Page 1 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports M od els G C 7 2 8 X a n d G C 7 2 8 X P Us e r Manual December 2017 202-11770-01 350 East Plumeria Drive...
Page 2 Thank you for purchasing this NETGEAR product. You can visit www.netgear.com/support to register your product, get help, access the latest downloads and user manuals, and join our community. We recommend that you use only official NETGEAR support resources. Conformity For the current EU Declaration of Conformity, visit http://kb.netgear.com/app/answers/detail/a_id/11621.
Page 3: Table Of Contents
Web-browser Interface ..........22 Change the Management Mode Back to NETGEAR Insight Mobile App and Insight Cloud Portal .
Page 4 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure LLDP Global Settings ........81 Configure LLDP Port Settings .
Page 5 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the MFDB Statistics ......... 150 Configure the Auto-Video Settings .
Page 6 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Map DSCP Values to Queues........227 Manage Differentiated Services .
Page 7 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Rules for an IPv6 ACL........330 Configure IP ACL Interface Bindings .
Page 8 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Perform a Cable Test ..........390 Configure and View Logs .
Page 9: Chapter 1 Getting Started
Getting Started This manual describes how you can configure and monitor the following NETGEAR Insight managed switches by using the local browser–based management interface (which is not the default management mode): • Model GC728X. Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G &...
Page 10: Switch Management Options And Default Management Mode
NETGEAR Insight app. Using the NETGEAR Insight app, you can discover the switch on the network and add the switch to the NETGEAR Insight app so that you can set up the switch in the network and manage and monitor the switch remotely from your smartphone.You can choose from four methods to add the switch to the NETGEAR...
Page 11: Available Publications
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports the device remotely or through the cloud, you can return the management mode to NETGEAR Insight Mobile App and Insight Cloud Portal at any time so that you can manage the switch with the Insight app or Insight Cloud portal.
Page 12: User-Defined Fields
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports User-Defined Fields In the local browser interface, user-defined fields can contain 1 to 159 characters, unless otherwise noted in the field label on the configuration page. All alphanumeric and special characters can be used except for the following (unless specifically noted for that feature): Table 1.
Page 13: Access The Switch
• Use a Mac. See Access the Switch On-Network from a Mac Using Bonjour on page 14 or Determine the Switch IP Address Through the NETGEAR Switch Discovery Tool and Access the Switch On-Network on page 16. • Use the NETGEAR Switch Discovery Tool. See...
Page 14 Access the Switch On-Network from a Mac Using Bonjour If your Mac supports Bonjour, you can use the following procedure. If you Mac does not support Bonjour, see Determine the Switch IP Address Using the NETGEAR Insight App and Access the Switch On-Network on page 18.
Page 15 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The DHCP server assigns the switch an IP address. Connect your computer to the same network as the switch. You can use a WiFi or wired network connection. Open the Safari browser.
Page 16 Layer 2 network. Open the Switch Discovery Tool. If the NETGEAR Switch Discovery Tool icon is in the Dock of your Mac or on the desktop of your Windows-based computer, click or double-click the NETGEAR Switch Discovery Tool icon to open the program.
Page 17 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login page of the local browser interface opens. Enter the password. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 18 Determine the Switch IP Address Using the NETGEAR Insight App and Access the Switch On-Network  To use the NETGEAR Insight app and a web browser to access the switch that is connected to a network: On your iOS or Android mobile device, go to the app store, search for NETGEAR Insight, and download the app.
Page 19 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports You can now add the switch. Choose one of the following options: • Tap Switch as the device type and follow the prompts to scan the network. •...
Page 20 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Determine the Switch IP Address Through an IP Scanner and Access the Switch On-Network IP scanner utilities are available free of charge on the Internet. ...
Page 21: Access The Switch Off-Network
IP address of 192.168.0.210 and 255.255.255.0 as the subnet mask. Note: If you are unsure how to do this, visit netgear.com/search-support.aspx and search for the following: How to set a static IP address in Windows Setting a static IP address on your network adapter in Mac OS Plug the switch into a power outlet and then connect your computer to the switch using an Ethernet cable.
Page 22: Change The Management Mode Of The Switch
You can now connect your switch to your network using an Ethernet cable. Change the Management Mode of the Switch By default, the management mode on the switch is NETGEAR Insight Mobile App and Insight Cloud Portal. With this setting you can manage the switch using the Insight app or the Insight Cloud portal.
Page 23: Change The Management Mode Back To Netgear Insight Mobile App And Insight Cloud Portal
Change the Management Mode Back to NETGEAR Insight Mobile App and Insight Cloud Portal  To change the management mode of the switch back to NETGEAR Insight Mobile App and Insight Cloud Portal: Connect your computer to the same network as the switch.
Page 24: Register The Switch
If you use the Insight app, after the app discovers the switch and you add it to a network using the NETGEAR Insight app, the switch is automatically registered to your MyNETGEAR account. This registration process is also referred to as claiming. For information about the NETGEAR Insight app, see the NETGEAR knowledge base articles at netgear.com/support.
Page 25: How To Configure Interface Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports A NETGEAR web page opens. Follow the prompts online. How to Configure Interface Settings For some features you can apply the same settings simultaneously to any of the following: •...
Page 26: Local Browser Interface Device View
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the desired settings. Click the Apply button. Your settings are saved.  To configure multiple ports and LAGs: Click the All link to display all ports and LAGs. Select the check box next to each port and LAG to configure.
Page 27 Solid amber The port is operating at below its maximum speed. • Blinking amber. The port is transmitting or receiving traffic below its maximum speed. The right port LED indicates the PoE status (this does not apply to model GC728X): • Off. The port is not delivering PoE power. •...
Page 28 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Solid amber. Less than 7W of PoE power is available. Blinking amber. At least once during the previous two minutes, less than 7W of PoE power was available.
Page 29: Chapter 2 Configure System Information
Configure System Information This chapter covers the following topics: • View and Configure the Switch Management Settings • Manage the Bonjour Settings and View Bonjour Information • Control the LEDs • Use the Device View • Configure Power over Ethernet •...
Page 30: View And Configure The Switch Management Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View and Configure the Switch Management Settings This section describes how to display the switch status and specify some basic switch information, such as the management interface IP address, system clock settings, and DNS information.
Page 31 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Define the following fields: • System Name. Enter the name to identify this switch. You can use up to 255 alphanumeric characters. •...
Page 32 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the Temperature Sensor Information You can view the current temperature of the temperature sensors. The temperature is instant and can be updated with the latest information about the switch when you click the Refresh button.
Page 33 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the Fan Status You can view the status of the fans. These fans remove the heat generated by the power, CPU, and other components, and allow the switch to function normally. ...
Page 34 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable. Launch a web browser.
Page 35: View The Switch Cpu Status
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 36 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select System > Management > System CPU Status > System CPU Status. The CPU Utilization section shows the memory information, task-related information, and percentage of CPU utilization per task.
Page 37: Configure The Cpu Thresholds
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the CPU Thresholds The CPU utilization threshold notification feature allows you to configure thresholds that, when exceeded, trigger a notification. The notification occurs through SNMP trap and syslog messages.
Page 38: Configure The Ipv4 Address For The Network Interface And Management Vlan
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the IPv4 Address for the Network Interface and Management VLAN You can configure network information for the network interface, which is the logical interface used for in-band connectivity with the switch through any of the switch’s ports.
Page 39: Configure The Ipv6 Address For The Network Interface
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Default Gateway. The default gateway for the IP interface. The default value is 192.168.0.254. Specify the VLAN ID for the management VLAN. The management VLAN is used to establish an IP connection to the switch from a computer that is connected to a port in the same VLAN.
Page 40 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports When in-band connectivity is established, you can change the IPv6 information through the local browser interface.  To configure the IPv6 address for the network interface: Connect your computer to the same network as the switch.
Page 41: View The Ipv6 Network Neighbor
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports b. In the EUI64 menu, select True to enable the Extended Universal Identifier (EUI) flag for IPv6 address, or select False to omit the EUI flag. c.
Page 42: Configure The Time Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 9. IPv6 network interface neighbor table information (continued) Field Description Neighbor State The state of the neighboring switch: • reachable (1). The neighbor is reachable from the switch. •...
Page 43 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Note: If you do not enter a date and time, the switch calculates the date and time using the CPU’s clock cycle. Click the Apply button.
Page 44 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Broadcast. SNTP operates in the same manner as multicast mode but uses a local broadcast address instead of a multicast address. The broadcast address provides a single-subnet scope while a multicast address provides an Internet-wide scope.
Page 45 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports See the description for Time Zone Name in Step 14 for more information. The allowed range is 0 to 59. The default value is 0. Click the Apply button.
Page 46 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The allowed range is 1025 to 65535 and the value 123. The default value is 123. When the default value is configured, the actual client port value used in SNTP packets is assigned by the operating system.
Page 47 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View SNTP Global Status When you select the SNTP option as the clock source, the SNTP global status is displayed below the SNTP Global Configuration section of the page. The SNTP Global Status table displays information about the system’s SNTP client.
Page 48 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 10. SNTP Global Status information (continued) Field Description Last Attempt Status The status of the last SNTP request or unsolicited message for both unicast and broadcast modes.
Page 49 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following is an example of strata: • Stratum 0. A real-time clock is used as the time source, for example, a GPS system. •...
Page 50 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 51 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The SNTP Server Status table displays status information about the SNTP servers configured on your switch. The following table describes the SNTP Server Global Status information.
