NETGEAR XS508TM User Manual
  1. Manuals
  2. Brands
  3. NETGEAR Manuals
  4. Switch
  5. XS508TM
  6. User manual
NETGEAR XS508TM User Manual

NETGEAR XS508TM User Manual

8/16/24-port 10g/multi-gigabit ethernet smart switch with 2 or 4 sfp+ ports
Hide thumbs Also See for XS508TM:
1
2
3
Table Of Contents
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
Table of Contents

Advertisement

Quick Links

Download this manual
User Manual
8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit
Ethernet Smart Switch with 2 or 4 SFP+ Ports
Models:
XS508TM
XS516TM
XS724TM
January 2025
202-12823-01
NETGEAR, Inc.
350 E. Plumeria Drive
San Jose, CA 95134, USA

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the XS508TM and is the answer not in the manual?

Questions and answers

Related Manuals for NETGEAR XS508TM

Summary of Contents for NETGEAR XS508TM

  • Page 1 User Manual 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Models: XS508TM XS516TM XS724TM NETGEAR, Inc. January 2025 350 E. Plumeria Drive 202-12823-01 San Jose, CA 95134, USA...
  • Page 2 See the regulatory compliance document before connecting the power supply. For NETGEAR’s Privacy Policy, visit https://www.netgear.com/about/privacy-policy. By using this device, you are agreeing to NETGEAR’s Terms and Conditions at https://www.netgear.com/about/terms-and-conditions. If you do not agree, return the device to your place of purchase within your return period.
  • Page 3 NETGEAR Insight: • How to manage the switch on page 20 • About the device UI and NETGEAR Insight on page 21 • How Insight and the device UI interact with each other on page 22 • Change the Insight management mode on page 35 •...

  • Page 4: Table Of Contents

    Use a Windows-based computer to access the switch on-network and connected to the Internet............ 27 Use the NETGEAR Insight app to discover the IP address of the switch..................... 29 Use the NETGEAR Discovery Tool to discover the switch when it is connected to the Internet............
  • Page 5 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Chapter 2 Configure Switch System Settings Dashboard..................48 Display port utilization and port connections......48 Display VLAN membership............49 Display switch device details............50 Display information about switch hardware components and firmware.....................
  • Page 6 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display the LLDP-MED network policy for an interface... 90 Display the LLDP local device information........ 91 Display the LLDP neighbor information........94 Simple Network Management Protocol......... 97 Manage SNMPv1 and SNMPv2 communities......
  • Page 7 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add the DHCP relay function to an existing routing VLAN... 131 Remove the DHCP relay function from a routing VLAN..132 Display the DHCP relay statistics..........133 DHCP Layer 2 relay.................
  • Page 8 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Manage the OUI table............... 177 Add an OUI................178 Remove an OUI..............179 Configure the global protocol-based VoIP prioritization and class....................180 Configure VoIP protocol-based interface settings....181 Display the Auto-VoIP status.............
  • Page 9 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Link aggregation groups............... 219 Configure a LAG................. 220 Configure the port members for a LAG........222 Set the LACP system priority............. 223 Set the LACP priority and time-out period for a port.... 224 Spanning Tree Protocol..............
  • Page 10 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure an IGMP multicast router VLAN......273 IGMP snooping querier overview..........274 Enable the IGMP snooping querier and configure the global settings..................274 Add an IGMP snooping querier for a VLAN......276 Change an IGMP snooping querier for a VLAN.....
  • Page 11 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display the IPv6 statistics............319 Display and search the IPv6 neighbor table......323 Add a static IPv6 route............... 325 Change a static IPv6 route............327 Delete a static IPv6 route............328 Display the IPv6 route table............
  • Page 12 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Remove a DiffServ class............368 Configure an IPv6 DiffServ class..........369 Add and configure an IPv6 DiffServ class......370 Change the criteria for an existing IPv6 DiffServ class..372 Remove an IPv6 DiffServ class..........
  • Page 13 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the global 802.1X authentication settings... 413 Configure the 802.1X authentication settings for a port..415 Initialize 802.1X on a port............418 Restart 802.1X authentication on a port........419 Display the port summary............
  • Page 14 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports IPv4 ACLs..................466 Add an IPv4 ACL................ 467 Change the number or name of an IPv4 ACL......468 Remove an IPv4 ACL..............469 Standard IPv4 ACL rules..............470 Add a rule for a standard IPv4 ACL..........
  • Page 15 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Trap log..................528 Port mirroring.................. 529 Set up and enable a port mirroring session......529 Change the traffic direction or remove a mirrored port from a mirroring session................
  • Page 16 VLAN routing interface example configuration......603 Appendix B Hardware Introduction Overview..................606 Safety instructions and warnings..........606 Appendix C Hardware Overview Hardware description model XS508TM........610 Front panel model XS508TM............ 610 LEDs model XS508TM............... 610 Back panel model XS508TM............ 611 Hardware description model XS516TM........612 Front panel model XS516TM............
  • Page 17 Step 4: Mount or place the switch..........626 Mount the switch in a rack............626 Wall-mount the switch (models XS508TM and XS516TM)..627 Place the switch on a flat surface..........629 Optional Step 5: Install an SFP transceiver module....629 Step 6: Connect devices to the switch’s RJ-45 ports....

  • Page 18: Chapter 1 Get Started

    This user manual describes how you can use the device user interface (UI) to configure and operate the following NETGEAR switches: • Model XS508TM: 8-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports • Model XS516TM: 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports •...
  • Page 19 NOTE: Firmware updates with new features and bug fixes are made available from time to time at netgear.com/support/download/. Some products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features or behavior of your product does not match what is described in this guide, you might need to update your firmware.

  • Page 20: Available Publications And Online Help

    How to manage the switch For NETGEAR Insight Premium and Insight Pro subscribers, the switch supports the NETGEAR Insight Cloud Portal and Insight app: • Insight Cloud Portal: Lets you configure and manage the switch through the portal of the Insight cloud-based management platform.

  • Page 21: About The Device Ui And Netgear Insight

    NETGEAR knowledge base. For knowledge base articles about NETGEAR Insight, visit https://kb.netgear.com/000044336. If you install the switch as a NETGEAR Insight managed device and the Insight Mode is enabled, the settings for features that you can manage through the Insight Cloud portal and Insight app are automatically synchronized with the device UI, and the other way around.

  • Page 22: How Insight And The Device Ui Interact With Each Other

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports How Insight and the device UI interact with each other If you manage the switch using the Insight Cloud Portal or Insight app, you can also still use the device UI to manage the switch.

  • Page 23: Manage The Switch By Using The Device Ui

    This manual describes how to use the device UI to manage and monitor the switch. For information about how you can manage and monitor the switch with the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight.

  • Page 24: Device Ui Buttons And User-Defined Fields

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Device UI buttons and user-defined fields The following table shows the general buttons that are used on the pages in the device UI. (Some pages have unique buttons.) Table 1.

  • Page 25: Save Your Changes In The Device Ui

    100 Mbps. The interface number is the port number, which is a sequential number starting from 1. Fiber interfaces (SFP+), which support 10 Model XS508TM: xg9 and xg10 Gbps or 1 Gbps. Model XS516TM: xg17 and xg18 Model XS524TM: xg25, xs26, xs27,...

  • Page 26: About On-Network And Off-Network Access

    Windows-based computer to access the device UI. We also recommend that you register the switch with NETGEAR to activate your warranty. For more information about accessing the device UI, see Use a Windows-based computer to access the switch on-network and connected to the Internet on page 27.

  • Page 27: Use A Windows-Based Computer To Access The Switch On-Network And Connected To The Internet

    • NETGEAR Discovery Tool (NDT): If you use a Mac or a Windows-based computer, you can use the NDT to discover the switch on your network. See Use the NETGEAR Discovery Tool to discover the switch when it is connected to the Internet on page •...
  • Page 28 After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one. ○ Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button.

  • Page 29: Use The Netgear Insight App To Discover The Ip Address Of The Switch

    Internet, the NETGEAR Insight app lets you discover the switch in your network. Using the NETGEAR Insight app to discover the IP address of the switch in your network is not the same as managing the switch with the Insight app or the Insight Cloud Portal.

  • Page 30: Use The Netgear Discovery Tool To Discover The Switch When It Is Connected To The Internet

    DHCP server that assigns IP addresses, power on the switch, and then use a computer that is connected to the same network as the switch. The NETGEAR Discovery Tool (NDT) lets you discover the switch in your network and access the device UI of the switch from a Mac or a Windows-based computer.
  • Page 31 After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one. ○ Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button.

  • Page 32: Use Other Options To Discover The Switch Ip Address

    After you activate your warranty, you are no longer prompted to register the switch. If you do not have a NETGEAR account, you can create one. ○ Enter Registration Key: If you obtained a registration key, enter it in the Registration Key field, and click the Submit button.

  • Page 33: Access The Switch Off-Network And Not Connected To The Internet

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports see Register the switch with your NETGEAR account and get a registration key for offline access on page 39. ○ Skip Registration & Access the UI: To access the device UI without activating your warranty, click the >...
  • Page 34 • Enter a registration key: If you obtained a registration key, type or paste the key in the Registration Key field, and click the Submit button. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 39.

  • Page 35: Change The Insight Management Mode

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. c. Click the Login button. 6. If the Change Default Password page displays, specify and confirm a new device admin password, click the Submit button, and log in again with your new password.

  • Page 36: Credentials For The Device Ui

    Subsequent times that you log in to the device UI, use your customized switch admin password. • You are using both NETGEAR Insight and the device UI: Use the Insight network location password. NETGEAR Insight can affect how you access the switch device UI. If you keep the...

  • Page 37: Register The Switch

    • Online registration for on-network access: If your switch is on-network or connected to the Internet, you can register the switch with your NETGEAR account credentials and activate your warranty. During the registration process, the switch contacts a NETGEAR server.

  • Page 38: Register And Access The Switch On-Network With Your Netgear Account

    For initial registration and access with your NETGEAR account, the switch must be connected to the Internet so that it can communicate with a NETGEAR server. If you do not have a free NETGEAR account, you can create one during the registration process.

  • Page 39: Register The Switch With Your Netgear Account And Get A Registration Key For Offline Access

    Device Admin Password page displays. That is, you are no longer prompted to activate your warranty. After you register your switch with your NETGEAR account, you can get a registration key, access the switch offline or not connected to the Internet, and either before or after you log in to the device UI, enter the registration key.

  • Page 40: Access The Switch With A Registration Key

    For information about getting a registration key, see Register the switch with your NETGEAR account and get a registration key for offline access on page 39. The default IP address of the switch is 192.168.0.239. The IP address of the computer that you use to access the switch off-network must be in the same subnet as the default IP address of the switch.

  • Page 41: Access The Switch On-Network And Enter The Registration Key After You Log In

    For information about getting a registration key, see Register the switch with your NETGEAR account and get a registration key for offline access on page 39. To access the switch on-network and enter the registration key after you log in to the device UI: 1.

  • Page 42: Change The Language Of The Device Ui

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports admin password, the Change Default Password page displays, requiring you to customize the device admin password. • Insight network password: If you are also managing the switch through the Insight Cloud Portal or Insight app and you added the switch to an Insight network location, enter the Insight network password to access the device UI.

  • Page 43: Configure Ports Using The Device View

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 44: Access The Netgear Support Website

    The associated page displays, allowing you to configure or monitor the port. Access the NETGEAR support website From the device UI, you can access the NETGEAR support website at netgear.com/support. To access the NETGEAR support website from the device UI: 1.

  • Page 45: Access The User Manual Online

    6. In the Support section, click the link. The NETGEAR support website opens. Access the user manual online The user manual (the manual that you are now reading) is available from the NETGEAR download center at netgear.com/support/download/. To access the user manual online from the device UI: 1.
  • Page 46 The Online Help page displays. 6. In the User Manual section, click the link. The NETGEAR Download Center website opens. 7. Enter the model number of the switch and select the model from the menu. The page displays the documentation that is available for your model, including the user manual.

  • Page 47: Chapter 2 Configure Switch System Settings

    Configure Switch System Settings This chapter covers the following topics: • Dashboard • Display information about switch hardware components and firmware • IP network settings for management access • Time and NTP settings • Domain Name System • Manage switch discovery protocols •...

  • Page 48: Dashboard

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Dashboard The information that is displayed on the dashboard is mostly self-explanatory. Display port utilization and port connections The Dashboard displays port utilization and port connections. To display port utilization and port connections: 1.

  • Page 49: Display Vlan Membership

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about ports, see Configure the port settings on page 216. The following table describes information about the port connections in the Device View section. Field Description Connected...

  • Page 50: Display Switch Device Details

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 51: Display Information About Switch Hardware Components And Firmware

    You can configure the switch system name, location, and contact and display general switch information. To configure and display general system information and NETGEAR Insight Cloud application information: 1. Connect your computer to the same network as the switch.
  • Page 52 • System Contact: Type the name of a contact person for this switch. For each field, you can use up to 255 alphanumeric characters. 7. Click the Apply button. Your settings are saved. The following table describes the NETGEAR Insight Cloud application information on the page. Configure Switch System User Manual...

  • Page 53: Display The Power Supply Information

    • Disabled: The Cloud mode is disabled. Version The version of the application, which is set by the NETGEAR Insight agent The following table describes the system information on the page. Table 6. System information Field...

  • Page 54: Display The Boot And Software Version

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 55: Display The Temperature Sensor Information

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 56: Display The Status Of The Fans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 57 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 58: Ip Network Settings For Management Access

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports IP network settings for management access You can configure network information for the device UI, which is the logical interface used for in-band connectivity with the switch through any of the switch’s front-panel ports.

  • Page 59: Change The Management Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. Select a radio button for the configuration of the switch management interface: • Static IP Address: You must manually configure the IP address, subnet mask, and default gateway.
  • Page 60 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Only one management VLAN can be active at a time. • If you change the management VLAN, connectivity through the existing management VLAN is lost. •...

  • Page 61: Configure An Ipv6 Management Interface Through Autoconfiguration Or A Dhcpv6 Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure an IPv6 management interface through autoconfiguration or a DHCPv6 server You can restrict IPv6 management to one specific interface. You can use any of the interfaces as an IPv6 management interface and configure the IPv6 address through autoconfiguration or a DHCPv6 server.

  • Page 62: Manage A Static Ipv6 Address For The Ipv6 Management Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. Click the IPv6 Address Auto Configuration Mode toggle to allow the switch to autoconfigure its IPv6 address: • The toggle is gray and positioned to the left: IPv6 address autoconfiguration is disabled.
  • Page 63 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To add, change, or remove an IPv6 address for the IPv6 management interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 64: Display Ipv6 Network Interface Neighbors

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports a. Select the check box for the IPv6 address. b. Click the Edit button. The Edit IPv6 Network Interface Configuration pop-up window displays. c. Change the settings as needed. d.

