Interval (secs).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Querier VLAN Configuration page displays. 7. From the VLAN ID menu, select New Entry. 8. Configure the following settings: • VLAN ID. The VLAN ID for which the IGMP snooping querier is to be enabled. • • Querier Election Participate Mode. Enable or disable querier this mode: - Disable. Upon seeing another querier of the same version in the VLAN, the snooping querier moves to the non-querier state.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Switching> Multicast > IGMP Snooping Querier > Querier VLAN Configuration. The Querier VLAN Configuration page displays. 7. From the VLAN ID menu, select the VLAN ID. 8. Click the Delete button. Your settings are saved. The IGMP snooping querier is no longer supported on the VLAN. The VLAN itself is not deleted.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable information displayed on the page. Table 38. Querier VLAN Status information Field Description VLAN ID The VLAN ID on which IGMP snooping querier is enabled. Operational State The operational state of the IGMP snooping querier on a VLAN. It can be in any of the following states: • Querier. The snooping switch is the querier in the VLAN.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power In addition to building and maintaining lists of multicast group memberships, the MLD snooping switch also maintains a list of multicast routers. Multicast packets are forwarded on ports to which multicast routers are connected. With MLD snooping, only one querier can be active in the network. All other routers in the network are suppressed and are not detectable by the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. Click the Apply button. Your settings are saved. 9. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 39. MLD Snooping Configuration information Field Definition Multicast Control Frame Count The number of multicast control frames that were processed by the CPU.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The MLD Snooping Interface Configuration page displays. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure MLD snooping for VLANs To configure MLD snooping for a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 12. Click the Add button. MLD snooping is enabled on the specified VLAN. Remove MLD snooping from a VLAN You can remove MLD snooping from a VLAN. To remove MLD snooping from a VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure a multicast router interface for MLD snooping To configure a multicast router interface for MLD snooping: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. From the Multicast Router menu, select to enable or disable the multicast router for the selected interfaces. 10. Click the Apply button. Your settings are saved. Configure a multicast router VLAN for MLD snooping To configure a multicast router VLAN for MLD snooping: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure an MLD snooping Querier You can configure the settings for an MLD snooping querier. To configure an MLD snooping querier: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Querier Expiry Interval (secs). Specify the interval in seconds after which the last querier information is removed. The querier expiry interval must be a value in the range of 60 to 300. The default value is 60. 8. Click the Apply button. Your settings are saved. The page displays the IDs of the VLANS for which the MLD snooping querier is enabled.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power snooping querier participates in querier election where the lowest IP address wins the querier election and operates as the querier in that VLAN. The other querier moves to non-querier state. 9. In the Querier VLAN Address field, specify the snooping querier address to be used as the source address in periodic MLD queries sent on the specified VLAN. 10. Click the Add button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 41. MVR Configuration information Field Definition MVR Max Multicast Groups The maximum number of multicast groups that MVR supports. MVR Current Multicast Groups The number of MVR groups that are allocated. Configure an MVR group To configure an MVR group: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power This entry in this field lets you create multiple MVR groups through a single click of the Add button. If the field is empty, clicking the Add button creates one new group only. The range is from 1 to 256. By default, the field is blank. 9. Click the Add button. The MVR group or groups are added. The following table describes the nonconfigurable information displayed on the page. Table 42.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View and search the MAC address table You can use the search function for the MAC address table to display information about the entries in the table. To view and search the MAC address table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Search by Interface. From the Search menu, select Interface, and enter the interface ID using the respective interface naming convention (for example, g1 or l1). Then click the Go button. 8. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 44.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Switching > Address Table > Advanced > Dynamic Address. The Dynamic Address page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Switching > Address Table > Advanced > Static MAC Address. The page displays the Port List section and the Static MAC ADdress Table section. 7. From the Interface menu, select the interface. 8. In the Static MAC Address field, enter the MAC address. 9. From the VLAN ID menu, select the VLAN ID that must be associated with the MAC address.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. From the Interface menu, select the interface. 8. Select the check box for the static MAC address. You can select multiple MAC addresses. 9. Click the Delete button. The static MAC address is removed from the MAC address table. Configure Layer 2 loop protection Loops inside a network are costly because they consume resources and reduce the performance of the network. Detecting loops manually can be cumbersome.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure Layer 2 loop protection on a port To configure Layer 2 loop protection on a port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8.
4 4 Configuring Routing This chapter covers the following topics.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power How the switch handles routing For each incoming packet, the switch uses the destination MAC address to determine if the address matches a configured routing interface. If it does, the switch searches the host table for a matching destination IP address: • The host table contains a matching IP address.The packet is routed to the host. • The host table does not contain a matching IP address.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Routing > IP > IP Configuration. The IP Configuration page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 47. IP routing statistics information (continued) Field Description IpOutDiscards The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but which were discarded (for example, for lack of buffer space). This counter includes datagrams counted in ipForwDatagrams if any such packets met this discretionary discard criterion.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 47. IP routing statistics information (continued) Field Description IcmpInAddrMasks The number of ICMP Address Mask Request messages received. IcmpInAddrMaskReps The number of ICMP Address Mask Reply messages received. IcmpOutMsgs The total number of ICMP messages that this entity attempted to send. This counter includes all those counted by icmpOutErrors.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power VLAN spans multiple physical networks, or when additional segmentation or security is required. This section shows how to configure switch software to support VLAN routing. A port can be either a VLAN port or a router port, but not both. However, a VLAN port can be part of a VLAN that is itself a router port.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Routing > VLAN > VLAN Routing Wizard. 7. In the VLAN ID field, specify the VLAN Identifier (VID) associated with this VLAN. The VID is 1 to 4093 characters in length. 8. In the IP Address field, define the IP address of the VLAN interface. 9. In the Network Mask field, define the subnet mask of the VLAN interface. 10.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manually manage routing VLANs You can view information about existing VLAN routing interfaces on the switch, change the settings for an existing routing VLAN, change a regular VLAN into a routing VLAN, and delete a routing VLAN. View the existing routing VLANs and manually add a routing vLAN You can view the routing VLANs that you added through the VLAN Routing Wizard and manually add a routing VLAN.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power c. In the Subnet Mask field, enter a subnet mask for the VLAN routing interface. d. Click the Add button. The VLAN becomes a routing VLAN. The following table describes the VLAN routing interface status information on the page. Table 48. VLAN routing interface information Field Description Port The port number assigned to the VLAN Routing Interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. Click the Apply button. Your settings are saved. Remove a routing VLAN When you remove a routing VLAN, the VLAN becomes a regular VLAN. To remove a routing VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure router discovery The Router Discovery protocol is used by hosts to identify operational routers (or routing interfaces) on the subnet. Router discovery messages can be of two types: router advertisements and router solicitations. The protocol requires each router to periodically advertise the IP addresses that it is associated with.