Page 52 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 53 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To configure the daylight saving time settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 54 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Field Description Ends At These fields are used to configure the end values of date and time. • Week. Configure the end week. •...
Page 55 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 56: Configure Denial Of Service Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Denial of Service Settings You can configure the Denial of Service (DoS) settings for the switch. The switch provides support for classifying and blocking specific types of DoS attacks. Configure Auto-DoS You can automatically enable all the DoS features available on the switch, except for the L4 Port attack.
Page 57 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Denial of Service The Denial of Service Configuration page allows you to select which types of DoS attacks the switch monitors and blocks. ...
Page 58 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports receives fragmented IP packets. Otherwise, the switch ignores the first fragment IP packages. • Denial of Service ICMP Fragment. Enabling ICMP Fragment DoS prevention causes the switch to drop ICMP fragmented packets.
Page 59: Configure Dns Settings
When the system is performing a lookup on an unqualified host name, this field is provides the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name). The name must not be longer than 255 characters.
Page 60 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To remove a DNS server from the list, select its check box and click the Delete button. If you click the Delete button without selecting a DNS server, all the DNS servers are deleted.
Page 61 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Add button. The entry displays in the list on the page. Remove an Entry From the Dynamic Host Mapping Table ...
Page 62: Configure Green Ethernet Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 63 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 64 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System > Management > Green Ethernet > Green Ethernet Interface Configuration. The Green Ethernet Interface Configuration page displays. Do one of the following: •...
Page 65 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 66 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 15. Green Ethernet Local Device Information (continued) Field Description Tw_sys_tx (uSec) Integer that indicates the value of Tw_sys that the local system can support.
Page 67 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays.  Select System > Management > Green Ethernet > Green Ethernet Details. The Green Ethernet Details page displays. Scroll down to the Remote Device Information section.
Page 68 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System > Management > Green Ethernet > Green Ethernet Summary. The Green Ethernet Statistics Summary page displays. To refresh the page, click the Refresh button. The following table describes the nonconfigurable fields.
Page 69 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 70: Manage The Bonjour Settings And View Bonjour Information
Note: On a Mac OS device that does not support Bonjour, use the NETGEAR Switch Discovery Tool. For more information, see Determine the Switch IP Address Through the NETGEAR Switch Discovery Tool and Access the Switch On-Network on page 16.
Page 71: View Bonjour Information
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View Bonjour Information  To view Bonjour information: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 72: Control The Leds
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Control the LEDs You can turn the system LEDs and port LEDs on the switch on and off. By default, a port LED lights when you connect a powered-on device to the port.
Page 73: Configure Power Over Ethernet
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Power over Ethernet For information about Power over Ethernet (PoE), see Chapter 8, Manage Power over Ethernet. Configure SNMP You can configure SNMP settings for SNMPv1/v2 and SNMPv3. The switch supports the configuration of SNMP groups and users that can manage traps that the SNMP agent generates.
Page 74 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 75 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 76: Configure Snmpv1/V2 Trap Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure SNMPv1/v2 Trap Settings You can configure settings for each SNMPv1 or SNMPv2 management host that must receive notifications about traps generated by the device. The SNMP management host is also known as the SNMP trap receiver.
Page 77 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Modify Information for an Existing Trap SNMP Recipient  To modify information for an existing trap SNMP recipient: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 78: Configure Snmpv1/V2 Trap Flags
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System > SNMP > SNMPv1/v2 > Trap Configuration. The Trap Configuration page displays. Select the check box for the recipient. Click the Delete button. The trap recipient is removed.
Page 79: View The Supported Mibs
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • PoE. (Model GC728XP only.) If this option is enabled, SNMP traps are sent when the PoE status changes. For all options, by default, the Enable radio is selected. Click the Apply button.
Page 80: Configure Link Layer Discovery Protocol
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To configure authentication and encryption settings for the SNMPv3 admin profile: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 81: Configure Lldp Global Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following sections describe how you can configure LLDP: • Configure LLDP Global Settings on page 81 • Configure LLDP Port Settings on page 82 •...
Page 82: Configure Lldp Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 83 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 84: View The Lldp-Med Network Policy
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the LLDP-MED Network Policy This page displays information about the LLPD-MED network policy TLV transmitted in the LLDP frames on the selected local interface. ...
Page 85: Configure The Lldp-Med Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the LLDP-MED network policy information that displays on the page. Table 21. LLDP-MED network policy information Field Description Network Policy Number The policy number.
Page 86: Lldp-Med Neighbors Information
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System > LLDP > Advanced > LLDP-MED Port Settings. The LLDP-MED Port Settings page displays. From the Port menu, select the port to configure. Use the following menus to enable or disable the following LLDP-MED settings for the selected port: •...
Page 87 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the Interface menu, select an interface. The menu includes only the interfaces for which LLDP is enabled. To refresh the page, click the Refresh button. The following table describes the non-configurable LLDP-MED Neighbors Information that displays for the selected interface.
Page 88: View Local Lldp Information
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Field Description Manufacturer Name Specifies the manufacturer’s name of the remote device. Model Name Specifies the model name of the remote device. Asset Id Specifies the asset ID of the remote device.
Page 89 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 90 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the detailed local information that displays for the selected port. Field Description Managed Address Address SubType The type of address the management interface uses, such as an IPv4 address.
Page 91: View Lldp Neighbors Information
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View LLDP Neighbors Information You can view the data that a specified interface received from other LLDP-enabled systems.  To view LLDP information received from a neighbor device: Connect your computer to the same network as the switch.
Page 92 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports A pop-up window displays information for the selected port. The following table describes the information transmitted by the neighbor. Field Description Port Details Local Port The interface on the local system that received LLDP information from a remote system.
Page 93 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Field Description Current Capabilities The advertised capabilities that were received in MED TLV from the device. Device Class The LLDP-MED endpoint device class. The possible device classes are as follows: •...
Page 94: Configure Dhcp L2 Relay And Dhcp Snooping
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Field Description DSCP The DSCP associated with a particular policy type. LLDP Unknown TLVs Type The unknown TLV type field. Value The unknown TLV value field. Configure DHCP L2 Relay and DHCP Snooping The switch supports DHCP L2 Relay, DHCP snooping, and Dynamic ARP Inspection (DAI).
Page 95 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 96 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default is Disable. From the Circuit ID Mode menu, select to enable the interface number to be added as the circuit ID in DHCP option 82 or to disable the interface number from being added as the circuit ID in DHCP option 82.
Page 97 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default is Disable. From the 82 Option Trust Mode menu, select to enable or disable an interface to be trusted for DHCP L2 Relay (Option-82) received. The default is Disable.
Page 98: Configure Dhcp Snooping
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable data that is displayed. Field Description Interface The interface from which the DHCP message is received. Untrusted Server The number of DHCP message with option82 received from an untrusted server.
Page 99 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 100 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Apply button. Your settings are saved. Configure DHCP Snooping Interface Settings You can view and configure each port as a trusted or untrusted port. Any DHCP responses received on a trusted port are forwarded.
Page 101 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports DHCPRELEASE and DHCPDECLINE messages are dropped if the MAC address is in the snooping database but the binding’s interface is other than the interface where the message was received.
Page 102 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System> Services > DHCP Snooping > Binding Configuration. The Static Binding Configuration page displays. From the Interface menu, select the interface on which the DHCP client is authorized. In the MAC Address field, specify the MAC address for the binding to be added.
Page 103 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 104: Set Up Poe Timer Schedules
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System> Services > DHCP Snooping > Statistics. The DHCP Snooping Statistics page displays. To refresh the information on the page, click the Refresh button. To clear all interfaces statistics, click the Clear button.
Page 105: Chapter 3 Configure Switching
Configure Switching This chapter covers the following topics: • Configure Port Settings • Configure Link Aggregation Groups • Configure VLANs • Configure a Voice VLAN • Configure Auto-VoIP • Configure Spanning Tree Protocol • Configure Multicast • View, Search, and Configure the MAC Address Table •...
Page 106: Configure Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Port Settings You can view, configure, and monitor the physical port information for the ports (that is, the physical interfaces) on the switch. ...
Page 107 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Note: After you change the autonegotiation mode, the switch might be inaccessible for a number of seconds while the new settings take effect. In the Speed field, specify the speed value for the selected port.
Page 108: Configure Link Aggregation Groups
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Flow control helps to prevent data loss when the port cannot keep up with the number of frames being switched. When you enable flow control, the switch can send a pause frame to stop traffic on the port if the amount of memory used by the packets on the port exceeds a preconfigured threshold and responds to pause requests from partner devices.
Page 109: Configure Lag Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports A LAG interface can be either static or dynamic, but not both. All members of a LAG must participate in the same protocols. A static port channel interface does not require a partner system to be able to aggregate its member ports.
Page 110 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • 2 Dest MAC, VLAN, EType, incoming port. This mode uses the destination MAC address, VLAN, EtherType, and incoming port that are associated with the packet. •...
Page 111: Configure Lag Membership
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure LAG Membership You can select two or more full-duplex Ethernet links to be aggregated together to form a link aggregation group (LAG), which is also known as a port channel. The switch can treat the port channel as a single link.
