NETGEAR M7100 Series User Manual
  1. Manuals
  2. Brands
  3. NETGEAR Manuals
  4. Switch
  5. M7100 Series
  6. User manual

NETGEAR M7100 Series User Manual

Managed switches
Hide thumbs Also See for M7100 Series:
1
2
Table Of Contents
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
Table of Contents

Advertisement

Quick Links

See also: Software Administration Manual , Reference Manual
M6100, M5300, and M7100 Series
Managed Switches
Us e r Manual
Vers ion 11. 0.0
April 2015
202-11528-01
350 East Plumeria Drive
San Jose, CA 95134
USA

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the M7100 Series and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for NETGEAR M7100 Series

Summary of Contents for NETGEAR M7100 Series

  • Page 1 M6100, M5300, and M7100 Series Managed Switches Us e r Manual Vers ion 11. 0.0 April 2015 202-11528-01 350 East Plumeria Drive San Jose, CA 95134...
  • Page 2 See the regulatory compliance document before connecting the power supply. Trademarks NETGEAR, the NETGEAR logo, and Connect with Innovation are trademarks and/or registered trademarks of NETGEAR, Inc. and/or its subsidiaries in the United States and/or other countries. Information is subject to change without notice.

  • Page 3: Table Of Contents

    Contents Chapter 1 Getting Started Available Publications and Online Help ........16 Register Your Product.
  • Page 4 M6100, M5300, and M7100 Series Managed Switches Configure an SNTP Server......... . 62 Configure Daylight Saving Time Settings .
  • Page 5 M6100, M5300, and M7100 Series Managed Switches Configure the LLDP Interface ........129 View LLDP Statistics .
  • Page 6 M6100, M5300, and M7100 Series Managed Switches View the Stack Status ..........187 Configure the mode of the Stack Ports.
  • Page 7 M6100, M5300, and M7100 Series Managed Switches View the MFDB Table ..........250 View the MFDB Statistics .
  • Page 8 M6100, M5300, and M7100 Series Managed Switches Configure MRP Port Settings ........313 View MMRP Statistics .
  • Page 9 M6100, M5300, and M7100 Series Managed Switches Chapter 6 OSPF and OSPFv3 OSPF ............. 387 Configure Basic OSPF Settings .
  • Page 10 M6100, M5300, and M7100 Series Managed Switches View the IGMP Groups..........468 View the IGMP Membership .
  • Page 11 M6100, M5300, and M7100 Series Managed Switches Use the DiffServ Wizard ......... . 521 Configure Basic DiffServ Settings .
  • Page 12 M6100, M5300, and M7100 Series Managed Switches Traffic Control ........... . . 594 Configure MAC Filtering .
  • Page 13 M6100, M5300, and M7100 Series Managed Switches Configure a Basic MAC ACL........649 Configure MAC ACL Rules .
  • Page 14 M6100, M5300, and M7100 Series Managed Switches Upload a File to the TFTP Server ........718 HTTP File Upload.

  • Page 15: Chapter 1 Getting Started

    Getting Started This chapter provides an overview of starting your NETGEAR M6100/M7100/M5300 and accessing the user interface. This chapter contains the following sections: • Available Publications and Online Help • Register Your Product • Understanding the User Interfaces • Web Management Interface Overview •...

  • Page 16: Available Publications And Online Help

    19. Register Your Product The first time you log in to the switch, you are given the option of registering with NETGEAR. Registration confirms that your email alerts work, lowers technical support resolution time, and ensures that your shipping address accuracy. NETGEARE would also like to incorporate your feedback into future product development.

  • Page 17: Web Management Interface Overview

    M6100, M5300, and M7100 Series Managed Switches Web Management Interface Overview Your managed switch contains an embedded web server and management software for managing and monitoring switch functions. The managed switch functions as a simple switch without the management software. However, you can use the management software to configure more advanced features that can improve switch efficiency and overall network performance.

  • Page 18: Web Interface Buttons And User-Defined Fields

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Web Interface Buttons and User-Defined Fields The following table shows the command buttons that are used throughout the screens in the web interface: Table 1. Web interface command buttons...

  • Page 19: Online Help

    For example, if the IP Addressing screen is open, the help topic for that screen displays if you click the Help button. You can connect to the online support site at netgear.com when you are logged in to the switch.

  • Page 20: Web Management Interface Device View

    Select Help  Online Help > Support. To connect to the NETGEAR support site for managed switch, click the APPLY button. Web Management Interface Device View The Device View is a Java applet that displays the ports on the switch. This graphic provides ®...

  • Page 21: Using Snmp

    M6100, M5300, and M7100 Series Managed Switches Click a port to see a menu that displays statistics and configuration options. You can click a menu option to access the screen that contains the configuration or monitoring options. If you click the graphic, but do not click a specific port, the main menu displays. This menu contains the same options as the navigation tabs at the top of the screen.
  • Page 22 M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 23: Chapter 2 Configure System Information

    Configure System Information This chapter covers the following topics: • Initial Setup • Licenses (M5300 only) • Configure DHCP Server Settings • Configure Basic PoE • Configure SNMP • LLDP Overview • Configure ISDP • Timer Schedule...

  • Page 24: Initial Setup

    M6100, M5300, and M7100 Series Managed Switches Initial Setup When you log in to a switch that has its factory settings, the Initial Setup screen displays.  To do the initial system configuration: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 25: Configure A Management Vlan

    M6100, M5300, and M7100 Series Managed Switches In the System Name field, type the name to identify this switch. You can use a name up to 255 characters in length. The factory default is blank. In the System Location field, type the location of the switch.
  • Page 26 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > Management > Initial Setup.

  • Page 27: Configure The Initial Service Port Settings

    M6100, M5300, and M7100 Series Managed Switches When Auto Config is selected, the appropriate IPv6 prefix and prefix length is displayed in this field. In the IPv6 Gateway field, specify the default IPv6 gateway for the management VLAN interface. Click the Apply button.

  • Page 28: View Or Define System Information

    M6100, M5300, and M7100 Series Managed Switches The factory default value is 169.254.101.100. Specify the Subnet Mask for the service port. This is also referred to as the subnet/network mask and defines the portion of the interface’s IP address that is used to identify the attached network. The factory default value is 255.255.255.0.
  • Page 29 M6100, M5300, and M7100 Series Managed Switches Select System > Management > System Information. Define the following fields: System Name. Enter the name to identify this switch. You can use up to 255 • alphanumeric characters. The factory default is blank.
  • Page 30 M6100, M5300, and M7100 Series Managed Switches By default VLAN 1 is used as the source interface. Click the Apply button. The updated configuration is sent to the switch and takes effect immediately. These changes are not retained across a power cycle unless a save is performed.

  • Page 31: View Backplane Information

    M6100, M5300, and M7100 Series Managed Switches View Backplane Information  To view backplane information: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 32: View The Temperature Sensor Information

    M6100, M5300, and M7100 Series Managed Switches View the Temperature Sensor Information You can view the current temperature of the temperature sensors. The temperature is instant and can be updated with the latest information on the switch when the Update button is clicked.

  • Page 33: View The Fan Status

    M6100, M5300, and M7100 Series Managed Switches View the Fan Status This screen shows the status of the fans in all units. These fans remove the heat generated by the power, CP,U and other chipsets, and allow the chipsets work normally.

  • Page 34: View The Device Status

    M6100, M5300, and M7100 Series Managed Switches View the Device Status  To view the device status: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 35 M6100, M5300, and M7100 Series Managed Switches Table 7. Device Status (continued) Field Description Boot Version The version of the boot code that is in the flash memory to load the firmware into the memory. CPLD Version The version of the software for CPLD.

  • Page 36: View The System Cpu Status

    M6100, M5300, and M7100 Series Managed Switches Table 7. Device Status (continued) Field Description PoE D-Card Type Indicates the type of the PoE daughter card plugged in. Possible values are as follows: XCM89P. PoE card supporting 802.3at standard (backward •...

  • Page 37: Configure The Cpu Thresholds

    M6100, M5300, and M7100 Series Managed Switches You can view the CPU Utilization information, which contains the memory information, task-related information, and percentage of CPU utilization per task. Select the Unit No. to display the CPU Utilization information. • Select All to display the CPU Utilization information for all units in a chassis.
  • Page 38 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 39: View Switch Statistics

    M6100, M5300, and M7100 Series Managed Switches View Switch Statistics  To view the switch statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 40 M6100, M5300, and M7100 Series Managed Switches To clear all the counters, resetting all switch summary and detailed statistics to default values, click the Clear button. The discarded packets count cannot be cleared. The following table describes Switch Statistics information.

  • Page 41: View Usb Device Information

    M6100, M5300, and M7100 Series Managed Switches Table 9. Switch Statistics information (continued) Field Description Address Entries in Use The number of learned and static entries in the Forwarding Database Address Table for this switch. Maximum VLAN Entries The maximum number of virtual LANs (VLANs) allowed on this switch.
  • Page 42 M6100, M5300, and M7100 Series Managed Switches Select System > Management > USB Device Information. The Device Status field displays the current status of the device. The status is one of the following: Active. The device is USB plugged in and recognized by the switch.

  • Page 43: View Slot Information (M5300 Only)

    M6100, M5300, and M7100 Series Managed Switches View Slot Information (M5300 only) You can view information about the cards installed in the switch’s slots. This screen also provides information about the cards and switches that are compatible with the device.
  • Page 44 M6100, M5300, and M7100 Series Managed Switches The following table describes information in the Slot Summary table. Table 12. Slot Summary table Field Description Slot The slot number. Status Indicates whether the slot is empty or full. Administrative State Indicates whether the slot is administratively enabled or disabled.

  • Page 45: Configure A Loopback Interface

    M6100, M5300, and M7100 Series Managed Switches Table 14. Supported Switch Field Description Switch Model ID The model number of the supported switch. Switch Index The index assigned to the supported switch. Management Preference The management preference of the supported switch.

  • Page 46: View The Ipv6 Network Interface Neighbor Table

    M6100, M5300, and M7100 Series Managed Switches In the Loopback ID list, select a list of currently configured loopback interfaces. In the Primary Address field, enter the primary address for this interface in dotted-decimal notation. This option is visible when IPv4 loopback is selected.

  • Page 47: Configure The Ipv4 Service Port

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select System > Management > Management Interfaces > IPv6 Network Interface Neighbor Table. The following table displays IPv6 Network Interface Neighbor Table information. Table 15. IPv6 Network Interface Neighbor Table information...
  • Page 48 M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 49: Configure The Ipv6 Service Port

    M6100, M5300, and M7100 Series Managed Switches If the Service Port Configuration Protocol is BootP or DHCP, this field displays the • default gateway address that was dynamically acquired (if any). Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
  • Page 50 M6100, M5300, and M7100 Series Managed Switches Select the IPv6 mode Enable or Disable radio button. This specifies the IPv6 administrative mode on the service port. Select the Service Port Configuration Protocol None or DHCP radio button. This specifies whether the device acquires network information from a DHCPv6 server.