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. In the Minimum Advertise Interval field, specify the minimum time (in seconds) allowed between router advertisements sent from the interface. The default is 450 seconds. 12. In the Advertise Lifetime field, specify the value (in seconds) to be used as the lifetime field in router advertisements sent from the interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Routing > Routing Table > Route Configuration. The Configure Routes page displays. The page also shows the Route Status section. 7. From the Route Type menu, select one of the following types of routes: • Static. For a static route, you must specify all fields. • DefaultRoute. For a default route, you cannot specify the Network Address and Subnet Mask fields. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 49. Routing table information (continued) Field Description Route Type Based on the protocol, Connected, Static, or Dynamic. Next Hop Interface The outgoing router interface that must be used when the switch forwards traffic to the destination.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select the check box next to each route to remove. 8. Click the Delete button. The static route is deleted. Configure ARP The address resolution protocol (ARP) associates a layer 2 MAC address with a layer 3 IPv4 address. The switch support both dynamic and manual ARP configuration. With manual ARP configuration, you can statically add entries into the ARP table.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power View entries in the ARP cache You can view entries in the ARP table. To display entries in the ARP table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table provides information included in the routing VLANs ARP cache section. Table 51. ARP cache information for routing VLANs Field Description IP Address The associated IP address of a device on a subnet attached to one of the switch's existing routing interfaces. Interface The routing interface associated with the ARP entry. MAC Address The unicast MAC address of the device.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Routing > ARP > Advanced > ARP Create. The Static ARP Configuration page displays. The page also shows the Routing VLANs ARP Cache section. 7. In the IP Address field, specify the IP address to add. The address must be the IP address of a device on a subnet attached to one of the switch’s existing routing interfaces. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Routing > ARP > Advanced > Global ARP Configuration. The Global ARP Configuration page displays. 7. In the Age Time field, specify the number of seconds for an ARP entry to age out. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Routing > ARP > Advanced > ARP Entry Management. The ARP Entry Management page displays. 7. From the Remove From Table menu, select the type of ARP entry to be removed.
5 5 Configure Quality of Service This chapter covers the following topics: • Quality of Service concepts • Manage Class of Service • Manage Differentiated Services 229
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power ports, in accordance with the configured default priority of the ingress port. This process is also used for cases where a trusted port mapping cannot be honored, such as when a non-IP packet arrives at a port configured to trust the IP DSCP value. Configure the global CoS settings To configure the CoS trust mode settings on all interfaces: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • To configure the same CoS trust mode settings for all CoS configurable interfaces, do the following: a. Select the Global radio button. b. From the Global Trust Mode menu, select one of the following trust mode options for ingress traffic on the switch: - Untrusted. Do not trust any CoS packet marking at ingress. • - 802.1p. The eight priority tags that are specified in IEEE 802.1p are p0 to p7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. From the Interface Trust Mode menu, select one of the following trust mode options for ingress traffic on the selected interfaces: • Untrusted. Do not trust any CoS packet marking at ingress. • 802.1p. The eight priority tags that are specified in IEEE 802.1p are p0 to p7. The QoS setting lets you map each of the eight priority levels to one of seven internal hardware priority queues. The default value is 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • To configure all interfaces with the same settings, select the check box in the table header. 9. From the Queue ID menu, select the queue to be configured. 10. From the Scheduler Type menu, select one of the following options: • Strict. The interface services traffic with the highest priority on a queue first. • Weighted. The interface uses weighted round robin to associate a weight to each queue.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select QoS > CoS > Advanced > 802.1p to Queue Mapping. 7. In the 802.1p to Queue Mapping table, map each of the eight 802.1p priorities (from 0 to 7) to a queue (internal traffic class, also from 0 to 7). The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select QoS > CoS > Advanced > DSCP to Queue Mapping. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manage Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. Standard IP-based networks are designed to provide best effort data delivery service.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the global DiffServ mode You can display DiffServ general status group information, which includes the current administrative mode setting as well as the current and maximum number of rows in each of the main DiffServ private MIB tables. To configure the global DiffServ mode: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active. 8. Click the Apply button. Your settings are saved. The following table describes the information displayed in the Status table on the DiffServ Configuration page. Table 52.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. Define the criteria that must be associated the DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • • Source MAC. Select this radio button to require a packet’s source MAC address to match the specified MAC address. After you select this radio button, use the following fields to configure the source MAC address match criteria: - Address. The source MAC address to match. The source MAC address is specified as six two-digit hexadecimal numbers separated by colons. - Mask.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol, which you must select from the menu. The range is 0 to 65535. The menu includes Other as an option for unnamed ports. • IP DSCP.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Class Configuration. The Class Name page displays. 7. Click the class name, which is a hyperlink. The page on which you can change the class configuration displays. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select the check box next to the class name. 8. Click the Delete button. The class is removed. Configure the DiffServ IPv6 class settings The switch supports QoS ACL and DiffServ functionality for IPv6 by providing support for IPv6 packet classification. An IPv6 ACL serves the same purpose as an IPv4 ACL.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select QoS > DiffServ > Advanced > IPv6 Class Configuration. 7. Enter a class name in the Class Name field. The Class Name field also lists all the existing IPv6 class names, from which one can be selected for modification or deletion. 8. From the Class Type menu, select the class type.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. Define the criteria that must be associated the IPv6 DiffServ class: • Match Every. Select this radio button to add a match condition that considers all packets to belong to the class. The only selection from the Match Every menu is Any. • Reference Class. Select this radio button to reference another class for criteria.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Rename an existing IPv6 DiffServ class To rename an existing IPv6 DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Policy Configuration. 7. Enter a policy name in the Policy Name field. You cannot specify the policy type. By default, the policy type is In, indicating that the policy applies to ingress packets. 8. From the Member Class menu, optionally select an existing class that you want to associate with the new policy. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power This is an integer value in the range 0 to 7. 12. Configure the policy attributes: • Drop. Select this radio button to require each inbound packet to be dropped. • Mark VLAN CoS. Select this radio button to specify the VLAN priority, which you must select from the menu. The VLAN priority is expressed as an integer value in the range from 0 to 7. • Mark IP Precedence.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable information displayed on the page. Table 55. DiffServ policy configuration policy attribute Field Description Policy Name The name of the DiffServ policy. Policy Type The type of the policy, which is always inbound (In). Member Class Name The name of the class instance within the policy.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the policy attributes for an existing DiffServ policy To change the policy attributes for an existing DiffServ policy: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select QoS > DiffServ > Advanced > Service Configuration. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Remove a DiffServ policy from an interface To remove a DiffServ policy from an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
6 6 Manage Switch Security This chapter covers the following topics: • Change the local device password for the local browser UI • Manage the RADIUS settings • Configure TACACS+ settings • Configure authentication lists • Configure management access • Control access with profiles and rules • Configure port authentication • Set up traffic control • Configure access control lists 263