Page 112: Set The Lacp System Priority
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Set the LACP System Priority The LACP configuration page is used to set the LACP system priority.  To configure LACP: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 113: Configure Vlans
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 114: Manage Basic Vlans
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports packet can either reject it or insert a tag using its default VLAN ID. A given port can handle traffic for more than one VLAN, but it can support only one default VLAN ID. You can define VLAN groups stored in the VLAN membership table.
Page 115 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The VLAN is added to the switch. Click the Apply button. Your settings are saved. Delete a VLAN  To delete a VLAN from the switch: Connect your computer to the same network as the switch.
Page 116: Configure Vlan Trunking
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 117 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 118: Configure Vlan Membership
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Note the following: • Use a dash (–) to specify a range. • Use a comma (,) to separate VLANs in a list. Spaces are not permitted. •...
Page 119 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the VLAN ID menu, select the VLAN ID. In the Group Operation menu, select one of the following options, which applies to all ports in the VLAN: •...
Page 120: View The Vlan Status
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 27. Advanced VLAN membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks.
Page 121: Configure Port Pvid Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 28. VLAN status (continued) Field Definition VLAN Type The VLAN type: • Default (VLAN ID = 1). Always present. • Static. A VLAN that you added. •...
Page 122 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • To configure all interfaces with the same settings, select the check box in the heading row. In the PVID field, specify the VLAN ID to assign to untagged or priority-tagged frames received on this port.
Page 123: Configure A Mac-Based Vlan
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable fields. Table 29. Nonconfigurable fields on the PVID Configuration page Field Description Current Ingress Filtering Indicates whether ingress filtering is enabled for the interface. Untagged VLANs The number of untagged VLANs for the interface.
Page 124: Configure Protocol-Based Vlan Groups
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select Switching> VLAN > Advanced > MAC Based VLAN. The MAC Based VLAN Configuration page displays. In the MAC Address field, enter a valid MAC address to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created.
Page 125 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports untagged packets are assigned to VLAN 1. You can override this behavior by defining either port-based VLANs or protocol-based VLANs, or both. Tagged packets are always handled according to the IEEE 802.1Q standard and are not included in protocol-based VLANs.
Page 126: Configure Protocol-Based Vlan Group Membership
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The ID can be any number in the range of 1 to 4093. All the ports in the group assign this VLAN ID to untagged packets received for the protocols that you included in this group. Click the Add button.
Page 127: Configure A Voice Vlan
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Your settings are saved. To view the members of the group, click the Current members button. A pop-up window opens and displays the list of current members. Configure a Voice VLAN You can configure the parameters for a voice VLAN configuration.
Page 128: Configure Auto-Voip
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • VLAN ID. Configure the phone to send tagged voice traffic. With this selection, you can enter a Dot1p value in the Value field. •...
Page 129 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports VoIP frames that are received on ports that for which the Auto-VoIP feature is enabled are marked with the specified CoS traffic class value. ...
Page 130: Configure Auto-Voip Oui-Based Properties
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Auto-VoIP OUI-Based Properties With Organizationally Unique Identifier (OUI)–based Auto-VoIP, voice prioritization is provided based on OUI bits.  To configure Auto-VoIP OUI-based properties: Connect your computer to the same network as the switch.
Page 131: Configure Oui-Based Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure OUI-Based Port Settings The port settings page allows you to configure the OUI port settings.  To configure OUI-based port settings: Connect your computer to the same network as the switch.
Page 132: Manage The Oui Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manage the OUI Table Device hardware manufacturers can include an OUI in a network adapter to help identify a hardware device. The OUI is a unique 24-bit number assigned by the IEEE registration authority.
Page 133 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. Up to 128 OUIs can be configured. In the Description field, enter the description for the OUI.
Page 134: Display The Auto-Voip Status
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Delete button. The telephony OUI entries are removed. Display the Auto-VoIP Status You can display the Auto-VoIP status.  To view the Auto-VoIP status: Connect your computer to the same network as the switch.
Page 135: Spanning Tree Protocol Overview
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Spanning Tree Protocol Overview Classic STP provides a single path between end stations, avoiding and eliminating loops. For information on configuring Common STP, see Configure CST Port Settings on page 138.
Page 136 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the following options: • Spanning Tree State. Enable or disable the spanning tree operation on the switch. • STP Operation Mode. Specify the STP version for the switch. The options are STP, RSTP, and MSTP.
Page 137: Configure Cst Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 32. STP configuration status (continued) Field Description Forward Delay (secs) The derived value of the Root Port Bridge Forward Delay parameter. Hold Time (secs) Minimum time in seconds between the transmission of configuration BPDUs.
Page 138: Configure Cst Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports implementing a topological change. The valid range is 6–40, and the value must be less than or equal to (2 * Bridge Forward Delay) – 1 and greater than or equal to 2 * (Bridge Hello Time +1).
Page 139 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 140: View Cst Port Status
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Priority field, specify the priority for a particular port within the CST. The port priority is set in multiples of 16. For example if you attempt to set the priority to any value between 0 and 15, it is set to 0.
Page 141 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select Switching > STP > Advanced > CST Port Status. The CST Port Status page displays. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the CST Status information displayed on the page.
Page 142: View Rapid Stp Information
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View Rapid STP Information You can view information about the Rapid Spanning Tree (RSTP) port status.  To view information about RSTP: Connect your computer to the same network as the switch.
Page 143: Manage Mst Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manage MST Settings You can configure a multiple spanning tree (MST) on the switch. Configure an MST Instance  To configure an MST instance: Connect your computer to the same network as the switch.
Page 144 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports For each configured instance, the information described in the following table displays on the page. Table 37. MST configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance.
Page 145: Configure Mst Port Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Update the values. Click the Apply button. Your settings are saved. Delete an MST Instance  To delete an MST instance: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 146 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 147 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the read-only MST port configuration information displayed on the Spanning Tree CST Configuration page. Table 38. MST port status information Field Description Operational Port Path Cost...
Page 148: View Stp Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View STP Statistics You can view information about the number and type of bridge protocol data units (BPDUs) transmitted and received on each port. ...
Page 149: Configure Multicast
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Multicast Multicast IP traffic is traffic that is destined to a host group. Host groups for IPv4 multicast are identified by class D addresses, which range from 224.0.0.0 to 239.255.255.255. Host groups for IPv6 multicast are identified by the prefix ff00::/8.
Page 150: View The Mfdb Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the information in the MFDB table. Table 40. MFDB table information Field Description MAC Address The multicast MAC address for which you requested data. VLAN ID The VLAN ID to which the multicast MAC address is related.
Page 151: Configure The Auto-Video Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the MFDB Statistics fields. Table 41. MFDB Statistics information Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold.
Page 152: Configure Igmp Snooping
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure IGMP Snooping Internet Group Management Protocol (IGMP) snooping is a feature that allows a switch to forward multicast traffic intelligently. Multicast IP traffic is traffic that is destined to a host group.
Page 153 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure IGMP Snooping Globally You can configure the parameters for IGMP snooping, which is used to build forwarding lists for multicast traffic. ...
Page 154 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 42. IGMP Snooping Configuration information (continued) Field Description VLAN IDs Enabled For IGMP The IDs of the VLANs that are enabled for IGMP snooping. Snooping VLAN IDs Enabled For IGMP The IDs of the VLANs that are enabled for IGMP snooping querier.
Page 155 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter a value between 1 and 3600 seconds. The default is 260 seconds. In the Max Response Time field, specify the time that the switch must wait after sending a query on an interface because it did not receive a report for a particular group on that interface.
Page 156 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter six two-digit hexadecimal numbers separated by colons, for example 00:01:23:43:45:67. Click the Go button. If the address exists, the entry is displayed. An exact match is required. To refresh the page with the latest information about the switch, click the Refresh button.
Page 157 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The IGMP Snooping VLAN Configuration page displays. To enable IGMP snooping on a VLAN, in the VLAN ID field, enter the VLAN ID. Configure the IGMP snooping values: •...
Page 158 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 159 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports accordingly. It is required only if you want to make sure that the multicast router always receives IGMP packets from the switch in a complex network. ...
Page 160: Configure An Igmp Snooping Querier
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. Launch a web browser.
Page 161 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the Global IGMP Snooping Querier Settings You can configure the global settings for an IGMP snooping querier.  To configure the global IGMP snooping querier settings: Connect your computer to the same network as the switch.
Page 162 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure an IGMP Snooping Querier for a VLAN You can configure an IGMP snooping querier for use with a VLAN on the network. ...
Page 163 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Remove an IGMP Snooping Querier From a VLAN You can remove an IGMP snooping querier from a VLAN.  To remove an IGMP snooping querier from a VLAN: Connect your computer to the same network as the switch.
Page 164: Configure Mld Snooping
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select Switching> Multicast > IGMP Snooping Querier > Querier VLAN Status. The Querier VLAN Status page displays. To refresh the page with the latest information about the switch, click the Refresh button.
Page 165 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports nodes. MLD is derived from IGMP; MLD version 1 (MLDv1) is equivalent to IGMPv2 and MLD version 2 (MLDv2) is equivalent to IGMPv3. MLD is a subprotocol of Internet Control Message Protocol version 6 (ICMPv6), and MLD messages are a subset of ICMPv6 messages, identified in IPv6 packets by a preceding Next Header value of 58.