  • Page 65: Time And Ntp Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select System > Management > IP Network > IPv6 Network Neighbor. The IPv6 Network Neighbor page displays. 6. To refresh the page, click the Refresh button. The IPv6 Network Interface Neighbor table displays the following view-only fields.
  • Page 66 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 67: Set The Time Manually

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. Click the NTP Authentication Mode toggle to enable or disable NTP packet authentication on the switch: • The toggle is gray and positioned to the left: An NTP packet from an NTP server is not authenticated.
  • Page 68 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 69: Display The Global Ntp Status And Packet Information

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. The Date and Time fields are unmasked. 12. In the Date field, type the current date in months, days, and years (MM/DD/YYYY). 13.
  • Page 70 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 71: Configure Ntp Servers

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure NTP servers NTP assures accurate time synchronization for the network device clock, up to the millisecond. Time synchronization is performed by a network NTP server. The switch operates as an NTP client only and does not provide time services to other devices.
  • Page 72 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To add an NTP server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 73 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. In the Minimum Poll Interval field, specify the shortest polling interval in powers of two seconds. The range is from 4 to 17. The default is 6. 11.

  • Page 74: Change The Settings For An Existing Ntp Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 13. NTP server status information (Continued) Field Description NTP Out Packets The number of NTP messages that the switch sent for the association NTP Protocol Error Packets The number of NTP messages with an NTP protocol error that the switch received for the association Change the settings for an existing NTP server...

  • Page 75: Remove An Ntp Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about the settings, see Add an NTP server on page 71. 9. Click the Save button. Your settings are saved. Remove an NTP server You can remove an NTP server that you no longer need.

  • Page 76: Configure Daylight Saving Time Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure daylight saving time settings You can configure settings for summer time, which is also known as daylight saving time. Used in some countries around the world, summer time is the practice of temporarily advancing clocks during the summer months.
  • Page 77 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports applicable fields on the page are automatically populated and you cannot change them. Configure the settings that are described in Step 8. • Recurring USA: The system clock uses the standard recurring daylight saving time settings used in the United States.

  • Page 78: Display The Daylight Saving Time Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. If you select the Nonrecurring radio button, configure the fields that are shown in the following table. Field Description Begins At These fields are used to configure the start values of the date and time. •...

  • Page 79: Domain Name System

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 80: Configure The Global Dns Settings And Add A Dns Server

    When the switch looks up on an unqualified host name, this field provides the domain name. For example, if the default domain name is netgear.com and you enter test, then test is changed to test.netgear.com to resolve the name). The maximum length of the name is 255 characters.

  • Page 81: Remove A Dns Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. Click the Apply button. Your settings are saved. 9. To add a DNS server to which the switch sends DNS queries, do the following in the DNS Server Configuration section: a.

  • Page 82: Map Host Names To Dns Server Ip Addresses And Display Dynamic Host Mappings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 83: Change An Entry In The Static Dns Host Mapping Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 84: Remove An Entry From The Static Dns Host Mapping Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 85: Display Dynamic Dhcp Snooping Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 86: Manage Switch Discovery Protocols

    Protocol (SSDP) are enabled on the switch. UPnP and SSDP allow the switch to be discovered in your network, for example on Windows-based computers and mobile devices on which the NETGEAR Insight app is installed. For greater security, you can disable UPnP and SSDP.
  • Page 87 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 88: Lldp And Lldp-Med Settings For The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports LLDP and LLDP-MED settings for the switch This section describes the global Link Layer Discovery Protocol (LLDP) and LLDP-Media Endpoint Discovery (LLDP-MED) settings for the switch. For information about the LLDP and LLDP-MED settings for interfaces, see LLDP and LLDP-MED settings for interfaces on page 210.
  • Page 89 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 90: Display The Lldp-Med Network Policy For An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display the LLDP-MED network policy for an interface You can display the LLDP-MED policy information for an interface. For information about configuring LLDP and LLDP-MED for interfaces, see LLDP and LLDP-MED settings for interfaces on page 210.

  • Page 91: Display The Lldp Local Device Information

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 17. LLDP-MED network policy information Field Description Network Policy Number The network policy number, if any is transmitted Application The application type that is transmitted. The type can be one of the following: •...
  • Page 92 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 93 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 19. Detailed LLDP local device information Field Description Port Details Address SubType The managed address subtype of the local device. For example, MAC or IPv4. Address The managed address of the local device Interface SubType...

  • Page 94: Display The Lldp Neighbor Information

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 19. Detailed LLDP local device information (Continued) Field Description Capabilities Supported The system capabilities that are supported on the local device Current Capabilities The system capabilities that are enabled on the local device Device Class The device class that is advertised by the local device.
  • Page 95 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following table describes the view-only fields on the page. Table 20. LLDP neighbor information Field Description MSAP Entry The detected Media Service Access Point (MSAP) entry of the neighbor Local Port The number of the physical interface on the switch that receives the information...
  • Page 96 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 21. Detailed LLDP neighbor information (Continued) Field Description System Description The LLDP description of the neighbor. This information can include the system hardware type and version, operating system, and network software.

  • Page 97: Simple Network Management Protocol

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 21. Detailed LLDP neighbor information (Continued) Field Description Serial Number The serial number of the neighbor Model Name The model name of the neighbor Asset ID The asset ID of the neighbor Location Information Civic...
  • Page 98 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To add an SNMPv1 and SNMPv2 community: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 99: Change An Existing Snmpv1 And Snmpv2 Community

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports station IP mask value of 255.255.255.255, and use that computer’s IP address as the client address. 9. In the Community String field, type the name for the community. The name can be up to 16 characters.

  • Page 100: Delete An Snmpv1 And Snmpv2 Community

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. Select the check box for the community. 7. Click the Edit button. The Edit Community Configuration pop-up window displays. 8. Change the settings as needed. For more information about the settings, see Add an SNMPv1 and SNMPv2 community on page 97.

  • Page 101: Manage The Snmpv1 And Snmpv2 Trap Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved and the community is deleted. Manage the SNMPv1 and SNMPv2 trap settings For each SNMP community, you can specify the source interface that must be used on the switch, the community name, the associated IP address, and other settings.

  • Page 102: Change An Snmpv1 Or Snmpv2 Trap Configuration For A Host

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. In the Recipients IP field, enter the IP address of the device (that is, the host) that must receive the traps. 8. From the Version menu, select the SNMP version that is used by the host: •...

  • Page 103: Delete An Snmpv1 Or Snmpv2 Trap Configuration For A Host

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select System > Protocols > SNMP > Trap Configuration. The Trap Configuration page displays. 6. Select the check box for the trap configuration. 7.

  • Page 104: Configure Snmpv1 And Snmpv2 Trap Flags

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select System > Protocols > SNMP > Trap Configuration. The Trap Configuration page displays. 6. Select the check box for the trap configuration. 7. Click the Delete button. Your settings are saved and the trap configuration is deleted.

  • Page 105: Display The Supported Mibs

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Authentication: When enabled, SNMP traps are sent when events involving authentication occur, such as when a user attempts to access the device UI but does not provide a valid user name and password. •...

  • Page 106: Manage Snmpv3 Users

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Supported MIBs page displays. The Name field displays the RFC number, if applicable, and the name of the MIB. The Description field displays the RFC title or MIB description. NOTE: A Request for Comments (RFC) is a document from the Internet Engineering Task Force (IETF).

  • Page 107: Change An Snmpv3 User Account

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. Click the Add New button. The Add User Configuration pop-up window displays. 7. In the User Name field, type a name for the user account. 8.

  • Page 108: Delete An Snmpv3 User Account

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 109: Manage The Snmpv3 Trap Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 110: Change An Snmpv3 Trap Configuration For A User

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 111: Delete An Snmpv3 Trap Configuration For A User

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 112: Configure Http And Https Access Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 113 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 114: Browser Security Message With Https Access

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The range is from 1 to 4. The default is 4. 13. Click the Apply button. Your settings are saved. Browser security message with HTTPS access After you enable HTTPS access (see Configure HTTP and HTTPS access settings on page 112) and you attempt to access the device UI, your browser might display a security warning because of the self-signed certificate on the switch.

  • Page 115: Configure The Ssh Access Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the SSH access settings You can configure the Secure Shell (SSH) access settings. By default, the switch uses SSH version 2. To configure the SSH access settings: 1.

  • Page 116: Manage Rsa, Dsa, And Ecdsa Keys For Ssh Access

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The range is from 0 to 60 minutes. The default is 5 minutes. If you enter 0, the session does not time out. 9. In the Maximum Number of SSH Sessions field, type the maximum number of SSH sessions that are allowed simultaneously.

  • Page 117: Transfer An Existing Ssh Key From A Computer To The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 118: Delete An Rsa, Dsa, Or Ecdsa Key

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To transfer an SSH key to the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 119: Configure Inbound Telnet Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 120: Dhcp Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure the inbound Telnet settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 121: Enable The Dhcp Server And Configure The Bootp Mode

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Enable the DHCP server and configure the Bootp mode The switch supports a single IPv4 DHCP server for which you can configure multiple address pools. To enable the DHCP server and configure the Bootp mode: 1.

  • Page 122: Exclude Ip Addresses For The Dhcp Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: The BootP mode is disabled. This is the default setting. • The toggle is purple and positioned to the right: The Bootp mode is enabled. 8.

  • Page 123: Manage Dhcp Pools

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The DHCP Server Configuration page displays. 6. Click the Add New button. The Add Excluded Address pop-up window displays. 7. In the IP Range From field, type the lowest address in the range or a single address to be excluded.
  • Page 124 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 125: Change A Dhcp Pool

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. To configure default router addresses, click the Default Router link, and add up to eight IP addresses for default routers, in order of preference. A default router can function as a DHCP server. If you do not add a default router, the switch functions as the DHCP server.

  • Page 126: Remove A Dhcp Pool Or Dhcp Binding

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 127: Display Or Clear The Dhcp Server Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 128: Display Dhcp Server Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 129: Dhcp Relay

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 130: Configure The Global Dhcp Relay Server Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the global DHCP relay server settings You can configure the global DHCP relay server settings. To configure the global DHCP relay server settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 131: Add The Dhcp Relay Function To An Existing Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: The circuit ID suboption of DHCP Option-82 is disabled for the switch. • The toggle is purple and positioned to the right: The circuit ID suboption of DHCP Option-82 is enabled for the switch.

  • Page 132: Remove The Dhcp Relay Function From A Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. In the DHCP Relay VLAN Interfaces section, select the check box for the routing VLAN. 7. Click the Edit button. The Edit DHCP Relay VLAN Interfaces pop-up window displays. 8.

  • Page 133: Display The Dhcp Relay Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 134: Dhcp Layer 2 Relay

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 135: Configure The Global Dhcp L2 Relay Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the global DHCP L2 relay settings To configure the global DHCP L2 relay settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 136: Configure The Dhcp L2 Relay Vlan Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the DHCP L2 relay VLAN settings You can enable or disable the DHCP L2 relay VLAN settings and circuit ID suboption of DHCP Option-82, and set a remote ID string. To configure the DHCP L2 relay VLAN settings: 1.

  • Page 137: Configure A Dhcp L2 Relay Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disabled: The circuit ID suboption of DHCP Option-82 is disabled for the VLAN. This is the default setting. • Enabled: The circuit ID suboption of DHCP Option-82 is enabled for the VLAN. 10.

  • Page 138: Display Or Clear The Dhcp L2 Relay Interface Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. Select one or more interfaces by taking one of the following actions: • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.

  • Page 139: Dhcp Snooping

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 140: Enable Dhcp Snooping For The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports that correspond to the local untrusted interfaces of a switch. An untrusted interface is an interface that is configured to receive messages from outside the network or firewall. A trusted interface is an interface that is configured to receive messages only from within the network.

  • Page 141: Enable Dhcp Snooping For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: The DHCP Snooping Mode is globally disabled. This is the default setting. • The toggle is purple and positioned to the right: The DHCP Snooping Mode is globally enabled.

  • Page 142: Configure Dhcp Snooping Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Global Configuration. The Global Configuration page displays. The following steps refer to the VLAN Configuration section. 6.
  • Page 143 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 144: Add A Static Dhcp Snooping Binding

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disabled: DHCP snooping does not generate log messages. This is the default setting. • Enabled: DHCP snooping generates a log message when an invalid packet is received and dropped by the interface.

  • Page 145: Change A Static Dhcp Snooping Binding

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. The Binding Configuration page displays. 6. In the Static Binding Configuration section, click the Add New button. The Add Static Binding Configuration pop-up window displays.

  • Page 146: Remove A Static Dhcp Snooping Binding

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. The Binding Configuration page displays. 6. In the Static Binding Configuration section, select the check box for the interface binding configuration.

  • Page 147: Display Dynamic Dhcp Snooping Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. The Binding Configuration page displays. 6. In the Static Binding Configuration table, select the check box for the static binding. 7.

  • Page 148: Configure Dhcp Snooping Persistent Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following table describes the view-only fields in the Dynamic Binding Configuration section. Table 27. Dynamic binding configuration information Field Description Interface The interface on which the DHCP client message was received MAC Address The MAC address associated with the DHCP client that sent the message.

  • Page 149: Display The Dhcp Snooping Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Persistent Configuration. The Persistent Configuration page displays.

  • Page 150: Dhcpv6 Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 151: Manage Dhcpv6 Pools

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To enable the DHCPv6 server on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 152: Add A Dhcpv6 Pool

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add a DHCPv6 pool A DHCPv6 pool provides network configuration information that is available to DHCPv6 clients that request such information. To add a DHCPv6 pool: 1.

  • Page 153: Change A Dhcpv6 Pool

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports An IPv6 address must be in hexadecimal digits. The prefix length must be from 0 to 128. 11. To add domain names, click the Domain Name link, and add up to five IPv6 domain names for the pool, in order of preference.

  • Page 154: Remove A Dhcpv6 Pool

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. Change the settings as needed. For more information about the settings, see Add a DHCPv6 pool on page 152. 9. Click the Save button. Your settings are saved. Remove a DHCPv6 pool You can remove a DHCPv6 pool that you no longer need.

  • Page 155: Display Or Clear The Dhcpv6 Server Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display or clear the DHCPv6 server bindings To display the DHCPv6 server bindings or clear a DHCPv6 server binding: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 156: Display Dhcpv6 Server Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display DHCPv6 server statistics To display the DHCPv6 server statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 157: Dhcpv6 Relay

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 30. DHCP server statistics information (Continued) Field Description Rebind Received The number of Rebind messages received by the DHCPv6 server. Release Received The number of Release messages received by the DHCPv6 server. Decline Received The number of Decline messages received by the DHCPv6 server.

  • Page 158: Remove A Dhcpv6 Relay Vlan Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 159: Display The Dhcpv6 Relay Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 160 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 161: Chapter 3 Manage Vlans

    Manage VLANs This chapter covers the following topics: • Manage the VLAN configuration on the switch • Auto-VLANs • Configure a MAC-based VLAN • Configure a protocol-based VLAN group • Configure Generic Attribute Registration Protocol • Private VLANs • Protect ports NOTE: For more information about VLANs and a configuration example, see Virtual Local Area Networks (VLANs) on page 573.