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Change the local device password for the local browser UI You can change the local device password for the switch. To change the local device password for the local browser UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The entered password is displayed in dots. 10. Click the Apply button. Your settings are saved. Manage the RADIUS settings RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 10. Click the Apply button. Your settings are saved. The following table describes the nonconfigurable fields displayed on the page. Table 58. RADIUS Configuration information Field Description Current Server Address The address of the current server. This field is blank if no servers are configured. Number of Configured Authentication Servers The number of configured authentication RADIUS servers.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Server Configuration page displays. 7. In the Server Address field, specify the IP address of the RADIUS server. 8. In the Authentication Port field, specify the UDP port number the server uses to verify the RADIUS server authentication. The valid range is from 1 to 65535. The default value is 1812. 9. From the Secret Configured menu, select Yes. You must select Yes before you can configure the RADIUS secret.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 59. RADIUS authentication server statistics information (continued) Field Description Access Rejects The number of RADIUS access-reject packets, including both valid and invalid packets, that were received from this server. Access Challenges The number of RADIUS access-challenge packets, including both valid and invalid packets, that were received from this server.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > Management Security > RADIUS > Server Configuration. The Server Configuration page displays. 7. Select the check box next to the server IP address. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. Click the Delete button. The RADIUS server is removed. Configure a RADIUS accounting server You can view and configure various settings for a RADIUS accounting server on the network. Add a RADIUS accounting server to the switch To add a RADIUS accounting server to the switch and view the RADIUS accounting server statistics: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power You must select Yes before you can configure the RADIUS secret. After you add the RADIUS accounting server, this field indicates whether the shared secret for this server was configured. 10. In the Secret field, type the shared secret to use with the specified accounting server. 11. From the Accounting Mode menu, select Enable to enable the RADIUS accounting mode. 12. Click the Add button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Modify the settings for a RADIUS accounting server on the switch To modify the settings for a RADIUS accounting server on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the global TACACS+ settings You can configure the TACACS+ settings for communication between the switch and the TACACS+ server that you set up. To configure the global TACACS+ settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure a TACACS+ server on the switch You can configure up to five TACACS+ servers with which the switch can communicate. To configure a TACACS+ server on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. In the Connection Timeout field, specify the time that passes before the connection between the device and the TACACS+ server times out. The range is 1–30. If you do not specify a value, the switch uses a default value of 5. 12. Click the Add button. The server is added to the switch. Modify the settings for a TACACS+ server on the switch To modify the settings for a TACACS+ server on the switch: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Remove a TACACS+ server from the switch To remove a TACACS+ server from the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure authentication lists You can configure a default login list that specifies one or more authentication methods to validate switch or port access for the admin user. Note: The admin user is assigned to a preconfigured list that is named defaultList and that you cannot delete. Configure the HTTP authentication list You can configure the default HTTP login list.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method. User authentication occurs in the order the methods are selected. Possible methods are as follows: • Local.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 11. From the menu in the 4 column, select the method, if any, that must be used fourth in the selected authentication login list. This is the method that is used if all previous methods time out. 12. Click the Apply button. Your settings are saved. Configure the dot1x authentication list The dot1x authentication list defines the IEEE 802.1X authentication method used for the default list.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The options are as follows: • None. The user is not authenticated. • RADIUS. The user’s ID and password are authenticated using the RADIUS server instead of locally. 9. Click the Apply button. Your settings are saved. Configure management access You can configure HTTP and secure HTTP access to the switch management interface. You can also configure access control profiles and access rules.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The HTTP Configuration page displays. 7. In the HTTP Session Soft Timeout field, specify the number of minutes an HTTP session can be idle before a time-out occurs. The value must be in the range of 0–60 minutes. The default value is 5 minutes. The currently configured value is shown when the web page is displayed.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manage certificates You can manage certificates. Generate an SSL certificate To generate an SSL certificate: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an SSL certificate To delete an SSL certificate: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For the web server on the switch to accept HTTPS connections from a management station, the web server needs a public key certificate. You can generate a certificate externally (for example, offline) and download it to the switch. Before you download a file to the switch, the following conditions must be true: • The file to download from the TFTP server is on the server in the appropriate directory.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • SSL DH Strong Encryption Parameter PEM File. SSL Diffie-Hellman Strong Encryption Parameter File (PEM Encoded) 8. From the Server Address Type menu, select IPv4 or DNS to indicate the format of the TFTP/SFTP/SCP Server Address field. The default is IPv4. 9. In the TFTP Server IP field, specify the address of the TFTP server. The address can be an IP address in standard x.x.x.x format or a host name.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add an access profile You can set up a single security access profile with which you can associate an access rule configuration. To add an access profile: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add a rule to an access rule profile After you add the access profile, you can add one or more security access rules to the access profile. If you access the switch from a computer, make sure that you add a permit rule for the type of service that you use (for example, HTTPS), your computer’s IP address, and your computer’s subnet mask.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power A Permit rule allows access by traffic that matches the rule criteria. A Deny rule blocks traffic that matches the rule criteria. 8. From the Service Type menu, select the access method to which the rule is applied. The policy is restricted by the selected access method. The possible access methods are TFTP, HTTP, Secure HTTP (SSL), and SNMP. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure global 802.1X settings You can configure global port access control settings on the switch. To globally enable all 802.1X features: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 8. In the VLAN Assignment Mode field, select the Enable radio button. The default value is Disable. When enabled, this feature allows a port to be placed into a particular VLAN based on the result of the authentication or type of 802.1X authentication a client uses when it accesses the device. The authentication server can provide information to the device about which VLAN must be assigned the supplicant. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Guest VLAN Period. Specify the number of seconds that the selected port remains in the quiet state following a failed authentication exchange. The guest VLAN time-out must be a value in the range of 1–300. The default value is 90. • Unauthenticated VLAN ID. Specify the VLAN ID of the unauthenticated VLAN for the selected port. The valid range is 0–3965. The default value is 0.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 62. Port authentication status information (continued) Field Description Authenticator PAE State The current state of the authenticator PAE component. Possible values are as follows: Initialize Disconnected Connecting Authenticating Authenticated Aborting Held ForceAuthorized ForceUnauthorized Backend State The current state of the backend authentication component.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > Port Authentication > Advanced > Port Authentication. The Port Authentication page displays. 7. Select the check box associated with the port to initialize. 8. Click the Initialize button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select the check box associated with the port to reauthenticate. 