Page 166 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Apply button. Your settings are saved. To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable MLD Snooping Configuration fields.
Page 167 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • To configure all interfaces with the same settings, select the check box in the heading row. From the Admin Mode menu, select to enable or disable the interface mode for the selected interface for MLD snooping for the switch.
Page 168 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 169 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select Switching> Multicast > MLD Snooping > MLD VLAN Configuration. The MLD VLAN Configuration page displays. Select the check box for the VLAN ID. Click the Delete button.
Page 170 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure a Multicast Router VLAN for MLD Snooping  To configure a multicast router VLAN for MLD snooping: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 171 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 172 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 173 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Remove an MLD Snooping Querier From a VLAN You can remove an MLD snooping querier from a VLAN.  To remove an MLD snooping querier from a VLAN: Connect your computer to the same network as the switch.
Page 174: View, Search, And Configure The Mac Address Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View, Search, and Configure the MAC Address Table You can view or configure the MAC address table. This table contains information about unicast entries for which the switch holds forwarding or filtering information.
Page 175: Set The Dynamic Address Aging Interval
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To refresh the information on the page, click the Refresh button. The following table describes the nonconfigurable information displayed on the page. Table 47.
Page 176: Add A Static Mac Address
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The value can be any number between 10 and 1000000 seconds. The default is 300. Click the Apply button. Your settings are saved. Add a Static MAC Address You can manually add MAC addresses to the MAC address table.
Page 177: Remove A Static Mac Address
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Remove a Static MAC Address You can manually remove static MAC addresses from the MAC address table.  To add a static MAC address: Connect your computer to the same network as the switch.
Page 178: Configure Global Layer 2 Loop Protection
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports forwarded to all ports that are members of the same VLAN, just like any other multicast packet. The packet is not forwarded to the port from which it was received. If the source MAC address matches the MAC address of the switch, the switch can perform one of the following actions, depending on how you configure the action: •...
Page 179: Configure Layer 2 Loop Protection On A Port
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To enable or disable loop protection, select the Admin Mode Enable or Disable radio button. The default is Enable. From the Transmit Interval menu, select the time in seconds between transmission of loop packets.
Page 180 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Use one of the following methods to narrow down the ports that are displayed: • To display all the physical ports, click the 1 link. •...
Page 181 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 48. L2 Loop Protection Interface Information Field Description Loop Detected Shows whether a loop is detected on the interface.
Page 182 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Switching...
Page 183: Chapter 4 Configuring Routing
Configuring Routing This chapter covers the following topics. • How the Switch Handles Routing • Enable the Routing Mode • View the IP Statistics • Configure IPv6 Routing • Configure Router Discovery • Configure Routes and View Routes • Configure ARP...
Page 184: How The Switch Handles Routing
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports How the Switch Handles Routing For each incoming packet, the switch uses the destination MAC address to determine if the address matches a configured routing interface. If it does, the switch searches the host table for a matching destination IP address: •...
Page 185: View The Ip Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select the Routing Mode Enable radio button. Click the Apply button. The following table describes the nonconfigurable information displayed on the page. Table 49.
Page 186 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 50. IP routing statistics information Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
Page 187 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 50. IP routing statistics information (continued) Field Description IpReasmFails The number of failures detected by the IP reassembly algorithm (for example, because of timing out, errors, and so on).
Page 188: Configure Ipv6 Routing
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 50. IP routing statistics information (continued) Field Description IcmpOutParmProbs The number of ICMP Parameter Problem messages sent. IcmpOutSrcQuenchs The number of ICMP Source Quench messages sent. IcmpOutRedirects The number of ICMP Redirect messages sent.
Page 189: View The Ipv6 Route Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Routing> IPv6 > Basic > Global Configuration. The IPv6 Global Configuration page displays. To globally enable IPv6 unicast routing, select the IPv6 Unicast Routing Enable radio button.
Page 190: Configure Ipv6 Vlan Interface Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The IPv6 Routing Table page displays. From the Routes Displayed menu, select one of the following options: • All Routes. Show all active IPv6 routes. •...
Page 191 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 192 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports This value must be greater than or equal to the maximum advertisement interval. 0 means do not use the VLAN interface as the default routing interface. The range of router life time is 0 to 9000.
Page 193: Manage Ipv6 Prefix Es For Advertisement On An Ipv6 Vlan
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 52. IPv6 VLAN Configuration information Field Description Routing Mode Displays the routing mode of an interface. The default is Disable. Operational Mode Specifies the operational state of an interface.
Page 194 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the EUI64 menu, select Enable or Disable to indicate whether the specified 64-bit unicast prefix is enabled. In the Valid Life Time field, specify the router advertisement per prefix time. This is the time allowed to consider the prefix valid for the purpose of on-link determination.
Page 195 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Routing> IPv6 > Advanced > Prefix Configuration. The IPv6 Interface Selection page displays. The page also shows the IPv6 Interface Configuration table. From the Interface menu, select the VLAN.
Page 196: View Ipv6 Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View IPv6 Statistics  To display the IPv6 statistics: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 197 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 53. IPv6 Statistics information (continued) Field Description Received Datagrams Discarded The number of input datagrams discarded because no route could be Due To No Route found to transmit them to their destination.
Page 198 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 53. IPv6 Statistics information (continued) Field Description Datagrams Failed To Fragment The number of output datagrams that could not be fragmented at this interface.
Page 199 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 54. ICMPv6 Statistics information (continued) Field Description ICMPv6 Neighbor Advertisement The number of ICMP Neighbor Advertisement messages received by the Messages Received interface.
Page 200: View The Ipv6 Neighbor Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 54. ICMPv6 Statistics information (continued) Field Description ICMPv6 Redirect Messages The number of Redirect messages sent. Transmitted ICMPv6 Group Membership Query The number of ICMPv6 Group Membership Query messages sent.
Page 201 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Search by Interface. Select Interface from the Search menu. Enter the interface using the respective naming convention (for example, g1 or l1). Then click the Go button.
Page 202: Manage Static Ipv6 Routes
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manage Static IPv6 Routes You can configure static and default routes with a single next hop to any destination. You can also delete an individual next hop from a static route or an entire static route. The switch supports a maximum of 32 static routes.
Page 203 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the Next Hop IPv6 Address Type menu, select one of the following options: • Global. Select this option if the IPv6 address is a global IPv6 address. •...
Page 204: View The Ipv6 Route Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Remove Static IPv6 Routes  To remove one or more static IPv6 routes: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 205: Configure Ipv6 Route Preferences
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Routing> IPv6 > Advanced > Route Table. The IPv6 Route Table displays. From the Routes Displayed menu, select one of the following options: •...
Page 206: Configure Routing Vlans
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 207: Configure Vlan Routing With The Vlan Routing Wizard
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure VLAN Routing With the VLAN Routing Wizard The VLAN Routing Wizard creates a VLAN routing interface, configure the IP address and subnet mask for the interface, and add selected ports or LAGs to the VLAN.
Page 208 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Vlan ID field, specify the VLAN Identifier (VID) associated with this VLAN. The VID is 1 to 4093 characters in length. In the IP Address field, define the IP address of the VLAN interface.
Page 209: Manually Manage Routing Vlans
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manually Manage Routing VLANs You can view information about existing VLAN routing interfaces on the switch, change the settings for an existing routing VLAN, change a regular VLAN into a routing VLAN, and delete a routing VLAN.
Page 210 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the VLAN routing interface status information on the page. Table 57. VLAN routing interface information Field Description Port The port number assigned to the VLAN Routing Interface.
Page 211: Configure Router Discovery
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 212: Configure Routes And View Routes
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Router Discovery Configuration page displays. Select the check box for the routing interface. To configure all routing interfaces, select the check box in the heading row. To configure a single interface, select the check box associated with the interface.
Page 213 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 214: Delete Routes
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Route Status table provides information about the static routes that you manually configured on the switch and the routes the switch learned dynamically. Table 58.
Page 215: Configure Arp
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Delete button. The static route is deleted. Configure ARP The address resolution protocol (ARP) associates a layer 2 MAC address with a layer 3 IPv4 address.
Page 216: View Entries In The Arp Cache
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View Entries in the ARP Cache You can view entries in the ARP table.  To display entries in the ARP table: Connect your computer to the same network as the switch.
Page 217: Create A Static Arp Entry
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 60. ARP cache information for routing VLANs (continued) Field Description Type The type of the ARP entry. Possible values are: • Local.
Page 218: Configure The Global Arp Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports For information about the information in the Routing VLANs ARP Cache table, see Table 60, ARP cache information for routing VLANs on page 216. Configure the Global ARP Settings You can display and change the configuration settings for the ARP table.
Page 219: Remove Arp Entries From The Arp Cache
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Remove ARP Entries From the ARP Cache You can remove certain types of entries from the ARP table.  To remove entries from the ARP table: Connect your computer to the same network as the switch.
Page 220: Chapter 5 Configure Quality Of Service
