Page 1 FS728TP Smart Switch Software Administration Manual NETGEAR, Inc. 350 East Plumeria Drive San Jose, CA 95134 USA 202-10231-02 v1.1 September 2009...
Page 2: Statement Of Conditions
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit layout(s) described herein. Information is subject to change without notice.
Page 3: Canadian Department Of Communications Radio Interference Regulations
Internet/World Wide Web NETGEAR maintains a World Wide Web home page that you can access at the uniform resource locator (URL) http:// www.NETGEAR.com. A direct connection to the Internet and a Web browser such as Internet Explorer or Netscape are required.
Page 4 FCC Declaration Of Conformity: declare under our sole responsibility that the model FS728TP 10/100 PoE Smart Switch with Gigabit Ports complies with Part 15 of FCC Rules. Operation is subject to the following two conditions: a) This device may not cause harmful interference and b) This device must accept any interference received, including interference that may cause undesired operation.”...
Page 5: Table Of Contents
Web Access ...1-7 Additional Utilities ...1-8 Chapter 2 Introduction to the Web Browser Interface Logging Into the NETGEAR Home Screen ...2-1 Using the NETGEAR Web Management System Options ...2-3 Chapter 3 Managing System Settings Using the System Settings Utility ...3-1 Management ...3-1 Device View ...3-7...
Page 6 FS728TP Smart Switch Software Administration Manual Ports ...4-1 LAG ...4-4 VLAN ...4-15 STP ...4-25 Multicast ...4-41 Address Table ...4-50 Chapter 5 Configuring QoS Configuring the Basic and Advanced QoS Settings ...5-1 CoS ...5-1 Chapter 6 Managing Security Setting Security Configuration Options ...6-1 Management Security ...6-1...
Page 7 FS728TP Smart Switch Software Administration Manual User Guide ...9-2 Appendix A Default Settings Index v1.1, September 2009...
Page 8 FS728TP Smart Switch Software Administration Manual viii v1.1, September 2009...
Page 9: About This Manual
This document was created primarily for the system administrator who wishes to install and configure the FS728TP Smart Switch in a network. This user guide assumes that the reader has a general understanding of switch platforms and a basic knowledge of Ethernet and networking concepts.
Page 10: Conventions, Formats, And Scope
• Appendix A, “Default Settings” feature values. Note: Refer to the product release notes for the FS728TP Smart Switch Software application level code. The release notes detail the platform specific functionality of the Switching, SNMP, Config, and Management packages. Conventions, Formats, and Scope The conventions, formats, and scope of this manual are described in the following paragraphs: •...
Page 11: How To Print This Manual
Danger: This is a safety warning. Failure to take heed of this notice may result in personal injury or death. • Scope. This manual is written for the FS728TP Smart Switch according to these specifications: Product Version Manual Publication Date Note: Product updates are available on the NETGEAR, Inc.
Page 12: Revision History
FS728TP Smart Switch Software Administration Manual Revision History Version Part Number Date Number 202-10231-01 June 2005 202-10231-01 November 2006 202-10231-02 December 2007 202-10231-02 September 2009 Description Product created Feature update Feature update Feature update v1.1, September 2009...
Page 13: Getting Started With Switch Management
This section provides an overview of switch management, including the methods you can choose to start managing your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports. It also leads you through the steps necessary to get started, using the SmartWizard Discovery utility. The section includes this information under the following menu options: •...
Page 14: Switch Management Interface
Switch Management Interface Your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports contains an embedded web server and management software for managing and monitoring switch functions. This switch operates as a simple switch without using the management software. The management software enables you to configure more advanced features, and consequently improve switch efficiency as well as overall network performance.
Page 15: Network With A Dhcp Server
4. Start the SmartWizard Discovery utility. 5. Click Discover for the SmartWizard Discovery utility to find your FS728TP 10/100 PoE Smart Switch with Gigabit Ports. You should see a screen similar to that shown below. Getting Started with Switch Management...
Page 16 6. Note the displayed IP address assigned by the DHCP server. You will need this value to access the switch directly from a web browser (without using the SmartWizard Discovery utility). 7. Select your switch by highlighting the name of the switch. Then click Web Access. The discovery utility displays a login window similar to the following: Figure 1-2 8.
Page 17: Network Without A Dhcp Server
IP address even if your network has DHCP service. Proceed as follows: 1. Connect the FS728TP 10/100 PoE Smart Switch with Gigabit Ports to your existing network. 2. Power on the switch by plugging in the AC-DC power adapter. The default IP is 192.168.0.239.
Page 18 IP address, gateway IP address and subnet mask. 9. Type your password and click Set. Please ensure that your PC and the FS728TP 10/100 PoE Smart Switch with Gigabit Ports are in the same subnet. Note the settings for later use.
Page 19: Web Access
1. On your PC, access the MS Windows operating system TCP/IP Properties. 2. Set IP address and subnet mask appropriately. The subnet mask value is identical to that set in the switch. The PC IP address must be different from that of the switch but lie in the same subnet.
Page 20: Additional Utilities
You must work from the same network segment that contains the switch (i.e., the subnet mask values of switch and PC host must be the same) and you must point your browser using the switch IP address. If you used the SmartWizard Discovery utility to set up IP address and subnet mask, either with or without DHCP server, use that IP address in your browser window.
Page 21: Password Change
2. Click Set to enable the new password. Firmware Upgrade The FS728TP Smart Switch software is upgradeable, and enables your switch to take advantage of improvements and additional features as they become available. The upgrade procedure assumes that you have downloaded or otherwise obtained the firmware upgrade and that you have it available as a binary file on your computer.
Page 22 FS728TP Smart Switch Software Administration Manual Figure 1-6 1. Enter the following values into the appropriate places in the form: • Product Assigned Firmware: The location of the new firmware. If you do not know the location, click Browse to locate the file.
Page 23: Introduction To The Web Browser Interface
This section introduces the web browser interface that enables you to configure and manage your NETGEAR FS728TP 10/100 PoE Smart Switch with Gigabit Ports. Your FS728TP Smart Switch provides a built-in browser interface that enables you to configure and manage it remotely using a standard Web browser such as Microsoft Internet Explorer or Netscape Navigator.
Page 24: The Navigation Menu
The NETGEAR FS728TP web browser interface contains the following views: Main Navigation Area – Located on the top of the NETGEAR FS728TP web browser interface and marked as 1 in Figure 2-2. The Main Navigation Area includes Primary and Secondary Navigation Bars.
Page 25: Using The Netgear Web Management System Options
FS728TP Smart Switch Software Administration Manual Work Area – Located on the right side of the NETGEAR FS728TP web browser interface and marked as 3 in Figure 2-2. The Work Area contains device tables, general device information, and configurable device parameters.
Page 26: Informational Services
“Accessing Device Information” Help Navigation Tab The Help Navigation Tab provides access to informational services including NETGEAR online support and an online user guide in PDF format. For a detailed description of how to access and use these functions, see Chapter 9, “Online...
Page 27 FS728TP Smart Switch Software Administration Manual Figure 2-3 Introduction to the Web Browser Interface v1.1, September 2009...
Page 28: Using Screen And Table Options
FS728TP Smart Switch Software Administration Manual A help window for the screen opens. Figure 2-4 Using Screen and Table Options The NETGEAR FS728TP web browser interface contains screens and tables for configuring devices. This section describes the table options: • “Selecting an Entry”...
Page 29 FS728TP Smart Switch Software Administration Manual Selecting an Entry To select an entry: 1. Check the entry’s Select box. The selected entry is highlighted and the information appears in the first row, which contains the editable fields. Figure 2-5 To select all entries: 1.
Page 30 FS728TP Smart Switch Software Administration Manual To add an entry by creating a new entry in the table: 1. Enter the fields for the new entry in the provided fields in the first row. Figure 2-7 2. Click ADD to update the device. The new entry is displayed.
Page 31 To delete entries from a table: 1. Select the entries to be deleted. 2. Click DELETE to update the device. Special Table Options The NETGEAR web browser interface tables have a unique GUI design which includes the following options: • Gold Buttons •...