  • Page 162: Manage The Vlan Configuration On The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Manage the VLAN configuration on the switch You can add, change, and delete VLANs, or reset the entire VLAN configuration on the switch to defaults. About VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing.

  • Page 163: Add A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports By default, none of the four Auto VLANs include as members any interfaces or LAGs. Interfaces and LAGs are added automatically upon device detection. Add a VLAN You can add multiple VLANs to customize the switch for you network.

  • Page 164: Configure Membership Interfaces For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Auto VLAN (see Configure the OUI-based properties on page 174), you can re-use the preconfigured VLAN ID. 8. In the VLAN Name field, type a name for the new VLAN. The name can be up to 32 characters, including blanks.
  • Page 165 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The VLAN Configuration (Basic) page displays. 6. From the VLAN ID menu, select the VLAN ID. The following steps refer to the Port Membership section. 7. To add and configure or remove individual ports or LAGs, do the following: a.

  • Page 166: Change A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • PVID: First click the Select All button and then the PVID button to assign the VLAN as the port VLAN ID (PVID) for all ports or LAGs. All ports or LAGs display a “P.”...

  • Page 167: Delete One Or More Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 168: Reset The Entire Vlan Configuration To Default Setting

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 169: Change The Port Vlan Id (Pvid) Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 170 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 171 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports VLAN IDs range from 1 to 4093. The default is 1. Use a hyphen (-) to specify a range or a comma (,) to separate VLAN IDs in a list. Spaces and zeros are not permitted. 11.

  • Page 172: Configure A Voice Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 33. PVID configuration information (Continued) Field Description Untagged VLANs The ID or IDs of the untagged VLANs of which the interface is a member Tagged VLANs The ID or IDs of the tagged VLANs of which the interface is a member Forbidden VLANs The ID or IDs of the forbidden VLANs of which the interface is a member...
  • Page 173 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Switching > VLAN > Voice VLAN Configuration. The Voice VLAN Configuration page displays. 6. In the Voice VLAN Global Admin section, click the Admin Mode toggle to enable the global voice VLAN mode on the switch.

  • Page 174: Auto-Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 11. From the Authentication Mode menu, select if an authorized interface is required for voice traffic: • Disabled: Voice traffic is allowed only an authorized voice VLAN interface, for which dot1x must be enabled (see Configure the 802.1X authentication settings for a port on page 415).
  • Page 175 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure the OUI-based properties for the Auto-VoIP VLAN, Auto-WiFi VLAN, or Auto-Camera VLAN: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 176: Configure The Oui-Based Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ○ To change the default VLAN ID 4087 to another ID, type the ID in the Auto-Camera VLAN ID field. ○ In the associated OUI-Based priority field, enter a priority value from 0 (lowest priority) to 7 (highest priority).

  • Page 177: Manage The Oui Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.

  • Page 178: Add An Oui

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • 00:12:43: CISCO2 • 00:0F:E2: H3C • 00:60:B9: NITSUKO • 00:D0:1E: PINTEL • 00:E0:75: VERILINK • 00:E0:BB: 3COM • 00:04:0D: AVAYA1 • 00:1B:4F: AVAYA2 • 00:04:13: SNOM You can add OUIs for VoIP phones, WiFi devices, and camera.

  • Page 179: Remove An Oui

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Switching > Auto-VLAN > OUI-based Auto-VLAN. The OUI-based Auto-VLAN page displays. 6. Scroll down to the OUI Table section. 7.

  • Page 180: Configure The Global Protocol-Based Voip Prioritization And Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Switching > Auto-VLAN > OUI-based Auto-VLAN. The OUI-based Auto-VLAN page displays. 6. Scroll down to the OUI Table section. 7. Select the check box for the OUI. You can select more than one check box.

  • Page 181: Configure Voip Protocol-Based Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 182 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 183: Display The Auto-Voip Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disable: The Auto VoIP mode is disabled. This is the default setting. • Enable: The Auto VoIP mode is enabled. 10. Click the Save button. Your settings are saved.

  • Page 184: Configure A Mac-Based Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 34. Auto-VoIP status information Field Description Auto-VoIP VLAN ID The Auto-VoIP VLAN ID (By default, 4088) Maximum Number of Voice The maximum number of voice channels supported Channels Supported Number of Voice Channels The number of VoIP channels prioritized successfully...

  • Page 185: Delete A Mac-Based Vlan Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 186: Configure A Protocol-Based Vlan Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 187 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To add a protocol-based VLAN group: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 188: Configure Membership Interfaces For A Protocol-Based Vlan Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • IP: IP is a network layer protocol that provides a connectionless service for the delivery of data. • ARP: Address Resolution Protocol (ARP) is a low-level protocol that dynamically maps network layer addresses to physical medium access control (MAC) addresses.

  • Page 189: Change A Protocol-Based Vlan Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 190: Delete A Protocol-Based Vlan Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 191: Configure Generic Attribute Registration Protocol

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 192: Configure The Garp Switch Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the GARP switch settings You can globally enable GARP VLAN registration protocol (GVRP) on the switch. If GVRP is enabled, the switch can share VLAN IDs with devices in the network. To configure GARP switch settings: 1.

  • Page 193: Configure Garp Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure GARP interface settings You can configure GARP settings for individual interfaces. These settings take effect only if the GVRP mode is enabled on the switch. To configure GARP settings an interface: 1.

  • Page 194: Private Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.

  • Page 195: Overview Of The Tasks For Private Vlan Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports that all traffic between private ports is blocked at all layers, not just Layer 2 traffic, but also traffic such as FTP, HTTP, and Telnet. A private VLAN separates a regular VLAN domain into two or more subdomains. Each subdomain is defined (represented) by a primary VLAN and a secondary VLAN: •...

  • Page 196: Assign A Private Vlan Type To A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports By default, a VLAN is a regular VLAN, so you must assign a private VLAN type to a VLAN. 2. Configure a private VLAN association with a primary and secondary VLAN on page 197.

  • Page 197: Configure A Private Vlan Association With A Primary And Secondary Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 198 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 199: Remove An Existing Private Vlan Association

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • You can type an individual VLAN ID, such as 10. • You can type the VLAN range values separated by a hyphen, for example, 10-13. •...

  • Page 200: Configure The Private Vlan Port Mode

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > VLAN > Private VLAN > VLAN Association Configuration. The VLAN Association Configuration page displays.
  • Page 201 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Switching > VLAN > Private VLAN > VLAN Port Mode Configuration. The VLAN Port Mode Configuration page displays. 6. From the Filter By menu, select to display ports only (Ports), LAGs only (LAG), or both ports and LAGs (All).

  • Page 202: Private Vlan Host Interface: Assign The Interface To Primary And Secondary Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Private VLAN host interface: Assign the interface to primary and secondary VLANs If you configure the private VLAN port mode of an interface as Host (see Configure the private VLAN port mode on page 200), you can assign the interface to a single primary VLAN and a single secondary VLAN.

  • Page 203: Private Vlan Host Interface: Remove The Interface From Primary And Secondary Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The interface that you select must be configured in Host mode (see Configure the private VLAN port mode on page 200). 8. Click the Edit button. The Edit Private VLAN Host Interface Configuration pop-up window displays.

  • Page 204: Private Vlan Promiscuous Interface: Assign The Interface To Primary And Secondary Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 205 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 206: Private Vlan Promiscuous Interface: Remove The Interface From Primary And Secondary Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. In the Promiscuous Secondary VLAN field, specify one or more secondary VLAN IDs. You can specify VLANs for which you configured the type as Isolated or Community, both of which are secondary VLAN types within a private VLAN (see Assign a private VLAN type to a VLAN on page 196).

  • Page 207: Protect Ports

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 208 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 209: Chapter 4 Configure Switching

    Configure Switching This chapter covers the following topics: • LLDP and LLDP-MED settings for interfaces • Green Ethernet settings • Configure the port settings • Link aggregation groups • Spanning Tree Protocol • MAC address table • Dynamic ARP inspection...

  • Page 210: Lldp And Lldp-Med Settings For Interfaces

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports LLDP and LLDP-MED settings for interfaces This section describes the global Link Layer Discovery Protocol (LLDP) and LLDP-Media Endpoint Discovery (LLDP-MED) settings for interfaces. For information about the global LLDP and LLDP-MED settings, see LLDP and LLDP-MED settings for the switch on page LLDP, which is defined in IEEE 802.1AB, lets devices on a LAN advertise major capabilities and physical descriptions.
  • Page 211 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 212: Configure Lldp-Med Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. From the Management IP Address menu, select if the interface advertises the management IP address: • Disable: The interface does not advertise the management IP address. •...
  • Page 213 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 214: Green Ethernet Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 11. From the Network Policy menu, select if the interface transmits network policy TLVs, which advertise network information such as information about VLANs: • Disable: The interface does not transmit network policy TLVs. •...

  • Page 215: Configure Green Ethernet Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Switching > Ports > Green Ethernet. The Green Ethernet page displays. 6. Click the EEE Mode toggle: • The toggle is gray and positioned to the left: Energy Efficient Ethernet (EEE) Mode is disabled.

  • Page 216: Configure The Port Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Switching > Ports > Green Ethernet. The Green Ethernet page displays. The following steps refer to the Green Ethernet Interface Configuration section. 6.
  • Page 217 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 218 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disable: The port is administratively disabled. • Enable: The port is administratively enabled. This is the default setting. For the port or LAG to participate in the network, you must select Enable. 11.

  • Page 219: Link Aggregation Groups

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports the port to again transmit frames. The switch also honors incoming pause frames by temporarily halting transmission. • Asymmetric: If the port buffers become full, the switch does not send pause frames, and data loss could occur.

  • Page 220: Configure A Lag

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure a LAG You can group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel. The switch treats the LAG as if it were a single link.
  • Page 221 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. To change the default name of the LAG, in the LAG Name field, enter the name to be assigned to the LAG. By default, the names are ch1, ch2, ch3, and so on. You can enter a name of up to 15 characters.

  • Page 222: Configure The Port Members For A Lag

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 14. From the LAG Type menu, select to enable or disable the LAG as a static LAG. • Static: Disables Link Aggregation Control Protocol (LACP) on the LAG. You must configure the LAG manually on each device.

  • Page 223: Set The Lacp System Priority

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Switching > LAG > LAG Membership. The LAG Membership page display. 6. From the LAG ID menu, select the LAG. 7.

  • Page 224: Set The Lacp Priority And Time-Out Period For A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Switching > LAG > LACP Configuration. The LACP System Priority page display. 6. In the LACP System Priority field, set the switch’s link aggregation priority relative to the devices at the other ends of the links on which link aggregation is enabled.

  • Page 225: Spanning Tree Protocol

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Switching > LAG > LACP Configuration. The LACP System Priority page display. The following steps refer to the LACP Port Priority section. 6.

  • Page 226: Configure The Global Stp Settings And Display The Stp Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • CST: Common STP. For information about configuring CST, see Configure the CST settings and display the MSTP status on page 229 and Configure the CST interface settings on page 230.
  • Page 227 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 228 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The value can be between 0 and 65535. The default setting is 0. 10. To enable the forwarding of bridge protocol data units (BPDUs) while STP is disabled on the switch, click the Forward BPDU while STP Disabled toggle.

  • Page 229: Configure The Cst Settings And Display The Mstp Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the CST settings and display the MSTP status You can configure common spanning tree (CST) and display the MSTP status on the switch. To configure the CST settings and display the MSTP status: 1.

  • Page 230: Configure The Cst Interface Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports to the next lowest priority that is a multiple of 4096. For example, if you set the priority to a value between 0 and 4095, it is automatically set to 0. 7.
  • Page 231 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports An interface can become diagnostically disabled (D-Disable) when a severe error condition occurs for DOT1S. The most common cause is when BPDU flooding occurs. The flooding criteria are such that DOT1S receives more than 15 BPDUs in a 3-second interval.
  • Page 232 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Edit CST Port Configuration pop-up window displays. 9. From the STP Status menu, select to enable or disable STP for the interface: • Disabled: STP is disabled for the interface. •...

  • Page 233: Display The Cst Interface Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 40. CST port configuration information Field Description Port State Indicates the current STP state of the interface. If enabled, the port state determines what forwarding action is taken on traffic. Possible port states are as follows: •...
  • Page 234 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 235: Display The Rapid Stp Interface Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 41. CST interface status information (Continued) Field Description CST Path Cost The path cost to the CST regional root Port Forwarding State Indicates the current STP state of the interface. If enabled, the port state determines what forwarding action is taken on traffic.
  • Page 236 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 237: Manage Mst Instances

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Manage MST instances You can add, change, or delete Multiple Spanning Tree (MST) instances on the switch. The MST instance consists of an ID, a priority value, and a VLAN ID. Add an MST instance and display the MST status You can add an MST instance and display the MST status.

  • Page 238: Change An Mst Instance

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports When switches or bridges are running STP, each is assigned a priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge. The bridge priority is a multiple of 4096.

  • Page 239: Delete An Mst Instance

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 240: Configure And Display The Interface Settings For An Mst Instance

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 241 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 242: Display The Stp Interface Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 44. MST interface configuration information Field Description Auto Calculated Port Path Cost Indicates if the path cost is automatically calculated (Enable) or not (Disable). If enabled, the path cost is calculated based on the link speed of the port if the configured value for Port Path Cost is zero.
  • Page 243 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To display the STP interface statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 244: Mac Address Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports MAC address table You can view or configure the MAC address table. This table contains information about static and dynamic unicast entries for which the switch holds forwarding or filtering information.

  • Page 245: View, Search, Or Clear The Mac Address Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The period is from 10 to 1000000 seconds. The default is 300 seconds. 7. Click the Apply button. Your settings are saved. View, search, or clear the MAC address table If you clear the MAC address entries in the MAC address table, only the dynamic entries are removed.

  • Page 246: Add A Static Mac Address To The Mac Address Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • VLAN ID: In the Search field, enter the VLAN ID, for example, 100. Then, click the Go button. • MAC Address: In the Search field, enter the 6-byte hexadecimal MAC address in two-digit groups separated by colons, for example, 01:23:45:67:89:AB.

  • Page 247: Remove A Static Mac Address From The Mac Address Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 248: Dynamic Arp Inspection

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To remove a static MAC address from the MAC address table: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 249: Configure The Global Dai Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports DAI relies on DHCP snooping. DHCP snooping listens to DHCP message exchanges and builds a bindings database of valid MAC addresses, IP addresses, VLAN interfaces, and so on. If DAI is enabled and if a sender MAC address and sender IP address do not match an entry in the DHCP snooping bindings database, the switch drops the ARP packet.

  • Page 250: Configure Dai Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. Click the Validate Source MAC toggle to set the source MAC validation mode for the switch: • The toggle is gray and positioned to the left: Source MAC addresses are not validated.

  • Page 251: Configure A Dai Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 252 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure a DAI interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 253: Dai Acls

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disabled: The interface is not trusted and ARP packets entering the interface are subjected to DAI. This is the default setting. • Enabled: The interface is trusted and ARP packets entering the interface are forwarded without checking.