  • Page 51: Ipv4 Management Vlan Overview

    M6100, M5300, and M7100 Series Managed Switches b. Select the EUI Flag option to enable the Extended Universal Identifier (EUI) flag for IPv6 address, or clear the option to omit the flag. Click the Add button. The IPv6 address is added to the service port interface, To delete the selected IPv6 address, click the Delete button.
  • Page 52 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 53: Configure An Ipv6 Management Vlan

    M6100, M5300, and M7100 Series Managed Switches The factory default value is 169.254.100.100. Specify the IP Subnet Mask for the interface. The factory default value is 255.255.0.0. Specify the Management VLAN ID of the switch. The management VLAN is used for management of the switch. It can be configured to any value in the range of 1–4093.

  • Page 54: Configure An Ipv6 Vlan Interface

    M6100, M5300, and M7100 Series Managed Switches Select the Admin mode Disable or Enable radio button. This enables or disables the administration mode for the management VLAN IPv6 interface on the switch. Select the IPv6 Enable mode Enable or Disable radio button.
  • Page 55 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 56: Time

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable fields on the IPv6 Management VLAN Interface Configuration screen. Table 18. IPv4 Management VLAN Configuration Field Description State The interface address state. Possible values are as follows: Auto •...

  • Page 57: Configure The Sntp Global Settings

    M6100, M5300, and M7100 Series Managed Switches Select the Clock Source Local or SNTP radio button. The default is SNTP. The local clock can be set to SNTP only if the following two conditions are met: The SNTP server is configured.
  • Page 58 M6100, M5300, and M7100 Series Managed Switches Select a Client mode radio button to specify the mode of operation of the SNTP client: Disable. SNTP is not operational. No SNTP requests are sent from the client and no • received SNTP messages are processed.
  • Page 59 M6100, M5300, and M7100 Series Managed Switches By default VLAN 1 is used as the source interface. Specify the Unicast Poll Interval. This is the number of seconds between unicast poll requests expressed as a power of two when configured in unicast mode. The allowed range is 6 to 10. The default value is Specify the Broadcast Poll Interval.

  • Page 60: View Sntp Global Status

    M6100, M5300, and M7100 Series Managed Switches View SNTP Global Status When you select the SNTP option as the Clock Source, the SNTP global status is displayed below the SNTP Global Configuration section of the screen.  To view SNTP global status: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for...
  • Page 61 M6100, M5300, and M7100 Series Managed Switches The following table displays the nonconfigurable SNTP Global Status information. Table 19. SNTP Global Status Field Description Version The SNTP version that the client supports. Supported mode The SNTP modes that the client supports. Multiple modes can be supported by a client.

  • Page 62: Configure An Sntp Server

    M6100, M5300, and M7100 Series Managed Switches Configure an SNTP Server SNTP assures accurate network device clock time synchronization up to the millisecond. Time synchronization is performed by a network SNTP server. M6100/M7100/M5300 software operates only as an SNTP client and cannot provide time services to other systems.
  • Page 63 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 64 M6100, M5300, and M7100 Series Managed Switches The client continues sending requests to different servers until a successful response is received, or all servers are exhausted. The priority indicates the order in which to query the servers. A server entry with a precedence of 1 is queried before a server with a priority of 2, and so forth.

  • Page 65: Configure Daylight Saving Time Settings

    M6100, M5300, and M7100 Series Managed Switches Table 20. SNTP Server Status (continued) Field Description Last Attempt Status The status of the last S9 NTP request to this server. If no packet was received from this server, a status of Other is displayed.
  • Page 66 M6100, M5300, and M7100 Series Managed Switches Select System > Management > Time > Daylight Saving Configuration. Select Daylight Saving (DST) radio button: Disable. Disable daylight saving time. • Recurring. Enable Recurring daylight saving time. • Recurring EU. Enable recurring EU daylight saving time.

  • Page 67: View The Daylight Saving Time Status

    M6100, M5300, and M7100 Series Managed Switches Table 21. DayLight Saving - Recurring Field Description Ends At These fields are used to configure the end values of date and time. Week. Configure the end week. • Day. Configure the end day.
  • Page 68 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 69: Configure Dns Settings

    M6100, M5300, and M7100 Series Managed Switches Table 23. DayLight Saving Status (continued) Field Description Offset (in Minutes) The offset value in minutes.This field is not displayed when daylight saving time is disabled. Zone The zone acronym. This field is not displayed when daylight saving time is disabled.
  • Page 70 When the system is performing a lookup on an unqualified host name, this field is provides the domain name (for example, if default domain name is netgear.com and the user enters test, then test is changed to test.netgear.com to resolve the name). The length of the name must not be longer than 255 characters.

  • Page 71: Add A Static Entry To The Local Dns Table

    M6100, M5300, and M7100 Series Managed Switches By default VLAN 1 is used as the source interface. To specify the DNS server to which the switch sends DNS queries, enter an IP address in standard IPv4 dot notation in the DNS Server Address field and click the Add button.

  • Page 72: Configure The Switch Database Management Template Preference

    M6100, M5300, and M7100 Series Managed Switches Select System > Management > DNS > Host Configuration. In the Host Name (1 to 255 characters) field, specify the static host name to add. Its length cannot exceed 255 characters and it is a mandatory field.
  • Page 73 M6100, M5300, and M7100 Series Managed Switches combinations of scaling factors, enabling different allocations of resources depending on how the device is used. In other words, SDM templates enable you to reallocate system resources to support a different mix of features based on your network requirements.

  • Page 74: Configure Green Ethernet Settings

    M6100, M5300, and M7100 Series Managed Switches It is active only after the next reboot. To revert to the default template after the next reboot, use the Default option. Possible values are as follows: Dual IPv4 and IPv6 • IPv4 Routing Default •...

  • Page 75: Configure Green Ethernet Interface Settings

    M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 76 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 77: Configure Green Ethernet Local And Remote Devices

    M6100, M5300, and M7100 Series Managed Switches Configure Green Ethernet Local and Remote Devices  To configure green Ethernet local nad remote devices: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 78 M6100, M5300, and M7100 Series Managed Switches Use the Energy Detect Admin mode selection to enable or disable this option on the port. With energy detect mode enabled, when the port link is down, the PHY automatically goes down for a short period of time, and then wakes up to check link pulses. This allows the switch to perform autonegotiation and save power consumption when no link partner is present.

  • Page 79: Configure Green Ethernet Remote Device Details

    M6100, M5300, and M7100 Series Managed Switches Table 27. Green Ethernet Local Device information (continued) Field Description Tx Low Power Idle Duration This field indicates duration of Tx LPI state in 10 us increments. Shows (uSec) the total duration of Tx LPI since the EEE counters were last cleared.

  • Page 80: View The Green Ethernet Statistics Summary

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System ...
  • Page 81 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 82: Configure The Green Ethernet Eee Lpi History

    M6100, M5300, and M7100 Series Managed Switches Table 29. Green Ethernet Statistics Summary (continued) Field Description Cumulative Energy Saving per Estimated cumulative energy saved per chassis in (watts * hour) when Chassis (Watts * Hours) all green modes are enabled.
  • Page 83 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select System    Management Green Ethernet Green Ethernet LPI History. Select the Interface. In the Sampling Interval field, enter the interval at which EEE LPI data is collected.

  • Page 84: Licenses (M5300 Only)

    M6100, M5300, and M7100 Series Managed Switches Table 30. Interface Green mode EEE LPI History Field Description Percentage Time spent in LPI Percentage of time spent in LPI mode during the current measurement mode since last sample interval. Percentage Time spent in LPI...

  • Page 85: View License Features For M5300 Series Switches

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information that is displayed. Table 31. License Key Field Description License Date The date the license is purchased. License Copy The number of licenses. License Status Displays whether the license is Active or Inactive.

  • Page 86: Configure Dhcp Server Settings

    M6100, M5300, and M7100 Series Managed Switches Configure DHCP Server Settings You can configure settings for DHCP server, DHCP pools, DHCP bindings, and DHCP relay. You can also view DHCP statistics and conflicts. Configure DHCP Server  To configure a DHCP server: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for...
  • Page 87 M6100, M5300, and M7100 Series Managed Switches Select System > Services > DHCP Server > DHCP Server Configuration. Select the Admin Mode Disable or Enable radio button. This specifies whether the DHCP service is enabled or disabled. The default value is Disable.

  • Page 88: Configure The Dhcp Pool

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the DHCP Pool  To configure the DHCP pool: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 89 M6100, M5300, and M7100 Series Managed Switches Click the Add button. The pool configuration is added. To delete the pool, click the Delete button. This field is not visible to a user with read-only permission. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
  • Page 90 M6100, M5300, and M7100 Series Managed Switches Table 32. DHCP Pool Configuration (continued) Field Description Host Mask The subnet mask for a manual binding to a DHCP client. Either Host Mask or Prefix Length can be configured to specify the subnet mask but not both.

  • Page 91: Configure Dhcp Pool Options

    M6100, M5300, and M7100 Series Managed Switches Configure DHCP Pool Options  To configure DHCP Pool options: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 92: View Dhcp Server Statistics

    M6100, M5300, and M7100 Series Managed Switches View DHCP Server Statistics  To view the DHCP server statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 93: View Dhcp Bindings Information

    M6100, M5300, and M7100 Series Managed Switches The following table describes the DHCP Server Statistics fields. Table 33. DHCP Server Statistics Field Description Automatic Bindings The number of automatic bindings on the DHCP Server. Expired Bindings The number of expired bindings on the DHCP Server.

  • Page 94: View Dhcp Conflicts

    M6100, M5300, and M7100 Series Managed Switches Select System > Services > DHCP Server > DHCP Bindings Information. To display DHCP Bindings Information, select one of the following radio buttons: All Dynamic Bindings. Specify all dynamic bindings to be deleted.

  • Page 95: Configure The Dhcp Relay

    M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.
  • Page 96 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 97: Dhcp L2 Relay

    M6100, M5300, and M7100 Series Managed Switches If you select Enable, Relay Agent options are added to requests before they are forwarded to the server and removed from replies before they are forwarded to clients. The following table describes the DHCP Relay Statistics fields.

  • Page 98: Configure A Dhcp L2 Relay Interface

    M6100, M5300, and M7100 Series Managed Switches Select the Admin mode Disable or Enable radio button. For global configuration, this enables or disables the DHCP L2 Relay on the switch. The default is Disable. For VLAN configuration, VLAN ID shows the VLAN ID configured on the switch.

  • Page 99: View Dhcp L2 Relay Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 100: Configure Udp Relay Global Settings

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > Services > DHCP L2 Relay > DHCP L2 Relay Interface Statistics.
  • Page 101 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 102: Configure Udp Relay Interface Settings

    M6100, M5300, and M7100 Series Managed Switches time. Relay time service (UDP port 37) packets • Other. If this option is selected, the UDP Port Other Value is enabled. This option • permits you to enter your own UDP port in UDP Port Other Value.
  • Page 103 M6100, M5300, and M7100 Series Managed Switches Use Interface to select an Interface to be enabled for the UDP Relay. Use Server Address to specify the UDP Relay Server Address in x.x.x.x format. Use UDP Port to specify UDP Destination Port.

  • Page 104: Enable Or Disable Dhcpv6 Server

    M6100, M5300, and M7100 Series Managed Switches Enable or Disable DHCPv6 Server You can configure the Dynamic Host Configuration Protocol for IPv6 (DHCPv6) server settings on the device. The device can act as a DHCPv6 server or DHCPv6 relay agent to help assign network configuration information to IPv6 clients.