Page 32 FS728TP Smart Switch Software Administration Manual Quick Boxes Quick Boxes provide users with flexibility in configuring VLANs for all ports or LAGs. Clicking on the quick box toggles between the various options that exist for this field. A quick box appears to the right of the arrow on the left-hand side of the gold button.
Page 33 FS728TP Smart Switch Software Administration Manual Figure 2-13 4. Click again on the quick box, and the quick box and all the port boxes appear blank, marking the ports as neither tagged nor untagged. 5. You may click on individual port boxes to toggle their tagged/untagged status...
Page 34 FS728TP Smart Switch Software Administration Manual To display all ports : 1. Click PORTS in the interface selection row. The screen displays a table of all ports . To display all interfaces : 1. Click All in the interface selection row. A confirmation window opens.
Page 35 FS728TP Smart Switch Software Administration Manual Figure 2-17 Introduction to the Web Browser Interface 2-13 v1.1, September 2009...
Page 36 FS728TP Smart Switch Software Administration Manual 2-14 Introduction to the Web Browser Interface v1.1, September 2009...
Page 37 FS728TP Smart Switch Software Administration Manual Introduction to the Web Browser Interface 2-15 v1.1, September 2009...
Page 38: Managing System Settings
Using the System Settings Utility The navigation pane at the top of the web browser interface contains a System tab that enables you to manage your FS728TP Smart Switch displaying configurable features under the following main menu options: • “Management”...
Page 39 FS728TP Smart Switch Software Administration Manual 1. Click System > Management > System Information. The System Information screen displays: Figure 3-1 The System Information screen contains the following fields: • System Name – Enter the user-defined device name. The field may contain 0-160 characters.
Page 40 FS728TP Smart Switch Software Administration Manual • Idle Timeout – Enter the amount of time (minutes) that elapses before an idle station is timed out. Idle stations that are timed out must login to the system. The field range is 5 - 30 minutes.
Page 41 FS728TP Smart Switch Software Administration Manual Figure 3-2 The IP Configuration screen contains the following fields: • Get Dynamic IP from DHCP Server – Enables the IP address to be configured automatically by the DHCP server. Selecting this field disables the IP Address, Subnet Mask, Gateway and Delete fields.
Page 42 FS728TP Smart Switch Software Administration Manual 5. Click APPLY to update the system settings. Time The Time menu enables local system time or SNTP server configuration, and contains the following options: • “Time Configuration” • “SNTP Server Configuration” Time Configuration The Time Configuration screen contains information for defining both the local hardware clock and the external SNTP clock.
Page 43 FS728TP Smart Switch Software Administration Manual The Time Configuration screen contains the following fields: • Clock Source – Select the source used to set the system clock. The possible field values are: – Local – Indicates system time is set locally. This is the default value.
Page 44 FS728TP Smart Switch Software Administration Manual Figure 3-4 The SNTP Server Configuration screen contains the following fields: • SNTP Server 1 – Enter the primary SNTP server IP address. The Primary SNTP server is the first server used to retrieve the system time.
Page 45: Device View
FS728TP Smart Switch Software Administration Manual Device View The Device View menu displays the Device View screen, which provides a graphic representation of the device, including the port and LED statuses. To display the Device View screen: Click System > Device View. The Device View screen displays:...
Page 46 FS728TP Smart Switch Software Administration Manual • PDAs • Audio and video remote monitoring Powered Devices are devices that receive power from the device power supply, for example IP phones. The PoE menu contains the following options: • “Basic” •...
Page 47 FS728TP Smart Switch Software Administration Manual Figure 3-6 2. Enter the System Usage Threshold in the provided field. 3. Select either Enable or Disable in the Traps field. 4. Click APPLY to update the device. Advanced The PoE Advanced menu contains the following options: •...
Page 48 FS728TP Smart Switch Software Administration Manual Figure 3-7 2. Enter the System Usage Threshold in the provided field. 3. Select the Traps mode from the list in the provided field. 4. Click APPLY to update the device. PoE Port Configuration...
Page 49 FS728TP Smart Switch Software Administration Manual Figure 3-8 The PoE Port Configuration screen contains the following fields: • Interface – Displays the specific interface for which PoE parameters are defined. PoE parameters are assigned to the powered device that is connected to the selected interface.
Page 50 FS728TP Smart Switch Software Administration Manual – High – Sets the PoE priority level as high. • Class – Displays the classification of the powered device. The class defines the maximum power that can be provided to the powered device. The possible classes with their power ranges are: –...
Page 51: Snmp
FS728TP Smart Switch Software Administration Manual – Other Fault – Indicates the device has detected a fault on the powered device when the port is not forced on. For example, a hardware fault occurred, or the system is initializing, or the port is not responding, or there is an overload or underload, or the power budget is exceeded or the maximum temperature is exceeded.
Page 52 FS728TP Smart Switch Software Administration Manual • Security • Feature Access Control • Traps. The device generates copy traps. The SNMP menu contains the following options: • “SNMPv1/v2” • “SNMPv3” SNMPv1/v2 The SNMPv1/v2 menu contains the following options: • “Community Configuration”...
Page 53 FS728TP Smart Switch Software Administration Manual Figure 3-9 The SNMPv1/v2 Community Configuration screen contains the following fields: • Management Station IP – Enter the management station IP address for which the Basic SNMP community is defined. • Management Station IP Mask – Enter the management station IP mask for which the Basic SNMP community is defined.
Page 54 FS728TP Smart Switch Software Administration Manual – Read Only – Indicates Management access is restricted to read-only. Changes cannot be made to the device configuration and to the community. – Read Write – Indicates Management access is read-write. Changes can be made to the device configuration but not to the community.
Page 55 FS728TP Smart Switch Software Administration Manual • Providing Access Control Checks To configure SNMPv1/v2 trap station management: 1. Click System > SNMP > SNMPv1/v2 > Trap Configuration. The SNMPv1/v2 Trap Configuration screen displays: Figure 3-10 The SNMPv1/v2 Trap Configuration screen contains the following fields: •...
Page 56 FS728TP Smart Switch Software Administration Manual • UDP Port – Enter the UDP port used to send notifications. The default UDP port is 162. • Timeout – Enter the amount of time (in seconds) the device waits before re-sending informs. The default is 15 seconds.
Page 57 FS728TP Smart Switch Software Administration Manual • “Trap Filter Name” • “Trap Filter Content” Engine ID The SNMPv3 Engine ID screen allows network managers to define the SNMP Engine ID or to assign the default Engine ID to SNMP. To define the Local Engine ID: 1.
Page 58 FS728TP Smart Switch Software Administration Manual – First 4 octets – Indicates first bit = 1, the other 3 represent the IANA Enterprise number. – Fifth octet – Set to 3 to indicates the MAC address that follows. – Last 6 octets – Represents the MAC address of the device.
Page 59 FS728TP Smart Switch Software Administration Manual • View Name – Enter the user-defined view name. The view name can contain a maximum of 30 alphanumeric characters. 2. Select the entry. 3. Enter the View Name field in the first row.
Page 60 FS728TP Smart Switch Software Administration Manual Figure 3-13 The SNMPv3 View Content screen contains the following fields: Views • View Name – Select the user-defined view name. The view name can contain a maximum of 30 alphanumeric characters. • Object ID Subtree – Enter the device feature OID.
Page 61 FS728TP Smart Switch Software Administration Manual To add a new SNMP OID entry: 1. Click System > SNMP > SNMPv3 > View Content. The SNMPv3 View Content screen displays. 2. Select the View Name from the list in the provided field in the Views table.
Page 62 FS728TP Smart Switch Software Administration Manual Figure 3-14 The SNMPv3 Community Configuration screen contains the following fields: • Management Station IP – Enter the management station IP address for which the SNMP community is defined. • Community String – Enter the password used to authenticate the management station to the device.
Page 63 FS728TP Smart Switch Software Administration Manual 3. Select the Group Name from the list in the provided field in the first row. 4. Click ADD to update the device. To remove an SNMPv3 community: 1. Click System > SNMP > SNMPv3 > Community Configuration. The SNMPv3 Community Configuration screen displays.