  • Page 254: Configure A Rule For An Existing Dai Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 255 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 256: Remove A Rule From A Dai Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 12. In the Sequence Number field, type a number in the range from 1 to 2147483647 to identify the rule. 13. Click the Save button. Your settings are saved and the rule is added. Remove a rule from a DAI ACL You can remove a rule from a DAI ACL if you no longer need the rule.

  • Page 257: Remove A Dai Access Control List

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved and the rule is removed. Remove a DAI access control list You can delete a dynamic ARP inspection (DAI) access control list (ACL) that you no longer need.
  • Page 258 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 259 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 47. DAI Statistics information (Continued) Field Description Bad Dest MAC The number of ARP packets that were dropped by DAI because the target MAC address in the ARP reply packets did not match the destination MAC address in the Ethernet header Invalid IP...

  • Page 260: Chapter 5 Configure Multicast

    Configure Multicast This chapter covers the following topics: • Display the entries in the multicast forwarding database • Display the multicast forwarding database statistics • Internet Group Management Protocol snooping • IGMP snooping querier overview • Multicast Listener Discovery snooping •...

  • Page 261: Display The Entries In The Multicast Forwarding Database

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display the entries in the multicast forwarding database The multicast forwarding database (MFDB) holds the port membership information for all active multicast address entries. The key for an entry consists of a combination of a VLAN ID and a MAC address.

  • Page 262: Display The Multicast Forwarding Database Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 48. IGMP snooping information Field Description MAC Address The multicast MAC address for which you requested data VLAN ID The VLAN ID to which the multicast MAC address is related Component The component that is responsible for this entry in the MFDB.

  • Page 263: Internet Group Management Protocol Snooping

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 264: Enable Igmp Snooping And Configure Ip Header Validation

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports approach could lead to less efficient use of network bandwidth, particularly when the packet is intended for only a small number of nodes. Packets are flooded into network segments where no node is receptive to the packet.

  • Page 265: Display Entries In The Igmp Snooping Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The IGMP Snooping page displays. 6. Click the IGMP Snooping Status toggle to enable or disable IGMP snooping: • The toggle is gray and positioned to the left: IGMP snooping is disabled. This is the default setting.

  • Page 266: Display Igmp Snooping Statics And Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Switching > Multicast > IGMP Snooping > IGMP Snooping. The IGMP Snooping page displays. 6. To search for an entry in the IGMP snooping table, in the Search field, enter a MAC address, and click the Go button.

  • Page 267: Configure The Igmp Snooping Settings For An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 268 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 269: Configure Igmp Snooping For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 11. In the Max Response Time field, type the period that the switch must wait after it sent a query on the interface because it did not receive a report from a group on that interface.
  • Page 270 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 271: Configure An Igmp Multicast Router Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 13. From the Fast Leave Mode menu, select to enable or disable the IGMP snooping Fast Leave mode for the VLAN: • Disable: Fast Leave mode is disabled for the VLAN. This is the default setting. •...
  • Page 272 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 273: Configure An Igmp Multicast Router Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure an IGMP multicast router VLAN You can configure a specific VLAN for a specific interface to forward snooped IGMP packets to the multicast router that is connected to the interface. In most situations, this configuration is not required because the switch automatically detects a multicast router and forwards IGMP packets accordingly.

  • Page 274: Igmp Snooping Querier Overview

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. From the Multicast Router menu, select to enable or disable the IGMP multicast router option for the VLAN: • Disabled: The IGMP multicast router option is disabled for the VLAN. This is the default setting.
  • Page 275 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 276: Add An Igmp Snooping Querier For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add an IGMP snooping querier for a VLAN You can add an IGMP querier for use with a VLAN on the network. To add an IGMP snooping querier for a VLAN: 1.

  • Page 277: Change An Igmp Snooping Querier For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. In the Snooping Querier VLAN Address field, type the IPv4 address to be used as the source IP address in periodic IGMP queries that are sent on the VLAN. 10.

  • Page 278: Remove The Igmp Snooping Querier Settings From A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. Change the settings as needed. For more information, see Add an IGMP snooping querier for a VLAN on page 276. 9. Click the Save button. Your settings are saved.

  • Page 279: Display The Status Of The Igmp Snooping Querier For All Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved and the IGMP snooping querier settings are removed. (The VLAN itself is not deleted.) Display the status of the IGMP snooping querier for all VLANs You can display the status of the IGMP snooping querier for all VLANs.

  • Page 280: Enable Igmp Snooping On The Auto-Video Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 52. IGMP snooping group information Field Description VLAN ID The VLAN ID on which an IGMP snooping querier is enabled Operational State The operational state of the IGMP snooping querier on a VLAN. It can be in any of the following states: •...

  • Page 281: Multicast Listener Discovery Snooping

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 282: Enable Mld Snooping

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The MLD protocol is derived from IGMP. MLD version 1 (MLDv1) is equivalent to IGMPv2, and MLD version 2 (MLDv2) is equivalent to IGMPv3. MLD is a subprotocol of Internet Control Message Protocol version 6 (ICMPv6), and MLD messages are a subset of ICMPv6 messages, identified in IPv6 packets by a preceding Next Header value of 58.

  • Page 283: Configure The Mld Snooping Settings For An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. 8. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Table 53. MLD snooping configuration information Field Definition Multicast Control Frame Count...
  • Page 284 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 285: Add Mld Snooping For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 12. In the Maximum Response Time field, type the period that the switch must wait after it sent a query on the interface because it did not receive a report from a group on that interface.

  • Page 286: Change The Mld Snooping Settings For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Switching > Multicast > MLD Snooping > MLD VLAN Configuration. The MLD VLAN Configuration page displays. 6. Click the Add New button. The Add MLD VLAN Configuration pop-up window displays. 7.

  • Page 287: Remove The Mld Snooping Settings From A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 288: Configure An Mld Multicast Router Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 289 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 290: Enable Or Disable Mld Multicast Router Mode For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Enable or disable MLD multicast router mode for a VLAN You can use a VLAN for a specific interface to forward snooped MLD packets to the multicast router that is connected to the interface.

  • Page 291: Mld Snooping Querier Overview

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. From the Multicast Router menu, select to enable or disable the MLD multicast router mode for the VLAN: • Disabled: The MLD multicast router mode is disabled for the VLAN. This is the default setting.
  • Page 292 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 293: Add An Mld Snooping Querier For A Vlan And Display The Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add an MLD snooping querier for a VLAN and display the status You can add an MLD querier for use with a VLAN on the network. To add an MLD snooping querier for a VLAN and display the status: 1.

  • Page 294: Change An Mld Snooping Querier For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Disabled. If the switch detects another querier of the same version in the VLAN, the snooping querier moves to the non-querier state. • Enabled: The snooping querier participates in querier election, in which the lowest numbered IP address operates as the querier in that VLAN.

  • Page 295: Remove The Mld Snooping Querier Settings From A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 296: Multicast Vlan Registration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 297: Enable Mvr And Configure The Global Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports dynamically join or leave the MVLAN without interfering with their membership in other VLANs. MVR, like IGMP and MLD snooping, allows a Layer 2 switch to listen to IGMP and MLD messages to learn about multicast group membership.

  • Page 298: Add An Mvr Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. In the MVR Multicast VLAN field, type the VLAN ID on which MVR multicast data must be received. All MVR source ports belong to this VLAN. The range is from 1 to 4093. The default is 1.

  • Page 299: Remove An Mvr Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 300: Configure An Mvr Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 301 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 302: Configure The Members Of An Mvr Group

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. From the Immediate Leave menu, select if the Immediate Leave feature is enabled on the interface: • Disable: The Immediate Leave feature is disabled on the interface. This is the default setting.

  • Page 303: Display The Mvr Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Switching > MVR > MVR Group Membership. The MVR Group Membership page displays. 6. From the MVR Group IP menu, select the IP address of the MVR group. 7.
  • Page 304 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 56. MVR statistics information Field Definition IGMP Query Received The number of received IGMP queries IGMP Report V1 Received The number of received IGMP V1 reports IGMP Report V2 Received The number of received IGMP V2 reports IGMP Leave Received...

  • Page 305: Chapter 6 Manage Routing

    Manage Routing This chapter covers the following topics: • Routing concepts • IPv4 routing • IPv6 routing • Routing VLANs • Routing table, routes, and route preferences • Address Resolution Protocol...

  • Page 306: Routing Concepts

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Routing concepts The switch supports IP routing. When a packet enters the switch, the switch checks the destination MAC address to determine if it matches any of the configured routing interfaces.

  • Page 307: Display The Ipv4 Routing Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 308 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 309 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 58. IP statistics information (Continued) Field Description IpInDiscards The number of input IP datagrams for which no problems were encountered to prevent their continued processing, but that were discarded (for lack of buffer space).
  • Page 310 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 58. IP statistics information (Continued) Field Description IcmpInParmProbs The number of ICMP parameter problem messages received IcmpInSrcQuenchs The number of ICMP source quench messages received IcmpInRedirects The number of ICMP redirect messages received IcmpInEchos...

  • Page 311: Ipv6 Routing

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports IPv6 routing You can enable or disable the IPv6 routing mode, configure the global IPv6 routing settings, configure IPv6 routing VLANs, add IPv6 prefixes, add IPv6 static routes and route preferences, and view IPv6 routing statistics, routes, and neighbors.

  • Page 312: Configure Ipv6 Routing For A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: IPv6 routing is disabled. This is the default setting. • The toggle is purple and positioned to the right: IPv6 routing is enabled. 7.
  • Page 313 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. From the IPv6 Mode menu, select to enable or disable the IPv6 routing mode for the VLAN: • Disable: IPv6 routing is disabled for the VLAN. This is the default setting. •...
  • Page 314 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 15. In the Adv Reachable Interval field, type the reachable interval that the VLAN transmits in router advertisements. The reachable interval is period during which a remote IPv6 device is considered reachable after receipt of a neighbor discovery confirmation message.

  • Page 315: Add Prefix Settings For An Ipv6 Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following table describes the view-only fields on the page. Table 59. IPv6 VLAN configuration information Field Description Operational Mode Indicates the operational mode of the routing VLAN (Enabled or Disabled) Link State Indicates if the VLAN link is up or down (Link Up or Link Down)
  • Page 316 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. Click the Add New button. The Add IPv6 Prefix Configuration pop-up window displays. 8. In the IPv6 Prefix field, type the IPv6 prefix for the routing VLAN. 9.

  • Page 317: Change Prefix Settings For An Ipv6 Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Change prefix settings for an IPv6 routing VLAN You can add an IPv6 prefix and associated settings for an IPv6 routing VLAN. To add IPv6 prefix settings for an IPv6 routing VLAN: 1.

  • Page 318: Remove Prefix Settings For An Ipv6 Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about the settings, see Add prefix settings for an IPv6 routing VLAN on page 315. 10. Click the Save button. Your settings are saved. Remove prefix settings for an IPv6 routing VLAN You can remove IPv6 prefix settings that you no longer need for an IPv6 routing VLAN.

  • Page 319: Display The Ipv6 Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved and the IPv6 prefix configuration is removed. Display the IPv6 statistics You can display the IPv6 statics, which include ICMPv6 statistics. To display the IPv6 statistics: 1.
  • Page 320 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 60. IPv6 statistics information Field Description Ip6InReceives The total number of input datagrams received, including those received in error Ip6InHdrErrors The number of input datagrams discarded due to errors in their IPv6 headers, including version number mismatch, other format errors, hop count exceeded, errors discovered in processing their IPv6 options, and so on...
  • Page 321 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 60. IPv6 statistics information (Continued) Field Description Ip6OutDiscards The number of output IPv6 datagrams for which no problems were encountered to prevent their continued processing, but that were discarded for reasons such as lack of buffer space.
  • Page 322 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 60. IPv6 statistics information (Continued) Field Description Ip6InECT1Pkts The number of ECT1 packets received Ip6InECT0Pkts The number of ECT0 packets received Ip6InCEPkts The number of CE packets received Icmp6InMsgs The number of ICMP messages received, which includes all those counted by IPv6IfIcmpInErrors.

  • Page 323: Display And Search The Ipv6 Neighbor Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 60. IPv6 statistics information (Continued) Field Description Icmp6OutDestUnreachs The number of ICMP Destination Unreachable messages sent Icmp6OutPktTooBigs The number of ICMP Packet Too Big messages sent Icmp6OutTimeExcds The number of ICMP Time Exceeded messages sent Icmp6OutParmProblems...
  • Page 324 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 325: Add A Static Ipv6 Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 61. IPv6 Advanced Neighbor Table (Continued) Field Description isRtr Displays if the neighbor is a router. If the neighbor is a router, the field displays True.
  • Page 326 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 327: Change A Static Ipv6 Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. Change a static IPv6 route You can change an existing static IPv6 route. To change a static IPv6 route: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 328: Delete A Static Ipv6 Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Delete a static IPv6 route You can delete a static IPv6 route that you no longer need. To delete a static IPv6 route: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 329 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 330: Configure The Ipv6 Route Preference For The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 62. IPv6 route table information (Continued) Field Description Next Hop IP Address The next hop IPv6 address for the active route Preference The route preference of the configured route Configure the IPv6 route preference for the switch You can configure the default preference for the switch, which is a value in the range...

  • Page 331: Routing Vlans

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Routing > IPv6 > Route Preference. The Route Preference page displays. The Local field displays the local preference. 6. In the Static field, type the static route preference value for the switch. The range is from 1 to 255.
  • Page 332 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Create a routing VLAN with an IP address and subnet mask for routing. • Add selected interfaces, LAGs, or both to the newly created routing VLAN. •...
  • Page 333 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Select: Click an excluded port or LAG once. A selected port or LAG displays blue. • Exclude: Click a selected port or LAG once. An excluded port or LAG displays blank.

  • Page 334: Add Routing To An Existing Vlan And Display Routing Vlan Information

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add routing to an existing VLAN and display routing VLAN information For an existing regular VLAN, that is, a VLAN that does not yet support routing, you can add an IPv4 routing address and associated subnet mask.

  • Page 335: Change An Existing Routing Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. The VLAN now displays in the VLAN Routing Configuration table. The following table describes the view-only fields on the Routing page. Table 63. VLAN routing configuration information Field Description VLAN...

  • Page 336: Remove The Routing Function From A Vlan

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Routing > VLAN > Routing. The Routing page displays. 6. Select the check box for the routing VLAN. 7. Click the Edit button. The Edit VLAN Routing Configuration pop-up window displays.

  • Page 337: Routing Table, Routes, And Route Preferences

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Routing> VLAN > Routing. The Routing page displays. 6. Select the check box for the VLAN. 7. Click the Delete button. Your settings are saved. The routing function is removed from the VLAN but the VLAN itself is not deleted.
  • Page 338 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 339: Add A Static Or Default Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. Add a static or default route You can add a static or default route to the routing table. To add a static or default route: 1.

  • Page 340: Display The Routes

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports a. In the Network Address field, type the IPv4 route prefix for the destination. b. In the Subnet Mask field, type the subnet or network mask that identifies the attached network.