8. Click the Reauthenticate button. The selected port is forced to restart the authentication process.This button is available only if the control mode is auto. If the button is not selectable, it is grayed out. When you click this button, the action is immediate. You do not need to click the Apply button for the action to occur.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the fields on the Port Summary page. Table 63. Port summary Field Description Port The port for which the settings are displayed in the current table row. Control Mode Indicates the configured control mode for the port. Possible values are as follows: • Auto.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Set up traffic control You can configure MAC filters, storm control, port security, protected port, and private VLAN settings. Manage MAC filtering You can create MAC filters that limit the traffic allowed into and out of specified ports on the switch. Create a MAC filter To create a MAC filter: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. In the MAC Address field, specify the MAC address of the filter in the format XX:XX:XX:XX:XX:XX. You cannot define filters for the following MAC addresses: • 00:00:00:00:00:00 • 01:80:C2:00:00:00 to 01:80:C2:00:00:0F • 01:80:C2:00:00:20 to 01:80:C2:00:00:21 • FF:FF:FF:FF:FF:FF 10.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > Traffic Control > MAC Filter > MAC Filter Configuration. The MAC Filter Configuration page displays. 7. From the MAC Filter menu, select the filter. 8. Click the Delete button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the information displayed on the page. Table 65. MAC Filter Summary information Field Description MAC Address The MAC address of the filter in the format XX:XX:XX:XX:XX:XX. VLAN ID The VLAN ID used with the MAC address to fully identify packets you want filtered.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Security > Traffic Control > Storm Control. The Storm Control page displays. 7. In the Storm Control section, configure the following settings: a. From the Ingress Control Mode menu, select the mode of broadcast affected by storm control: • Disabled. Storm control is disabled. This is the default setting. • Unknown Unicast.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • To configure all interfaces with the same settings, select the check box in the table header. b. If the selection from the Ingress Control Mode menu is not Disabled, specify whether the ingress control mode is enabled by selecting Enable or Disable from the Status menu in the table header. c. In the Threshold field in the table header, specify the maximum rate at which unknown packets are forwarded.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure port security settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. Specify the following settings: • Port Security. Enable or disable the port security feature for the selected interfaces The default is Disable. • Max Learned MAC Address. Specify the maximum number of dynamically learned MAC addresses on the selected interfaces. • Max Static MAC Address. Specify the maximum number of statically locked MAC addresses on the selected interfaces. • Enable Violation Shutdown.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Security > Traffic Control > Port Security > Port Security Configuration. The Port Security Configuration page displays. 7. Make sure that port security is globally enabled. For more information, see Configure the global port security mode on page 311. 8. Select Security > Traffic Control > Port Security > Interface Configuration.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To configure protected ports: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the type of VLAN for a private VLAN. You can configure the private VLAN type. To configure a private VLAN type: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure private VLAN association settings To configure private VLAN association: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure the private VLAN port mode To configure the private VLAN port mode: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. From the Port VLAN Mode menu, select the switch port mode: • General. Sets the interfaces in general mode, which is the default selection. • Host. Sets the interfaces in host mode, which is used for private VLAN configurations. • Promiscuous. Sets the interfaces in promiscuous mode, which is used for private VLAN configurations. 10. Click the Apply button. Your settings are saved.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • All. Both physical interfaces and LAGs are displayed. 8. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple interfaces with the same settings, select the check box associated with each interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The System Information page displays. 6. Select Security > Traffic Control > Private VLAN > Private VLAN Promiscuous Interface Configuration. The Private VLAN Promiscuous Interface Configuration page displays. 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power are forwarded or blocked, and above all provide security for the network. The switch’s software supports IPv4, IPv6, and MAC ACLs. To configure an ACL: 1. Create an IPv4-based or IPv6-based or MAC-based ACL ID. 2. Create a rule and assign it to a unique ACL ID. 3. Define the rules, which can identify protocols, source, and destination IP and MAC addresses, and other packet-matching criteria. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > ACL > ACL Wizard. 7. From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • ACL Based on Destination IPv4 L4 Port. Creates an ACL based on the destination IPv4 Layer 4 port number. • ACL Based on Source IPv4 L4 Port. Creates an ACL based on the source IPv4 Layer 4 port number. • ACL Based on Destination IPv6 L4 Port. Creates an ACL based on the destination IPv6 Layer 4 port number. • ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 Layer 4 port number.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power ACL Based On Fields Destination IPv4 • • Destination IP Address. Specify the destination IP address. Destination IP Mask. Specify the destination IP address mask. Source IPv4 • • Source IP Address. Specify the source IP address. Source IP Mask. Specify the source IP address mask. Destination IPv6 • • Destination Prefix. Specify the destination prefix. Destination Prefix Length.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The rule is added to the ACL and is based on the destination MAC. 13. Click the Apply button. Your settings are saved. Modify an ACL rule that you created with the ACL Wizard To modify an ACL rule that you created with the ACL wizard: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an ACL rule that you created with the ACL Wizard To delete an ACL rule that you created with the ACL Wizard: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about the ACL Wizard, see Use the ACL Wizard to create a simple ACL on page 323. Configure a MAC ACL A MAC ACL consists of a set of rules that are matched sequentially against a packet. When a packet meets the match criteria of a rule, the specified rule action (Permit or Deny) is taken, and the additional rules are not checked for a match.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Security > ACL > Basic > MAC Rules. The previous figure does not show all columns. 7. From the ACL Name menu, select the MAC ACL. 8. In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 to identify the rule. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The valid format is xx:xx:xx:xx:xx:xx. The BPDU keyword can be specified using a destination MAC address of 01:80:C2:xx:xx:xx. 16. In the Destination MAC Mask field, specify the destination MAC address mask that must be compared against the information in an Ethernet frame. The valid format is xx:xx:xx:xx:xx:xx. The BPDU keyword can be specified using a destination MAC mask of 00:00:00:ff:ff:ff.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The MAC mask specifies which bits in the MAC address must be compared against an Ethernet frame. You can use Fs and zeros in the MAC mask, which is in a wildcard format. An F means that the bit is not checked, and a zero in a bit position means that the data must equal the value given for that bit.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Security > ACL > Basic > MAC Rules. The MAC Rules page displays. 7. Select the check box that is associated with the rule. 8. Modify the fields as needed. 9. Click the Apply button. Your settings are saved. Delete a rule for a MAC ACL To delete a rule for a MAC: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure MAC bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. You can assign MAC ACL lists to ACL priorities and interfaces. To configure MAC bindings: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8. In the Sequence Number field, optionally specify a number to indicate the order of the access list relative to other access lists already assigned to the interface and direction. A low number indicates high precedence order.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the information displayed in the Interface Binding Status table. Table 68. Interface Binding Status table Field Description Interface The interface of the ACL assigned. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Security > ACL > Basic > MAC Binding Table. The MAC Binding Table displays. 7. To delete a MAC ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information that is displayed in the MAC binding table. Table 69.