Page 64 FS728TP Smart Switch Software Administration Manual The SNMPv3 Groups screen contains the following fields: • Group Name – Enter the user-defined group to which access control rules are applied. The field range is up to 30 characters. • Security Model – Select the SNMP version associated with the group. The possible field values are: –...
Page 65 FS728TP Smart Switch Software Administration Manual 2. Select the Security Model and Security Level from the lists in the provided fields in the first row. 3. Specify the group access rights for the selected SNMP views in the Operation provided fields in the first row.
Page 66 FS728TP Smart Switch Software Administration Manual Figure 3-16 The SNMPv3 User Configuration screen contains the following fields: • User Name – Enter the user name. The field range is up to 30 alphanumeric characters. • Group Name – Enter the group name from a list of user-defined SNMP groups. SNMP groups are defined in the Groups screen.
Page 67 FS728TP Smart Switch Software Administration Manual • Password (1-32 Characters) – Enter the password for the group member. • Authentication Key – Enter the HMAC-MD5-96 or HMAC-SHA-96 authentication level. The authentication and privacy keys are entered to define the authentication key. If only authentication is required, 16 bytes are defined.
Page 68 FS728TP Smart Switch Software Administration Manual Global Trap Configuration The SNMPv3 Global Trap Settings screen contains parameters for defining SNMP notification parameters. To configure SNMP notification global parameters: 1. Click System > SNMP > SNMPv3 > Global Trap Configuration. The SNMPv3 Global Trap...
Page 69 FS728TP Smart Switch Software Administration Manual • Authentication Notifications – Select the SNMP authentication failure notification status on the device. The possible field values are: – Disable – Disables the device from sending authentication failure notifications. – Enable – Enables the device to send authentication failure notifications. This is the default value.
Page 70 FS728TP Smart Switch Software Administration Manual Figure 3-18 The SNMPv3 Trap Configuration screen contains the following fields: • Recipients IP – Enter the IP address to which the traps are sent. • Notification Type – Select the type of notification sent. The possible field values are: –...
Page 71 FS728TP Smart Switch Software Administration Manual • Filter Name – Select the SNMP filter name from the list of SNMP Notification filters. • Timeout – Enter the amount of time (in seconds) the device waits before re-sending informs. The default is 15 seconds.
Page 72 FS728TP Smart Switch Software Administration Manual Trap Filter Name The SNMPv3 Trap Filter Name screen permits creating filtering names based on OIDs. Each OID is linked to a device feature or a portion of a feature. The SNMPv3 Trap Filter Name screen also allows network managers to filter notifications.
Page 73 FS728TP Smart Switch Software Administration Manual 2. Enter the trap Filter Name in the provided field in the first row. 3. Click ADD to update the device. To remove a trap filter name: 1. Click System > SNMP > SNMPv3 > Trap Filter Name. The SNMPv3 Trap Filter Name screen displays.
Page 74 FS728TP Smart Switch Software Administration Manual The SNMPv3 Trap Filter Content screen contains the following fields: Trap Filter Settings • Filter Name – Select the user-defined notification filter from the list. Trap Filter Settings • Object ID Subtree – Enter the OID for which notifications are sent or blocked. If a filter is attached to an OID, traps or informs are generated and sent to the trap recipients.
Page 75: Lldp
FS728TP Smart Switch Software Administration Manual LLDP The Link Layer Discovery Protocol (LLDP) allows network managers to troubleshoot and enhance network management by discovering and maintaining network topologies over multi- vendor environments. LLDP discovers network neighbors by standardizing methods for network devices to advertise themselves to other system, and to store discovered information.
Page 76 FS728TP Smart Switch Software Administration Manual Figure 3-21 The Basic LLDP Configuration screen contains the following fields: LLDP Properties • LLDP – Select the LLDP global status on the device. The possible field values are: – Disable – Disables LLDP on the device. This is the default value.
Page 77 FS728TP Smart Switch Software Administration Manual • Topology Change Notification Interval – Displays the amount of time that has elapsed since the bridge was initialized or reset or the last topology change that occurred. The time is displayed in a day-hour-minute-second format, such as 2 days 5 hours 10 minutes and 4 seconds.
Page 78 FS728TP Smart Switch Software Administration Manual • “Local Information” • “Neighbors Information” • “LLDP Statistics” LLDP Configuration The Advanced LLDP Configuration screen allows network managers to assign global LLDP and LLDP-MED (LLDP - Media Endpoint Discovery) parameters. To configure LLDP settings: 1.
Page 79 FS728TP Smart Switch Software Administration Manual • LLDPDU Handling – Select LLDPDU (LLDP Data Unit) packet handling when LLDP is disabled. The possible field values are: – Flooding – LLDPDU packets are flooded to all ports in the system. –...
Page 80 FS728TP Smart Switch Software Administration Manual Figure 3-23 The LLDP Port Settings screen contains the following fields: • Interface – Displays the specific interface for which LLDP parameters are defined. • Admin Status – Select the LLDP packet transmitting and receiving status of the interface.
Page 81 Provides detailed network topology information, including what devices are located on the network, and where the devices are located. For example, what IP phone is connected to what port, what software is running on what switch, and what port is connected to what PC. •...
Page 82 FS728TP Smart Switch Software Administration Manual Figure 3-24 The LLDP-MED Network Policy screen contains the following fields: • Network Policy Number – Select the network policy number. The field range is 1 - 32. • Application – Select the application for which the network policy is defined. The possible field values are: –...
Page 83 FS728TP Smart Switch Software Administration Manual – Streaming Video – Indicates the network policy is defined for a Streaming Video application. – Video Signaling – Indicates the network policy is defined for a Video Signaling application. • VLAN ID – Enter the VLAN ID for which the network policy is defined.
Page 84 FS728TP Smart Switch Software Administration Manual Figure 3-25 The LLDP-MED Port Settings screen contains the following fields: • Port – Select the port to configure. • LLDP-MED status – Select the LLDP-MED status for the selected port. The possible field values are: –...
Page 85 FS728TP Smart Switch Software Administration Manual 4. Select the Notification Status of the selected port from the list in the provided field. 5. Click on the Network Policies gold bar and select the network policy numbers to apply to the port.
Page 86 FS728TP Smart Switch Software Administration Manual • System Name – Displays the administratively assigned device name. • System Description – Describes the device. For example, system hardware type and version, operating system and network software. • System Capabilities – Describes the primary device function. For example: Bridge, Router.
Page 87 FS728TP Smart Switch Software Administration Manual • Auto-Negotiation Advertised Capabilities – Displays the port speed auto-negotiation capabilities. For example, 1000BASE-T half duplex mode, 100BASE-TX full duplex mode. • Operational MAU Type – Displays the Medium Attachment Unit (MAU) type. The MAU performs physical layer functions, including digital data conversion from the Ethernet interfaces’...
Page 88 FS728TP Smart Switch Software Administration Manual Neighbors Information The LLDP Neighbors Information screen contains information received from neighboring device LLDP advertisements. To view LLDP neighbors information: 1. Click System > LLDP > Advanced > Neighbors Information. The LLDP Neighbors Information screen displays:...
Page 89 FS728TP Smart Switch Software Administration Manual • System Name – Displays the administratively assigned device name. • Time To Live – Displays the amount of time (in seconds) in which the information received in the LLDPDU from the remote device remains valid.
Page 90 FS728TP Smart Switch Software Administration Manual – False – Indicates Auto-negotiation is not supported on the port. • Auto-Negotiation Enabled – Displays the port speed auto-negotiation active status. The possible values are: – True – Indicates Auto-negotiation is enabled on the port.
Page 91 Class 1 features. – Endpoint Class 3 – Indicates a communications device class, offering all Class 1 and Class 2 features plus location, 911, Layer 2 switch support and device information management capabilities. • PoE Device Type – Displays the port PoE type. For example, Powered.
Page 92: Lldp Statistics
FS728TP Smart Switch Software Administration Manual • Asset ID – Displays the asset ID. Location Information • Civic – Displays the device’s civic or street address location. For example, 123 45th St E. The field value length range is 6 - 160 characters.
Page 93 FS728TP Smart Switch Software Administration Manual Figure 3-28 The LLDP Statistics screen contains the following fields: • Last Update – Indicates the last time the LLDP statistics were updated. The date and time are displayed inthe following format, day-month-year hour:minute:second.