  • Page 341: Change A Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 342: Delete A Route

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 343: Address Resolution Protocol

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 344: Display The Arp Entries In The Arp Cache

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports destination address field of the Layer 2 header that is prepended to the IP packet and sent to the recipient. Each device in a network maintains its ARP cache locally. The switch learns ARP cache entries by examining the source information in the ARP packet payload fields, regardless of whether it is an ARP request or a response.
  • Page 345 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select Routing > ARP > ARP Cache. The ARP Cache page displays.

  • Page 346: Add A Static Entry To The Arp Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add a static entry to the ARP table You can add a new static entry to the ARP table. To add a new static entry to the ARP table: 1.

  • Page 347: Change A Static Entry In The Arp Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the Routing VLANs ARP Cache section, see Display the ARP entries in the ARP cache on page 344. Change a static entry in the ARP table You can change an existing static entry in the ARP table.

  • Page 348: Delete A Static Arp Entry

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. Delete a static ARP entry You can delete a static ARP entry that you no longer need. To delete a static ARP entry: 1.
  • Page 349 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure the ARP table settings: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 350: Remove Entries From The Arp Table

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. Click the Dynamic Renew toggle to enable or disable dynamic (automatic) renewal of ARP entries after they age out: • The toggle is gray and positioned to the left: Dynamic renewal is disabled. •...
  • Page 351 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • All Dynamic Entries: All dynamic entries will be removed. • All Dynamic and Gateway Entries: All dynamic and gateway entries will be removed. • Specific Dynamic/Gateway Entry: You must specify the IP address of the specific dynamic entry or specific gateway entry in the Remove IP Address field.

  • Page 352: Chapter 7 Configure Quality Of Service

    Configure Quality of Service This chapter covers the following topics: • Quality of Service concepts • Class of Service • Differentiated Services...

  • Page 353: Quality Of Service Concepts

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Quality of Service concepts In a switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.

  • Page 354: Configure The Cos Trust Mode Settings Globally

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports based on the existing port default priority as mapped to a traffic class by the current 802.1p mapping table. Alternatively, when a port is configured as untrusted, it does not trust any incoming packet priority designation and uses the port default priority value instead.

  • Page 355: Configure The Cos Trust Mode And Shaping Rate For An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Untrusted: Do not trust any CoS packet marking at ingress. • 802.1p: The eight priority tags that are specified in IEEE 802.1p are p0 to p7. The QoS setting lets you map each of the eight priority levels to one of eight internal hardware priority queues.

  • Page 356: Configure Cos Queue Settings For An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following steps refer to the CoS Interface Configuration section. 6. From the Filter By menu, select to display ports only (Ports), LAGs only (LAG), or both ports and LAGs (All).
  • Page 357 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports of congestion, and the scheduling of packet transmission from all queues on a port. Each port contains its own CoS queue-related configuration. To configure the CoS queue settings for an interface: 1.

  • Page 358: Map 802.1P Priorities To Queues

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.
  • Page 359 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To map 802.1p priorities to queues: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 360: Map Dscp Values To Queues

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Map DSCP values to queues The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. The DSCP values go from 1 to 63. You can map each DSCP value to an internal traffic class.

  • Page 361: Differentiated Services

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The DSCP to Queue Mapping page displays. 6. From the DSCP menu, select a Per Hop Behavior (PHB) option or the Other DSCP Values option: • Class Selector (CS) PHB: These values are based on IP precedence. •...

  • Page 362: Defining Diffserv

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Defining DiffServ To use DiffServ for QoS, you must first define the following categories and their criteria: 1. Class: Create a class and define class criteria (see Add and configure a DiffServ class on page 364 or Add and configure an IPv6 DiffServ class on page 370).
  • Page 363 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 364: Configure A Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure a DiffServ class You can add a new DiffServ class name or rename or delete an existing class. You can also define the criteria to associate with a DiffServ class. These DiffServ classes are used to prioritize packets as they are received.
  • Page 365 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The class name must start with a letter and can be 1 to 31 alphanumeric characters in length. NOTE: The only option in the Class Type menu is All. You do not need to select this option because it is automatically applied.
  • Page 366 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ○ Address: The source MAC address that must match. The source MAC address is specified as six two-digit hexadecimal numbers separated by colons. ○ Mask: The MAC mask, which specifies the bits in the source MAC address to compare against the Ethernet frame.

  • Page 367: Change The Criteria For An Existing Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Destination L4 Port: Requires the packet’s TCP/UDP destination port to match the protocol that you select from the menu below the Class Configuration menu. To define a port number, select Other from the menu. Then, in the field to the right, type the port number from 0 to 65535.

  • Page 368: Remove A Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To change the criteria for an existing DiffServ class: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 369: Configure An Ipv6 Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 370: Add And Configure An Ipv6 Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add and configure an IPv6 DiffServ class You can add a new IPv6 DiffServ class and define the criteria that must be associated the IPv6 DiffServ class. To add and configure an IPv6 DiffServ class: 1.
  • Page 371 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. Click the Save button. Your settings are saved and the new class is added. 9. After creating the class, click the class name, which is a hyperlink. The page adjusts and shows the IPv6 Class Information section with the class name and the class type, and the IPv6 DiffServ Class Configuration section.

  • Page 372: Change The Criteria For An Existing Ipv6 Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To define a port number, select Other from the menu. Then, in the field to the right, type the port number from 0 to 65535. • IP DSCP: Requires the packet’s IP DiffServ Code Point (DSCP) value to match the IP DSCP keyword code that you select from the menu below the Class Configuration menu.

  • Page 373: Remove An Ipv6 Diffserv Class

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 374: Configure A Diffserv Policy

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 375 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 376 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports From the menu below the Policy Attribute menu, select an IP precedence value in the range from 0 to 7. • Mirror: Requires that matching packets are mirrored (copied) to another interface or LAG.

  • Page 377: Change The Attributes For An Existing Diffserv Policy

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ○ Mark IP Precedence: Requires that matching packets are marked with an IP precedence value. From the menu below the Conform Action menu, select an IP precedence value in the range from 0 to 7.

  • Page 378: Remove A Diffserv Policy

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 379: Attach A Diffserv Policy To An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 380: Remove A Diffserv Policy From An Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select QoS > DiffServ > Service Configuration. The Service Configuration page displays.

  • Page 381: Display Diffserv Service Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To a DiffServ policy from an interface: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 382 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To display DiffServ service statistics: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 383 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 72. DiffServ Service Statistics information (Continued) Field Description Operational Status The operational status of the DiffServ policy (Up or Down). The status is displayed as Up if all of the following conditions are true: •...

  • Page 384: Chapter 8 Manage Switch Security

    Manage Switch Security The chapter covers the following topics: • Change the device admin password • RADIUS servers • TACACS+ servers • Authentication lists • Management access profiles and rules • Port authentication • MAC filters for traffic control • Storm control •...

  • Page 385: Change The Device Admin Password

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Change the device admin password This device admin password is the password that you use to log in to the device UI of the switch. The password must be 8 to 20 characters in length and must contain at least one uppercase letter, one lowercase letter, and one number.

  • Page 386: Radius Servers

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports RADIUS servers RADIUS servers provide additional security for networks. The RADIUS server maintains a user database, which contains per-user authentication information. The switch passes information to the configured RADIUS server, which can authenticate a user name and password before authorizing use of the network.
  • Page 387 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 388: Radius Authentication Servers

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports RADIUS authentication servers You can configure and display settings for up to three RADIUS authentication servers in the network. Add a RADIUS authentication server You can add up to three RADIUS authentication servers. One server can be the primary server;...

  • Page 389: Change The Settings For A Radius Authentication Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. In the Authentication Port field, type the UDP port number of the RADIUS authentication server. The range is from 1 to 65535. 10. From the Secret Configured menu, select if you want to enable or disable authentication and encryption for communication between the switch and the RADIUS server: •...

  • Page 390: Remove A Radius Authentication Server From The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 391: Display The Radius Authentication Server Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 392 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 393: Radius Accounting Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 74. RADIUS authentication server statistics information (Continued) Field Description Unknown Types The number of RADIUS packets of an unknown type that were received from the server Packets Dropped The number of RADIUS packets received from the server and then dropped RADIUS accounting server...

  • Page 394: Display Or Clear The Radius Accounting Server Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Security > Management Security > RADIUS > Accounting Server Configuration. The Accounting Server Configuration page displays. 6. In the Accounting Server Address field, type the IP address of the RADIUS accounting server.
  • Page 395 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 396: Tacacs+ Servers

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 75. RADIUS accounting server statistics information (Continued) Field Description Pending Requests The number of RADIUS accounting-request packets sent to the server that did not yet time out or receive a response Timeouts The number of accounting time-outs to this server Unknown Types...

  • Page 397: Add A Tacacs+ Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.
  • Page 398 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 399: Change The Settings For A Tacacs+ Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Change the settings for a TACACS+ server You can change the settings for an existing TACACS+ server. To change the settings for a TACACS+ server: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 400: Remove A Tacacs+ Server From The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Remove a TACACS+ server from the switch You can remove a TACACS+ server with which the switch no longer needs to communicate. To remove a TACACS+ server from the switch: 1.

  • Page 401: Configure The Http/Https Authentication List

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the HTTP/HTTPS authentication list You can configure the HTTP/HTTPS authentication list, which specifies the authentication methods to validate switch or port access through HTTP and HTTPS, for example, through a web browser session.

  • Page 402: Configure The Dot1X Authentication List

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you select a method that does not time out as the first method, such as Local, no other method is tried, even if you specified more than one method. User authentication occurs in the order that you select the methods: •...

  • Page 403: Management Access Profiles And Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 404: Add An Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports CAUTION: If you configure a security access profile incorrectly and you activate the access profile, you might no longer be able to access the switch’s device UI. If that situation occurs, you must reset the switch to factory default settings.

  • Page 405: Add A Rule To The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add a rule to the access profile After you add the access profile, you can add one or more security access rules to the access profile. If you access the switch from a computer, make sure that you add a permit rule for the type of service that you use (for example, HTTPS), your computer’s IP address, and your computer’s subnet mask.

  • Page 406: Activate The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. From the Rule Type menu, select to permit or deny access when the rule is a match: • Permit: Allows access from a device that matches the rule criteria. •...

  • Page 407: Display The Access Profile Rules And The Number Of Filtered Packets

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 408: Change A Rule For The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 409: Deactivate The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 410: Remove A Rule From The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 411: Remove The Access Profile

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 412: Port Authentication

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 413: Configure The Global 802.1X Authentication Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the global 802.1X authentication settings You can enable 802.1X on the switch and configure the global 802.1X settings that apply to the switch. If you enable 802.1X, authentication must be performed by a RADIUS server: •...
  • Page 414 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: 802.1X port-based authentication is globally disabled on the switch. This is the default setting. The switch does not check for 802.1X authentication before allowing traffic on any ports, even if individual ports are configured to allow only authenticated users.

  • Page 415: Configure The 802.1X Authentication Settings For A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the 802.1X authentication settings for a port You can configure 802.1X authentication settings for a port. These control access to the port. To configure 802.1X authentication settings for a port: 1.
  • Page 416 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.
  • Page 417 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 13. In the Guest VLAN Period field, type the period in seconds during which the port remains in the quiet state following a failed authentication exchange. In the quiet state for the guest VLAN, the port does not accept authentication requests.

  • Page 418: Initialize 802.1X On A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. The following table describes the view-only fields on the page. Table 77. Port authentication information Field Description Control Direction The control direction for the port, which is always Both. The control direction indicates how protocol exchanges take place between a supplicant and authenticator.

  • Page 419: Restart 802.1X Authentication On A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 420: Display The Port Summary

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 421 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 422: Display The Client Summary

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 78. Port summary information (Continued) Field Description Operating Control Mode The control mode under which the port is actually operating: • Auto: Access is determined by the outcome of the authentication exchanges between the supplicant, authenticator, and the authentication server.
  • Page 423 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 424: Mac Filters For Traffic Control

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports MAC filters for traffic control You can create MAC filters that limit the traffic allowed into and out of specific ports on the switch. The traffic limitations are based on MAC addresses. You can limit the traffic from a MAC address, to a MAC address, or both by selecting one or more source ports and LAGs, one or more destination ports and LAGs, or a combination of both.

  • Page 425: Delete A Mac Filter

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The MAC Filter page displays. The following steps refer to the MAC Filter Configuration section. 6. From the MAC Filter menu, select Create Filter. If you did not configure any filters, this is the only option available. 7.

  • Page 426: Display The Mac Filter Summary

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 427: Storm Control

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 3. Enter one of the following passwords: • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 428: Configure The Global Storm Control Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the global storm control settings The global storm control settings apply to all ports. After you configure the global settings, you can specify storm control settings for individual ports. To configure the global storm control settings: 1.

  • Page 429: Configure The Storm Control Settings For A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Multicast: If multicast traffic on a port exceeds the configured threshold and you select Enable from the Status menu, the switch discards the multicast traffic. •...
  • Page 430 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 431: Port Security

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enable: Storm control for the selected packet type is enabled on the port. • Disable: Storm control for the selected packet type is disabled on the port. This is the default setting.
  • Page 432 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 433: Configure A Port Security Interface

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure a port security interface A MAC address can be defined as allowable by one of two methods: dynamically or statically. Both methods are used concurrently when a port is locked. Dynamic locking implements a first arrival mechanism for port security.
  • Page 434 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. From the Filter By menu, select to display ports only (Ports), LAGs only (LAG), or both ports and LAGs (All). 7. Select one or more interfaces by taking one of the following actions: •...

  • Page 435: Display Learned Mac Addresses And Convert Them To Static Addresses

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display learned MAC addresses and convert them to static addresses After you enable port security globally (see Configure the global port security mode on page 431) and enable port security for specific interfaces (see Configure a port security interface on page 433), you can convert a dynamically learned MAC address to a statically locked address.

  • Page 436: Display Port Security Violations

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Field Description VLAN ID The VLAN ID corresponding to the MAC address MAC Address The MAC addresses learned on port or LAG 7. To refresh the page, click the Refresh button. 8.

  • Page 437: Loop Protection

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Security > Traffic Control > Port Security > Port Security Configuration. The Port Security Configuration page displays. 6.

  • Page 438: Configure The Global Loop Protection Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Loop protection is not intended for ports that serve as uplinks between spanning tree–aware switches. Loop protection is designed for unmanaged switches that drop spanning tree bridge protocol data units (BPDUs). You need to enable the feature globally before you can enable it at the port level so that the system policy filter can be installed.
  • Page 439 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 440: Configure The Loop Protection Settings For Interfaces And Display The Loop Protection State

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure the loop protection settings for interfaces and display the loop protection state Before you can configure loop protection for individual ports, you must globally enable loop protection (see Configure the global loop protection settings on page 438).
  • Page 441 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To configure a single interface, select the check box associated with the interface, or type the interface number (for example, xg3) in the Search field and click the Go button.