Configure Quality of Service In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria. When a packet is queued for transmission in a port, the rate at which it is serviced depends on how the queue is configured and possibly the amount of traffic present in the other queues of the port.
Page 221: Manage Class Of Service
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manage Class of Service The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queueing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required.
Page 222 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 223: Configure Cos Interface Settings For An Interface
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure CoS Interface Settings for an Interface You can configure the trust mode for one or more interfaces and apply an interface shaping rate to all interfaces or to a specific interface.
Page 224: Configure Cos Queue Settings For An Interface
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • To configure all interfaces with the same settings, select the check box in the heading row. From the Interface Trust Mode menu, select one of the following trust mode options for ingress traffic on the selected interfaces: •...
Page 225 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 226: Map 802.1P Priorities To Queues
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Map 802.1p Priorities to Queues You can view or change which internal traffic classes are mapped to the 802.1p priority class values in Ethernet frames that the device receives. The priority-to-traffic class mappings can be applied globally or per interface.
Page 227: Map Dscp Values To Queues
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The values in the menu under each priority represent the traffic class. The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position.
Page 228: Manage Differentiated Services
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The traffic class is the hardware queue for a port. Higher traffic class values indicate a higher queue position. Before traffic in a lower queue is sent, it must wait for traffic in higher queues to be sent.
Page 229: Configure Diffserv Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure DiffServ Settings Packets are filtered and processed based on defined criteria. The filtering criteria is defined by a class. The processing is defined by a policy's attributes. Policy attributes can be defined on a per-class instance basis, and it is these attributes that are applied when a match occurs.
Page 230: Configure A Diffserv Class
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select the administrative mode for DiffServ: • Enable. Differentiated services are active. This is the default setting. • Disable. The DiffServ configuration is retained and can be changed but is not active. Click the Apply button.
Page 231 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports logic is a Boolean logical AND for this criteria. After creating a class, click the class link to the Class page. Create and Configure a DiffServ Class ...
Page 232 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The class name is a hyperlink to the page on which you can define the class configuration. Define the criteria that must be associated the DiffServ class: •...
Page 233 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Source MAC. Select this radio button to require a packet’s source MAC address to match the specified MAC address. After you select this radio button, use the following fields to configure the source MAC address match criteria: Address.
Page 234 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Destination L4 Port. Select this radio button to require a packet’s TCP/UDP destination port to match the specified protocol, which you must select from the menu. The range is 0 to 65535.
Page 235 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 236: Configure Diffserv Ipv6 Class Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Delete a DiffServ Class  To delete a DiffServ class: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 237 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Packets that match an IPv6 classifier are allowed to be marked using only the 802.1p (CoS) field or the IP DSCP field in the traffic Class octet. IP precedence is not defined for IPv6. This is not an appropriate type of packet marking.
Page 238 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports After creating the class, click the class name. The class name is a hyperlink to the page on which you can define the class configuration.
Page 239 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Destination Prefix/Length. Select this radio button to require a packet’s destination prefix and prefix length to match the specified source IPv6 prefix and prefix length. Prefix must always be specified with the prefix length.
Page 240 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 241: Configure A Diffserv Policy
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Delete an IPv6 DiffServ Class  To delete an IPv6 DiffServ class: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 242 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 243 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the Assign Queue menu, select the queue to which packets of this policy class must be assigned. This is an integer value in the range 0 to 7. Configure the policy attributes: •...
Page 244 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Simple Policy. Select this radio button to define the traffic policing style for the class. A simple policy uses a single data rate and burst size, resulting in one of two outcomes: conform or violate.
Page 245 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Apply button. Your settings are saved. The following table describes the nonconfigurable information displayed on the page. Table 64. DiffServ policy configuration policy attribute Field Description Policy Name...
Page 246 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Change the Policy Attributes for an Existing DiffServ Policy  To change the policy attributes for an existing DiffServ policy: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 247 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 248: Configure The Diffserv Service Interface
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the DiffServ Service Interface You can activate a policy on an interface. Attach a DiffServ Policy to an Interface  To attach a DiffServ policy to an interface: Connect your computer to the same network as the switch.
Page 249 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 65. Service Interface Configuration information Field Description Direction Shows the traffic direction of this service interface (either In or Out). Operational Status Shows the operational status of this service interface (either Up or Down).
Page 250: View Diffserv Service Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View DiffServ Service Statistics You can display service-level statistical information about all interfaces to which DiffServ policies are attached.  To view the DiffServ service statistics: Connect your computer to the same network as the switch.
Page 251 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 66. DiffServ Service Statistics information (continued) Field Description Discarded Packets The total number of packets that are discarded for all class instances in this service policy for any reason due to DiffServ treatment.
Page 252: Chapter 6 Manage Device Security
Manage Device Security This chapter covers the following topics: • Management Security Settings • Configure Management Access • Configure Port Authentication • Set Up Traffic Control • Configure Access Control Lists...
Page 253: Management Security Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Management Security Settings You can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists.
Page 254: Reset The Password To The Default Password
If you added the switch to a network on the Insight app before and you change the management mode back to NETGEAR Insight Mobile App and Insight Cloud Portal, all Insight-manageable device settings are returned to the last configuration saved on the cloud server, including the switch password (that is, the password is reset to the Insight network password).
Page 255: Radius Overview
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports RADIUS Overview RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, which can authenticate a user name and password before authorizing use of the network.
Page 256 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports is the server configured as the primary server. If no servers are configured as the primary server, the current server is the most recently added RADIUS server. In the Max Number of Retransmits field, specify the maximum number of times a request packet is retransmitted to the RADIUS server.
Page 257 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure a RADIUS Authentication Server on the Switch Use the RADIUS Server Configuration page to view and configure various settings for a RADIUS server configured on the switch.
Page 258 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The message authenticator adds protection to RADIUS messages by using an MD5 hash to encrypt each message. The shared secret is used as the key, and if the message fails to be verified by the RADIUS server, it is discarded.
Page 259 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 68. RADIUS authentication server statistics information (continued) Field Description Unknown Types The number of RADIUS packets of unknown type that were received from this server on the authentication port.
Page 260 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 261 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Accounting Server Configuration page displays. In the Accounting Server Address field, specify the IP address of the RADIUS accounting server to add. In the Port field, specify the UDP port number the server uses to verify the RADIUS accounting server authentication.
Page 262 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 69. RADIUS accounting server statistics information (continued) Field Description Timeouts The number of accounting time-outs to this server. Unknown Types The number of RADIUS packets of unknown type that were received from this server on the accounting port.
Page 263 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Modify the Settings for a RADIUS Accounting Server on the Switch  To modify the settings for a RADIUS accounting server on the switch: Connect your computer to the same network as the switch.
Page 264: Configure Tacacs
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Security > Management Security > RADIUS > Accounting Server Configuration. The Accounting Server Configuration page displays. Select the check box next to the IP address of the server to remove. Click the Delete button.
Page 265 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The TACACS+ Configuration page displays. In the Key String field, specify the authentication and encryption key for TACACS+ communications between the switch and the TACACS+ server. The valid range is 0–128.
Page 266: Configure Authentication Lists
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Key String field, specify the authentication and encryption key for TACACS+ communications between the device and the TACACS+ server. The valid range is 0–128. The key must match the key used on the TACACS+ server. In the Connection Timeout field, specify the time that passes before the connection between the device and the TACACS+ server times out.
Page 267 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the menu in the 1 column, select the authentication method that must be used first in the selected authentication login list. If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method.
Page 268 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 269 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure the Dot1x Authentication List The Dot1x authentication list defines the IEEE 802.1X authentication method used for the default list. The default list is dot1xList. ...
Page 270: Configure Management Access
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Management Access You can configure HTTP and secure HTTP access to the switch management interface. You can also configure access control profiles and access rules. Configure HTTP Settings You can configure the settings for HTTP access to the switch.
Page 271: Https Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports HTTPS Configuration Secure HTTP enables the transmission of HTTP over an encrypted Secure Sockets Layer (SSL) or Transport Layer Security (TLS) connection. When you manage the switch by using a web interface, Secure HTTP can help ensure that communication between the management system and the switch is protected from eavesdroppers and man-in-the-middle attacks.
Page 272: Manage Certificates
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the HTTPS Session Soft Timeout (Minutes) field, enter the inactivity time-out for HTTPS sessions. The value must be in the range of 1 to 60 minutes. The default value is 5 minutes. The configured value is displayed.