Page 94 FS728TP Smart Switch Software Administration Manual • Rx Frames – Indicates the total amount of LLDP packets received on the port, including: – Total – Indicates the total amount of valid LLDP packets received on the port. – Discarded – Indicates the total amount of LLDP packets that were discarded on the port.
Page 95 FS728TP Smart Switch Software Administration Manual 3-58 Managing System Settings v1.1, September 2009...
Page 96: Configuring Switching Settings
Configuring Switching Settings The navigation pane at the top of the web browser interface contains a Switching tab that enables you to manage your FS728TP Smart Switch with features under the following main headings: • “Ports” • “LAG” • “VLAN”...
Page 97 FS728TP Smart Switch Software Administration Manual Figure 4-1 The Port Configuration screen contains the following fields: • Port – Displays the port number. • Port Description – Enter a user-defined port description. • Status – Select the port’s operational status. The possible field values are: –...
Page 98 MDI/MDIX – Select the MDI/MDIX status of the port. Hubs and switches are deliberately wired opposite the way end stations are wired, so that when a hub or switch is connected to an end station, a straight through Ethernet cable can be used and the pairs will match up properly.
Page 99: Lag
FS728TP Smart Switch Software Administration Manual – MDI (Media Dependent Interface) – Connects end stations. – MDIX (Media Dependent Interface with Crossover) – Connects HUBs and switches. – Auto – Provides automatic cable type detection. • LAG ID – Select the LAG ID to which the selected port is assigned.
Page 100 FS728TP Smart Switch Software Administration Manual Basic The LAG Basic menu contains the following options: • “LAG Configuration” • “LAG Membership” LAG Configuration The Basic LAG Configuration screen contains fields for configuring LAG parameters. The system supports 8 LAGs, and each LAG can contain up to 8 ports.
Page 101 FS728TP Smart Switch Software Administration Manual – Up – Indicates the LAG is currently linked and forwarding traffic. – Down – Indicates the LAG is currently not linked. • Reactivate Suspended – Select the action to apply to a suspended LAG. The possible field values are: –...
Page 102 FS728TP Smart Switch Software Administration Manual 4. Click APPLY to update the device. LAG Membership The Basic LAG Membership screen allows network managers to assign ports to LAGs. To assign ports to LAGs: 1. Click Switching > LAG > Basic > LAG Membership. The Basic LAG Membership screen...
Page 103 FS728TP Smart Switch Software Administration Manual 3. Click on the gold button. The port panel displays. 4. Select the ports to be members of the LAG. 5. Click APPLY to update the device. 6. Click CURRENT MEMBERS. The Current Members window opens and displays the...
Page 104 FS728TP Smart Switch Software Administration Manual Figure 4-5 The Advanced LAG Configuration screen contains the following fields: • Interface – Displays the LAG number. • Description – Enter a user-defined LAG description. • Status – Select the current link operation. The possible field values are: –...
Page 105 FS728TP Smart Switch Software Administration Manual • Speed – Select the data transmission rate for the LAG. The LAG type determines what speed setting options are available. LAG speeds can only be configured when auto negotiation is disabled. The possible field values are: –...
Page 106 FS728TP Smart Switch Software Administration Manual Figure 4-6 The Advanced LAG Membership screen contains the following fields: • LAG ID – Select the LAG ID. • LAG Name – Displays the user-defined LAG name. • LAG Type – Select the LAG type. The possible field values are: –...
Page 107 FS728TP Smart Switch Software Administration Manual Figure 4-7 LACP Configuration Aggregated links can be set up manually or automatically established by enabling LACP on the relevant links. Aggregated ports can be linked into link-aggregation port-groups. Each group is comprised of ports with the same speed. The LACP Configuration screen contains a field for configuring a global LACP priority value.
Page 108 FS728TP Smart Switch Software Administration Manual Figure 4-8 The LACP Configuration screen contains the following field: • LACP System Priority – Enter the system priority value. The field range is 1-65535. The field default is 1. 2. Enter the LACP System Priority in the provided field.
Page 109 FS728TP Smart Switch Software Administration Manual Figure 4-9 The LACP Port Configuration screen contains the following fields: • Interface – Displays the interface number to which timeout and priority values are assigned. • LACP Priority – Enter the LACP port priority value. The field range is 1-65535.
Page 110: Vlan
FS728TP Smart Switch Software Administration Manual VLAN VLANs are logical subgroups with a Local Area Network (LAN) which combine user stations and network devices into a single unit, regardless of the physical LAN segment to which they are attached. VLANs allow network traffic to flow more efficiently within subgroups. VLANs use software to reduce the amount of time it takes for network changes, additions, and moves to be implemented.
Page 111 FS728TP Smart Switch Software Administration Manual Figure 4-10 The Basic VLAN Configuration screen contains the following fields: • VLAN ID – Enter the VLAN ID. The field range is 2-4093. • VLAN Name – Enter the user-defined VLAN name. •...
Page 112 FS728TP Smart Switch Software Administration Manual To remove a VLAN: Note: Prior to deleting a VLAN, ensure all multicast group configuration entries associated with the VLAN are deleted. Refer to group entries. 1. Click Switching > VLAN > Basic > VLAN Configuration. The Basic VLAN Configuration screen displays.
Page 113 FS728TP Smart Switch Software Administration Manual Figure 4-11 The Advanced VLAN Configuration screen contains the following fields: • VLAN ID – Enter the VLAN ID. The field range is 2-4093. • VLAN Name – Enter the user-defined VLAN name. •...
Page 114 FS728TP Smart Switch Software Administration Manual To remove a VLAN: Note: Prior to deleting a VLAN, ensure all multicast group configuration entries associated with the VLAN are deleted. Refer to group entries. 1. Click Switching > VLAN > Advanced > VLAN Configuration. The Advanced VLAN Configuration screen displays.
Page 115 FS728TP Smart Switch Software Administration Manual The VLAN Membership screen contains the following fields: • VLAN ID – Select the VLAN ID to be displayed and configured. VLAN ID 1 cannot be modified. • VLAN Name – Displays the name of the VLAN.
Page 116 FS728TP Smart Switch Software Administration Manual To view VLAN tagged port members: 1. Click Switching > VLAN > Advanced > VLAN Membership. The VLAN Membership screen displays. 2. Click TAGGED PORT MEMBERS. The VLAN Tagged Ports window opens: Figure 4-13 Configuring Switching Settings v1.1, September 2009...
Page 117 FS728TP Smart Switch Software Administration Manual To view VLAN untagged port members: 1. Click Switching > VLAN > Advanced > VLAN Membership. The VLAN Membership screen displays. 2. Click UNTAGGED PORT MEMBERS. The VLAN Untagged Ports screen opens: Figure 4-14...
Page 118 FS728TP Smart Switch Software Administration Manual Figure 4-15 The Port PVID Configuration screen contains the following fields: • Interface – Displays the interface (port number or LAG number) to which the PVID tag is assigned. • PVID – Enter the PVID value. The possible field range is 1-4093.
Page 119: Port Setting
FS728TP Smart Switch Software Administration Manual Port Setting Figure 4-16 The Voice VLAN Port Setting screen allows network managers to add ports or LAGs to the Voice VLAN. To add ports or LAGs to the Voice VLAN: The Voice VLAN Port Setting screen contains the following fields: •...
Page 120: Stp
FS728TP Smart Switch Software Administration Manual • Voice VLAN Security – Select the port/LAG security mode on the Voice VLAN. Port Security ensures that packets arriving with an unrecognized OUI are dropped. – Enable – Enables port/LAG security on the Voice VLAN.
Page 121 FS728TP Smart Switch Software Administration Manual Figure 4-17 The Basic STP Configuration screen contains the following fields: Global Settings • Spanning Tree State – Select the STP state on the device. The possible field values are: – Disable – Disables STP on the device.
Page 122 FS728TP Smart Switch Software Administration Manual • BPDU Handling – Determines how the Bridge Protocol Data Unit (BPDU) packets are managed when STP is disabled on the port or device. BPDUs are used to transmit spanning tree information. The possible field values are: •...
Page 123 FS728TP Smart Switch Software Administration Manual 4. If you selected Disable in the Spanning Tree State field, select the BPDU Handling mode from the list in the provided field. 5. Click APPLY to update the device. Advanced The STP Advanced menu contains the following options: •...
Page 124 FS728TP Smart Switch Software Administration Manual Figure 4-18 The Advanced STP Configuration screen contains the following fields: STP Configuration • Spanning Tree State – Select the STP state on the device. The possible field values are: – Disable – Disables STP on the device.
Page 125 FS728TP Smart Switch Software Administration Manual • BPDU Handling – Select the method of handling STP BPDUs (Bridge Protocol Data Units) when STP is disabled on the device or interface. The possible field values are: – Filtering – Indicates BPDUs are filtered.