  • Page 442: Denial Of Service

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Denial of service You can configure the Denial of Service (DoS) settings for the switch. The switch provides support for classifying and blocking specific types of DoS attacks Configure Auto-DoS You can automatically enable all denial of service (DoS) features that are supported on the switch, except for the TCP port and UDP port DoS features, which you must enable...

  • Page 443: Configure Individual Denial Of Service Attack Options

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: Auto-DoS is disabled. This is the default setting. • The toggle is purple and positioned to the right: Auto-DoS is enabled. 7.
  • Page 444 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following steps refer to the Denial of Service Configuration section. 6. In the Denial of Service Min TCP Header Size field, type the minimum TCP header size allowed.
  • Page 445 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Denial of Service SMAC=DMAC: Enabling SMAC=DMAC DoS prevention causes the switch to drop packets with a source MAC address equal to the destination MAC address. •...

  • Page 446: Chapter 9 Configure Access Control Lists

    Configure Access Control Lists This chapter covers the following topics: • About access control lists • ACL Wizard • MAC ACLs • MAC ACL rules • MAC ACL bindings • IPv4 ACLs • Standard IPv4 ACL rules • Extended IPv4 ACL rules •...

  • Page 447: About Access Control Lists

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports About access control lists Access control lists (ACLs) ensure that only authorized users can access specific resources while blocking any unwarranted attempts to reach network resources. ACLs are used to provide traffic flow control, restrict contents, decide which types of traffic are forwarded or blocked, and provide security for the network.
  • Page 448 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 449 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • ACL Based on Source IPv4 L4 Port: Creates an ACL based on the source IPv4 Layer 4 port number. • ACL Based on Destination IPv6 L4 Port: Creates an ACL based on the destination IPv6 Layer 4 port number.
  • Page 450 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ACL Based On Fields Destination MAC • Destination MAC: Type the destination MAC address to compare against an Ethernet frame. The format is xx:xx:xx:xx:xx:xx. The BPDU keyword might be specified using a destination MAC address of 01:80:C2:xx:xx:xx.

  • Page 451: Change An Acl Rule That You Created With The Acl Wizard

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports As an example, the following steps describe how you can create an ACL based on the destination MAC address: a. In the Destination MAC field, type the destination MAC address that must be compared against the information in an Ethernet frame.
  • Page 452 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports NOTE: An ACL and associated rule display only while you remain on the ACL Wizard page after you created the ACL. If you go to another page and then return to the ACL Wizard page, the ACL and associated rule no longer display, and you cannot change the rule on the ACL Wizard page.

  • Page 453: Remove An Acl That You Created With The Acl Wizard

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Edit ACL pop-up window display. The name of the window includes the type of ACL that you selected. c. Change the setting as needed. For more information, see Use the ACL Wizard to create a simple ACL on page 447.

  • Page 454: Mac Acls

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 455: Add A Mac Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 1. Create a MAC ACL (see Add a MAC ACL on page 455). 2. Create a MAC rule (see MAC ACL rules on page 458). 3. Bind (associate) the MAC ACL with one or more interfaces (see Configure a MAC ACL interface binding on page 464).

  • Page 456: Change The Name Of A Mac Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. Click the Add New button. The Add MAC ACL/Rule pop-up window displays. 7. Select the Add New ACL only radio button. 8. In the ACL Name field, type a name for the MAC ACL. The name string can include letters, numbers, hyphens, underscores, and spaces.

  • Page 457: Remove A Mac Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The MAC ACL Configuration section displays the total number of MAC ACLs, IPv4 ACLs, and IPv6 ACLs that are configured on the switch and the maximum number of ACLs that can be configured.

  • Page 458: Mac Acl Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The MAC ACL Configuration section displays the total number of MAC ACLs, IPv4 ACLs, and IPv6 ACLs that are configured on the switch and the maximum number of ACLs that can be configured.
  • Page 459 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select Security > ACL > MAC ACL > MAC ACL/Rule. The MAC ACL/Rule Table page displays.
  • Page 460 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • False: Not all packets need to match the ACL rule. • True: Each packet must match the ACL rule. 15. In the CoS field, type the 802.1p priority that must be compared against the information in an Ethernet frame.

  • Page 461: Change The Match Criteria For A Mac Acl Rule

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 21. In the Source MAC Mask field, type the source MAC address mask that must be compared against the information in an Ethernet frame. The format is xx:xx:xx:xx:xx:xx. 22.

  • Page 462: Remove A Rule From A Mac Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 463: Mac Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 464: Configure A Mac Acl Interface Binding

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Configure a MAC ACL interface binding You can bind an MAC ACL to one or more interfaces, which can be physical ports, LAGs, or both. To bind a MAC ACL to one or more interfaces: 1.

  • Page 465: Display Or Delete Mac Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. In the Ports table, LAG table, or both, click the ports and LAGs to which the MAC ACL must be bound. A selected port or LAG displays blue. An excluded port or LAG displays blank. 9.

  • Page 466: Ipv4 Acls

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following table describes the information that is displayed in the MAC ACL Binding Table. Table 84. Interface MAC ACL binding information Field Description Interface The interface to which the MAC ACL is bound Direction The packet filtering direction for the MAC ACL, which is always inbound ACL Type...

  • Page 467: Add An Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add an IPv4 ACL You can add an IPv4 ACL and then add a rule later. The following procedure describes how to add an IPv4 ACL only. You can also add an IPv4 ACL and a rule together, as one task (see Add a rule for a standard IPv4 ACL on page 470 or Add a rule for an extended IPv4 ACL on page 476).

  • Page 468: Change The Number Or Name Of An Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Number from 1–99: Creates a standard IP ACL, which allows you to permit or deny traffic from a source IP address. • Number from 100–199: Creates an extended IP ACL, which allows you to permit or deny specific types of Layer 3 or Layer 4 traffic from a source IP address to a destination IP address.

  • Page 469: Remove An Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 5. Select Security > ACL > IP ACL > IP ACL/Rules. The IP ACL/Rules page displays. The IP ACL Configuration section displays the total number of IPv4 ACLs, IPv6 ACLs, and MAC ACLs that are configured on the switch and the maximum number of ACLs that can be configured.

  • Page 470: Standard Ipv4 Acl Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 471 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 472 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 11. In the Sequence Number field, enter a number in the range from 1 to 2147483647 to identify the rule. An IP ACL can contain up to 50 rules. 12.

  • Page 473: Change The Match Criteria For A Standard Ipv4 Acl Rule

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 17. If you select False from the Match Every menu, configure the source IP address and mask: • In the Source IP Address field, type the IP address that must be compared against the packet’s source IP address.

  • Page 474: Remove A Rule From A Standard Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 475: Extended Ipv4 Acl Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 476: Add A Rule For An Extended Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports NOTE: An implicit “deny all” rule is included at the end of a list with ACL rules. This means that if an ACL is applied to a packet and none of the explicit rules match, then the final implicit “deny all”...
  • Page 477 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 7. Select the Add Rule to existing ACL or Add new ACL and Rule button. The window adjusts. 8. Click the Extended IP ACL button. 9. Click the Add button. The window closes, and the Extended ACL Rule Configuration (100-199) section displays.
  • Page 478 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 15. (Optionally) If you select the Permit Action radio button, select an Interface radio button to let the switch mirror or redirect traffic to a specific interface: •...
  • Page 479 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ○ The source IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. A selected protocol translates into its equivalent port number. ○...
  • Page 480 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports ○ The destination IP TCP port protocols are domain, echo, ftp, ftpdata, www-http, smtp, telnet, pop2, pop3, and bgp. A selected protocol translates into its equivalent port number. ○...
  • Page 481 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports type and ICMP code within the ICMP type and compared to a packet’s type of the ICMP message. 24. (Optionally) Click the Fragments toggle to allow initial fragments (that is, the fragment bit is asserted) or prevent initial fragments from being used: •...

  • Page 482: Change The Match Criteria For An Extended Ipv4 Acl Rule

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports In the IP ACL/Rule Table, each ACL displays the number of rules currently in place for the IP ACL. • Clear: To clear the settings so you can specify other settings before you save them, click the Clear button.

  • Page 483: Remove A Rule From An Extended Ipv4 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 6. In the IP ACL/Rule Table section, click the number or name of the IP ACL with which the rule is associated. The number or name of the IP ACL is a hyperlink. The rules that are associated with the IP ACL display.

  • Page 484: Ipv6 Acls

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the credentials, see Credentials for the device UI on page 36. 4. Click the Login button. The Dashboard page displays. 5. Select Security > ACL > IP ACL > IP ACL/Rules. The IP ACL/Rules page displays.

  • Page 485: Add An Ipv6 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Add an IPv6 ACL You can add an IPv6 ACL and then add a rule later. The following procedure describes how to add an IPv6 ACL only. You can also add an IPv6 ACL and a rule together, as one task (see Add a rule for an IPv6 ACL on page 488).

  • Page 486: Change The Name Of An Ipv6 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The IP ACL is added. You can now add a rule for the IPv6 ACL (see Add a rule for an IPv6 ACL on page 488). Change the name of an IPv6 ACL You can change the name of an existing IPv6 ACL.

  • Page 487: Remove An Ipv6 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved. Remove an IPv6 ACL You can remove an IPv6 ACL that you no longer need. To remove an IPv6 ACL: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 488: Ipv6 Acl Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports IPv6 ACL rules You can define rules for IPv6-based ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. NOTE: An implicit “deny all”...
  • Page 489 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The IPv6 ACL Configuration section displays the total number of IPv6 ACLs, IPv4 ACLs, and MAC ACLs that are configured on the switch and the maximum number of ACLs that can be configured.
  • Page 490 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: Logging is disabled for this ACL rule. This is the default setting. • The toggle is purple and positioned to the right: Logging is enabled for this ACL rule (subject to resource availability on the switch).
  • Page 491 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The source IPv6 address must be in the form documented in RFC 2373,where the address is specified in hexadecimal numbers using 16-bit values between colons. 18. If you select TCP or UDP from the Protocol Type menu, in the Src L4 (source Layer 4) section, select to set an individual port number or a range of port numbers: You can select the Port radio button or the Range radio button: •...
  • Page 492 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can select the Port radio button or the Range radio button: • Port: Select one of the following protocols from the menu: The destination IP TCP port protocols are domain, echo, ftp, ftpdata, ○...

  • Page 493: Change The Match Criteria For An Ipv6 Acl Rule

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports corresponding ICMPv6 type and ICMPv6 code within the ICMPv6 type and compared to a packet’s type of the ICMPv6 message. 22. (Optionally) Click the Fragments toggle to allow initial fragments (that is, the fragment bit is asserted) or prevent initial fragments from being used: •...
  • Page 494 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To change the match criteria for an IPv6 ACL rule: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 495: Remove A Rule From An Ipv6 Acl

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You cannot change the ACL name or the sequence number. 10. Click the Save button. Your settings are saved. Remove a rule from an IPv6 ACL You can remove a rule from an IPv6 ACL if you no longer need the rule.

  • Page 496: Ip Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The rules that are associated with the IPv6 ACL display. 7. Select the check box for the rule. 8. Click the Delete button. Your settings are saved and the rule is removed. IP ACL bindings When you bind an IP ACL to an interface, all the rules that are defined for the ACL are applied to the selected interface.

  • Page 497: Display Or Delete Ip Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. Select Security > ACL > IP ACL > IP Binding Configuration. The IP Binding Configuration page displays. 6.

  • Page 498: Display The Existing Acls And Associated Rules

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 499 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 500: Vlan Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 86. Sections that provide information about changing or removing an ACL or rule Section MAC ACLs Change the name of a MAC ACL on page 456 Remove a MAC ACL on page 457 Change the match criteria for a MAC ACL rule on page 461 Remove a rule from a MAC ACL on page 462...
  • Page 501 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 502: Display Or Delete Vlan Acl Bindings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display or delete VLAN ACL bindings You can display or delete the VLAN ACL bindings in the VLAN Binding Configuration table. To display VLAN ACL bindings or delete a VLAN ACL binding: 1.
  • Page 503 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 87. Interface MAC ACL binding information Field Description VLAN ID The ID of the VLAN to which the ACL is bound Direction The packet filtering direction for the ACL, which is always inbound Sequence Number The sequence number signifying the order of the ACL relative to other ACLs bound to the VLAN...

  • Page 504: Chapter 10 Monitor The Switch And Network

    Monitor the Switch and Network This chapter covers the following topics: • Switch, port, and EAP packet statistics • Perform a cable test • Logs • Port mirroring • Display the system CPU memory status and CPU utilization...

  • Page 505: Switch, Port, And Eap Packet Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Switch, port, and EAP packet statistics You can view switch and port statistics, including detailed statistics, and Extensible Authentication Protocol (EAP) packets statistics. Display switch statistics You can display statistical information about the traffic that the switch processes.
  • Page 506 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 88. Switch statistics information Field Description Unicast Packets Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol Unicast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent Multicast Packets...

  • Page 507: Display Or Clear Port Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 88. Switch statistics information (Continued) Field Description Packets Received Without The total number of packets (including broadcast packets and multicast packets) Errors received by the switch Packets Transmitted Without The total number of packets transmitted by the switch Errors...
  • Page 508 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 509: Display Or Clear Detailed Statistics For A Port

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 89. Port statistics information (Continued) Field Description Link Down Events The total number of link down events on the port Time since counters last cleared The elapsed time in days, hours, minutes, and seconds since the statistics for this port were last cleared Display or clear detailed statistics for a port...
  • Page 510 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 8. To clear all the counters, click the Clear button. All statistics for the port are reset to the default values. 9. To refresh the page, click the Refresh button. The following table describes the detailed port statistics on the page.
  • Page 511 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 90. Port detailed statistics information (Continued) Field Description Physical Status The port speed and duplex mode Link Status Indicates if the link is up or down Link Trap Indicates if the port sends a trap when the link status changes Packets RX and TX 64 Octets...
  • Page 512 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 90. Port detailed statistics information (Continued) Field Description Packets Received 1024-1518 The total number of packets (including bad packets) received that were Octets between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets) Packets Received >...
  • Page 513 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 90. Port detailed statistics information (Continued) Field Description 802.3x Pause Frames The number of MAC control frames received with an opcode indicating the Received PAUSE operation. This counter does not increment when the interface is operating in half-duplex mode.
  • Page 514 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 90. Port detailed statistics information (Continued) Field Description Broadcast Packets The total number of packets that higher-level protocols requested be Transmitted transmitted to the broadcast address, including those that were discarded or not sent Transmit Packets Discarded The total number of outbound packets that were discarded even though no...

  • Page 515: Display Or Clear Eap And Eapol Statistics

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display or clear EAP and EAPoL statistics You can display information about Extensible Authentication Protocol (EAP) and EAP over LAN (EAPoL) packets that are received on physical ports. You can also clear the statistics for individual ports.

  • Page 516: Perform A Cable Test

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 91. EAP statistics information Field Description Ports The number of the port for which information is displayed EAPOL Frames Received The number of valid EAPOL frames of any type that were received by the authenticator Frames Transmitted The number of EAPOL frames of any type that were transmitted by the...
  • Page 517 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 518: Logs

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 92. Cable Test Field Description Cable Status Indicates the cable status: • Normal: The cable is working correctly. • Open: The cable is disconnected, or a faulty connector exists. •...