  • Page 105: Configure The Dhcpv6 Pool

    M6100, M5300, and M7100 Series Managed Switches Configure the DHCPv6 Pool You can view the currently configured DHCPv6 server pools as well as to add and remove pools. A DHCPv6 server pool is a set of network configuration information available to DHCPv6 clients that request the information.

  • Page 106: Configure The Dhcpv6 Prefix Delegation

    M6100, M5300, and M7100 Series Managed Switches If you are logged in as a user with read-only permission, the Pool Note: Name field displays only the existing pool names. To create a pool, you must log in with the admin user name, which has read/write permissions.

  • Page 107: Configure Dhcpv6 Interface Settings

    M6100, M5300, and M7100 Series Managed Switches Select from the list of configured Pool Names. In the Prefix and Prefix Length fields, specify the delegated IPv6 prefix. In the DUID field, specify the DUID identifier used to identify the client’s unique DUID value.

  • Page 108: View Dhcpv6 Bindings Information

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > Services > DHCPv6 Server > DHCPv6 Interface Configuration.
  • Page 109 M6100, M5300, and M7100 Series Managed Switches  To view DHCPv6 bindings information: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 110: View Dhcpv6 Server Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 38. DHCPv6 Binding Information (continued) Field Description Client DUID The DHCPv6 Unique Identifier (DUID) of the client. The DUID is a combination of the client’s hardware address and client identifier. Prefix The IPv6 address for the delegated prefix associated with this binding.
  • Page 111 M6100, M5300, and M7100 Series Managed Switches To view detailed DHCPv6 statistics for an interface, from the Interface list select the entry for which data is to be displayed. If you select All, data is shown for all interfaces. To reset the DHCPv6 counters for one or more interface, select each interface with the statistics to reset and click the Clear button.
  • Page 112 M6100, M5300, and M7100 Series Managed Switches Table 39. DHCPv6 Server Statistics (continued) Field Description DHCPv6 Request Packets Received The number of requests. DHCPv6 Confirm Packets Received The number of DHCPv6 Confirm messages received on the interface. This type of message is sent by a client to all DHCPv6 servers to determine whether its configuration is valid for the connected link.

  • Page 113: Configure Dhcpv6 Relay For An Interface

    M6100, M5300, and M7100 Series Managed Switches Table 39. DHCPv6 Server Statistics (continued) Field Description DHCPv6 Reconfig Packets The number of DHCPv6 reconfigure messages sent by the interface. Transmitted This type of message is sent by a server to a DHCPv6 client to inform the client that the server has new or updated information.

  • Page 114: Configure Basic Poe

    M6100, M5300, and M7100 Series Managed Switches Select the Interface with the information to view or configure. You can either: In the Go To Interface field, enter the interface in unit/slot/port format and click the Go • button. The entry corresponding to the specified interface is selected.
  • Page 115 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 116: Congure Poe Settings

    M6100, M5300, and M7100 Series Managed Switches Table 40. PoE Configuration nonconfigurable Fields (continued) Field Description Total Power (Main AC) The total power provided by the MAIN AC power source. Total Power (RPS) The total power provided by the redundant power source.

  • Page 117: Configure Poe Ports

    M6100, M5300, and M7100 Series Managed Switches This sets the threshold level at which a trap is sent if consumed power is greater than the threshold power. The Power Management mode describes or controls the power management algorithm used by the PSE to deliver power to the requesting PDs.
  • Page 118 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 119 M6100, M5300, and M7100 Series Managed Switches User indicates that the port power limit is equal to the value specified by Power Limit. • None indicates that the port draws up to class 0 maximum power in low power mode •...

  • Page 120: Configure Snmp

    M6100, M5300, and M7100 Series Managed Switches Table 42. PoE Configuration (continued) Field Description Status The status is the operational status of the port PD detection. Disabled. No power being delivered. • DeliveringPower. Power is being drawn by device. •...
  • Page 121 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 122: Configure Snmp V1/V2 Trap Settings

    M6100, M5300, and M7100 Series Managed Switches This specifies the access level for this community. Use Status to specify the status of this community by selecting Enable or Disable. If you select enable, the Community Name must be unique among all valid Community Names or the set request are rejected.

  • Page 123: Configure Snmp V1/V2 Trap Flags

    M6100, M5300, and M7100 Series Managed Switches Possible values are as follows: Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface • Service port • VLAN 1 is used as source interface by default. To add a host that receives SNMP traps, do the following steps: a.
  • Page 124 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 125: View The Supported Mibs

    M6100, M5300, and M7100 Series Managed Switches This enables or disables activation of multiple user traps.The factory default is Enable. This trap is triggered when the same user ID is logged into the switch more than once at the same time (either through Telnet or the serial port).

  • Page 126: Configure Snmp V3 Users

    M6100, M5300, and M7100 Series Managed Switches The following table describes the SNMP Supported MIBs Status fields. Table 43. SNMP Supported MIBs Field Description Name The RFC number if applicable and the name of the MIB. Description The RFC title or MIB description.
  • Page 127 M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select System > SNMP > SNMP V3 > User Configuration. In the User Name list, select the user account to be configured. The SNMP v3 Access mode field indicates the SNMPv3 access privileges for the user account.

  • Page 128: Lldp Overview

    M6100, M5300, and M7100 Series Managed Switches LLDP Overview The IEEE 802.1AB-defined standard, Link Layer Discovery Protocol (LLDP), allows stations on an 802 LAN to advertise major capabilities and physical descriptions. This information is viewed by a network manager to identify system topology and detect bad configurations on the LAN.

  • Page 129: Configure The Lldp Interface

    M6100, M5300, and M7100 Series Managed Switches Select System > LLDP > Global Configuration. In the Transmit Interval field, enter the interval in seconds to transmit LLDP frames. The range is from 5 to 32768 secs. The default value is 30 seconds.

  • Page 130: View Lldp Statistics

    M6100, M5300, and M7100 Series Managed Switches Select System > LLDP > Interface Configuration. Use Go To Port to enter the Port in unit/slot/port format and click the Go button. The entry corresponding to the specified Port, is selected. Use Port to specify the list of ports on which LLDP - 802.1AB can be configured.
  • Page 131 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > LLDP > Statistics.

  • Page 132: View Lldp Local Device Information

    M6100, M5300, and M7100 Series Managed Switches Table 44. LLDP Statistics (continued) Field Description Receive Total The number of valid LLDP frames received by this LLDP agent on the corresponding port, while the LLDP agent is enabled. Discards The number of LLDP TLVs discarded for any reason by the LLDP agent on the corresponding port.
  • Page 133 M6100, M5300, and M7100 Series Managed Switches Select System > LLDP > Local Device Information. In Interface list, select the ports on which LLDP - 802.1AB frames can be transmitted. The following table describes the LLDP Local Device Information fields.

  • Page 134: View Lldp Remote Device Information

    M6100, M5300, and M7100 Series Managed Switches View LLDP Remote Device Information You can view information on remote devices connected to the port.  To view LLDP remote device information: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 135: View Lldp Remote Device Inventory

    M6100, M5300, and M7100 Series Managed Switches Table 46. LLDP Remote Device Information (continued) Field Description System Description The description of the given port associated with the remote system. Port Description The description of the given port associated with the remote system.

  • Page 136: Configure Lldp-Med Global Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the LLDP Remote Device Inventory fields. Table 47. LLDP Remote Device Inventory Field Description Port The list of all the ports on which LLDP frame is enabled. Remote Device ID The remote device ID.

  • Page 137: Configure Lldp-Med Interface

    M6100, M5300, and M7100 Series Managed Switches In the Fast Start Repeat Count field, enter the number of LLDP PDUs that are transmitted when the protocol is enabled. The range is from (1 to 10). Default value of fast repeat count is 3.

  • Page 138: View Lldp-Med Local Device Information

    M6100, M5300, and M7100 Series Managed Switches Use Go To Port to enter the Port in unit/slot/port format and click the Go button. The entry corresponding to the specified Port, is selected. Use Interface to specify the list of ports on which LLDP-MED - 802.1AB can be configured.
  • Page 139 M6100, M5300, and M7100 Series Managed Switches Use Interface to select the ports on which LLDP-MED frames can be transmitted. The following table describes the LLDP-MED Local Device Information fields.L Table 48. LDP-MED Local Device Information Field Description Network Policy Information: Specifies if network policy TLV is present in the LLDP frames.

  • Page 140: View Lldp-Med Remote Device Information

    M6100, M5300, and M7100 Series Managed Switches Table 48. LDP-MED Local Device Information (continued) Field Description Firmware Revision Specifies Firmware version. Software Revision Specifies Software version. Serial Number Specifies serial number. Manufacturer Name Specifies manufacturers name. Model Name Specifies model name.
  • Page 141 M6100, M5300, and M7100 Series Managed Switches Use Interface to select the ports on which LLDP-MED is enabled. The following table describes the LLDP-MED Remote Device Information fields. Table 49. LLDP-MED Remote Device Information Field Description Capability Information: The supported and enabled capabilities that was received in MED TLV on this port.
  • Page 142 M6100, M5300, and M7100 Series Managed Switches Table 49. LLDP-MED Remote Device Information (continued) Field Description Media Application Type The application type. Types of application types are unknown, voicesignaling, guestvoice, guestvoicesignalling, softphonevoice, videoconferencing, streammingvideo, vidoesignalling. Each application type that is received has the VLAN ID, priority, DSCP, tagged bit status and unknown bit status.

  • Page 143: View Lldp-Med Remote Device Inventory

    M6100, M5300, and M7100 Series Managed Switches Table 49. LLDP-MED Remote Device Information (continued) Field Description Priority The remote port's PD power priority. View LLDP-MED Remote Device Inventory  To view LLDP-MED remote device inventory: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 144: Configure Isdp

    M6100, M5300, and M7100 Series Managed Switches Table 50. LLDP-MED Remote Device Inventory (continued) Field Definition System Model Specifies model name of the remote device. Software Revision Specifies Software version of the remote device. Configure ISDP You can configure ISDP global and interface settings.

  • Page 145: Configure Isdp Global Settings

    M6100, M5300, and M7100 Series Managed Switches Select the Admin mode Disable or Enable radio button. This specifies whether the ISDP Service is enabled or disabled. The default value is Enabled. Use Timer to specify the period of time between sending new ISDP packets.
  • Page 146 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select System > ISDP > Advanced > Global Configuration. Select the Admin mode Disable or Enable radio button. This specifies whether the ISDP Service is enabled or disabled. The default value is Enable.

  • Page 147: Configure An Isdp Interface

    M6100, M5300, and M7100 Series Managed Switches Configure an ISDP Interface  To configure an ISDP interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 148 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 149: View Isdp Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 53. ISDP Neighbor (continued) Field Description Advertisement Version The ISDP version sending from the neighbor. Entry Last Changed Time The time since last entry is changed. Software Version The software version on the neighbor.

  • Page 150: Timer Schedule

    M6100, M5300, and M7100 Series Managed Switches The following table describes the ISDP Statistics fields. Table 54. ISDP Statistics Field Description ISDP Packets Received The ISDP packets received including ISDPv1 and ISDPv2 packets. ISDP Packets Transmitted The ISDP packets transmitted including ISDPv1 and ISDPv2 packets.