Page 126 FS728TP Smart Switch Software Administration Manual CST Configuration The Common Spanning Tree (CST) describes the topology connecting STP/RSTP Bridges and MSTP regions. To configure CST on the device: 1. Click Switching > STP > Advanced > CST Configuration. The CST Configuration screen...
Page 127 FS728TP Smart Switch Software Administration Manual • Max Age – Enter the device Maximum Age Time. The Maximum Age Time is the amount of time in seconds a bridge waits before sending configuration messages. The default Maximum Age Time is 20 seconds.
Page 128 FS728TP Smart Switch Software Administration Manual Figure 4-20 The CST Port Configuration screen contains the following fields: • Interface – Displays the port or LAG for which the STP information is displayed. • STP Status – Select the STP status on the interface. The possible field values are: –...
Page 129 FS728TP Smart Switch Software Administration Manual – Disabled – Indicates STP is currently disabled on the port. The port forwards traffic while learning MAC addresses. – Blocking – Indicates the port is currently blocked and cannot forward traffic or learn MAC addresses.
Page 130 Role – Displays the port role assigned by the STP algorithm to provide to STP paths. The possible field values are: – Root – Provides the lowest cost path to forward packets to the root switch. – Designated – Indicates the port or LAG through which the designated switch is attached to the LAN.
Page 131 FS728TP Smart Switch Software Administration Manual – Enable – Enables a point-to-point link, or configure to automatically establish a point- to-point link. To establish communications over a point-to-point link, the originating PPP first sends Link Control Protocol (LCP) packets to configure and test the data link.
Page 132 FS728TP Smart Switch Software Administration Manual • Priority – Specifies the selected spanning tree instance device priority. The field range is 0-61440. The field default is 32768. • VLAN ID – Maps the selected VLANs to the selected instance. Each VLAN belongs to one instance.
Page 133 FS728TP Smart Switch Software Administration Manual Figure 4-21 4-38 Configuring Switching Settings v1.1, September 2009...
Page 134 FS728TP Smart Switch Software Administration Manual Figure 4-22 The MST Port Configuration screen contains the following fields: • Select MST – Select an MST to be displayed. • Interface – Displays the Port or LAG for which the MSTP settings are displayed.
Page 135 FS728TP Smart Switch Software Administration Manual – Disabled — Indicates that STP is currently disabled on the port. – Blocking — Indicates that the port is currently blocked and cannot forward traffic or learn MAC addresses. – Listening — Indicates that the port is in Listening mode. The port cannot forward traffic nor can it learn MAC addresses.
Page 136: Multicast
Multicast forwarding allows a single packet to be forwarded to multiple destinations. L2 Multicast service is based on L2 switch receiving a single packet addressed to a specific Multicast address. Multicast forwarding creates copies of the packet, and transmits the packets to the relevant ports.
Page 137 FS728TP Smart Switch Software Administration Manual are forwarding packets and Multicast traffic. A port requesting to join a specific Multicast group issues an IGMP report specifying that Multicast group. This results in the creation of the Multicast filtering database. To configure Basic IGMP Snooping: 1.
Page 138 FS728TP Smart Switch Software Administration Manual – Enable – Enables IGMP Snooping on the VLAN. – Disable – Disables IGMP Snooping on the VLAN. 2. Select the IGMP Snooping Status in the provided field. 3. Click APPLY to update the device.
Page 139 FS728TP Smart Switch Software Administration Manual Figure 4-24 The Advanced IGMP Snooping Configuration screen contains the following fields: IGMP Snooping Configuration • Status – Select the IGMP Snooping status on the device. IGMP Snooping is operational if both the Status and Bridge Multicast Filtering fields are enabled. The possible field values are: –...
Page 140 IGMP group and not receiving a Join message from another station, before timing out. If a Leave Timeout occurs, the switch notifies the Multicast device to stop sending traffic The field range is 0 - 2147483647. The default value is 10 seconds.
Page 141 FS728TP Smart Switch Software Administration Manual To configure Multicast groups: 1. Click Switching > Multicast > Advanced > Multicast Group Configuration. The Multicast Group Configuration screen displays: Figure 4-25 The Multicast Group Configuration screen contains the following information: • VLAN ID – Displays the VLAN ID.
Page 142 FS728TP Smart Switch Software Administration Manual Multicast Group Membership The Multicast Group Membership screen displays the ports and LAGs attached to the selected VLAN and the Multicast service group. The Port and LAG tables also reflect the manner in which the port or LAGs joined the Multicast group.
Page 143 FS728TP Smart Switch Software Administration Manual • Interface Status – Select the interface status. The possible field values are: – Static – Indicates the interface is joined to the Multicast group statically. – Forbidden – Indicates the interface is forbidden to join the Multicast group.
Page 144 FS728TP Smart Switch Software Administration Manual Figure 4-27 The Multicast Forward All screen contains the following information: Multicast Forward All • VLAN ID – Enter the VLAN ID. • VLAN Name – Displays the user defined VLAN name. Multicast Forward All •...
Page 145: Address Table
FS728TP Smart Switch Software Administration Manual 5. Click APPLY to update the device. Address Table Packets addressed to destinations stored in either the Static or Dynamic databases are immediately forwarded to the port. The Dynamic MAC Address Table can be sorted by interface, VLAN, or MAC Address.
Page 146 FS728TP Smart Switch Software Administration Manual To query the Basic Address Table: 1. Click Switching > Address Table > Basic > Address Table. The Basic Address Table screen displays: Figure 4-28 The Basic Address Table screen contains the following fields: •...
Page 147 FS728TP Smart Switch Software Administration Manual 3. Enter the value to be searched for in the provided box. 4. Click GO to execute the query. To delete all addresses from the Basic Address Table: 1. Click Switching > Address Table > Basic > Address Table. The Basic Address Table screen displays.
Page 148 FS728TP Smart Switch Software Administration Manual Figure 4-29 The Static Addresses screen contains the following fields: • VLAN ID – Select the VLAN ID number to which the entry refers. • MAC Address – Enter the MAC address to which the entry refers.
Page 149 FS728TP Smart Switch Software Administration Manual 4. Select the MAC Address duration period Status from the list in the provided field in the first row. 5. Click APPLY to update the device. Dynamic Addresses The Dynamic Addresses screen contains information about the aging time before a dynamic MAC address is erased.
Page 150 FS728TP Smart Switch Software Administration Manual Address Table The Advanced Address Table screen displays the MAC Address table according to the defined categories. To query the Advanced MAC Address Table: 1. Click Switching > Address Table > Advanced > Address Table. The Advanced Address...
Page 151 FS728TP Smart Switch Software Administration Manual • Interface – Displays the interface to which the entry refers. 2. Select the Search By key from the list in the provided field. 3. Enter the value to be searched for in the provided box.
Page 152: Configuring Qos
Configuring the Basic and Advanced QoS Settings The navigation pane at the top of the web browser interface contains a QoS tab that enables you to manage your FS728TP Smart Switch with features under the following main heading: • “CoS”...
Page 153 FS728TP Smart Switch Software Administration Manual • Weighted Round Robin – Ensures that a single application does not dominate the device forwarding capacity. Weighted Round Robin (WRR) forwards entire queues in a round robin order. All queues can participate in WRR, except SP queues. If the traffic flow is minimal, and SP queues do not occupy the whole bandwidth allocated to a port, the WRR queues can share the bandwidth with the SP queues.
Page 154 FS728TP Smart Switch Software Administration Manual Figure 5-1 The CoS Global Configuration screen contains the following: • QoS Status – Select whether QoS is enabled or disabled on the device. The possible values are: – Enable – Enables QoS globally. This is the default value.
Page 155 FS728TP Smart Switch Software Administration Manual • Trust Mode – Select which packet fields to use for classifying packets entering the device. The possible Trust Mode field values are: – CoS – Classifies traffic based on the CoS (VPT) tag value.
Page 156 FS728TP Smart Switch Software Administration Manual The CoS Interface Configuration screen contains the following fields: • Interface – Displays the interface for which the default CoS parameters are defined. • Default CoS – Select the default CoS value for incoming packets to the selected interface for which a VLAN priority (VPT) is not defined.