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 3. Associate the IPv4 ACL with one or more interfaces (see Configure IP ACL interface bindings on page 367). You can view or delete IPv4 ACL configurations in the IP ACL Binding table (see View or delete IP ACL bindings in the IP ACL binding table on page 369. Add an IPv4 ACL To add an IPv4 ACL: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. In the IP ACL ID field, specify the ACL ID or IP ACL name, which depends on the IP ACL type. The IP ACL ID is an integer in the following range: • 1–99. Creates a basic IP ACL, which allows you to permit or deny traffic from a source IP address. • 100–199.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Security > ACL > Advanced > IP ACL. The IP ACL Configuration page displays. 7. Select the check box that is associated with the IP ACL. 8. In the IP ACL field, specify the new number or name. 9. Click the Apply button. Your settings are saved. Delete an IP ACL To delete an IP ACL: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure rules for a basic IPv4 ACL You can define rules for IPv4-based standard ACLs (basic ACLs). The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Note: An implicit deny all rule is included at the end of an ACL list.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If no rules exist, the Basic ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table. 7. From the ACL ID menu, select the IP ACL for which you want to add a rule. For basic IP ACLs, this must be an ID in the range from 1 to 99. 8. Click the Add button. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • • Match Every. From the Match Every menu, select whether all packets must match the selected IP ACL rule: - Enable. All packets must match the selected IP ACL rule and are either permitted or denied. - Disable. Not all packets need to match the selected IP ACL rule. Select either a mirror interface or a redirect interface: - Mirror Interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > ACL > Advanced > IP Rules. The IP Rules page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 4. Enter one of the following passwords: • After registration, enter your customized local device password. • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The previous figure does not show the rightmost fields. 9. Configure the following match criteria for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647 that is used to identify the rule. An extended IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action, which is one of the following: - Permit. Forward packets that meet the ACL criteria. - Deny.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power - • Select the Redirect Interface radio button and use the menu to specify the egress interface to which the matching traffic stream is forced, bypassing any forwarding decision normally performed by the device. Match Every. From the Match Every menu, select whether all packets must match the selected IP ACL rule: - False. Not all packets need to match the selected IP ACL rule.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power - Range. If you select the Range radio button, the IP ACL rule matches only if the Layer 4 source port number is within the specified port range. The starting port, ending port, and all ports in between are a part of the Layer 4 port range. The Start Port and End Port fields identify the first and last ports that are part of the port range. The values can range from 0 to 65535.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Select Other from the menu to enter a port number. If you select Other from the menu but leave the field blank, it means any. The only relevant matching condition for L4 port numbers is Equal. This means that an IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol. - Range.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The IPv4 ICMP message types are echo, echo-reply, host-redirect, mobile-redirect, net-redirect, net-unreachable, redirect, packet-too-big, port-unreachable, source-quench, router-solicitation, router-advertisement, ttl-exceeded, time-exceeded, and unreachable. • Fragments.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add an IPv6 ACL To add an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 70. IPv6 Configuration and IPv6 ACL Table information (continued) Field Description Rules The number of the rules associated with the IP ACL. Type The type is IPv6 ACL. Change the name of an IPv6 ACL To change the name of an IPv6 ACL: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete an IPv6 ACL To delete an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Add a rule for an IPv6 ACL Add a rule for an ACL IPv6: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The previous figure does not show the rightmost fields. 9. Configure the following match criteria for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647 that is used to identify the rule. An extended IP ACL can contain up to 50 rules. • Action. Select the ACL forwarding action by selecting one of the following radio buttons: - Permit. Forward packets that meet the ACL criteria.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • • • Match Every. From the Match Every menu, select whether all packets must match the selected IPv6 ACL rule: - False. Not all packets need to match the selected IPv6 ACL rule. You can configure other match criteria on the page. - True. All packets must match the selected IPv6 ACL rule and are either permitted or denied. In this case, you cannot configure other match criteria on the page. Protocol Type.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Start Port and End Port fields identify the first and last ports that are part of the port range. They values can range from 0 to 65535. You can either enter the port range yourself or select one of the following protocols from the menu: • The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power - Range. If you select the Range radio button, the IPv6 ACL rule matches only if the Layer 4 destination port number is within the specified port range. The starting port, ending port, and all ports in between are a part of the Layer 4 port range. The Start Port and End Port fields identify the first and last ports that are part of the port range. They values can range from 0 to 65535.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Routing. Either select the Enable radio button to match packets that include a routing extension header or leave the default Disable radio button selected to ignore the routing extension headers in packets. • IPv6 DSCP Service. Specify the IP DiffServ Code Point (DSCP) field. This is an optional configuration. The DSCP is defined as the high-order 6 bits of the service type octet in the IPv6 header.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The rule is a hyperlink. The IPv6 ACL Rule Configuration page displays. 9. Modify the IPv6 ACL rule criteria. 10. Click the Apply button. Your settings are saved. Delete an IPv6 ACL rule To delete an IPv6 ACL rule: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure IP ACL interface bindings When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. You can assign ACL lists to ACL priorities and interfaces. If resources on the switch are insufficient, an attempt to bind an ACL to an interface fails. You cannot bind an IPv4 ACL and an IPv6 ACL to the same interface. To bind an IP ACL to one or more interfaces: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. From the ACL ID menu, select an existing IP ACL for you which you want to add an IP ACL interface binding. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable information displayed on the page. Table 71. IP Binding Status table Field Description Interface The selected interface. Direction The selected packet filtering direction for the ACL. ACL Type The type of ACL assigned to the selected interface and direction.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The IP ACL Binding Table page displays. 7. To delete an IP ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed. The following table describes the information displayed in the IP ACL binding table. Table 72. IP ACL Binding Table Field Description Interface The interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Security > ACL> Advanced > VLAN Binding Table. The VLAN Binding Configuration page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
7 7 Perform Maintenance Tasks This chapter covers the following topics: • Reboot the switch from the local browser UI • Reset the switch to its factory default settings • Export a file from the switch • Update the software or download a file to the switch • Manage software images • Perform troubleshooting tasks Note: When the management mode is NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote), which means that the local browser UI provides a limited menu only, you can still pe