  • Page 151: Configure The Timer Schedule

    M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select System > Timer Schedule > Basic > Global Configuration. Use the Timer Schedule Name to specify the name of a timer schedule.
  • Page 152 M6100, M5300, and M7100 Series Managed Switches Select System > Services > Timer Schedule > Advanced > Schedule Configuration. In the Timer Schedule Name list, select the timer schedule. In the Timer Schedule Type list, select Absolute or Periodic. In the Timer Schedule Entry list, select the number of the timer schedule entries to be configured or added.
  • Page 153 M6100, M5300, and M7100 Series Managed Switches Every Week(s). Define the number of weeks when the schedule is triggered. If number of weeks is not specified, then the schedule is triggered every week. WeekDay. Specify the days of week when the schedule operates.

  • Page 154: Chapter 3 Chassis And Stacking

    Chassis and Stacking The chassis features apply only to the M6100 series switches. Stacking features apply only to the M5300 series switches This chapter covers the following topics: • M6100 Series Switch Chassis Overview • M5300 Series Switch Stacking Overview...

  • Page 155: M6100 Series Switch Chassis Overview

    M6100, M5300, and M7100 Series Managed Switches M6100 Series Switch Chassis Overview You can move the primary management unit (supervisor) functionality from one blade to another. When this change is applied, the entire chassis (including all interfaces in the chassis) is unconfigured and reconfigured with the configuration on the new primary management unit.
  • Page 156 M6100, M5300, and M7100 Series Managed Switches Select System > Chassis > Basic > Chassis Configuration. You can also navigate to this screen by selecting Advanced > Note: Chassis Configuration. Select the Management Unit. This field displays the current primary management unit. You can change it by selecting another blade ID listed here.
  • Page 157 M6100, M5300, and M7100 Series Managed Switches Select the Management Status. Indicates whether the selected switch is the management unit, or a normal chassis member, or on standby. Click the Apply button. The system prompts you to confirm the management move. Upon administrator confirmation, the entire chassis, including all interfaces in the chassis, is unconfigured and reconfigured with the configuration on the new primary management unit.

  • Page 158: View The Chassis Protocol Information

    M6100, M5300, and M7100 Series Managed Switches Table 56. Basic Chassis Status section Field Description Plugged-in Model Identifier The model type assigned by the device manufacturer to identify the plugged-in device. Detected Code Version Indicates the detected version of code on this blade.
  • Page 159 M6100, M5300, and M7100 Series Managed Switches Select System > Chassis > Advanced > Chassis Status. Select either the Unit ID or All. Select the Unit ID to display information for the selected unit. • Select All to display information for all units.
  • Page 160 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 161: View Chassis Backplane-Port Configuration

    M6100, M5300, and M7100 Series Managed Switches View Chassis Backplane-Port Configuration  To view backplane-port configuration: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 162: View The Chassis Backplane-Port Packet-Path

    M6100, M5300, and M7100 Series Managed Switches Table 59. Backplane-Port Configuration (continued) Field Description Transmit Data Rate (Mbps) The approximate transmit rate on the backplane-port. Transmit Error Rate (Error/s) The number of errors in transmit packets per second. Total Transmit Errors The total number of errors in transmit packets since bootup.
  • Page 163 M6100, M5300, and M7100 Series Managed Switches Select System > Chassis > Advanced > Backplane-port Diagnostics. Select either the Unit ID or All. Select the Unit ID to display information for the selected unit. • Select All to display information for all units.

  • Page 164: Configure The Chassis Power Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable Backplane-port packet-path data that is displayed. Table 61. Backplane-port Packet-path Field Description Direction The path direction. Packet-path The packet path. Configure the Chassis Power Settings  To configure the chassis power settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for...

  • Page 165: Configure The System Power

    M6100, M5300, and M7100 Series Managed Switches If you enabled this feature, power redundancy mode is applied. Configure the System Power  To configure the system power: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 166: Configure The Power Auto-Rebalance

    M6100, M5300, and M7100 Series Managed Switches Configure the Power Auto-Rebalance  To configure the power auto-rebalance: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 167: View Blade Power Consumption

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable Chassis Power Configuration data that is displayed. Table 62. Chassis Power Configuration Field Description Total Available Power Total available power for chassis in watts. Total Required System Power Total required system power in watts.

  • Page 168: View Power Redundancy

    M6100, M5300, and M7100 Series Managed Switches The following table describes the Blade Power Consumption data that is displayed. Table 63. Chassis Power Modules Field Description Unit ID The unit ID that identifies the blade slot. Blade Type Displays blade type number.

  • Page 169: View The Power Modules

    M6100, M5300, and M7100 Series Managed Switches The Chassis Power Configuration screen displays. Scroll down to the Power Redundancy section. The following table describes the Power Redundancy data that is displayed. Table 64. Power Redundancy FIeld Description N+1 Configuration Power redundancy configuration. Possible values are Enable and Disable.

  • Page 170: View Eps Power Modules And Eps Ports

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > Chassis > Advanced > Chassis Power Configuration The Chassis Power Configuration screen displays.
  • Page 171 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 172: View The Power Matrix

    M6100, M5300, and M7100 Series Managed Switches The following table describes the non configurable EPS Ports data that is displayed. Table 67. EPS Ports Field Description Ports EPS port number counted from left to right while facing rear side of the chassis.

  • Page 173: Rebalance The Chassis Power

    M6100, M5300, and M7100 Series Managed Switches Scroll down to the Power Matrix section. The following table describes the nonconfigurable Power Matrix data that is displayed. Table 68. Power Matrix Field Description Blade Type The 4-bit identification number assigned to a blade.

  • Page 174: Configure Chassis Firmware Synchronization

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The low-priority PD device powers down until enough power is obtained to power up a new blade or higher-priority PoE port on a different blade. Configure Chassis Firmware Synchronization ...

  • Page 175: View Nsf Summary Data

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. To refresh the screen with the latest information on the switch, click the Update button. View NSF Summary Data ...
  • Page 176 M6100, M5300, and M7100 Series Managed Switches For M5300 and M7100 switches, select System > Stacking > NSF > NSF Summary. • To cause the supervisor unit to fail over to the backup blade, click the Initiate Failover button on the top right corner of the screen.

  • Page 177: View Nsf Checkpoint Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 69. NSF Summary (continued) Field Description Time Since Last Restart Time since the current management card because the active management card. For the backup manager, the value is set to 0d:00:00:00. Restart In Progress Indicates whether a restart is in progress.

  • Page 178: M5300 Series Switch Stacking Overview

    M6100, M5300, and M7100 Series Managed Switches Select System > Chassis > NSF > Checkpoint Statistics. To reset the statistics on the screen, click the Clear button. To refresh the screen with the latest information on the switch, click the Update button.

  • Page 179: Firmware Synchronization And Upgrade

    After you download a new image by using the File Download screen or SCC, the downloaded image is distributed to all the connected units of the stack. NETGEAR recommends that you set the active image for all stack Note: members the same as the active image of the stack master.

  • Page 180: Stack Configuration Maintenance

    M6100, M5300, and M7100 Series Managed Switches Stack Configuration Maintenance The stack master stores and maintains the saved and running configuration files for the switch stack. The configuration files include the system-level settings for the switch stack and the interface-level settings for all stack members. Each stack member retains a copy of the saved file for backup purposes.

  • Page 181: Stack Nsf

    M6100, M5300, and M7100 Series Managed Switches management unit acts as the control plane. The management plane is application software running on the management unit that provides interfaces allowing a network administrator to configure and monitor the device. Stack NSF...

  • Page 182: Stack Configuration

    M6100, M5300, and M7100 Series Managed Switches Stack Configuration You can move the primary management unit functionality from one unit to another. Upon execution, the entire stack (including all interfaces in the stack) is unconfigured and reconfigured with the configuration on the new primary management unit. After the reload is complete, all stack management capability must be performed on the new primary management unit.

  • Page 183: Specify The Stack Sample Mode

    M6100, M5300, and M7100 Series Managed Switches The Management Unit Selected menu displays the current primary management unit. To change the primary management unit, select another unit ID of the stack member to become the stack master. A message displays to notify you that moving stack management unconfigures the entire stack including all interfaces.
  • Page 184 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 185 M6100, M5300, and M7100 Series Managed Switches  To change the settings for an existing stack member: Select the check box next to the stack member to configure. If desired, specify a new unit ID for the stack member in the Change to Switch ID field.
  • Page 186 M6100, M5300, and M7100 Series Managed Switches Table 71. Stack Configuration (continued) Field Description Standby Status Identifies the switch that is configured as the standby unit. The possible values are as follows: Cfg Standby. Indicates that the unit is configured as the standby unit.

  • Page 187: View The Stack Status

    M6100, M5300, and M7100 Series Managed Switches Table 72. Stack Status nonconfigurable fields (continued) Field Description Up Time The relative time since the last reboot of the switch. Preconfigured Model Identifier The model type assigned by the device manufacturer to identify the device.

  • Page 188: Configure The Mode Of The Stack Ports

    M6100, M5300, and M7100 Series Managed Switches Select the units. Select the Unit ID to display information for the selected unit. • Select All to display information for all units. • To refresh the screen with the latest information on the switch, click the Update button.
  • Page 189 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 190: Run Stack Port Diagnostics

    M6100, M5300, and M7100 Series Managed Switches The following table describes Stack Port Configuration fields. Table 74. Stack Port Configuration Field Description Unit ID The unit. Port The stackable interfaces on the given unit. Slot ID The slot ID in the format unit/slot.
  • Page 191 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select System > Stacking > Advanced > Stack Port Diagnostics.

  • Page 192: Configure Stack Firmware Synchronization

    M6100, M5300, and M7100 Series Managed Switches Configure Stack Firmware Synchronization  To configure the stack firmware synchronization features: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 193 M6100, M5300, and M7100 Series Managed Switches Use the Allow Downgrade field to determine whether the stack master downgrades the firmware version on a new member that attempts to join the stack if the new member has a firmware version that is more recent that the stack.

  • Page 194: Chapter 4 Configure Switching Information

    Configure Switching Information This chapter covers the following topics: • Configure VLANs • Auto-VoIP • iSCSI Overview • Spanning Tree Protocol • Multicast • Configure MVR • MAC Address Table • Port Settings • Link Aggregation Groups • Multiple Registration Protocol Overview...

  • Page 195: Configure Vlans

    M6100, M5300, and M7100 Series Managed Switches Configure VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a VLAN switch forwards traffic based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, security, and management of multicast traffic.
  • Page 196 M6100, M5300, and M7100 Series Managed Switches Select Switching> VLAN > Basic > VLAN Configuration. To reset VLAN settings to their default values, select the Reset Configuration check box. The factory default values are as follows: All ports are assigned to the default VLAN of 1.

  • Page 197: Configure An Advanced Vlan

    M6100, M5300, and M7100 Series Managed Switches The VLAN Type field identifies the type of the VLAN you are configuring. You cannot change the type of the default VLAN (VLAN ID = 1): it is always type Default. When you create a VLAN using this screen, its type is always Static.