Page 157 FS728TP Smart Switch Software Administration Manual Figure 5-3 The Queue screen contains the following fields: • Strict Priority – Select to specify traffic scheduling based strictly on the queue priority. • WRR – Select to assign WRR weights to queues. The queue weights are preconfigured and are set to 1, 2, 4 and 8.
Page 158 FS728TP Smart Switch Software Administration Manual The Bandwidth screen allows the network manager to define Ingress Rate Limit and Egress Shaping Rates. To define bandwidth settings: 1. Click QoS > CoS > Basic > Bandwidth. The Bandwidth screen displays: Figure 5-4 The Bandwidth screen contains the following fields: •...
Page 159 FS728TP Smart Switch Software Administration Manual – Enable – Enables egress shaping rate on the interface. – Disable – Disables egress shaping rate on the interface. This is the default value. • Egress Shaping Rates CIR – Enter the Egress Shaping Committed Information Rate (CIR) in kilobits per second.
Page 160 FS728TP Smart Switch Software Administration Manual Figure 5-5 The CoS to Queue Mapping screen contains the following fields: CoS to Queue Mapping • CoS – Displays the CoS priority tag values, where 0 is the lowest and 7 is the highest.
Page 161 FS728TP Smart Switch Software Administration Manual DSCP to Queue Mapping The DSCP To Queue Mapping screen contains fields for mapping DSCP values to traffic queues for various PHBs (Per-Hop Behaviors). These include the CS (Class Selector), AF (Assured Forwarding) and EF (Expedited Forwarding). For example, a packet with a DSCP tag value of 1 can be assigned to the High queue.
Page 162 FS728TP Smart Switch Software Administration Manual • Restore Defaults – Restore the DSCP Mapping device factory default values. The possible field values are: – Checked – Restores the factory default settings for DSCP mapping values. – Unchecked – Maintains the current DSCP mapping settings.
Page 163 FS728TP Smart Switch Software Administration Manual The Class Map screen contains the following fields: • Class-Map Name – Displays the user-defined name of the class map. • IPv4 ACL – Select a user-defined IPv4 ACL from the list. • Or – Indicates the criteria used to match class maps with an IP ACL address. Matches either IPv4 or IPv6 or MAC to the packet.
Page 164 FS728TP Smart Switch Software Administration Manual Before configuring policies for classes whose match criteria are defined in a class map, a class map must first be defined, or the name of the policy map to be created, added to, or modified must first be specified.
Page 165 FS728TP Smart Switch Software Administration Manual – Value – Set the packets’ DSCP, Queue, or CoS tag value. 2. Select a Class Map from the list in the first row. 3. Select an Action and define a new value in the first row.
Page 166 FS728TP Smart Switch Software Administration Manual Figure 5-9 The Policy Binding screen contains the following fields: Policy Binding Table • Policy Name – Displays the user-defined policy name. Port Selection Table • Port Number – Displays the bound and unbound ports on the device.
Page 167 FS728TP Smart Switch Software Administration Manual 5-16 Configuring QoS v1.1, September 2009...
Page 168: Managing Security
Setting Security Configuration Options The navigation pane at the top of the web browser interface contains a Security tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Management Security” •...
Page 169 FS728TP Smart Switch Software Administration Manual Change Password The Change Password screen contains parameters for configuring device passwords. Authentication on this device uses only a password, not a username. To change the device password: Click Security > Management Security > User Configuration > Change Password. The...
Page 170 FS728TP Smart Switch Software Administration Manual RADIUS Remote Authorization Dial-In User Service (RADIUS) servers provide additional security for networks. RADIUS servers provide a centralized authentication method for web access. The user- assigned RADIUS parameters are applied to newly defined RADIUS servers. If values are not defined, the system defaults are applied to the new RADIUS servers.
Page 171 FS728TP Smart Switch Software Administration Manual • Timeout for Reply – Enter the amount of time (in seconds) the device waits for an answer from the RADIUS Server before retrying the query, or switching to the next server. Possible field values are 1-30. The default value is 3.
Page 172 FS728TP Smart Switch Software Administration Manual To remove a RADIUS Server entry: 1. Click Security > Management Security > RADIUS. The RADIUS screen displays. 2. Select the RADIUS Server entry. 3. Click DELETE to remove the entry. Accounting Server Configuration RADIUS accounting enables recording of device management sessions (web login/logout but not SNMP) as well as 802.1x authentication sessions.The RADIUS Accounting Server...
Page 173 FS728TP Smart Switch Software Administration Manual The TACACS+ protocol ensures network integrity through encrypted protocol exchanges between the client and TACACS+ server. The user-assigned TACACS+ parameters are applied to newly defined TACACS+ servers. If values are not defined, the system defaults are applied to the new TACACS+ servers.
Page 174 FS728TP Smart Switch Software Administration Manual • Single Connection – Select whether a single open connection between the host Authentication Port and the TACACS+ server is enabled or disabled. The possible field values are: – Enable – Enables a single connection.
Page 175: Authentication List
FS728TP Smart Switch Software Administration Manual Authentication List The Authentication List screen contains information for defining an authentication method for the selected Authentication List. For example, if the user selects TACACS+ as the first entry, None as the second, this causes authentication to first occur at the TACACS+ server. If the TACACS+ server is inaccessible or not defined, the session is permitted.
Page 176: Port Authentication
FS728TP Smart Switch Software Administration Manual The Authentication List screen contains the following fields: • 1,2,3 – Select the order in which authentication is applied. The possible field values are: – TACACS+ – Authenticates the user at the TACACS+ server. For more information, see “TACACS+”.
Page 177 FS728TP Smart Switch Software Administration Manual Figure 6-5 The Basic 802.1x Configuration screen contains the following fields: • Port Based Authentication State – Select whether port-based authentication is enabled or disabled on the device. The possible field values are: –...
Page 178 FS728TP Smart Switch Software Administration Manual – Enable – Enables using a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in the VLAN List field. • Guest VLAN ID – Select the guest VLAN ID from the list of currently defined VLANs.
Page 179 FS728TP Smart Switch Software Administration Manual Figure 6-6 The Advanced 802.1x Configuration screen contains the following fields: • Port Based Authentication State – Enable port-based authentication on the device. The possible field values are: – Disable – Disables port-based authentication on the device. This is the default value.
Page 180 FS728TP Smart Switch Software Administration Manual – Enable – Enables using a Guest VLAN for unauthorized ports. If a Guest VLAN is enabled, the unauthorized port automatically joins the VLAN selected in the VLAN List field. • Guest VLAN ID – Select the guest VLAN ID from the list of currently defined VLANs.
Page 181 FS728TP Smart Switch Software Administration Manual – Authorized – Indicates the port control is Forced Authorized, and clients have full port access. – Unauthorized – Indicates either the port control is force Unauthorized, or the port control is Auto but a client has not been authenticated via the port.
Page 182: Traffic Control
FS728TP Smart Switch Software Administration Manual • Termination Cause – Displays the reason port authentication was terminated. The possible field values are Supplicant logoff, Port failure, Supplicant restart, Reauthentication failed, Force unauthorized, Port reinitialize, Port admin disabled and Undefined. 2. Select the interface.
Page 183 FS728TP Smart Switch Software Administration Manual Figure 6-7 The Storm Control screen contains the following fields: • Interface – Displays the port number for which the storm control information is displayed. • Broadcast Control – Select whether storm control is enabled or disabled on the interface according to Broadcast mode.
Page 184: Port Security
FS728TP Smart Switch Software Administration Manual • Broadcast Rate Threshold – Enter the maximum rate (kilobits per second) at which broadcast packets are forwarded. FE (Fast Ethernet) ports have a range of 70 - 100000 and GE (Gigabit Ethernet) ports have a range of 3500 - 1000000. The default value for both FE and GE ports is 3500.
Page 185 FS728TP Smart Switch Software Administration Manual Figure 6-8 The Port Security screen contains the following fields: • Interface – Displays the port or LAG name. • Status – Select the port security status. The possible field values are: – Locked – Indicates the port is currently locked.
Page 186: Acl
FS728TP Smart Switch Software Administration Manual • Action – Select the action to be applied to packets arriving on a locked port. The possible field values are: – Forward – Forwards packets from an unknown source without learning the MAC address.
Page 187: Mac Acl