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Reboot the switch from the local browser UI You can reboot the switch from the local browser UI. To reboot the switch from the local browser UI: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Reset the switch to its factory default settings You can return the switch configuration to the factory default settings. All changes that you made are lost. If the IP address changes, your web session might disconnect.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Note: The switch also provides a recessed multi-function Reset button on the front panel that lets you return the switch to its factory default settings, causing all custom settings to be erased. The factory default settings function of the Reset button is available only after you use the NETGEAR Insight app or Insight Cloud portal to remove the switch from your Insight network location.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Export a file from the switch You can export configuration (ASCII or log ASCII) files from the switch to a file server by using TFTP or HTTP. Export a file to a TFTP server You can upload (export) configuration (ASCII or log ASCII) files from the switch to a TFTP server on the network. To export a file from the switch to a TFTP server: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Trap Log. The trap log with the system trap records. • Buffered Log. The system buffered (in-memory) log. • Tech Support. The tech support file is a text-base file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting. • Crash Logs. Specify the crash logs to retrieve them. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Update the software or download a file to the switch You can manually check for the latest software version (also referred to as firmware version) through the local browser UI of the switch, download the firmware, and upload the firmware to the switch. If firmware release notes are available with new firmware, read the release notes to find out if you must reconfigure the switch after updating.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select Maintenance > Update > HTTP Firmware/File Update. The HTTP Firmware/File Update page displays. 7. From the File Type menu, select the type of file: • Software. The system software image, which is saved in one of two flash sectors called images (image1 and image2). The active image stores the active copy, the other image stores a second copy. The device boots and runs from the active image.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To activate a software image that you downloaded to the switch, see Manage software images on page 386. Note: After a text configuration file is downloaded, the switch applies the configuration automatically. Use an HTTP session to download and install an SSL security certificate file on the switch Note: You are not required to obtain an SSL certificate.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Use a TFTP server to update the software image or download a file to the switch You can update software and download the image file, the configuration files, and SSL files from a TFTP server to the switch. Before you download a file to the switch, the following conditions must be true: • The file to download from the TFTP server is on the server in the appropriate directory. • The file is in the correct format.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power the other image stores a second copy. The device boots and runs from the active image. If the active image is corrupted, the system automatically boots from the nonactive image. This is a safety feature for faults occurring during the boot update process. The default setting is Archive. • Text Configuration.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The page displays information about the progress of the file transfer. The page refreshes automatically when the file transfer completes (or if it fails). To activate a software image that you downloaded to the switch, see Manage software images on page 386. Manage software images The switch maintains two versions of the switch software in permanent storage.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Maintenance > File Management > Copy. The Copy page displays. 7. Select the Source Image image1 or image2 radio button to specify the image to be copied. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Maintenance > File Management > Dual Image > Dual Image Configuration. The Dual Image Configuration page displays. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field. The Current-active field displays the name of the active image. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Maintenance > File Management > Dual Image > Dual Image Configuration. The Dual Image Configuration page displays. 7. From the Image Name menu, select the image that is not the image displayed in the Current-active field. The Current-active field displays the name of the active image. You cannot delete the active image. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Dual Image Status page displays. The following table describes the information available on the page. Table 74. Dual Image Status information Field Description Image1 Ver The version of the image1 code file. Image2 Ver The version of the image2 code file. Current-active The currently active image on this switch. Next-active The image to be used on the next restart of this switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To ping an IPv4 address: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Interface. The interface that must be used when echo request packets are sent. With this selection, the Interface menu displays and you must select an interface as the source. 12. Click the Apply button. The specified address is pinged. The results are displayed below the configurable data in the Results field.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Maintenance > Troubleshooting > Ping IPv6. The Ping IPv6 page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Send an IPv4 traceroute You can configure the switch to send a traceroute request to a specified IPv4 address or host name. You can use this to discover the paths that packets take to a remote destination. When you send a traceroute, the switch displays the results below the configurable data. If a reply to the traceroute is received, the following message displays: traceroute to x.y.z.w (x.y.z.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. In the Max TTL field, enter the maximum time to live (TTL) for the destination. The default value is 30. The range is 1 to 255. 10. In the Init TTL field, enter the initial TTL to be used. The default value is 1. The range is 1 to 255. 11. In the MaxFail field, enter the maximum number of failures allowed in the session. The default value is 5. The range is 1 to 255. 12.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To send an IPv6 traceroute: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The default value is 33434. The range is 1–65535. 14. In the Size field, enter the size of the probe packets. The default value is 38. The range is 38 to 32768. 15. From the Source menu, select the IP address or interface that must be used to send echo request packets: • None. The source address for the traceroute is the address of the default egress interface. • IP Address.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Maintenance > Troubleshooting > Remote Diagnostics. The Remote Diagnostics page displays. 7. Select the Enable radio button. 8. Click the Apply button. Your settings are saved.
8 8 Manage Power over Ethernet This chapter covers the following topics: • PoE concepts • Device class power requirements • Power allocation and power budget concepts • Activate the new PoE budget for an optional or replacement power adapter • Configure the global PoE settings • Manage and view the PoE+ port configuration • Reset PoE+ ports • Set up PoE timer schedules 399
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power PoE concepts Depending on the model, the switch includes eight PoE plus (PoE+) ports. The following table shows the capacity for each model. Table 75. PoE capacities for each model Model Maximum PoE Power Per Port Maximum Power Budget Across All Active PoE+ Ports GC108P 30W PoE+ (IEEE 802.3at) 64W GC108PP 30W PoE+ (IEEE 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 76. PoE and PoE+ device class power allocation Device Class Standard Range of Power Delivered to the Powered Device Minimum Output at PoE Switch Port (Minimum Allocated) Maximum Output at PoE Switch Port (Maximum Allocated) 0 PoE and PoE+ 0.44W–12.95W 15.4W 16.2W 1 PoE and PoE+ 0.44W–3.84W 4.0W 4.2W 2 PoE and PoE+ 3.84W–6.49W 7.0W 7.4W 3 PoE and PoE+ 6.49W–12.95W 15.4W 16.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To determine the delivered power by a PoE+ port: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Activate the new PoE budget for an optional or replacement power adapter Note: When the management mode is NETGEAR Insight Mobile App and Insight Cloud Portal (Cloud/Remote), which means that the local browser UI provides a limited menu only, you can still perform this task. Models GC108P and GC108PP model support NETGEAR FlexPoE power.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > PoE > Basic > PoE Configuration. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Manage and view the PoE+ port configuration The switch includes eight PoE+ ports. To configure and view the PoE+ port settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The previous figure does not show all columns on the page. 7. Select one or more PoE+ ports by taking one of the following actions: • To configure a single PoE+ port, select the check box associated with the port, or type the port number in the Go To Interface field and click the Go button. • To configure multiple PoE+ ports with the same settings, select the check box associated with each interface.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Menu Item Description Power Mode Select the one of the following power modes: • 802.3af. The port is powered in and limited to the IEEE 802.3af mode. A PD that requires IEEE 802.3at does not receive power if the port functions in IEEE 802.3af mode. • Legacy. The port is powered using high-inrush current, which is used by legacy PDs that require more than 15W to power up. • Pre-802.3at.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable fields on the PoE Port Configuration page. Field Description High Power If a port supports High Power mode, the field displays Yes. Max Power (W) The maximum power in watts that the port can provide. Class The class defines the range of power a powered device (PD) is drawing from the switch. The class definitions are as follows: • 0: 0.44–16.2W • 1: 0.44–4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Reset PoE+ ports You can forcibly reset one or more PoE+ ports on the switch. If a PoE device is attached to the port, the device restarts. Resetting a PoE+ port does not affect its data link, so if a non-PoE device is attached to the port, the device is not affected and does not restart. To reset one or more PoE+ ports: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Set up PoE timer schedules The switch lets you define multiple timer schedules that you can use for PoE power delivery to attached PDs. After you create a timer schedule, you can associate it with one or more PoE+ ports (see Manage and view the PoE+ port configuration on page 406). You can use a separate timer schedule for each PoE+ port.