  • Page 198: Configure An Internal Vlan

    M6100, M5300, and M7100 Series Managed Switches Reset Configuration - If you select this button and confirm your selection on the next screen, all VLAN configuration parameters are reset to their factory default values. Also, all VLANs, except for the default VLAN, are deleted. The factory default values are as follows: All ports are assigned to the default VLAN of 1.

  • Page 199: Configure Vlan Trunking

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.
  • Page 200 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 201: Configure Vlan Membership

    M6100, M5300, and M7100 Series Managed Switches so on, using the settings on the Port Configuration screen. By default, all ports are initially configured in General mode. Host. This mode is used for private VLAN configuration. • Promiscuous. This mode is used for private VLAN configuration.
  • Page 202 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching> VLAN > Advanced > VLAN Membership.

  • Page 203: View Vlan Status

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 77. Advanced VLAN Membership Field Definition VLAN Name The name for the VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks.

  • Page 204: Configure Port Pvid Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 78. VLAN Status Field Definition VLAN ID The VLAN identifier (VID) of the VLAN. The range of the VLAN ID is 1 to 4093.
  • Page 205 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching> VLAN > Advanced > Port PVID Configuration. To display information for all physical ports and LAGs, click the ALL button. Select the interfaces. Select the Interface check box next to the interfaces. You can select multiple interfaces.

  • Page 206: Configure A Mac-Based Vlan

    M6100, M5300, and M7100 Series Managed Switches ID in the tag. In an untagged frame, the VLAN is the port VLAN ID specified for the port that received this frame. When disabled, all frames are forwarded in accordance with the 802.1Q VLAN bridge •...

  • Page 207: Configure Protocol-Based Vlan Groups

    M6100, M5300, and M7100 Series Managed Switches In the MAC Address field, type a valid MAC address to be bound to a VLAN ID. This field is configurable only when a MAC-based VLAN is created. In the VLAN ID field, specify a VLAN ID in the range of 1 to 4093.
  • Page 208 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching> VLAN > Advanced > Protocol Based VLAN Group Configuration.

  • Page 209: Configure Protocol-Based Vlan Group Membership

    M6100, M5300, and M7100 Series Managed Switches Configure Protocol-Based VLAN Group Membership  To configure protocol-based VLAN group membership: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 210: Configure An Ip Subnet-Based Vlan

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 80. Protocol-Based VLAN Group Membership Field Description Group Name This field identifies the name for the protocol-based VLAN that you selected. It can be up to 32 alphanumeric characters long, including blanks.

  • Page 211: Configure A Port Dvlan

    M6100, M5300, and M7100 Series Managed Switches Enter the subnet mask in dotted-decimal notation. In the VLAN ID field, specify a VLAN ID in the range of (1 to 4093). Click the Add button. The IP subnet-based VLAN is added.

  • Page 212: Configure A Voice Vlan

    M6100, M5300, and M7100 Series Managed Switches Select Interface check boxes to select the physical interface. To select all ports, select the Interface check box at the top of the column. In the Admin Mode field, select Enabled or Disabled.
  • Page 213 M6100, M5300, and M7100 Series Managed Switches Select the Admin Mode Disable or Enable radio button. This specifies the administrative mode for voice VLAN for the switch. The default is Disable. Use Interface to select the physical interface. Use Interface Mode to select the voice VLAN mode for selected interface: Disable.

  • Page 214: Configure Garp Switch Settings

    M6100, M5300, and M7100 Series Managed Switches Configure GARP Switch Settings It can take up to 10 seconds for GARP configuration changes to take Note: effect.  To configure GARP switch settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 215: Configure Garp Port

    M6100, M5300, and M7100 Series Managed Switches Configure GARP Port It can take up to 10 seconds for GARP configuration changes to take Note: effect.  To configure GARP port: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 216: Auto-Voip

    M6100, M5300, and M7100 Series Managed Switches This specifies the GARP multicast registration protocol administrative mode for the port. If you select Disable, the protocol is not active, and the join time, leave time, and leave all time have no effect. The factory default is Disable.

  • Page 217: Configure Auto-Voip Oui-Based Properties

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching > Auto-VoIP > Protocol-based > Port Settings.

  • Page 218: Oui-Based Port Settings

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 219: Configure The Oui Table

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > Auto-VoIP > OUI-based > Port Settings. The Operational Status field displays the current operational status of each interface. Use Interface check boxes to select the interfaces.
  • Page 220 M6100, M5300, and M7100 Series Managed Switches Select Switching > Auto-VoIP > OUI-based > OUI Table. In the Telephony OUI(s) field, specify the VoIP OUI prefix to be added in the format AA:BB:CC. Up to 128 OUIs can be configured.

  • Page 221: View The Auto-Voip Status

    M6100, M5300, and M7100 Series Managed Switches View the Auto-VoIP Status  To view the auto-VoIP status: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 222: Iscsi Overview

    M6100, M5300, and M7100 Series Managed Switches iSCSI Overview The Internet Small Computer System Interface (iSCSI) feature helps network administrators track iSCSI traffic between iSCSI initiators and target systems. This is accomplished by monitoring or snooping traffic to detect packets used by iSCSI stations in establishing iSCSI sessions and connections.
  • Page 223 M6100, M5300, and M7100 Series Managed Switches Select Switching > iSCSI > Basic > Global Configuration. In the iSCSI Status field, select Enable or Disable. This globally enables or disables the iSCSI Optimization feature. By default, iSCSI Optimization is disabled.

  • Page 224: View Iscsi Sessions

    M6100, M5300, and M7100 Series Managed Switches The range is 0 to 63. The default is 46. Select the Remark Enable or Disable radio button. This enables or disables the marking of iSCSI frames with the configured VLAN Priority tag/DSCP when egressing the switch. Enabling remarks updates the packets with IEEE 802.1p or IP-DSCP values.

  • Page 225: Control Iscsi Target Settings

    M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable iSCSI Sessions information. Table 82. iSCSI Sessions Field Description Target Name The target’s name.

  • Page 226: View Iscsi Sessions

    M6100, M5300, and M7100 Series Managed Switches In the TCP Port field, specify the TCP port for the target that monitors iSCSI traffic. Up to 16 TCP ports can be defined in the system. The well-known iSCSI ports 860 and 3260 are configured as defaults but you can remove them as any other configured target.

  • Page 227: View Iscsi Session Details

    M6100, M5300, and M7100 Series Managed Switches The following describes the nonconfigurable iSCSI Sessions information that is displayed. Table 83. iSCSI Sessions Field Description Target Name The target’s name. Initiator Name The initiator’s name. Initiator Session ID (ISID) The unique identifier an initiator assigns to its session endpoint which, when combined with the iSCSI initiator name, provides a unique name for the iSCSI initiator port.

  • Page 228: Spanning Tree Protocol

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable iSCSI Sessions Detailed information. Table 84. iSCSI Sessions Detailed Field Description Session Index The list of session indices. The rest of the fields on this screen correspond to the currently selected Session Index.

  • Page 229: Configure Basic Stp Settings

    M6100, M5300, and M7100 Series Managed Switches For two bridges to be in the same region, the force version must be Note: 802.1s and their configuration name, digest key, and revision level must match. For additional information about regions and their effect on network topology, refer to the IEEE standard.
  • Page 230 M6100, M5300, and M7100 Series Managed Switches Select the Spanning Tree Admin Mode Disable or Enable radio button. This specifies whether spanning tree operation is enabled on the switch. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch.

  • Page 231: Configure Advanced Stp Settings

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable fields. Table 85. STP Configuration Field Description Configuration Digest Key Identifier used to identify the configuration currently being used.
  • Page 232 M6100, M5300, and M7100 Series Managed Switches Select the Admin Mode Disable or Enable radio button. This specifies whether spanning tree operation is enabled on the switch. The default is Enable. Use Force Protocol Version to specify the Force Protocol Version parameter for the switch.
  • Page 233 M6100, M5300, and M7100 Series Managed Switches Select the BPDU Filter Disable or Enable radio button. This specifies whether the BPDU Filter feature is enabled. STP BPDU filtering applies to all operational edge ports. Edge Port in an operational state is supposed to be connected to hosts that typically drop BPDUs.

  • Page 234: Configure Cst Settings

    M6100, M5300, and M7100 Series Managed Switches Configure CST Settings You can configure Common Spanning Tree (CST) and Internal Spanning Tree on the switch.  To configure CST settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 235 M6100, M5300, and M7100 Series Managed Switches Specify values for CST in the appropriate fields: Bridge Priority. When switches or bridges are running STP, each is assigned a • priority. After exchanging BPDUs, the switch with the lowest priority value becomes the root bridge.

  • Page 236: Configure Cst Port Settings

    M6100, M5300, and M7100 Series Managed Switches Table 87. STP Advanced CST Configuration Field Description Topology change The value of the topology change parameter for the switch indicating if a topology change is in progress on any port assigned to the CST. It takes a value if True or False.
  • Page 237 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > STP > Advanced > CST Port Configuration. Select an Interface. You can select a physical or port channel interface associated with VLANs associated with the CST.

  • Page 238: View Cst Port Status

    M6100, M5300, and M7100 Series Managed Switches Use Loop Guard to enable or disable the loop guard on the port to protect Layer 2 forwarding loops. If loop guard is enabled, the port moves into the STP loop inconsistent blocking state instead of the listening/learning/forwarding state.
  • Page 239 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 240: Configure Mst Settings

    M6100, M5300, and M7100 Series Managed Switches Table 89. CST Port Status (continued) Field Description Port Role Each MST Bridge Port that is enabled is assigned a Port Role for each spanning tree. The port role is one of the following values: Root Port, Designated Port, Alternate Port, Backup Port, Master Port or Disabled Port.
  • Page 241 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 242: View The Spanning Tree Mst Port Status

    M6100, M5300, and M7100 Series Managed Switches For each configured instance, the information described in the following table displays on the screen. Table 90. MST Configuration Field Description Bridge Identifier The bridge identifier for the selected MST instance. It is made up using the bridge priority and the base MAC address of the bridge.
  • Page 243 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > STP > Advanced > MST Port Status. If no MST instances were configured on the switch, the screen displays Note: a No MSTs Available message and does not display the fields shown in the field description table that follows.

  • Page 244: View Stp Statistics

    M6100, M5300, and M7100 Series Managed Switches The following table describes the read-only MST port configuration information displayed on the Spanning Tree CST Configuration screen. Table 91. MST Port Status Field Description Auto Calculated Port Path Cost Displays whether the path cost is automatically calculated (Enable) or not (Disable).

  • Page 245: Configure Pvst Vlan Settings

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.
  • Page 246 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 247: Configure The Pvst Interface Settings

    M6100, M5300, and M7100 Series Managed Switches The range is 4 to 30 seconds. The default value is 15 seconds. This interval is a time for listening and learning states before transitioning a port to the forwarding state. Use the Max Age field to configure the spanning tree maximum age time for a specified VLAN.
  • Page 248 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 249: View Pvst Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 94. (continued)PVST/RPVST Interface Configuration Priority Values – – The Per VLAN Cost is the path cost from the port to the root bridge. The values allowed are between 1 and 200,000,000. By default, cost is not configured.