FS728TP Smart Switch Software Administration Manual • “IPv6 ACL” • “IPv6 Rules” • “IPv6 Binding Configuration” • “Binding Table” MAC ACL The MAC Configuration screen allows a MAC Based ACL to be defined. o view or rename MAC Based ACLs: Click Security >...
Page 188: Mac Rules
FS728TP Smart Switch Software Administration Manual • Number of Rules – Displays the current number of rules in the ACL. 2. Select the ACL entry. 3. Enter the new ACL Name in the provided field in the first row. 4. Click APPLY to update the device.
Page 189 FS728TP Smart Switch Software Administration Manual Figure 6-10 The MAC Rules screen contains the following fields: MAC Rules • ACL Name – Select the ACL Name from the list. MAC Rules Table • Priority – Enter the rule priority. When the packet is matched to a rule, user groups are either granted permission or denied device management access.
Page 190: Mac Binding Configuration
FS728TP Smart Switch Software Administration Manual – Permit – Permits access to the device. – Deny – Denies access to packets originating from the blocked MAC address. – Shutdown – Drops packets that meet the ACL criteria, and disable the port to which the packet was addressed.
Page 191 FS728TP Smart Switch Software Administration Manual Figure 6-11 The MAC Binding Configuration screen contains the following fields: MAC Binding Configuration • ACL Name – Select the ACL Name for viewing and modifying ACL bound interfaces. Port Selection Table • Select the interfaces for which the ACLs are bound.
Page 192: Ipv4 Acl
FS728TP Smart Switch Software Administration Manual IPv4 ACL The IPv4 ACL screen allows an IPv4 Based ACL to be defined. o view or rename IPv4 Based ACLs: Click Security > ACL > IPv4 ACL. The IPv4 ACL screen displays: Figure 6-12...
Page 193: Ipv4 Rules
FS728TP Smart Switch Software Administration Manual IPv4 Rules The IPv4 Rules screen allows an IP Rule to be defined within a configured ACL. Rules can be added only if the ACL is not bound to an interface. o define IPv4 Rules: Click Security >...
Page 194 FS728TP Smart Switch Software Administration Manual • Source Mask – Enter the mask of the new source IP address. • Destination IP Address – Enter the destination IP address. • Destination Mask – Enter the mask of the new destination IP address.
Page 195: Ipv4 Binding Configuration
FS728TP Smart Switch Software Administration Manual IPv4 Binding Configuration The IPv4 Binding Configuration screen contains information for mapping ACLs to IPv4 interfaces. When an ACL is bound to an interface, all the ACE rules that have been defined are applied to the selected interface.
Page 196: Ipv6 Acl
FS728TP Smart Switch Software Administration Manual 3. Select the ACL Name from the list in the provided field. IPv6 ACL The IPv6 ACL screen allows an IPv6 Based ACL to be defined. o view or rename IPv6 Based ACLs: 1. Click Security > ACL > IPv6 ACL. The IPv6 ACL screen displays:...
Page 197: Ipv6 Rules
FS728TP Smart Switch Software Administration Manual 4. Click APPLY to update the device. To add a new IP-based ACL entry: 1. Click Security > ACL > IPv6 ACL. The IPv6 ACL screen displays. 2. Click ADD to create a new entry or duplicate an existing entry.
Page 198 FS728TP Smart Switch Software Administration Manual Figure 6-16 The IPv6 Rules screen contains the following fields: IPv6 Rules • ACL Name – Select the ACL Name from the list. IPv6 Rules Table • Priority – Enter the rule priority. When the packet is matched to a rule, user groups are either granted permission or denied device management access.
Page 199 FS728TP Smart Switch Software Administration Manual • Destination Port – Enter the destination port that is matched to packets. • DSCP – Match the packet DSCP value to the ACL. Either the DSCP value or the IP Precedence value is used to match packets to ACLs. The possible field range is 0-63.
Page 200: Ipv6 Binding Configuration
FS728TP Smart Switch Software Administration Manual IPv6 Binding Configuration The IPv6 Binding Configuration screen contains information for mapping ACLs to IPv6 interfaces. When an ACL is bound to an interface, all the ACE rules that have been defined are applied to the selected interface. Whenever an ACL is assigned on a port, LAG or, VLAN, flows from that ingress interface that do not match the ACL are matched to the default rule, which is Drop unmatched packets.
Page 201: Binding Table
FS728TP Smart Switch Software Administration Manual 3. Select the ACL Name from the list in the provided field. 4. Select the interfaces to bind to the selected ACL Name by one of the following methods. a. Click on the port or LAG gold bar to display the associated interfaces, and then select the interfaces to bind by clicking on the boxes below the interfaces.
Page 202 FS728TP Smart Switch Software Administration Manual • MAC ACL – Displays the MAC Based ACL bound to the interface. • IPv4 ACL – Displays the IPv4 Based ACL bound to the interface. • IPv6 ACL – Displays the IPv6 Based ACL bound to the interface.
Page 203: Monitoring The Switch
Setting Monitoring Options The navigation pane at the top of the web browser interface contains a Monitoring tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Logs” • “RMON” •...
Page 204: Logs Configuration
FS728TP Smart Switch Software Administration Manual This section provides information for managing logs. The logs enable viewing device events in real time, and recording the events for later usage. Logs record and manage events and report errors and informational messages.
Page 205: Log Filter
FS728TP Smart Switch Software Administration Manual The Logs Configuration screen contains the following field: • Logging State – Select whether to enable or disable the device global logs for Cache, File and Server Logs. Console logs are enabled by default. The possible field values are: –...
Page 206 FS728TP Smart Switch Software Administration Manual The Log Filter screen contains the following fields: • RAM Logs – Select the minimum message severity level to appear in the RAM Log. The following are the available message severity levels: – Emergency – Indicates the system is not functioning. Emergency is the highest warning level.
Page 207: Memory Log
FS728TP Smart Switch Software Administration Manual – Informational – Provides device information. – Debug – Provides debugging messages. 2. Select the minimum severity level for RAM logs. 3. Select the minimum severity level for FLASH logs. 4. Click APPLY to update the device.
Page 208: Flash Log
FS728TP Smart Switch Software Administration Manual • Severity – Displays the log severity and urgency level. The following are the available log severity levels: – Emergency – Indicates the device is not functioning. Emergency is the highest warning level. If the device is down or not functioning properly, an emergency log message is saved to the specified logging location.
Page 209 FS728TP Smart Switch Software Administration Manual Figure 7-4 The Flash Log screen contains the following fields: • Log Index – Displays the log number. • Log Time – Displays the time at which the log was generated. • Severity – Displays the log severity and urgency level. The following are the available log severity levels: –...
Page 210: Server Log
FS728TP Smart Switch Software Administration Manual – Warning – Displays the lowest level of a device warning. The device is functioning, but an operational problem has occurred. – Notice – Indicates the system is functioning properly, but a system notice is logged.
Page 211 FS728TP Smart Switch Software Administration Manual The Server Log screen contains the following fields: • Server IP – Enter the server’s IP address to which logs can be sent. • UDP Port – Enter the UDP port to which the server logs are sent. The possible range is 1 - 65535.
Page 212: Rmon
FS728TP Smart Switch Software Administration Manual 6. Enter an optional server Description in the provided field in the first row. 7. Select the Minimum Severity level message sent to the server from the list in the provided field in the first row.
Page 213 FS728TP Smart Switch Software Administration Manual Statistics The RMON Basic Statistics screen contains fields for viewing information about device utilization and errors that occurred on the device. To view RMON Basic Statistics: 1. Click Monitoring > RMON > Basic > Statistics. The RMON Basic Statistics screen displays:...
Page 214 FS728TP Smart Switch Software Administration Manual • Broadcast Packets Received – Displays the number of good broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. • Multicast Packets Received – Displays the number of good Multicast packets received on the interface since the device was last refreshed.
Page 215 FS728TP Smart Switch Software Administration Manual Figure 7-7 The RMON Advanced Statistics screen contains the following fields: RMON Interface Statistics • Interface – Select the device for which statistics are displayed. The possible field values are: – Port – Select the specific port for which RMON statistics are displayed.
Page 216 FS728TP Smart Switch Software Administration Manual • Undersize Packets – Displays the number of undersized packets (less than 64 octets) received on the interface since the device was last refreshed. • Oversize Packets – Displays the number of oversized packets (over 1518 octets) received on the interface since the device was last refreshed.