Page 273: Download Certificates
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Certificate Present field displays whether a certificate is present on the switch. In the Certificate Management area, select Generate Certificates. Click the Apply button. The switch generates an SSL certificate.
Page 274 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • The switch contains a path to the TFTP server.  To configure the certificate download settings for HTTPS sessions: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 275: Access Control
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select the Start File Transfer check box. Click the Apply button. The file transfer starts. A status message displays during the transfer and upon successful completion of the transfer.
Page 276: Configure Access Rule Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To refresh the page with the latest information about the switch, click the Refresh button. The following table describes the nonconfigurable data that is displayed. Table 70.
Page 277: Configure Port Authentication
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Access Rule Configuration page displays. From the Rule Type menu, select Permit or Deny to permit or deny access when the selected rules are matched.
Page 278: Configure Global 802.1X Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Global 802.1X Settings You can configure global port access control settings on the switch.  To globally enable all 802.1X features: Connect your computer to the same network as the switch.
Page 279: Manage Port Authentication
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If RADIUS-assigned VLANs are enabled, the RADIUS server is includes the VLAN ID in the 802.1X tunnel attributes of its response message to the device. If dynamic VLAN creation is enabled on the device and the RADIUS-assigned VLAN does not exist, then the assigned VLAN is dynamically created.
Page 280 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Specify the following settings: • Port Control. Defines the port authorization state. The control mode is set only if the link status of the port is link up. Select one of the following options: Auto.
Page 281 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Max EAP Requests. Specify the maximum number of EAP requests for the selected port. The value is the maximum number of times an EAPoL EAP Request/Identity message is retransmitted before the supplicant times out.
Page 282 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Initialize 802.1X on a Port  To initialize 802.1X on a port: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 283: View The Port Summary
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The System Information page displays. Select Security > Port Authentication > Advanced > Port Authentication. The Port Authentication page displays. Select the check box associated with the port to reauthenticate. Click the Reauthenticate button.
Page 284: View The Client Summary
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the fields on the Port Summary page. Table 72. Port summary Field Description Port The port for which the settings are displayed in the current table row. Control Mode Indicates the configured control mode for the port.
Page 285 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 286: Set Up Traffic Control
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Set Up Traffic Control You can configure MAC filters, storm control, port security, protected port, and private VLAN settings. Manage MAC Filtering You can create MAC filters that limit the traffic allowed into and out of specified ports on the switch.
Page 287 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Port and LAG tables in the Source Port Members section, select the ports and LAGs that must be included in the inbound filter. If a packet with the MAC address and VLAN ID that you specify is received on a port that is not part of the inbound filter, the packet is dropped.
Page 288: View The Mac Filter Summary
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the MAC Filter Summary You can view the MAC filters that are configured on the switch.  To view the MAC filter summary: Connect your computer to the same network as the switch.
Page 289 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To configure storm control settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 290: Configure Port Security
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Apply button. Your settings are saved. To enable or disable storm control for one or more ports or to specify different threshold and control action settings for one or more ports, do the following: a.
Page 291 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 292 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To configure port security settings: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 293 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View Learned MAC Addresses and Convert Them to Static MAC Addresses You can convert a dynamically learned MAC address to a statically locked address. ...
Page 294: Configure Protected Ports
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To convert the dynamically learned MAC address to a statically locked addresses, select the Convert Dynamic Address to Static check box. Click the Apply button. The dynamic MAC address entries are converted to static MAC address entries in a numerically ascending order until the static limit is reached.
Page 295: Configure A Private Vlan
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure a Private VLAN A private VLAN contains switch ports that cannot communicate with each other, but can access another network. These ports are called private ports. Each private VLAN contains one or more private ports and a single uplink port or uplink aggregation group.
Page 296 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Private VLAN Association Settings  To configure private VLAN association: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 297 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 298 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 299: Configure Access Control Lists
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 300: Use The Acl Wizard To Create A Simple Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To configure an ACL: Create an IPv4-based or IPv6-based or MAC-based ACL ID. Create a rule and assign it to a unique ACL ID. Define the rules, which can identify protocols, source, and destination IP and MAC addresses, and other packet-matching criteria.
Page 301 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the ACL Type menu, select the type of ACL. You can select from the following ACL types: • ACL Based on Destination MAC. Creates an ACL based on the destination MAC address, destination MAC mask, and VLAN.
Page 302 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • ACL Based on Source IPv6 L4 Port. Creates an ACL based on the source IPv6 Layer 4 port number. Note: For L4 port options, two rules are created (one for TCP and one for UDP). In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 that is used to identify the rule.
Page 303 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports ACL Based On Fields Source IPv6 • Source Prefix. Specify the source destination prefix. • Source Prefix Length. Specify the source prefix length. Destination IPv4 L4 Port •...
Page 304 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Modify an ACL Rule  To modify an ACL rule: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 305: Configure A Basic Mac Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Security > ACL > ACL Wizard. The ACL Wizard page displays. Select check box that is associated with the rule. Click the Delete button. The rule is removed.
Page 306 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Multiple steps are involved in defining a MAC ACL and applying it to the switch: Create the ACL ID. Create a MAC rule. Associate the MAC ACL with one or more interfaces.
Page 307 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Change the Name of a MAC ACL  To change the name of a MAC ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 308: Configure Mac Acl Rules
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Security > ACL > Basic > MAC ACL. The MAC ACL page displays. Select check box that is associated with the rule. Click the Delete button.
Page 309 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Sequence Number field, enter a whole number in the range of 1 to 2147483647 to identify the rule. From the Action menu, select the action that must be taken if a packet matches the rule’s criteria: •...
Page 310 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the EtherType Key menu, select the EtherType value that must be compared against the information in an Ethernet frame. The valid values are as follows: •...
Page 311 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports When set to Enable, logging is enabled for this ACL rule (subject to resource availability on the switch). If the access list trap flag is also enabled, periodic traps are generated, indicating the number of times the rule was evoked during the report interval.
Page 312: Configure Mac Bindings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 313 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the ACL ID menu, select an ACL. The fixed selection from the Direction menu is Inbound, which means that MAC ACL rules are applied to traffic entering the interface.
Page 314: View Or Delete Mac Acl Bindings In The Mac Binding Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the information displayed in the Interface Binding Status table. Table 77. Interface Binding Status table Field Description Interface The interface of the ACL assigned.
Page 315: Configure An Ip Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the information that is displayed in the MAC Binding Table. Table 78. MAC Binding Table Field Description Interface The interface of the ACL assigned.
Page 316 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Current Number of ACL field displays the current number of all ACLs configured on the switch. The Maximum ACL field displays the maximum number of IP ACLs that can be configured on the switch.
Page 317: Configure Rules For A Basic Ip Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select the check box that is associated with the IP ACL. Click the Delete button. The IP ACL is removed. Configure Rules for a Basic IP ACL You can define rules for IP-based standard ACLs (basic ACLs).
Page 318 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If no rules exist, the Basic ACL Rule Table shows the message No rules have been configured for this ACL. If one or more rules exist for the ACL, the rules display in the Basic ACL Rule Table.
Page 319 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Mirror Interface. From the Mirror Interface menu, select the specific egress interface to which the matching traffic stream must be copied, in addition to being forwarded normally by the switch.
Page 320: Configure Rules For An Extended Ip Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports From the ACL ID menu, select the ACL that includes the rule that you want to modify. In the Basic ACL Rule Table, click the rule. The rule is a hyperlink.
Page 321 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Add a Rule for an Extended IP ACL  To add a rule for an extended IP ACL: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 322 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The previous figure does not show the rightmost fields. Configure the following match criteria for the rule: • Sequence Number. Enter a whole number in the range of 1 to 2147483647 that is used to identify the rule.
Page 323 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Interface. For a Permit action, use either a mirror interface or a redirect interface: Select the Mirror Interface radio button and use the menu to specify the egress interface to which the matching traffic stream is copied, in addition to being forwarded normally by the device.
Page 324 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The relevant matching conditions for L4 port numbers are as follows: • Equal. IP ACL rule matches only if the Layer 4 source port number is equal to the specified port number or port protocol.
Page 325 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Dst L4. The options are available only when the protocol is set to TCP or UDP. Use the destination L4 port option to specify relevant matching conditions for L4 port numbers in the extended ACL rule.
Page 326 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The wildcard mask determines which bits are used and which bits are ignored. A wildcard mask of 0.0.0.0 indicates that none of the bits are important. A wildcard of 255.255.255.255 indicates that all of the bits are important.