  • Page 250: Multicast

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.
  • Page 251 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 252: View The Mfdb Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 96. MFDB Table Field Description Description The text description of this multicast table entry. Possible values are Management Configured, Network Configured and Network Assisted. Forwarding Interfaces The resultant forwarding list is derived from combining all the forwarding interfaces and removing the interfaces that are listed as the static filtering interfaces.

  • Page 253: Igmp Snooping

    M6100, M5300, and M7100 Series Managed Switches The following table describes the MFDB Statistics fields. Table 97. MFDB Statistics Field Description Max MFDB Table Entries The maximum number of entries that the Multicast Forwarding Database table can hold. Most MFDB Entries Since Last...

  • Page 254: Configure Igmp Snooping

    M6100, M5300, and M7100 Series Managed Switches Configure IGMP Snooping You can configure the parameters for IGMP snooping, which is used to build forwarding lists for multicast traffic. You must log in as the admin user, which has read/write access Note: privileges to change the data on this screen.

  • Page 255: Configure Igmp Snooping For Interfaces

    M6100, M5300, and M7100 Series Managed Switches Use the Validate IGMP IP header option to Enable or Disable header validation for all IGMP versions. If Validate IGMP IP Header is enabled, then IGMP IP header checks for Router Alert option, ToS and TTL. The default value is Enable.
  • Page 256 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching> Multicast > IGMP Snooping > Interface Configuration. The screen lists all physical, VLAN, and LAG interfaces. Use the Interface check boxes to select interfaces. In the Admin Mode field, select Disable or Enable.

  • Page 257: Configure Igmp Snooping For Vlans

    M6100, M5300, and M7100 Series Managed Switches The settings are applied to the switch. Configuration changes take effect immediately. Configure IGMP Snooping for VLANs  To configure IGMP snooping settings for VLANs: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 258: Configure A Multicast Router

    M6100, M5300, and M7100 Series Managed Switches Use Report Suppression Mode to enable or disable IGMP snooping report • suppression mode for the specified VLAN ID. IGMP snooping report suppression allows the suppression of the IGMP reports sent by the multicast hosts by building a Layer 3 membership table, thereby sending only the very needed reports to the IGMP Routers to receive the multicast traffic.

  • Page 259: Configure A Multicast Router Vlan

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching> Multicast > IGMP Snooping > Multicast Router Configuration. Use Interface to select the physical interface. In the Multicast Router field, select Enable or Disable. Click the Apply button.

  • Page 260: Igmp Snooping Querier Overview

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching> Multicast > IGMP Snooping > Multicast Router VLAN Configuration. Use Interface to select the interface. Use VLAN ID to select the VLAN ID. In the Multicast Router field, select Enable or Disable.
  • Page 261 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 262: Configure Igmp Snooping Querier For Vlans

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The screen displays the VLAN IDs enabled for IGMP snooping querier. Configure IGMP Snooping Querier for VLANs You can configure IGMP queriers for use with VLANs on the network.

  • Page 263: Configure Mld Snooping

    M6100, M5300, and M7100 Series Managed Switches Enabled. The snooping querier participates in querier election, in which the least IP address operates as the querier in that VLAN. The other querier moves to non-querier state. Snooping Querier VLAN Address. Specify the snooping querier IP address to be •...
  • Page 264 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 265: Configure A Mld Snooping Interface

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable MLD Snooping Configuration fields. Table 100. MLD Snooping Configuration Field Definition Multicast Control Frame Count The number of multicast control frames that are processed by the CPU.

  • Page 266: Configure Mld Vlan Settings

    M6100, M5300, and M7100 Series Managed Switches All physical, VLAN, and LAG interfaces are displayed. Use the Interface check boxes to select the interface. Use Admin Mode to select the interface mode for the selected interface for MLD snooping for the switch.

  • Page 267: Enable Or Disable A Multicast Router On An Interface

    M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 268: Configure Multicast Router Vlan Settings

    M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 269: Configure Mld Snooping Querier

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching> Multicast > MLD Snooping > Multicast Router VLAN Configuration.
  • Page 270 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching> Multicast > MLD Snooping > Querier Configuration. Use Querier Admin Mode to select the administrative mode for MLD snooping for the switch. The default is Disable.

  • Page 271: Configure Mld Snooping Querier Vlan Settings

    M6100, M5300, and M7100 Series Managed Switches Configure MLD Snooping Querier VLAN Settings  To configure MLD snooping querier VLAN settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 272: Configure Mvr

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 101. Querier VLAN Configuration Field Description Operational State The operational state of the MLD snooping querier on a VLAN. It can be in any of the following states: Querier: Snooping switch is the querier in the VLAN.
  • Page 273 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching > MVR > Basic > MVR Configuration.

  • Page 274: Configure Advanced Mvr Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 102. MVR Configuration Field Definition MVR Max Multicast Groups The maximum number of multicast groups that MVR supports. MVR Current Multicast Groups Displays current number of the MVR groups allocated.

  • Page 275: Configure An Mvr Group

    M6100, M5300, and M7100 Series Managed Switches Use the MVR Multicast VLAN to specify the VLAN on which MVR multicast data is received. All source ports belong to this VLAN. The value can be set in a range of 1 to 4094. The default value is 1.

  • Page 276: Configure An Mvr Interface

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > MVR > Advanced > MVR Group Configuration. Use the MVR Group IP to specify the IP address for the new MVR group. Use the Count to specify the number of contiguous MVR groups.

  • Page 277: Configure Mvr Group Membership

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching > MVR > Advanced > MVR Interface Configuration.

  • Page 278: View Mvr Statistics

    M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 279 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching > MVR > Advanced > MVR Statistics.

  • Page 280: Mac Address Table

    M6100, M5300, and M7100 Series Managed Switches MAC Address Table You can view or configure the MAC Address Table. This table contains information about unicast entries for which the switch has forwarding or filtering information. This information is used by the transparent bridging function in determining how to propagate a received frame.

  • Page 281: Set The Dynamic Address Aging Interval

    M6100, M5300, and M7100 Series Managed Switches displayed as the first entry followed by the remaining (greater) MAC addresses. An exact match is required. Searched by VLAN ID. Select VLAN ID, enter the VLAN ID, for example, 100. Then •...

  • Page 282: Configure A Static Mac Address

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Switching > Address Table> Advanced > Dynamic Addresses.

  • Page 283: Port Settings

    M6100, M5300, and M7100 Series Managed Switches Use Interface to select the physical interface/LAGs. In the Static MAC Address field, type the MAC address. Select the VLAN ID associated with the MAC address. Click the Add button. The static MAC address is added to the switch.
  • Page 284 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > Ports > Port Configuration. Use Port to select the interface. Use STP Mode to select the Spanning Tree Protocol administrative mode for the port or LAG.
  • Page 285 M6100, M5300, and M7100 Series Managed Switches After you change the speed value, the switch might be inaccessible for Note: a number of seconds while the new settings take effect. From the Duplex Mode list, select the duplex mode for the selected port.

  • Page 286: Configure Port Descriptions

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 107. Port Configuration Field Description Media Type The media type. Port Type For normal ports this field is Normal. Otherwise the possible values are as follows: Mirrored.

  • Page 287: View Port Transceiver Information

    M6100, M5300, and M7100 Series Managed Switches Use Port Description to enter the description string to be attached to a port. It can be up to 64 characters in length. The following table describes the nonconfigurable information displayed on the screen.

  • Page 288: Link Aggregation Groups

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Switching > Ports > Port Transceiver. Select Unit ID to display physical ports of the selected unit or select All to display physical ports of all units.

  • Page 289: Configure Lag Settings

    M6100, M5300, and M7100 Series Managed Switches Static LAGs are supported. When a port is added to a LAG as a static member, it neither transmits nor receives LACPDUs. Configure LAG Settings You can group one or more full-duplex Ethernet links to be aggregated together to form a link aggregation group, which is also known as a port-channel.
  • Page 290 M6100, M5300, and M7100 Series Managed Switches Src MAC, VLAN, EType, incoming port. Source MAC, VLAN, EtherType, and • incoming port associated with the packet. Dest MAC, VLAN, EType, incoming port. Destination MAC, VLAN, EtherType, and • incoming port associated with the packet.

  • Page 291: Configure Lag Membership

    M6100, M5300, and M7100 Series Managed Switches The switch is updated with the values you entered. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the screen. Table 110. LAG Configuration Field Description LAG Description Enter the description string to be attached to a LAG.
  • Page 292 M6100, M5300, and M7100 Series Managed Switches Use LAG ID to select the identification of the LAG. Use LAG Name to enter the name to be assigned to the LAG. You can enter any string of up to 15 alphanumeric characters. A valid name must be specified for you to create the LAG.

  • Page 293: Configure The Virtual Port-Channel Global Settings

    M6100, M5300, and M7100 Series Managed Switches Src MAC,VLAN,EType,incoming port. Source MAC, VLAN, EtherType, and incoming • port associated with the packet. Dest MAC,VLAN,EType,incoming port. Destination MAC, VLAN, EtherType, and • incoming port associated with the packet. Src/Dest MAC,VLAN,EType,incoming port. Source/Destination MAC, VLAN, •...
  • Page 294 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.
  • Page 295 M6100, M5300, and M7100 Series Managed Switches Select Auto or Manual in the VPC MAC Mode field to indicate the administrative mode of VPC on the system. The default is Auto. Use the VPC MAC field to configure the MAC address of the VPC domain.

  • Page 296: Configure The Keep-Alive Parameters

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable VPC Global Configuration fields. Table 111. VPC Channel Global Configuration Field Description Operational VPC MAC The VPC MAC address agreed upon by both peers during role election.
  • Page 297 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 298: View The Vpc Peer Link Settings

    M6100, M5300, and M7100 Series Managed Switches View the VPC Peer Link Settings  To configure the peer settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 299: Configure The Peer Link Settings

    M6100, M5300, and M7100 Series Managed Switches Table 112. VPC Peer Settings Field Description Operational VPC MAC The VPC MAC address agreed upon by both peers during the role election. VPC System Priority The system priority of the peer VPC domain.

  • Page 300: Configure The Peer Detection Settings

    M6100, M5300, and M7100 Series Managed Switches Select Switching > MLAG > Basic > VPC Global Configuration. The VPC Global Configuration screen displays. Scroll down to the Peer Link section. Select the Enable Modification option to enable port-channel modification. Use the Port Channel list to configure a LAG interface as the VPC peer link and enable/disable the peer link protocol.
  • Page 301 M6100, M5300, and M7100 Series Managed Switches  To configure the peer detection settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 302: Configure The Virtual Port Channel Interface

    M6100, M5300, and M7100 Series Managed Switches The range is 1 to 65535 seconds. The default is 50000. Configure the Tx Interval in milliseconds between the DCPDP messages transmitted. The range is 200 to 4000 milliseconds. Configure the Rx Timeout, which is the DCPDP reception time-out in milliseconds.
  • Page 303 M6100, M5300, and M7100 Series Managed Switches Select Switching > MLAG > Advanced > VPC Interface Configuration. From the LAG Interface list, select the ID of the local port channel to configure as a VPC interface. Enter a VPC interface identifier value in the VPC Identifier field.