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select System > Timer Schedule > Basic > Global Configuration. The Timer Schedule Name page displays. 7. In the Timer Schedule Name field, specify the name for a timer schedule. 8. Click the Add button. The timer schedule is added to the table on the Timer Schedule Name page and is assigned an ID.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. In the Timer Schedule Selection section, make your selections from the following menus: a. Timer Schedule Name. Select the name of the timer schedule that you want to configure. You can select only names of schedules that you created (see Create a PoE timer schedule on page 411). b. Timer Schedule Type. Select Absolute.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Either select the Every Weekday radio button to let the schedule operate from Monday through Friday or select the Every Day(s) radio button and enter a number from 1 to 255 in the field. In the latter case, the schedule is triggered every specified number of days. • Weekly. The timer schedule works with weekly recurrence. The fields adjust.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Timer Schedule > Advanced > Timer Schedule Configuration.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select System > Timer Schedule > Advanced > Timer Schedule Configuration. The Timer Schedule Configuration page displays. 7. From the Timer Schedule Name menu, select the schedule name. 8.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Select System > Timer Schedule > Basic > Global Configuration. The Timer Schedule Name page displays. 7. Select the check box for the schedule that you want to delete. 8. Click the Delete button. The schedule is deleted.
9 9 Monitor the Switch This chapter covers the following topics: • Monitor the switch and the ports • Test the cables • Configure and the view the logs • Configure port mirroring 419
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Monitor the switch and the ports You can view a variety of information about the amount and type of traffic that is transmitted from and received on the switch: View or clear the switch statistics You can view or clear detailed statistical information about the traffic that the switch handles. To view or clear the switch statistics: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the switch statistics displayed on the page. Table 78. Switch statistics Field Description ifIndex The interface index of the interface table entry associated with the processor of this switch. Octets Received The total number of octets of data received by the processor (excluding framing bits, but including FCS octets).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 78. Switch statistics (continued) Field Description Most VLAN Entries Ever Used The largest number of VLANs that were active on the switch since the last reboot. Static VLAN Entries The number of active VLAN entries that were created statically on the switch. VLAN Deletes The number of VLANs that were created and then deleted on the switch since the last reboot.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select whether to display physical interfaces, LAGs, or both by clicking one of the following links above the table header: • 1 (the unit ID of the switch). Only physical interfaces are displayed. This is the default setting. • LAG. Only LAGs are displayed. • All. Both physical interfaces and LAGs are displayed. 8. To refresh the page with the latest information about the switch, click the Refresh button.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4. Enter one of the following passwords: • After registration, enter your customized local device password.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Monitoring > Ports > Port Statistics. The Status page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Monitoring > Ports > Port Detailed Statistics. The Port Detailed Statistics page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 80. Detailed port statistics (continued) Field Description STP State The port's current Spanning Tree state. This state controls what action a port takes on receipt of a frame. If the bridge detects a malfunctioning port, it places that port into the broken state. The states are defined in IEEE 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 80. Detailed port statistics (continued) Field Description Packets RX and TX 1024-1518 Octets The total number of packets (including bad packets) received and transmitted that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 80. Detailed port statistics (continued) Field Description Total Packets Received with MAC Errors The total number of inbound packets that contained errors, preventing them from being delivered to a higher-layer protocol.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 80. Detailed port statistics (continued) Field Description Packets Transmitted 512-1023 Octets The total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 80. Detailed port statistics (continued) Field Description RSTP BPDUs Received The number of RSTP BPDUs received. RSTP BPDUs Transmitted The number of RSTP BPDUs transmitted. MSTP BPDUs Received The number of MSTP BPDUs received. MSTP BPDUs Transmitted The number of MSTP BPDUs transmitted. 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 5. Click the Login button. The System Information page displays. 6. Select Monitoring > Ports > EAP Statistics. The EAP Statistics page displays. 7. To refresh the page with the latest information about the switch, click the Refresh button. 8. To clear the counters for a specific port, select the check box associated with the port and click the Clear button. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Test the cables You can test and view information about the cables that are connected to switch ports. To test the cables: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The following table describes the nonconfigurable information displayed on the page. Table 82. Cable Test information Field Description Cable Status Indicates the cable status: • Normal. The cable is working correctly. • Open. The cable is disconnected or a faulty connector exists. • Short. An electrical short exists in the cable. • Cable Test Failed. The cable status could not be determined.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power To manage the memory log: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Informational (6). Informational messages. • Debug (7). Debug-level messages. Note: A log records messages equal to or above a configured severity threshold. 10. Click the Apply button. Your settings are saved. The Memory Log table displays on the Memory Log Configuration page. The Total number of Messages field displays the number of messages the system logged in memory.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays. For more information, see Register and access the switch with your NETGEAR account on page 29. 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 9. From the Logs to be Displayed menu, select one of the following options: • Current Logs. The log messages for the current switch sessions are displayed. This is the default setting. • Previous Logs. The previous log messages are displayed, that is, the log messages that are still in the flash memory from before the switch was rebooted. 10. Click the Apply button. Your settings are saved.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If you previously added the switch to an Insight network location, enter the Insight network password. For more information about the local device password and the Insight network password, see Credentials for the local browser UI on page 28. 5. Click the Login button. The System Information page displays. 6. Select Monitoring > Logs > Server Log. The Server Log page displays. 7.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power The remote server is added. The Status field in the Server Configuration table shows whether the remote logging host is currently active. Modify the settings for a remote syslog server To modify the settings for a remote syslog server: 1. Connect your computer to the same network as the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Delete the settings for a remote syslog server To delete the settings for a remote syslog server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. Launch a web browser. 3. In the address field of your web browser, enter the IP address of the switch. For information about finding the IP address of the switch, see Access the switch on page 14. The Local Device Login page displays. If you did not yet register the switch with your NETGEAR account, the Register to unlock all features page displays.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Configure port mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the switch. As such, many switch ports are configured as source ports and one switch port is configured as a destination port. You can configure how traffic is mirrored on a source port.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 7. Select an Admin Mode radio button: • Disable. Port mirroring is disabled. This is the default setting. • Enabled. Port mirroring is enabled. 8. From the Destination Port menu, select the destination port to which port traffic must be copied. You can configure only one destination port on the system. The port functions as a probe port and receives traffic from all configured source ports.