  • Page 519: Manage And Display The Memory Log

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports by line 318 of file mstp_api.c. This is the 237th message logged with system IP 0.0.0.0 and task-ID 1. • <15>Aug 24 05:34:05 STK0 MSTP[2110]: mspt_api.c(318) 237%% Interface 12 transitioned to root state on message age timer expiry.
  • Page 520 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Monitoring > Logs > Memory Log. The Memory Log page displays. The following steps refer to the Memory Log Configuration section. 6.

  • Page 521: Manage And Display The Flash Log

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 9. Click the Apply button. Your settings are saved. The Memory Log table displays in the Memory Log section. The Total Number of Messages field displays the number of messages the system logged in memory.
  • Page 522 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 523: Syslog And Log Server Host Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Notice: Level 5, provides the network administrators with device information. • Informational: Level 6, provides device information. • Debug: Level 7, provides detailed information about the log. NOTE: A log records messages equal to or above a configured severity threshold.

  • Page 524: Add A Syslog Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.
  • Page 525 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 526: Change The Settings For A Syslog Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Emergency: Level 0, the highest warning level. If the device is down or not functioning properly, an emergency log is saved to the device. • Alert: Level 1, the second-highest warning level. An alert log is saved if a serious device malfunction occurs, such as all device features being down.

  • Page 527: Delete The Settings For A Syslog Server

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 528: Trap Log

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 529: Port Mirroring

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Monitoring > Logs > Trap Logs. The Trap Logs page displays. 6. To clear the counters and log, click the Clear button. 7.
  • Page 530 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To set up and enable a port mirroring session: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 531: Change The Traffic Direction Or Remove A Mirrored Port From A Mirroring Session

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • To select a single port or LAG, select the check box associated with the port, or type the port number (for example, xg5) in the Search field and click the Go button.
  • Page 532 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To change the traffic direction for a port in a mirroring session or remove the mirrored port from the session: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 533: Change The Destination Port For A Port Mirroring Session

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • None: No traffic is copied to the destination port. The port is not part of the port mirroring session. • Tx and Rx: Transmitted (Tx) and received (Rx) packets are copied to the destination port.

  • Page 534: Enable Or Disable A Port Mirroring Session

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Dashboard page displays. 5. Select Monitoring > Port Mirroring. The Port Mirroring page displays. 6. Click the check box for the session ID. 7. Click the Edit button. The Edit Port Mirroring Sessions pop-up window displays.

  • Page 535: Remove All Ports From A Mirroring Session

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Port Mirroring page displays. 6. Click the check box for the session ID. 7. Click the Edit button. The Edit Port Mirroring Sessions pop-up window displays. 8.

  • Page 536: Display The System Cpu Memory Status And Cpu Utilization

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The session ID is a hyperlink. The page displays the Session Configuration and Source Interface Configuration sections. 7. In the Source Interface Configuration section, select the check boxes for all source ports.
  • Page 537 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 538: Chapter 11 Maintenance And Troubleshooting

    Maintenance and Troubleshooting This chapter covers the following topics: • Reboot the switch from the device UI • Reset the switch to factory default settings • Export the configuration file or log files from the switch • Update the switch software •...

  • Page 539: Reboot The Switch From The Device Ui

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Reboot the switch from the device You can reboot the switch from the device UI. NOTE: If you can physically access the switch, you can reboot the switch by pressing the multi-function Reset button on the front panel for less than 5 seconds.

  • Page 540: Reset The Switch To Factory Default Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Reset the switch to factory default settings You can reset the switch configuration to factory default values. All changes that you made are erased. If the IP address changes, your web browser session might disconnect. If you reset the switch to the default configuration, the management IP address is reset to 192.168.0.239, and the DHCP client is enabled.

  • Page 541: Export The Configuration File Or Log Files From The Switch

    (in-memory log), error log, and files designed specifically for use when requesting assistance from NETGEAR customer support. The configuration and log files export in ASCII format and can be sent to a file server over a TFTP session, or to a computer or USB storage device over an HTTP session.
  • Page 542 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 543: Export A File From The Switch To A Computer Or Usb Storage Device

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • IPv4: The server address is an IPv4 address in dotted-decimal format. This is the default setting. • DNS: The server address is a host name. 8.
  • Page 544 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.

  • Page 545: Update The Switch Software

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Update the switch software You can check for the latest software (firmware) updates and upgrade the switch software directly through the device UI. You can also download software to the switch from a file server over a TFTP session, from a computer over an HTTP session, or from a USB storage device.

  • Page 546: Download The Switch Software From A Tftp Server And Update The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 4. Click the Login button. The Dashboard page displays. 5. In the Connectivity section on the Dashboard page, verify that the switch is online. A green connection indicates that the switch is online. 6.
  • Page 547 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The file that you want to download is on the server in an appropriate directory. • The file is in the correct format. • The switch has a path to the server. To download the switch software from a TFTP server and update the switch: 1.
  • Page 548 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports NOTE: We recommended that you do not overwrite the active image. 8. From the Server Address Type menu, select the format for the TFTP Server IP field: •...

  • Page 549: Download The Switch Software From A Computer Or Usb Storage Device And Update The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports e. Click the OK button to close the window. f. After the switch completes its reboot, verify that the switch runs the newly activated image. On the Dashboard page, the Firmware Version field displays the firmware image that the switch runs.
  • Page 550 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The HTTP Firmware/File Update page displays. 6. From the File Type menu, select Software. This selection represents the switch software image, which is saved in one of two flash sectors called images (Image1 and Image2).

  • Page 551: Download A File To The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports e. Click the OK button to close the window. f. After the switch completes its reboot, verify that the switch runs the newly activated image. On the Dashboard page, the Firmware Version field displays the firmware image that the switch runs.
  • Page 552 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable. 2.

  • Page 553: Download A File From A Computer Or Usb Storage Device To The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • SSH-2 DSA Key PEM File: SSHv2 Digital Signature Algorithm (DSA) PEM-encoded key file • SSH-2 ECDSA Key PEM File: SSHv2 Elliptic Curve Digital Signature Algorithm (ECDSA) PEM-encoded key file 7.
  • Page 554 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about downloading switch software from a computer and updating the switch, see Download the switch software from a computer or USB storage device and update the switch on page 549.

  • Page 555: Download And Install An Ssl Security Certificate File On The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • X.509 Certificate Private Key PEM: SSL Server Certificate PEM-encoded file • SSH-2 RSA Key PEM File: SSHv2 Rivest-Shamir-Adleman (RSA) PEM-encoded key file • SSH-2 DSA Key PEM File: SSHv2 Digital Signature Algorithm (DSA) PEM-encoded key file •...
  • Page 556 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To disable HTTPS and use an HTTP session to download and install an SSL security certificate file on the switch: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.

  • Page 557: Manage Software Images

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The file transfer begins. The page displays information about the progress of the file transfer. The page refreshes automatically when the file transfer completes. 13. From the File Type menu, select X.509 Certificate Private Key PEM. This is the key file, which must be in the format xxxxKEYxxxxx.pem.
  • Page 558 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 559: Display The Dual Image Configuration And Add Image Descriptions

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Display the dual image configuration and add image descriptions You can display the dual software image configuration and add descriptions to the images. To display the dual image configuration and add image descriptions: 1.

  • Page 560: Copy A Software Image From One Flash Sector To Another

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following table describes the view-only fields on the page. Table 95. Dual image configuration information Field Description Image Name The name of the image. By default, the image names are image1 and image2. Image Version The firmware version of the image.

  • Page 561: Delete A Software Image

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The following steps refer to the Copy section. 6. From the Source image menu, select Image1 or Image2 to specify the image to be copied. 7. From the Destination image menu, select Image1 or Image2 to specify the destination location.

  • Page 562: Diagnostics And Troubleshooting

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Your settings are saved and the image is removed. Diagnostics and troubleshooting You can send a ping, trace a route, and perform a memory dump. Ping an IPv4 address You can configure the switch to send a ping request to a specified IPv4 address.
  • Page 563 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 564: Ping An Ipv6 Address

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The specified address is pinged. The results are displayed below the configurable data in the Results field. Ping an IPv6 address You can configure the switch to send a ping request to a specified IPv6 address. You can use this option to check whether the switch can communicate with a particular IPv6 device.
  • Page 565 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 566: Send An Ipv4 Traceroute

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports With this selection, the Interface menu displays, and you must select a VLAN from the menu. 12. Click the Apply button. The specified address is pinged. The results are displayed below the configurable data in the Results field.
  • Page 567 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 568: Send An Ipv6 Traceroute

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports With this selection, the Interface menu displays, and you must select a VLAN from the menu. 15. Click the Apply button. A traceroute request is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field.
  • Page 569 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.

  • Page 570: Enable The Secure Diagnostic Mode

    Results field. Enable the secure diagnostic mode Secure diagnostics mode connects the switch to NETGEAR’s diagnostic server, allowing support personnel to remotely diagnose your system. In this mode, changes to the default configuration are not saved.

  • Page 571: You Cannot Log In To The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The toggle is gray and positioned to the left: Secure diagnostic mode is disabled. This is the default setting. • The toggle is purple and positioned to the right: Secure diagnostic mode will be enabled after you click the Apply button.

  • Page 572: Appendix A Configuration Examples

    Configuration Examples This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.1X port access control • Multiple Spanning Tree Protocol • VLAN routing interface example configuration...

  • Page 573: Virtual Local Area Networks (Vlans)

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices.

  • Page 574: Vlan Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • If the port through which the packet enters is not a member of the VLAN as specified by the VLAN ID tag, the packet is dropped. •...
  • Page 575 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Enter your device admin password. • If you are also managing the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the Insight network location to which the switch is added.
  • Page 576 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports By default, all ports are untagged members of default VLAN 1 and are assigned PVID 1. c. Click the Apply button. Your settings are saved. • For the VLAN with VLAN ID 10, configure ports xg1 and xg2 as untagged (U) ports and port xg3 as a tagged (T) port: a.

  • Page 577: Access Control Lists (Acls)

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports a. Select the check box for port xg4. b. Select the Edit button. The Edit PVID Configuration pop-up window displays. c. In the PVID field, type 20 for VLAN ID 20. d.

  • Page 578: Mac Acl Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 1. Create an access list definition. The access list definition includes one or more rules that specify whether traffic matching the criteria is forwarded normally or discarded. Additionally, you can assign traffic that matches the criteria to a particular queue or redirect the traffic to a particular port.
  • Page 579 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 580 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports This means that all packets are allowed. d. In the Assign Queue ID field, type 4. This means that matching traffic is sent to queue 4. e.

  • Page 581: Standard Ip Acl Sample Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Binding Table page displays. 13. Verify that the ACL is bound to ports 6, 7, and 8. For more information about MAC ACL bindings, see Display or delete MAC ACL bindings on page 465.
  • Page 582 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Source IP address: 192.168.187.0 • Source IP Mask: 255.255.0.0 4. Bind the ACL with the number 1 to ports 2, 3, and 4. To configure the standard IP ACL example: 1.
  • Page 583 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about adding an IPv4 ACL, see Add an IPv4 ACL on page 467. 7. Click the Add New button. The Add IP ACL/Rule pop-up window displays. 8.
  • Page 584 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports a. From the ACL ID/Name menu, select 1. b. In the Sequence Number field, type 2. c. Select the Permit Action radio button. This means that all packets are permitted. d.

  • Page 585: Differentiated Services (Diffserv)

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Differentiated Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service implies that the network delivers the data in a timely fashion, although there is no guarantee that it does.

  • Page 586: Diffserv Traffic Classes

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Source/destination MAC address • EtherType • Class of Service (802.1p priority) value (first/only VLAN tag) • VLAN ID range (first/only VLAN tag) • Secondary 802.1p priority value (second/inner VLAN tag) •...

  • Page 587: Diffserv Traffic Conditioning Policy

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports From a DiffServ perspective, there are two types of policies: • Traffic conditioning policy: A policy applied to a DiffServ traffic class • Service provisioning policy: A policy applied to a DiffServ service level You must manually configure the various statements and rules used in the traffic conditioning and service provisioning policies to achieve the desired Traffic Conditioning Specification (TCS) and the Service Level Specification (SLS) operation, respectively.

  • Page 588: Diffserv Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • Redirecting. Forces a classified traffic stream to a specified egress port (physical or LAG). This can occur in addition to any marking or policing action. It can also be specified along with a QoS queue assignment.
  • Page 589 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports If you do not know the IP address of the switch, see Access the switch on-network and connected to the Internet on page 26 or Access the switch off-network and not connected to the Internet on page 33.
  • Page 590 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about adding class criteria, see Add and configure a DiffServ class on page 364. 8. For class 1, configure the second set of criteria, which is for the source IP address: a.
  • Page 591 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports d. In the field next to the menu, type 4568 as the port number. e. Click the Apply button. Your settings are saved and the fifth set of criteria is added to the Class Summary section.

  • Page 592: 802.1X Port Access Control

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports c. From the Policy In Name menu, select Policy1, which is the name for the policy that you just added. d. Click the Save button. Your settings are saved. For more information about attaching a policy to an interface, see Attach a DiffServ policy to an interface on page 379.

  • Page 593: 802.1X Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports allows the operation of a switch’s ports to be controlled to ensure that access to its services is permitted only by systems that are authorized to do so. Port access control provides a means of preventing unauthorized access by supplicants to the services offered by a system.
  • Page 594 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure the 802.1X example: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 595 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 10. Click the Save button. Your settings are saved. 11. Select Security > Port Authentication > 802.1x Configuration. The 802.1x Configuration page displays. 12. Click the Port-Based Authentication State toggle to enable 802.1X port-based authentication.

  • Page 596: Multiple Spanning Tree Protocol

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports 20. Click the Edit button. The Edit Dot1x Authentication List pop-up window displays. 21. To enable the Dot1x list, select the dotxList check box. The menu options become available. 22.
  • Page 597 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports MSTP connects all bridges and LANs with a single Common and Internal Spanning Tree (CIST). The CIST supports the automatic determination of each MST region, choosing its maximum possible extent.

  • Page 598: Mstp Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports • The allocation of VIDs to FIDs is unambiguous. • Each FID that is supported by the bridge is allocated to exactly one spanning tree instance. The combination of VID to FID and then FID to MSTI allocation defines a mapping of VIDs to spanning tree instances, represented by the MST Configuration Table.
  • Page 599 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports To configure the MSTP example: 1. Connect your computer to the same network as the switch. You can use a WiFi or wired connection to connect your computer to the network, or connect directly to a switch that is off-network using an Ethernet cable.
  • Page 600 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports c. In the VLAN Name field, type a name for the new VLAN or leave the field blank. d. Click the Save button. Your setting are saved and the VLAN is added. 7.
  • Page 601 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports In the CST Configuration section, configure the bridge priority value: a. In the Bridge Priority field, type 4096 as the bridge priority value for the common spanning tree (CST) and common and internal spanning tree (CIST).
  • Page 602 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For information about the other settings in the pop-up window, see Configure the CST interface settings on page 230. h. Click the Save button. Your settings are saved. 12.