  • Page 304: View Virtual Port Channel Interface Details

    M6100, M5300, and M7100 Series Managed Switches View Virtual Port Channel Interface Details  To view the virtual port channel interface details: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 305: View Virtual Port Channel Interface Details

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable VPC details that are displayed. Table 116. VPC Interface Details Field Description Status The status of the VPC identifier. State The VPC interface’s operational mode, which is one of the following: Disabled.

  • Page 306: View Virtual Port Channel Keep-Alive Statistics

    M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.
  • Page 307 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 308: View Virtual Port Channel Peer Link Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 117. VPC Keepalive Statistics (continued) Field Description Tx Errors The number of keep-alive messages that the local device attempted to send to the peer device that were not transmitted due to an error.
  • Page 309 M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. To clear all the counters and reset all switch summary statistics to the default values, click the Clear button.

  • Page 310: Multiple Registration Protocol Overview

    M6100, M5300, and M7100 Series Managed Switches Table 118. VPC Peer Link Statistics (continued) Field Description Peer Link Data Messages Tx The total number of error encountered when sending peer link data Errors messages from the local device to the peer device over the peer link.

  • Page 311: Configure Global Mrp Settings

    M6100, M5300, and M7100 Series Managed Switches MMRP allows for the propagation MAC address information in the network, and allows for the registration and deregistration of both individual MAC address information and group MAC address membership. End stations can request to join or leave a multicast group, or to register an individual MAC address with a specific VLAN.
  • Page 312 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 313: Configure Mrp Port Settings

    M6100, M5300, and M7100 Series Managed Switches When enabled, the state machine can help limit the effect of topology changes and reduce the number of protocol data units (PDUs) transmitted between devices. The default is Disable. Select the Periodic State Machine (MMRP) Enable or Disable radio button.
  • Page 314 M6100, M5300, and M7100 Series Managed Switches To configure one or more ports or LAGs, select the check box next to each port or LAG to configure. You can select multiple ports to apply the same settings to the selected interfaces.

  • Page 315: View Mmrp Statistics

    M6100, M5300, and M7100 Series Managed Switches View MMRP Statistics You can view information regarding the MMRP frames transmitted and received by the switch and by each interface.  To view MMRP statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 316: View Mvrp Statistics

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that the MMRP Global Statistics screen displays. Table 119. MMRP Global Stastics Field Description Interface In the MMRP Statistics table, this field identifies the interface associated with the rest of the data in the row.
  • Page 317 M6100, M5300, and M7100 Series Managed Switches To clear the statistics for one or more ports, select the check box next to the interface or interfaces, and click the Clear button. To refresh the screen with the latest information on the switch, click the Update button.

  • Page 318: Chapter 5 Routing

    Routing This chapter covers the following topics: • Manage Routes • Configure the Router IP • Configure Routing Parameters for the Switch • IPv6 • VLAN Overview • Address Resolution Protocol Overview • Configure RIP • Configure Router Discovery • Configure Virtual Router Redundancy Protocol...

  • Page 319: Manage Routes

    M6100, M5300, and M7100 Series Managed Switches Manage Routes The Routing Table collects routes from multiple sources: static routes and local routes. The Routing Table can learn multiple routes to the same destination from multiple sources. The Routing Table lists all routes.
  • Page 320 M6100, M5300, and M7100 Series Managed Switches Subnet Mask indicates the portion of the IP interface address that identifies the attached network. This is also referred to as the subnet/network mask. Next Hop IP Address displays the outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination.

  • Page 321: Configure Advanced Routes

    M6100, M5300, and M7100 Series Managed Switches Table 121. Routing Table Basic Route Configuration (continued) Field Description Next Hop Interface The outgoing router interface to use when forwarding traffic to the destination. Next Hop Address The outgoing router IP address to use when forwarding traffic to the next router (if any) in the path toward the destination.
  • Page 322 M6100, M5300, and M7100 Series Managed Switches Use the Route Type field to specify Default or static reject route. If you are creating a default route, all that must be specified is the next hop IP address; otherwise, each field must be completed.

  • Page 323: Specify Route Preferences

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 122. Route Configuration - Learned Routes Field Description Network Address The IP route prefix for the destination. Subnet Mask Also referred to as the subnet/network mask, this indicates the portion of the IP interface address that identifies the attached network.
  • Page 324 M6100, M5300, and M7100 Series Managed Switches  To specify route preferences Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 325: Configure The Router Ip

    M6100, M5300, and M7100 Series Managed Switches The default value is 110. The range is 1 to 255. The OSPF specification (RFC 2328) requires that preference value must be the same for all the OSPF external route types, such as type1/type2/nssa1/nssa2.
  • Page 326 M6100, M5300, and M7100 Series Managed Switches Use Routing Mode to select Enable or Disable. You must enable routing for the switch before you can route through any of the interfaces. The default value is Disable. Use ICMP Echo Replies to select Enable or Disable.

  • Page 327: View Statistics

    M6100, M5300, and M7100 Series Managed Switches View Statistics The statistics reported on this screen are as specified in RFC 1213.  To view statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 328 M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 124. IP Basic Statistics Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error.
  • Page 329 M6100, M5300, and M7100 Series Managed Switches Table 124. IP Basic Statistics (continued) Field Description IpReasmReqds The number of IP fragments received that were reassembled at this entity. IpReasmOKs The number of IP datagrams successfully re-assembled. IpReasmFails The number of failures detected by the IP re-assembly algorithm (for whatever reason: timed out, errors, and so on).

  • Page 330: Configure Routing Parameters For The Switch

    M6100, M5300, and M7100 Series Managed Switches Table 124. IP Basic Statistics (continued) Field Description IcmpOutErrors The number of ICMP messages that this entity did not send due to problems discovered within ICMP such as a lack of buffers. This value does not include errors discovered outside the ICMP layer such as the inability of IP to route the resultant datagram.
  • Page 331 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing> IP > Advanced > IP Configuration. Use Routing Mode to select Enable or Disable. You must enable routing for the switch before you can route through any of the interfaces.

  • Page 332: View Ip Statistics

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the screen. Table 125. Routing IP Configuration...
  • Page 333 M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 126. IP Statistics Field Description IpInReceives The total number of input datagrams received from interfaces, including those received in error. IpInHdrErrors...
  • Page 334 M6100, M5300, and M7100 Series Managed Switches Table 126. IP Statistics (continued) Field Description IpForwDatagrams The number of input datagrams for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination.
  • Page 335 M6100, M5300, and M7100 Series Managed Switches Table 126. IP Statistics (continued) Field Description IpRoutingDiscards The number of routing entries that were discarded even though they are valid. One possible reason for discarding such an entry could be to free up buffer space for other routing entries.

  • Page 336: Configure The Ip Interface

    M6100, M5300, and M7100 Series Managed Switches Table 126. IP Statistics (continued) Field Description IcmpOutTimestamps The number of ICMP timestamp (request) messages. IcmpOutTimestampReps The number of ICMP timestamp reply messages sent. IcmpOutAddrMasks The number of ICMP address mask request messages sent.
  • Page 337 M6100, M5300, and M7100 Series Managed Switches Use Go To Interface to enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected. Use Port to select the interface. Use Description to enter the description for the interface.
  • Page 338 M6100, M5300, and M7100 Series Managed Switches Use Encapsulation Type to select the link layer encapsulation type for packets transmitted from the specified interface. The possible values are Ethernet and SNAP. The default is Ethernet. Use Proxy Arp to disable or enable proxy ARP for the specified interface.

  • Page 339: Configure The Secondary Ip Address

    M6100, M5300, and M7100 Series Managed Switches Configure the Secondary IP Address  To configure the secondary IP address: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 340: Ipv6

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 128. Secondary IP Field Description VLAN ID The VLAN ID associated with the displayed or configured interface. Primary IP Address The primary IP address for the interface.

  • Page 341: View The Ipv6 Route Table

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing> IPv6 > Basic > Global Configuration. In the IPv6 Unicast Routing field, select the option to globally Enable or Disable IPv6 unicast routing. In the Hop Limit field, enter a value for the unicast hop count used in IPv6 packets originated by the node.
  • Page 342 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 343: Configure Ipv6 Interface Settings

    M6100, M5300, and M7100 Series Managed Switches Configure IPv6 Interface Settings  Configure IPv6 interface settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 344 M6100, M5300, and M7100 Series Managed Switches All physical interfaces are valid. Select Enable or Disable in the IPv6 Mode list. When IPv6 mode is enabled, the interface is capable of IPv6 operation without a global address. In this case, an EUI-64 based link-local address is used. The default value is Disable.

  • Page 345: Ipv6 Prefix Configuration

    M6100, M5300, and M7100 Series Managed Switches In the Adv Other Config Flag list, select Enable or Disable to specify the router advertisement other stateful configuration flag. Default value of other config flag is Disable. In the Adv Suppress Flag list, select to Enable or Disable router advertisement suppression on an interface.
  • Page 346 M6100, M5300, and M7100 Series Managed Switches Select Routing> IPv6 > Advanced > Prefix Configuration. From the Interface list, select the interface. When the selection is changed, a screen update occurs, causing all fields to be updated for the newly selected port. All physical interfaces are valid.

  • Page 347: View Ipv6 Statistics

    M6100, M5300, and M7100 Series Managed Switches View IPv6 Statistics  To view IPv6 interface statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 348 M6100, M5300, and M7100 Series Managed Switches When the selection is changed, a screen refresh occurs, causing all fields to be updated for the newly selected port. To refresh the screen with the latest information on the switch, click the Update button.
  • Page 349 M6100, M5300, and M7100 Series Managed Switches Table 131. IPv6 Advanced Interface Statistics (continued) Field Description Datagrams Successfully The number of IPv6 datagrams successfully reassembled. This counter is Reassembled incremented at the interface to which these datagrams were addressed, which might not be necessarily the input interface for some of the fragments.
  • Page 350 M6100, M5300, and M7100 Series Managed Switches Table 132. ICMPv6 Statistics (continued) Field Description ICMPv6 Messages Prohibited The number of ICMP destination unreachable/communication Administratively Received administratively prohibited messages received by the interface. ICMPv6 Time Exceeded Messages The number of ICMP Time Exceeded messages received by the interface.

  • Page 351: View The Ipv6 Neighbor Table

    M6100, M5300, and M7100 Series Managed Switches Table 132. ICMPv6 Statistics (continued) Field Description ICMPv6 Messages Prohibited Number of ICMP Destination Unreachable/Communication Administratively Transmitted Administratively Prohibited messages sent. ICMPv6 Time Exceeded Messages The number of ICMP Time Exceeded messages sent by the interface.
  • Page 352 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 353: Ipv6 Static Route Configuration

    M6100, M5300, and M7100 Series Managed Switches Table 133. IPv6 Advanced Neighbor Table (continued) Field Description Neighbor State The state of the neighbor cache entry. Following are the states for dynamic entries in the IPv6 neighbor discovery cache: Incmp. Address resolution is being performed on the entry.A neighbor •...

  • Page 354: Configure The Ipv6 Route Table

    M6100, M5300, and M7100 Series Managed Switches Select Routing> IPv6 > Advanced > Static Route Configuration. In the IPv6 Prefix field, specify the IPv6 prefix for the configured route. In the Prefix Length field, specify the IPv6 prefix length for the configured route.