Page 327 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports IP TOS. This is an optional configuration. The IP ToS field in a packet is defined as all 8 bits of the service type octet in the IP header. The ToS bits value is a hexadecimal number that is composed of numbers 00 to 09 and AA to FF.
Page 328: Configure An Ipv6 Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Delete an Extended IP ACL Rule  To delete an extended IP ACL rule: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 329 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 330: Configure Rules For An Ipv6 Acl
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select Security > ACL > Advanced > IPv6 ACL. The IPv6 Configuration page displays. Select the check box that is associated with the IPv6 ACL. Click the Delete button.
Page 331 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The previous figure does not show all columns. If no rules exists, the IPv6 ACL Rule Table shows the message No rules have been configured for this ACL.
Page 332 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Action. Select the ACL forwarding action by selecting one of the following radio buttons: Permit. Forward packets that meet the ACL criteria. Deny.
Page 333 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Src L4. The options are available only when the protocol is set to TCP or UDP. Use the source L4 port option to specify relevant matching conditions for L4 port numbers in the extended ACL rule.
Page 334 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Dst. In the Dst field, enter a destination IPv6 address to be compared to a packet’s destination IPv6 address as a match criterion for the selected IPv6 ACL rule: If you select the IPv6 Address radio button, enter an IPv6 address to apply this criteria.
Page 335 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports You can either enter the port range yourself or select one of the following protocols from the menu: • The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp.
Page 336 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports that is used by end stations to signify Quality of Service handling in routers. The flow label can specified within the range 0 to 1048575. •...
Page 337: Configure Ip Acl Interface Bindings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Delete an IPv6 ACL Rule  To delete an IPv6 ACL rule: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 338 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 339: View Or Delete Ip Acl Bindings In The Ip Acl Binding Table
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Ports and LAG tables display the available and valid interfaces for ACL binding. All nonrouting physical interfaces, VLAN interfaces, and interfaces participating in LAGs are listed.
Page 340: Configure Vlan Acl Bindings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To delete an IP ACL-to-interface binding, do the following: a. Select the check box next to the interface. b. Click the Delete button. The binding is removed.
Page 341 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the VLAN ID field, enter the VLAN ID to which the binding must apply. From the Direction menu, select the packet filtering direction. In the Sequence Number field, enter an optional sequence number.
Page 342: Chapter 7 Perform Maintenance Tasks
Perform Maintenance Tasks This chapter covers the following topics: • Reboot the Switch • Reset the Switch to Its Factory Default Settings • Export a File From the Switch • Download a File to the Switch • Manage Software Images •...
Page 343: Reboot The Switch
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Reboot the Switch You can reboot the switch from the local browser interface. Note: The switch provides a recessed multi-function Reset button on the back panel that lets you reboot (power-cycle) the switch.
Page 344 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports password. The default management mode is reset to NETGEAR Insight Mobile App and Insight Cloud Portal. For information about reconnecting to the switch, see Access the Switch on page 13.
Page 345: Export A File From The Switch
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Export a File From the Switch You can export configuration (ASCII or log ASCII) files from the switch to a file server by using TFTP or HTTP.
Page 346: Use An Http Sessions To Export A File
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Tech Support. The tech support file is a text-base file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting.
Page 347: Download A File To The Switch
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 348 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To download a file to the switch from a TFTP server: Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
Page 349: Download A File To The Switch Using Http
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Note: We recommended that you do not overwrite the active image. If you do so, the switch displays a warning that you are trying to overwrite the active image.
Page 350 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 351: Manage Software Images
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Note: After a file transfer is started, wait until the page refreshes. When the page refreshes, the option to select a file option is no longer available, indicating that the file transfer is complete.
Page 352: Configure Dual Image Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 353 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Current-active field displays the name of the active image. To specify a name for the selected image, enter one in the Image Description field. Select the Activate Image check box.
Page 354: View The Dual Image Status
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View the Dual Image Status You can view information about the active and backup images on the switch.  To view dual image status information: Connect your computer to the same network as the switch.
Page 355: Perform Troubleshooting Tasks
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Perform Troubleshooting Tasks You can send a ping or a traceroute. The following sections describe how you can troubleshoot the switch and the network: •...
Page 356: Send An Ipv6 Ping
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The Ping Details page displays. In the IP Address/Host Name field, enter the IP address or host name of the device that must be pinged.
Page 357 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 358: Send An Ipv4 Traceroute
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Send an IPv4 Traceroute You can configure the switch to send a traceroute request to a specified IP address or host name. You can use this to discover the paths that packets take to a remote destination. Once you click the Apply button, the switch sends a traceroute and the results are displayed below the configurable data.
Page 359: Send An Ipv6 Traceroute
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports In the Interval field, enter the time between probes in seconds. The default value is 3. The range is 1 to 60. In the Port field, enter the UDP destination port for the probe packets.
Page 360 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 361: Enable Remote Diagnostics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Enable Remote Diagnostics You can enable or disable the option to access the switch remotely. When remote access is enabled, you can perform diagnostics services. ...
Page 362: Chapter 8 Manage Power Over Ethernet
Configure the Global PoE Settings • Manage and View the PoE Port Configuration • Reset One or More PoE or PoE+ Ports • Set Up PoE Timer Schedules Note: This chapter applies to model GC728XP. Model GC728X does not support Power over Ethernet.
Page 363: Poe Overview
Table 83. PoE capacities for each model Model Maximum PoE Power Maximum Power Budget Per Port Across All Active PoE Ports GC728X PoE is not supported PoE is not supported GC728XP 30W PoE+ (IEEE 802.3at) 390W By default, supplied power is prioritized in ascending port order, up to the total power budget of the device.
Page 364: Power Allocation And Power Budget
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table shows the device classes for PoE+ devices adhering to the IEEE 802.3at standard. The device classes for PoE devices adhering to the IEEE 802.3af standard are identical with the exception that Device Class 4 is not supported.
Page 365: Configure The Global Poe Settings
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports  To determine the delivered power by PoE or PoE+ ports: Connect your computer to the same network as the switch. You can use a WiFi or wired network connection, or connect directly to a switch that is off-network using an Ethernet cable.
Page 366 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 367: Manage And View The Poe Port Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Manage and View the PoE Port Configuration Depending on the model, the switch includes eight PoE or PoE+ ports.  To configure and view the PoE or PoE+ port settings: Connect your computer to the same network as the switch.
Page 368 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The settings that you configure apply to all selected PoE or PoE+ ports. Menu Item Description Port Power Select the administrative mode of the port: •...
Page 369 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Menu Item Description Detection Type The detection type specifies how the port detects the attached PD. Select one of the following types: •...
Page 370: Reset One Or More Poe Or Poe+ Ports
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Field Description Fault Status The error description when the PoE port is in a fault state. The possible values are as follows: •...
Page 371: Set Up Poe Timer Schedules
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Set Up PoE Timer Schedules The switch lets you define multiple timer schedules that you can use for PoE power delivery to attached PDs. After you create a timer schedule, you can associate it with one or more PoE ports (see Manage and View the PoE Port Configuration on page 367).
Page 372: Specify The Settings For An Absolute Poe Timer Schedule
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Specify the Settings for an Absolute PoE Timer Schedule An absolute timer schedule applies to specific dates and times. The schedule is executed once only.
Page 373: Specify The Settings For A Recurring Poe Timer Schedule
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports d. Next to the Date End field, click the calendar icon and use the menus in the pop-up window to enter the date in the DD-Mon-YYYY format to specify when the timer schedule must stop.
Page 374: Change The Settings For A Recurring Poe Timer Schedule Entry
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Selecting an existing entry lets you make changes to that entry. In the Timer Schedule Configuration section, specify the recurrence pattern: a. In the Time Start field, enter the time of day in the HH:MM format to specify when the timer schedule must start.
Page 375: Delete A Poe Timer Schedule Entry
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 376: Delete A Poe Timer Schedule
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Select System > Timer Schedule > Advanced > Timer Schedule Configuration. The Timer Schedule Configuration page displays. From the Timer Schedule Name menu, select the schedule name. From the Timer Schedule Type menu, select the schedule type.
Page 377: Chapter 9 Monitor The System
Monitor the System This chapter contains the following sections. • Monitor the Switch and the Ports • Configure and View Logs • Configure Port Mirroring...
Page 378: Monitor The Switch And The Ports
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Monitor the Switch and the Ports The following sections describe how you can view a variety of information about the amount and type of traffic that is transmitted from and received on the switch: •...
Page 379 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the switch statistics displayed on the page. Table 86. Switch statistics Field Description ifIndex The interface index of the interface table entry associated with the processor of this switch.
Page 380: View Or Clear Port Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 86. Switch statistics (continued) Field Description Static VLAN Entries The number of active VLAN entries that were created statically on the switch. VLAN Deletes The number of VLANs that were created and then deleted on the switch since the last reboot.
Page 381 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the per-port statistics displayed on the page. Table 87. Port statistics Field Description Interface The interface for which the statistics are displayed. Total Packets Received The total number of packets received that were without errors.
Page 382: View Or Clear Detailed Port Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Click the Clear button. All counters are reset to 0. Reset Counters for a Specific Interface  To reset the counters for a specific interface: Connect your computer to the same network as the switch.