Page 217 FS728TP Smart Switch Software Administration Manual • Received Packets – Displays the number of packets received on the interface, including bad packets, Multicast, and Broadcast packets, since the device was last refreshed. • Broadcast Packets Received – Displays the number of good broadcast packets received on the interface since the device was last refreshed.
Page 218 FS728TP Smart Switch Software Administration Manual Figure 7-8 The RMON History Control screen contains the following fields: • History Entry No. – Displays the entry number for the History Control Table screen. • Source Interface – Enter the interface from which the history samples were taken.
Page 219 FS728TP Smart Switch Software Administration Manual To add a history control entry: 1. Click Monitoring >RMON > Advanced > History Control. The RMON History Control screen displays. 2. Enter the Source Interface, Sampling Interval, Samples Requested and Owner in the provided field in the first row.
Page 220 FS728TP Smart Switch Software Administration Manual Figure 7-9 The RMON History Table screen contains the following fields: History Entry • History Entry No. – Select the entry number for the History Control Table screen. • Owner – Displays the RMON station or user that requested the RMON information. The field range is 0-20 characters.
Page 221 FS728TP Smart Switch Software Administration Manual • Broadcast Packets – Displays the number of good Broadcast packets received on the interface since the device was last refreshed. This number does not include Multicast packets. • Multicast Packets – Displays the number of good Multicast packets received on the interface since the device was last refreshed.
Page 222 FS728TP Smart Switch Software Administration Manual Figure 7-10 The RMON Events Control screen contains the following fields: • Event Entry Interface – Displays the event. • Community – Enter the community to which the event belongs. • Description – Enter the user-defined event description.
Page 223 FS728TP Smart Switch Software Administration Manual 4. Select the event Type from the list in the provided field in the first row. 5. Click APPLY to update the device. To add an events control entry: 1. Click Monitoring > RMON > Advanced > Events Control. The RMON Events Control screen displays.
Page 224 FS728TP Smart Switch Software Administration Manual Figure 7-11 The RMON Events Log screen contains the following fields: • Event – Displays the RMON Events. • Log Number – Displays the log number. • Log Time – Displays the time when the log entry was entered.
Page 225 FS728TP Smart Switch Software Administration Manual Figure 7-12 The RMON Alarms screen contains the following fields: • Alarm Entry – Displays the alarm entry. • Counter Name – Select the MIB variable. • Interface – Enter the port or LAG interface.
Page 226 FS728TP Smart Switch Software Administration Manual • Falling Threshold – Enter the falling counter value that triggers the falling threshold alarm. The falling threshold is graphically presented on top of the graph bars. Each monitored variable is designated a color.
Page 227: Port Mirroring
Port mirroring can be used as a diagnostic tool as well as a debugging feature. Port mirroring also enables switch performance monitoring. Network administrators can configure port mirroring by selecting a specific port from which to copy all packets, and other ports to which the packets are copied.
Page 228 FS728TP Smart Switch Software Administration Manual Figure 7-13 The Port Mirroring screen contains the following fields: Destination Port • Destination Port – Enter the port to which port traffic is copied. Source Port Table • Source Port – Enter the port from which the packets are mirrored.
Page 229 FS728TP Smart Switch Software Administration Manual 5. Click APPLY to update the device. To add a source port entry: 1. Click Monitoring > Port Mirroring > Port Mirroring. The Port Mirroring screen displays. 2. Enter the Source Port in the provided field in the first row.
Page 230 FS728TP Smart Switch Software Administration Manual 7-28 Monitoring the Switch v1.1, September 2009...
Page 231: Maintenance
Using the Maintenance Options The navigation pane at the top of the web browser interface contains a Maintenance tab that enables you to manage your FS728TP Smart Switch with features under the following main menu options: • “Reset” • “Upload”...
Page 232: Factory Default
Factory Default The Factory Default screen allows network managers to reset the device to the factory defaults shipped with the switch. Restoring factory defaults results in erasing the configuration file. Note: Selecting this option automatically reboots the device. To reset the device to the factory defaults: 1.
Page 233: Upload
FS728TP Smart Switch Software Administration Manual Figure 8-2 2. Check the confirmation box. 3. Click APPLY to reset the device to the factory defaults. Upload The Upload menu contains the following option: • “Upload” Upload System Files can be backed up using the Upload screen.
Page 234 GS700TP Smart Switch Software Administration Manual Figure 8-3 The Upload screen contains the following fields: • File Type – Enter the type of file to be uploaded. The possible field values are: – Firmware – Upload the Firmware File. –...
Page 235: Download
FS728TP Smart Switch Software Administration Manual 5. If you selected via TFTP, enter the Remote Filename in the provided field. 6. Click APPLY to upload the file. Download The Download menu contains the following option: • “Download” Download System files can be downloaded using the Download screen.
Page 236: File Management
GS700TP Smart Switch Software Administration Manual – Firmware – Downloads the Firmware file. – Boot File – Downloads the Boot file. – Configuration – Downloads the Configuration file. • via TFTP – Select to download the file from the TFTP Server.
Page 237: Troubleshooting
FS728TP Smart Switch Software Administration Manual Figure 8-5 The Active Image screen contains the following fields: • Active Image – Displays the image file which is currently active on the device. • After Reset – Select the image file that is active after the device is reset. The possible field values are: –...
Page 238 GS700TP Smart Switch Software Administration Manual Diagnostics The Diagnostics menu contains the following option: • “Cable Test” Cable Test The Cable Test screen contains fields for performing tests on copper cables. Cable testing provides information about where errors occurred in the cable, the last time a cable test was performed, and the type of cable error that occurred.
Page 239 FS728TP Smart Switch Software Administration Manual • Test Result – Displays the cable test results. Possible values are: – No Cable – Indicates a cable is not connected to the port. – Open Cable – Indicates a cable is connected on only one side.
Page 240 FS728TP Smart Switch Software Administration Manual Maintenance 8-10 v1.1, September 2009...
Page 241: Online Help
The description that follows in this chapter covers these features. Support The Support screen provides access to the NETGEAR online support site at www.netgear.com. To access the Support screen: 1. Click Help > Online Help > Support. The Online Help menu opens and the Support screen displays: v1.1, September 2009...
Page 242: User Guide
FS728TP Smart Switch Software Administration Manual Figure 9-1 2. Click APPLY to go to the NETGEAR Online Support site at www.netgear.com. User Guide The User Guide screen provides access to the online User Guide. To view the User Guide screen: 1.
Page 243 FS728TP Smart Switch Software Administration Manual Figure 9-2 2. Click APPLY to open a window and display the User Guide in PDF format. Online Help v1.1, September 2009...
Page 244: Default Settings
This appendix provides default settings for the NETGEAR Model FS728TP Smart Switch. You can always configure the switch to default settings by using the Factory Reset function from a Web browser. Table 1: Default Settings Feature Port Speed Port Duplex...
Page 245 1-8, configuration backing examples (VLANs), factory, files, LLDP, 3-15 logs, 3-25 network parameters, port, 3-17, resetting, restoring, spanning tree, 4-25 switch, system settings, 3-1, connectors, defaults address, subnet mask, switch, DHCP server, downloading files, dynamic address, 3-12 EAP, 4-36 factory...
Page 246 LACP, 4-19 setting, 4-18 link aggregation, 4-17 LLDP, 3-15 local information, 3-19 logging into the switch, logs, 3-25 flash, 3-27 memory, 3-26 server, 3-28 address table, 3-11 trusted, 4-40 management security, managing files, memory logs, 3-26 menus, MSAP information, 3-22...
Page 247 MAC, 4-40 twisted pair cables, unknown multicast, 4-30 upgrading the firmware, uploading files, utilities SmartWizard Discovery, switch configuration, system settings, VLANs, 4-9, access, 1-6, Software Administration Manual v1.1 September 2009 Index-3...
Page 248 Index-4 v1.1 September 2009...

NETGEAR FS728TP Software Administration Manual

About this Manual

Chapter 1 Getting Started with Switch Management

Chapter 2 Introduction to the Web Browser Interface

Chapter 3 Managing System Settings

Chapter 4

Configuring Switching Settings

Chapter 5 Configuring Qos

Chapter 6 Managing Security

Chapter 7 Monitoring the Switch

Chapter 8 Maintenance

Chapter 9 Online Help

Quick Links

Related Manuals for NETGEAR FS728TP

Summary of Contents for NETGEAR FS728TP

Table of Contents