  • Page 603: Vlan Routing Interface Example Configuration

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The devices use different MSTP instances to effectively use the links across the switch. VLAN routing interface example configuration VLANs divide broadcast domains in a LAN environment. When hosts in one VLAN must communicate with hosts in another VLAN, the traffic must be routed between them.
  • Page 604 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports The Device Admin Password page displays. If you did not yet activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 37. 3.

  • Page 605: Appendix B Hardware Introduction

    The hardware installation appendixes are for the following NETGEAR Smart switches with optional Remote/Cloud Management via Insight: • XS508TM: S3600 Series 8-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports • XS516TM: S3600 Series 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports •...

  • Page 606: Overview

    Ethernet surge protector inline between the indoor product and the outdoor device. Failure to do so can damage the product. WARNING: Before connecting the product to outdoor cables or devices, see https://kb.netgear.com/000057103 for additional safety and warranty information. Hardware Introduction User Manual...
  • Page 607 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Failure to follow these guidelines can result in damage to your NETGEAR product, which might not be covered by NETGEAR’s warranty, to the extent permissible by applicable law.
  • Page 608 • Depending on your product, use only a supplied power adapter or approved power cable: If your product uses a power adapter: ○ If you were not provided with a power adapter, contact your local NETGEAR reseller. ○ The power adapter must be rated for the product and for the voltage and current marked on the product electrical ratings label.

  • Page 609: Appendix C Hardware Overview

    Hardware Overview This appendix describes the switch hardware features. The appendix includes the following sections: • Hardware description model XS508TM • Hardware description model XS516TM • Hardware description model XS724TM • Switch hardware interfaces...

  • Page 610: Hardware Description Model Xs508Tm

    The following sections describe the XS508TM switch hardware features. Front panel model XS508TM The switch provies eight 10G/Multi-Gigabit RJ-45 copper ports with two dedicated SFP+ ports. The following figure shows the front panel of model XS508TM. Figure 1. Front panel model XS508TM LEDs model XS508TM This section describes the LEDs on the front panel of model XS508TM.

  • Page 611: Back Panel Model Xs508Tm

    Solid yellow: The internal fan failed. Back panel model XS508TM The back panel provides a Kensington lock and AC power receptacle. (The switch integrates a fixed, internal power supply.) The following figure shows the back panel of model XS508TM. Hardware Overview User Manual...

  • Page 612: Hardware Description Model Xs516Tm

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Figure 2. Back panel model XS508TM Hardware description model XS516TM The following sections describe the XS516TM switch hardware features. Front panel model XS516TM The switch provies sixteen 10G/Multi-Gigabit RJ-45 copper ports with two dedicated SFP+ ports.
  • Page 613 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 97. Front panel LEDs model XS516TM Description Power LED Off: Power is not being supplied to the switch. Blinking green: The switch is powering on. Solid green: The switch is powered on.

  • Page 614: Back Panel Model Xs516Tm

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Back panel model XS516TM The back panel provides a Kensington lock and AC power receptacle. (The switch integrates a fixed, internal power supply.) The following figure shows the back panel of model XS516TM. Figure 4.
  • Page 615 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 98. Front panel LEDs model XS724TM Description Power LED Off: Power is not being supplied to the switch. Blinking green: The switch is powering on. Solid green: The switch is powered on.

  • Page 616: Back Panel Model Xs724Tm

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Back panel model XS724TM The back panel provides a Kensington lock and AC power receptacle. (The switch integrates a fixed, internal power supply.) The following figure shows the back panel of model XS724TM. 100 - 240V ~ 50/60Hz, 2.0A Figure 6.

  • Page 617: Sfp Ports For Fiber Or Copper Connectivity

    Table 99. Supported Modules: Transceivers and DACs Model Description 1G Fiber SFP Transceivers AGM731F NETGEAR 1000BASE-SX SFP LC Transceiver (multimode, 1000m OM4, 550m OM3 50/125μm, 275m OM2/OM1 62.5/125μm) AGM732F NETGEAR 1000BASE-LX SFP LC Transceiver (single mode, 10km 9/125μm) 1G Copper SFP Transceiver...

  • Page 618: Reset The Switch To Factory Default Settings But Maintain The Registration Status

    When you reset the switch to factory default settings but maintain the registration status, all settings are erased and the switch restarts with factory default settings. The NETGEAR registration status is maintained and not erased. After the switch is reset, you will need to go through the initial login and setup process again.

  • Page 619: Reset The Switch To Factory Default Settings And Erase The Registration Status

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports CAUTION: Do not press the button for more than 10 seconds or the device registration flag will be erased from the switch and you will need to enter a registration key or log into your MyNETGEAR.com account and manually enter your device registration information.

  • Page 620: Appendix D Applications

    Applications This appendix describes an application example. This appendix includes the following sections: • Connect equipment in a high-speed network environment...

  • Page 621: Connect Equipment In A High-Speed Network Environment

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Connect equipment in a high-speed network environment The following figure shows an example of how you can connect equipment (servers, laptops, storage devices) to the switch in a business environment to get multi-gigabit and 10G speed to your business devices.

  • Page 622: Appendix E Installation

    Installation This appendix describes the installation procedures for the switch. Switch installation involves the steps described in the following sections: • Step 1: Prepare the site • Step 2: Protect against electrostatic discharge • Step 3: Unpack the switch • Step 4: Mount or place the switch •...

  • Page 623: Step 1: Prepare The Site

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Step 1: Prepare the site Before you install the switch, make sure that the operating environment meets the site requirements that are listed in the following table. Table 100.

  • Page 624: Step 2: Protect Against Electrostatic Discharge

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Step 2: Protect against electrostatic discharge WARNING: Static electricity can harm delicate components inside your system. To prevent static damage, discharge static electricity from your body before you touch any of the electronic components, such as the microprocessor.
  • Page 625 • Rubber protection caps, which are already installed in the SFP sockets. If you install an SFP transceiver module, you must remove the cap from the SFP socket. • Installation guide If any item is missing or damaged, contact your local NETGEAR reseller for replacement. Installation...

  • Page 626: Step 4: Mount Or Place The Switch

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Step 4: Mount or place the switch You can mount the switch in a standard 19-inch (48.26-centimeter) network equipment rack, place the switch on a flat surface or it can be wall-mounted with the 200 x 100 mm vesa holes at the bottom panel.

  • Page 627: Wall-Mount The Switch (Models Xs508Tm And Xs516Tm)

    Wall-mount the switch (models XS508TM and XS516TM) The bottom panel of model XS508TM and model XS516TM provides four VESA mount holes that allow you to mount the switch to a wall. The switch comes with four wall-mount screws and anchors that you can secure to a wall and attach the switch to.
  • Page 628 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Leave about 6 mm (¼ inch) of each screw protruding from the wall so that you can insert the screws into the holes on the bottom of the switch. 5.

  • Page 629: Place The Switch On A Flat Surface

    The following optional procedure describes how to install an optional SFP transceiver module into one of the SFP ports of the switch. NOTE: Contact your NETGEAR sales office to purchase these modules. If you do not want to install an SFP module, skip this procedure.

  • Page 630: Step 6: Connect Devices To The Switch's Rj-45 Ports

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports CAUTION: Be sure that you insert the module the correct way into the port. There is only one way to insert the module. If it does not fit, you might be holding the module upside down.

  • Page 631: Step 7: Check The Installation

    When you apply power, the Power LED on the switch front panel lights and the ports LEDs for attached devices light. For information about the LEDs, see LEDs model XS508TM on page 610, LEDs model XS516TM on page 612, or LEDs model XS724TM on page 614.

  • Page 632: Step 9: Manage The Switch

    • NETGEAR Insight app and Insight Cloud Portal: If you set the management mode of the switch to NETGEAR Insight Mobile App and Insight Cloud Portal, you can use the following applications to manage the switch remotely: ○...
  • Page 633 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports For more information about how NETGEAR Insight and the device UI interact, see How Insight and the device UI interact with each other on page 22.

  • Page 634: Appendix F Troubleshooting

    Troubleshooting This appendix provides information about troubleshooting the switch. The appendix includes the following sections: • Troubleshooting chart • Additional troubleshooting suggestions...

  • Page 635: Troubleshooting Chart

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Troubleshooting chart The following table lists symptoms, possible causes, and possible solutions for problems that might occur. Table 101. Troubleshooting chart Symptom Possible Cause Possible Solution The Power LED is off.

  • Page 636: Additional Troubleshooting Suggestions

    • Switch integrity: If necessary, verify the integrity of the switch by restarting it. To restart the switch, disconnect the power from the switch and then reconnect the power. If the problem continues, contact NETGEAR technical support. For more information, visit the support website at netgear.com/support/.
  • Page 637 • ACL features default settings • Monitoring features default settings • Hardware technical specifications NOTE: For more information about the switch specifications and capabilities, including the maximum settings for many features, see the data sheet, which you can download by visiting netgear.com/support/download/.

  • Page 638: Appendix G Software Default Settings And Hardware Specifications

    Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 102. Default settings for access to the switch device UI...
  • Page 639 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 103. System features default settings Feature Name/Setting Default Time Configuration Clock source NTP time zone name None configured NTP offset hours NTP offset minutes NTP authentication mode Enabled NTP broadcast client mode Enabled...
  • Page 640 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 103. System features default settings (Continued) Feature Name/Setting Default Hold multiplier Reinitializing delay Transmit delay LLDP-MED fast start duration SNMPv1/v2 Community configuration None configured Trap configuration None configured Trap flag authentication Enabled...
  • Page 641 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 103. System features default settings (Continued) Feature Name/Setting Default Host key None present Telnet Telnet Disabled DHCP Server Global Configuration DHCP server Disabled Bootp automatic mode Disabled Ping packet count DHCP Server Pool Configuration...

  • Page 642: Vlan Features Default Settings

    Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 104. VLAN features default settings Feature Name/Setting Default...
  • Page 643 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 104. VLAN features default settings (Continued) Feature Name/Setting Default Auto-VoIP 4088 (No members by default) Auto-Video 4089 (No members by default) VLAN Configuration (interfaces) PVID VLAN member VLAN tag None...
  • Page 644 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 104. VLAN features default settings (Continued) Feature Name/Setting Default OUI table 00:01:E3 SIEMENS 00:03:6B CISCO1 00:12:43 CISCO2 00:0F:E2 H3C 00:60:B9 NITSUKO 00:D0:1E PINTEL 00:E0:75 VERILINK 00:E0:BB 3COM 00:04:0D AVAYA1 00:1B:4F AVAYA2...

  • Page 645: Switching Features Default Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 104. VLAN features default settings (Continued) Feature Name/Setting Default Private VLAN promiscuous interface None configured Protected Port Protected port None configured Switching features default settings The following table describes the default settings for the switching features that you can configure.
  • Page 646 Frame size 1500 Flow control Disabled LAGs LAG name XS508TM: ch<n> where n is 1 to 4 XS516TM: ch<n> where n is 1 to 8 XS524TM: ch<n> where n is 1 to 12 Admin mode Enabled Hash mode 3 Src IP and Src TCP/UDP Port Fields...
  • Page 647 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 105. Switching features default settings (Continued) Feature Name/Setting Default Spanning tree maximum hops CST Port Configuration STP status Enabled Fast link Disabled BPDU forwarding Disabled Auto edge Enabled Path cost...

  • Page 648: Multicast Features Default Settings

    None configured Nonconfigurable settings are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Multicast features default settings The following table describes the default settings for the multicast features that you can configure.
  • Page 649 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 106. Multicast features default settings (Continued) Feature Name/Setting Default Maximum response time Mrouter time-out Fast leave mode Disabled Query mode Disabled Multicast Router Interface Configuration Multicast router Disabled Multicast Router VLAN Configuration...

  • Page 650: Routing Features Default Settings

    8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 106. Multicast features default settings (Continued) Feature Name/Setting Default Multicast router Disabled MLD Snooping Multicast Router VLAN Configuration Multicast router Disabled MLD Snooping, Multicast Router, Interface Multicast router Disabled MLD Snooping Querier Configuration...
  • Page 651 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 107. Routing features default settings Feature Name/Setting...

  • Page 652: Qos Features Default Settings

    The following table describes the default settings for the QoS features that you can configure. Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Software Default Settings and User Manual Hardware Specifications...
  • Page 653 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 108. QoS features default settings Feature Name/Setting Default CoS Configuration Global trust mode 802.1p CoS Interface Configuration Interface trust mode 802.1p Interface shaping rate Interface Queue Configuration Queue ID None configured Scheduler type...
  • Page 654 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 108. QoS features default settings (Continued) Feature Name/Setting Default Assured Forwarding Selector (CS) PHB AF 11 -> 0 AF 12 -> 0 AF 13 -> 0 AF 21 ->...

  • Page 655: Security Features Default Settings

    Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 109. Security features default settings Feature Name/Setting Default...
  • Page 656 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 109. Security features default settings (Continued) Feature Name/Setting Default Accounting server name Blank Port Blank Secret configured Not set Accounting mode Disabled TACAS+ Key String Blank Connection timeout TACAS+ Server Configuration...
  • Page 657 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 109. Security features default settings (Continued) Feature Name/Setting Default Periodic reauthentication Disabled Reauthentication period Quiet period Resending EAP Maximum EAP requests Supplicant timeout Server timeout MAC Filter MAC filter None configured...
  • Page 658 8-Port, 16-Port, or 24-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 or 4 SFP+ Ports Table 109. Security features default settings (Continued) Feature Name/Setting Default L2 loop protection Disabled Transmit interval Maximum PDU receive Disable timer L2 Loop Protection Interface Configuration Keep alive Disabled Rx action...

  • Page 659: Acl Features Default Settings

    Settings that you cannot change in the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 110. ACL features default settings Feature Name/Setting Default Total number of supported ACLs 100.

  • Page 660: Hardware Technical Specifications

    Port Mirroring Port mirroring Disabled Destination port None Hardware technical specifications The following table shows the hardware technical specifications for models XS508TM, XS516TM, and XS724TM. Table 112. Hardware technical specifications for models XS508TM, XS516TM, and XS724TM Feature Description Network interfaces XS508TM: Eight 10G/5G/2.5G/1G/100BASE-T RJ-45 copper ports...
  • Page 661 XS724TM: 33.9W Dimensions (W x D x H) XS508TM: 13.0 x 8.1 x 1.7 in (330 x 206 x 43 mm) XS516TM: 13.0 x 8.1 x 1.7 in (330 x 206 x 43 mm) XS724TM: 17.3 x 8.0 x 1.7 in (440 x 204 x 43 mm) Weight XS508TM: 4.85 lb (2.2 kg)

This manual is also suitable for:

Xs516tmXs724tm

Table of Contents