Page 383 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 384 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 88. Detailed port statistics (continued) Field Description STP State The port's current Spanning Tree state. This state controls what action a port takes on receipt of a frame.
Page 385 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 88. Detailed port statistics (continued) Field Description Packets RX and TX 512-1023 The total number of packets (including bad packets) received and transmitted Octets that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).
Page 386 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 88. Detailed port statistics (continued) Field Description Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of well-formed packets received that were directed to a multicast address.
Page 387 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 88. Detailed port statistics (continued) Field Description Total Packets Transmitted The total number of octets of data (including those in bad packets) transmitted (Octets) on the network (excluding framing bits but including FCS octets).
Page 388: View Or Clear Eap Statistics
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 88. Detailed port statistics (continued) Field Description Total Transmit Errors The sum of single, multiple, and excessive collisions. Total Transmit Packets The sum of single collision frames discarded, multiple collision frames Discarded discarded, and excessive frames discarded.
Page 389 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 390: Perform A Cable Test
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 89. EAP statistics Field Description EAP Request/ID Frames The number of transmitted EAP request/identity frames. Transmitted EAP Request Frames The number of transmitted EAP request frames (other than request/identity Transmitted frames).
Page 391: Configure And View Logs
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The following table describes the nonconfigurable information displayed on the page. Table 90. Cable Test information Field Description Cable Status Indicates the cable status: •...
Page 392 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports If you do not know the IP address of the switch, see Access the Switch on page 13. The login window opens. Enter the switch’s password in the password field.
Page 393: Message Log Format
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports console log. Messages logged to a collector or relay through syslog support the same format as well. The following example shows the standard format for a log message: <14>2017-09-02 16:35:40 10.131.12.183-1 UNKN[2176789276]: main_login.c(179) 3855 %% HTTP Session 19 initiated for user admin connected from 10.27.64.122...
Page 394: Manage The Flash Log
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports message logged. Messages logged to a collector or relay through syslog use a format identical to the previous message. Manage the Flash Log The flash log is a persistent log, that is, is a log that is stored in persistent storage.
Page 395: Manage The Server Log
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Critical (2). The third-highest warning level. A critical log message is saved if a critical device malfunction occurs, for example, two device ports are not functioning, while the rest of the device ports remain functional.
Page 396 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The login window opens. Enter the switch’s password in the password field. The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 397 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The default password is password. If you added the switch to a network on the Insight app before and you did not yet change the password through the local browser interface, enter your Insight network password.
Page 398 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Launch a web browser. In the address field of your web browser, enter the IP address of the switch. If you do not know the IP address of the switch, see Access the Switch on page 13.
Page 399: View Or Clear The Trap Logs
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View or Clear the Trap Logs You can view information about the SNMP traps generated on the switch. The information can be retrieved as a file. You can also display information about the traps that were sent.
Page 400: View Or Clear The Event Log
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports View or Clear the Event Log You can display the event log, which is used to hold error messages for catastrophic events. After the event is logged and the updated log is saved in flash memory, the switch is reset.
Page 401: Configure Port Mirroring
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Configure Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the switch. As such, many switch ports are configured as source ports and one switch port is configured as a destination port.
Page 402 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Use one of the following methods to narrow down the ports that are displayed: • Select 1 to display the physical ports of the selected unit. •...
Page 403: Appendix A Configuration Examples
Configuration Examples This appendix contains information about how to configure the following features. The appendix covers the following topics: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.1X • Multiple Spanning Tree Protocol (MSTP)
Page 404: Virtual Local Area Networks (Vlans)
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.
Page 405: Vlan Configuration Examples
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Packets leaving the switch are either tagged or untagged, depending on the setting for that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged.
Page 406: Access Control Lists (Acls)
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20. Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.
Page 407: Standard Ip Acl Sample Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Assign Queue ID. 0 • Match Every. False • CoS. 0 • Destination MAC. 01:02:1A:BC:DE:EF • Destination MAC Mask. 00:00:00:00:FF:FF • EtherType.
Page 408: Differentiated Services (Diffserv)
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports On the IP Rules page (see Configure Rules for a Basic IP ACL on page 317), create a second rule for IP ACL 1 with the following settings: •...
Page 409: Class
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports The switch supports DiffServ. The DiffServ feature contains a number of conceptual QoS building blocks that you can use to construct a differentiated service network. Use these same blocks in different ways to build other types of QoS architectures.
Page 410: Creating Policies
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports To configure DiffServ, you must define service levels, namely the forwarding classes/PHBs identified by a given DSCP value, on the egress interface. You define these service levels by configuring BA classes for each.
Page 411: Diffserv Example Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Policing with color mode awareness. Policing in the DiffServ feature uses either color blind or color aware mode. Color blind mode ignores the coloration (marking) of the incoming packet.
Page 412: 412
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports On the Policy Configuration page (see Create and Configure a DiffServ Policy page 241), create a new policy with the following settings: •...
Page 413 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports LAN port with point-to-point connection characteristics. If the authentication and authorization process fails, access control prevents access to that port. In this context, a port is a single point of attachment to the LAN, such as a port of a MAC bridge and an association between stations or access points in IEEE 802.11 wireless LANs.
Page 414: 802.1X Example Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports the information received from the supplicant to the authentication server for the credentials to be checked, which determines the authorization state of the port. The authenticator PAE controls the authorized/unauthorized state of the controlled port depending on the outcome of the RADIUS-based authentication process.
Page 415: Multiple Spanning Tree Protocol (Mstp)
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports This example uses the default values for the port authentication settings, but you can configure several additional settings. For example, the EAPOL Flood Mode field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on the device.
Page 416 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports maximum possible extent. The connectivity calculated for the CIST provides the CST for interconnecting these regions, and an Internal Spanning Tree (IST) within each region. MSTP ensures that frames with a given VLAN ID are assigned to one and only one of the MSTIs or the IST within the region, that the assignment is consistent among all the networking devices in the region, and that the stable connectivity of each MSTI and IST at the boundary of the...
Page 417: Mstp Example Configuration
Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports kind outside the region. In other words, connectivity within the region is independent of external connectivity. MSTP Example Configuration This example shows how to create an MSTP instance from the switch. The example network includes three different switches that serve different locations in the network.
Page 418 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports • Switch 3. 20480 Note: Bridge priority values are multiples of 4096. If you do not specify a root bridge and all switches are assigned the same bridge priority value, the switch with the lowest MAC address is elected as the root bridge.
Page 419: Appendix B Hardware Specifications And Default Values
Hardware Specifications and Default Values The appendix covers the following topics: • Switch Specifications • Switch Features and Defaults...
Page 420: Switch Specifications
The switch conforms to the TCP/IP, UDP, HTTP, ICMP, TFTP, DHCP, IEEE 802.1D, IEEE 802.1p, and IEEE 802.1Q standards. Table 93. Switch Specifications and Performance Feature Value GC728X 24 10/100/1000Mbps ports Two 1G SFP ports Two 10G/1G SFP+ ports GC728XP...
Page 421 System Usage Threshold Power Management Mode Dynamic Traps Enabled Interface Admin Mode Enabled Port Priority Power Mode GC728X: None GC728XP: 802.3at Power Limit Type User Power Limit (mW) 30000 (mW) Detection Type IEEE 802 Timer Schedule None Virtual LAN (IEEE 802.1Q)
Page 422 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default 802.1X Port Based Authentication State Disabled VLAN Assignment Mode Disabled Dynamic VLAN Creation Mode Disabled EAPOL Flood Mode...
Page 423 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default MST Instance 0 Priority 32768 MST Instance 0 VLAN IDs 1,2,3 PV(R)STP UplinkFast Rate Interface...
Page 424 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default DHCP Snooping Global Admin Mode Disabled MAC Address Validation Enabled Interface Trust Mode Disabled...
Page 425 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default 802.1p to Queue Mapping (802.1p -> Queue) 0 -> 1 1 ->...
Page 426 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default DSCP to Queue Mapping (DSCP -> Queue) Other: (continued) (1) 000001 -> 1 (2) 000010 ->...
Page 427 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 94. Feature Default Values and Default State (continued) Feature Name/Parameter Default Interface Trust Mode 802.1p Interface Shaping Rate 802.1p to Queue Mapping (802.1p –> Queue) 0 ->...
Page 428 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 95. Port characteristics Feature Sets Supported Default Static 802.1Q tagging VID = 1 Max member ports are equal to the number of ports on the switch. Learning process Supports static and dynamic MAC Dynamic learning is enabled by...
Page 429 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 98. Security Feature Sets Supported Default Management security 1 profile with 20 rules for All IP addresses allowed HTTP/HTTPS access to allow/deny an IP address/subnet Port MAC lock down All ports...
Page 430 Insight Managed 28-Port Gigabit Ethernet Smart Cloud Switch with 2 SFP 1G & 2 SFP+ 10G Fiber Ports Table 101. Other features (continued) Feature Sets Supported Default Configurations upload/download EAPoL flooding All ports Disabled BPDU flooding All ports Disabled Static multicast groups Disabled Filter multicast control Disabled...

This manual is also suitable for:

Gc728xp

NETGEAR GC728X User Manual

Chapter 1 Getting Started

Chapter 2 Configure System Information

Chapter 3 Configure Switching

Chapter 4 Configuring Routing

Chapter 5 Configure Quality of Service

Chapter 6 Manage Device Security

Chapter 7 Perform Maintenance Tasks

Chapter 8 Manage Power over Ethernet

Chapter 9 Monitor the System

Appendix A Configuration Examples

Appendix B Hardware Specifications and Default Values

Quick Links

Related Manuals for NETGEAR GC728X

Summary of Contents for NETGEAR GC728X