A Configuration Examples A This appendix covers the following topics: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router. Routers connect LANs together, routing the traffic to the appropriate port.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If the port is a member of the VLAN specified by the packet’s VLAN ID, the packet can be sent to other ports with the same VLAN ID. • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • If an untagged packet enters port 4, the switch tags it with VLAN ID 20. The packet can access port 5 and port 6. The outgoing packet is stripped of its tag to become an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 2. On the MAC Rules page (see Configure MAC ACL rules on page 332), create a rule for the Sales_ACL with the following settings: • Sequence Number. 1 • Action. Permit • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType. User Value. • Source MAC. 02:02:1A:BC:DE:EF • Source MAC Mask.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Match Every. False • Source IP Address. 192.168.187.0 • Source IP Mask. 255.255.0 3. Click the Add button. 4. On the IP Rules page (see Configure rules for a basic IPv4 ACL on page 344), create a second rule for IP ACL 1 with the following settings: • Sequence Number. 2 • Action. Permit • Match Every. True 5. Click the Add button. 6.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Two basic types of QoS are supported: • Integrated Services. Network resources are apportioned based on request and are reserved (resource reservation) according to network management policy (RSVP, for example). • Differentiated Services. Network resources are apportioned based on traffic classification and priority, giving preferential treatment to data with strict timing requirements.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Only classes of the same type can be nested; class nesting does not allow for the negation (exclude option) of the referenced class. To configure DiffServ, you must define service levels, namely the forwarding classes/PHBs identified by a given DSCP value, on the egress interface. You define these service levels by configuring BA classes for each.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power • Redirecting. Forces a classified traffic stream to a specified egress port (physical or LAG). This can occur in addition to any marking or policing action. It can also be specified along with a QoS queue assignment. DiffServ example configuration To create a DiffServ class and policy and attach them to a switch interface, follow these steps: 1.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power For more information about this page, see Create and configure a DiffServ policy on page 253. 9. On the Service Interface Configuration page (see Attach a DiffServ policy to an interface on page 259), select the check box next to interfaces g7 and g8 to attach the policy to these interfaces, and then click the Apply button. All UDP packet flows destined to the 192.12.2.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Another 802.1X feature is the ability to configure a port to enable or disable EAPoL packet forwarding support. You can disable or enable the forwarding of EAPoL when 802.1X is disabled on the device. The ports of an 802.1X authenticator switch provide the means by which it can offer services to other systems reachable through the LAN.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 802.1X example configuration This example shows how to configure the switch so that 802.1X-based authentication is required on the ports in a corporate conference room (1/0/5–1/0/8). These ports are available to visitors and must be authenticated before access is granted to the network. The authentication is handled by an external RADIUS server.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Multiple Spanning Tree Protocol (MSTP) Spanning Tree Protocol (STP) runs on bridged networks to help eliminate loops. If a bridge loop occurs, the network can become flooded with traffic. IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) supports multiple instances of spanning tree to efficiently channel VLAN traffic over different interfaces.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power An MST region comprises of one or more MSTP bridges with the same MST configuration identifier, using the same MSTIs, and without any bridges attached that cannot receive and transmit MSTP BPDUs. The MST configuration identifier includes the following components: 1. Configuration identifier format selector 2. Configuration name 3. Configuration revision level 4.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Figure 2. MSTP sample configuration Perform the following procedures on each switch to configure MSTP: 1. On the VLAN Configuration page for each switch, create VLANs 300 and 500 (see Add a VLAN on page 122). 2. On the VLAN Membership page for each switch, include ports 1/0/1–1/0/8 as tagged (T) or untagged (U) members of VLAN 300 and VLAN 500 (see Configure VLAN membership on page 125). 3.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power 6. Click the Apply button. 7. Select ports 1/0/1–1/0/5 (edge ports), and select Enable from the Fast Link menu. Since the edge ports are not at risk for network loops, ports with Fast Link enabled transition directly to the forwarding state. 8. Click the Apply button. You can use the CST Port Status page for each switch (see View the CST port status on page 153) to view spanning tree information about each port. 9.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power is forwarded to all ports in the VLAN, plus the internal bridge-router interface, if it was received on a routed VLAN. Because a port can be configured to belong to more than one VLAN, VLAN routing might be enabled for all of the VLANs on the port, or for a subset. VLAN routing can be used to allow more than one physical port to reside on the same subnet.
B Switch Default Settings and Hardware Specifications B This appendix covers the following topics: • Switch default settings • Hardware technical specifications 462
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Switch default settings The tables in this section provide information about the switch features and default values. Table 84. Feature default values and default state Feature Name Default Bonjour Enabled PoE Global System usage threshold 100% Power management mode Dynamic Traps Enabled Interface Admin mode Enabled Port priority Low Power mode 802.3at, compatible with 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 84. Feature default values and default state (continued) Feature Name Default 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 84.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 84.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 84. Feature default values and default state (continued) Feature Name Default 802.1p to queue mapping (802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 84.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 85. Port characteristics Feature Sets Supported Default Auto negotiating speed and full/half duplex All ports Auto negotiation Auto MDI/MDIX for cross over cables on all ports Enabled 802.3x flow control/back pressure 1 (per system) Disabled Port mirroring: TX, RX, both 4 Disabled Port trunking (aggregation) 8 Preconfigured 802.1D spanning tree 1 Disabled 802.1w RSTP 1 Enabled 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 88. Security Feature Sets Supported Default 802.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 90.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Hardware technical specifications The switch conforms to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. The following table describes the essential hardware technical specifications and certifications. Table 92.
Insight Managed 8-Port Gigabit (Hi-Power) PoE+ Smart Cloud Switch with NETGEAR FlexPoE Power Table 92. Hardware technical specifications and certifications (continued) Feature Model GC108P Model GC108PP Electromagnetic certifications and compliance CE Mark, Commercial EN55032:2015+AC:2016, Class A CISPR 32:2015, Class A EN55024:2010+A1:2015 EN61000-3-2:2014, Class A EN61000-3-3:2013 VCCI-CISPR 32:2016, Class A RCM, AS/NZS CISPR 32:2015 Class A 47 CFR FCC Part 15, Subpart B, Class A ANSI C63.