  • Page 355: Ipv6 Route Preferences

    M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Routing> IPv6 > Advanced > Route Table. In the Routes Displayed field, select which routes to display from the following list: All Routes. Show all active IPv6 routes.
  • Page 356 M6100, M5300, and M7100 Series Managed Switches  Configure the IPv6 route preferences: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 357: Configure Ipv6 Tunnels

    M6100, M5300, and M7100 Series Managed Switches The Local field displays the local preference. Configure IPv6 Tunnels You can create, configure, and delete tunnels.  To configure an IPv6 tunnel: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 358: Vlan Overview

    VLAN spans multiple physical networks, or when additional segmentation or security is required. This section shows how to configure the NETGEAR switch to support VLAN routing. A port can be either a VLAN port or a router port, but not both. However, a VLAN port can be part of a VLAN that is a router port.

  • Page 359: Use The Vlan Static Routing Wizard

    M6100, M5300, and M7100 Series Managed Switches Use the VLAN Static Routing Wizard The VLAN Static Routing Wizard creates a VLAN, adds selected ports to the VLAN. The VLAN Static Routing Wizard gives you the option to add the selected ports as a link aggregation (LAG).

  • Page 360: Configure Vlan Routing

    M6100, M5300, and M7100 Series Managed Switches Use VLAN ID to specify the VLAN identifier (VID) associated with this VLAN. The range of the VLAN ID is 1 to 4093. Use Ports to display selectable physical ports and LAGs (if any).

  • Page 361: Address Resolution Protocol Overview

    M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 362: Configure Basic Arp Cache

    M6100, M5300, and M7100 Series Managed Switches ARP is a necessary part of the Internet Protocol (IP) and is used to translate an IP address to a media (MAC) address, defined by a local area network (LAN) such as Ethernet. A station needing to send an IP packet must learn the MAC address of the IP destination, or of the next hop router, if the destination is not on the same subnet.

  • Page 363: Add An Entry To The Arp Table

    M6100, M5300, and M7100 Series Managed Switches Select Routing> ARP > Basic > ARP Cache. IP Address displays the IP address associated with the system’s MAC address. It must be the IP address of a device on a subnet attached to one of the switch's existing routing interfaces.
  • Page 364 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing> ARP > Advanced > ARP Create.

  • Page 365: View Or Configure The Arp Table

    M6100, M5300, and M7100 Series Managed Switches Table 136. ARP Cache (continued) Field Description Port The associated unit/slot/port of the connection. MAC Address The unicast MAC address of the device. The address is six two-digit hexadecimal numbers separated by colons, for example 00:06:29:32:81:40.
  • Page 366 M6100, M5300, and M7100 Series Managed Switches Use Age Time to enter the value for the switch to use for the ARP entry age-out time. You must enter a valid integer that represents the number of seconds it takes for an ARP entry to age out.

  • Page 367: Configure Rip

    M6100, M5300, and M7100 Series Managed Switches Specific Dynamic/Gateway Entry. Selecting this allows the user to specify the • required IP address. Specific Static Entry. Selecting this allows the user to specify the required IP • address. None. Selected if the user does not want to delete any entry from the ARP Table.

  • Page 368: Configure Rip Settings

    M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 369 M6100, M5300, and M7100 Series Managed Switches Select the RIP Admin Mode Disable or Enable radio button. If you select Enable, RIP is activated for the switch. By default, RIP is enabled. Select a Split Horizon Mode radio button: None. No special processing for this case.

  • Page 370: Configure Advanced Rip Interface Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 138. RIP Advanced Configuration Field Description Global Route Changes The number of route changes made to the IP route database by RIP.
  • Page 371 M6100, M5300, and M7100 Series Managed Switches Select the check box next to the Interface. In the Go To Interface field, enter the Interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected.

  • Page 372: Route Redistribution

    M6100, M5300, and M7100 Series Managed Switches Encrypt. If you select Encrypt, you are prompted to enter both an authentication key • and an authentication ID. Encryption uses the MD5 Message-Digest algorithm. All routers on the network must be configured with the same key and ID.
  • Page 373 M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.
  • Page 374 M6100, M5300, and M7100 Series Managed Switches The source IP address is compared to the destination IP address of the route. The source IP netmask in the access list rule is treated as a wildcard mask, indicating which bits in the source IP address must match the destination address of the route.

  • Page 375: Configure Router Discovery

    M6100, M5300, and M7100 Series Managed Switches Configure Router Discovery  To configure router discovery: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 376: Configure Virtual Router Redundancy Protocol

    M6100, M5300, and M7100 Series Managed Switches This is the maximum length of time that the advertised addresses are to be considered as valid router addresses by hosts. Use Preference Level to specify the preference level of the router as a default router relative to other routers on the same subnet.
  • Page 377 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing > VRRP > Basic > VRRP Configuration. In the Global Configuration Admin Mode field, set the administrative status of VRRP in the router to either Enable or Disable option.

  • Page 378: Configure Advanced Vrrp Settings

    M6100, M5300, and M7100 Series Managed Switches Configure Advanced VRRP Settings  To configure the advanced VRRP global settings. Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 379 M6100, M5300, and M7100 Series Managed Switches The VRID field is configurable only if you are creating a new virtual router. The valid values are 1 to 255. Select the unit/slot/port for the new virtual router from the Interface list.

  • Page 380: Configure An Advanced Vrrp Secondary Ip Address

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 142. Advanced VRRP Global Configuration Field Description Operational Priority Indicates the priority to be used for the virtual router master election process.

  • Page 381: Configure An Advanced Vrrp Tracking Interface

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing > VRRP > Advanced > VRRP Secondary IP Address Configuration. In the VRRP Interface - VRRP ID field, select one of the existing virtual routers, listed by interface number and VRRP ID.
  • Page 382 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing > VRRP > Advanced > VRRP Tracking Configuration.

  • Page 383: View Advanced Vrrp Statistics

    M6100, M5300, and M7100 Series Managed Switches The nonconfigurable Reachable field displays the reachability of the tracked route. Click the Add button. The traced interface or tracked route is added to the VRRP. To delete the selected tracked interface or tracked route, click the Delete button.
  • Page 384 M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 144. Advanced VRRP Statistics Field Description Global Statistics...
  • Page 385 M6100, M5300, and M7100 Series Managed Switches Table 144. Advanced VRRP Statistics (continued) Field Description Advertisement Interval Errors The total number of VRRP advertisement packets received for which the advertisement interval was different from the one configured for the local virtual router.

  • Page 386: Chapter 6 Ospf And Ospfv3

    OSPF and OSPFv3 This chapter covers the following topics: • OSPF • OSPFv3...

  • Page 387: Ospf

    M6100, M5300, and M7100 Series Managed Switches OSPF Only the following switches support OSPF: M6100 • M5300-28G3 • M5300-52G3 • M5300-28GF3 • The following switches support OSPF with an L3 license: M5300-28G • M5300-52G • M5300-28G-POE+ • M5300-52G-POE+ • Configure Basic OSPF Settings ...

  • Page 388: Configure The Ospf Default Route Advertise Settings

    M6100, M5300, and M7100 Series Managed Switches If you select Enable, OSPF is activated for the switch. By default, OSPF is enabled. You must configure a router ID before OSPF can become operational. Use the IP Configuration screen to configure a router ID or issue the CLI command config router id.
  • Page 389 M6100, M5300, and M7100 Series Managed Switches In the Default Information Originate field, select the Enable or Disable option. If you select Enable, OSPF originates an external LSA advertising a default route (0.0.0.0/0.0.0.0). Default Information Originate is disabled by default.

  • Page 390: Configure Ospf Settings

    M6100, M5300, and M7100 Series Managed Switches ??? Does this need to be a separate procedure? What should I put in for the navigation and screen shot? Configure OSPF Settings  To configure the OSPF settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 391 M6100, M5300, and M7100 Series Managed Switches Select Routing > OSPF > Advanced > OSPF Configuration. In the Router ID field, enter the 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). To change the router ID, you must first disable OSPF. After you set the new router ID, you must reenable OSPF for the change to take effect.
  • Page 392 M6100, M5300, and M7100 Series Managed Switches configured the same. If all OSPF routers are capable of operating according to RFC 2328, RFC 1583 Compatibility must be disabled. Set the Opaque LSA Status to Enable if OSPF will store and flood opaque LSAs.
  • Page 393 M6100, M5300, and M7100 Series Managed Switches In the Default Passive Setting field, select Enable or Disable from the list to configure the global passive mode setting for all OSPF interfaces. Configuring this field overwrites any present interface level passive mode setting. OSPF does not form adjacencies on passive interfaces, but does advertise attached networks as stub networks.

  • Page 394: Configure The Ospf Common Area Id

    M6100, M5300, and M7100 Series Managed Switches Configure the OSPF Common Area ID  To configure the area ID: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 395: Configure The Ospf Stub Area

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 146. OSPF Common Area Configuration Field Description External Routing A definition of the router's capabilities for the area, including whether or not AS-external-LSAs are flooded into/throughout the area. If the area is a stub area, then these are the possible options for which you can configure the external routing capability;...
  • Page 396 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing > OSPF > Advanced > Stub Area Configuration. Enter the OSPF Area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects.

  • Page 397: Configure The Ospf Nssa Area

    M6100, M5300, and M7100 Series Managed Switches Table 147. OSPF Stub Area Configuration (continued) Field Description Area LSA Checksum The 32-bit unsigned sum of the link state advertisements' LSA checksums contained in this area's link state database. This sum excludes external (LSA type 5) link state advertisements. The sum can be used to determine if there was a change in a router's link state database, and to compare the link state database of two routers.
  • Page 398 M6100, M5300, and M7100 Series Managed Switches Enter the OSPF Area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Configure the Import Summary LSAs by selecting Enable or Disable from the list.

  • Page 399: Configure The Ospf Area Range

    M6100, M5300, and M7100 Series Managed Switches To delete the NSSA area designation, click the Delete button. The area is returned to normal state. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.

  • Page 400: Configure The Ospf Interface

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing > OSPF > Advanced > Area Range Configuration.
  • Page 401 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 402 M6100, M5300, and M7100 Series Managed Switches In the Admin Mode list, select Enable or Disable. The default value is Disable. You can configure OSPF parameters without enabling OSPF admin mode, but the change does not take effect until you enable admin mode.
  • Page 403 M6100, M5300, and M7100 Series Managed Switches Configure MTU Ignore by selecting Enable or Disable from the list. MTU Ignore disables OSPF MTU mismatch detection on received database description packets. The default value is Disable (MTU mismatch detection is enabled).
  • Page 404 M6100, M5300, and M7100 Series Managed Switches Table 149. OSPF Interface Configuration (continued) Field Description LSA Ack Interval (secs) The number of seconds to wait before sending a delayed acknowledgement. State The state of the selected router interface. State is one of the following: Down.

  • Page 405: View Ospf Statistics For An Interface

    M6100, M5300, and M7100 Series Managed Switches View OSPF Statistics for an Interface If OSPF is enabled, you can view statistics for the selected interface.  To view OSPF statistics for an interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 406 M6100, M5300, and M7100 Series Managed Switches In the OSPF Interface Selection area of the screen, from the list in the Interface field, select the interface for which data is to be displayed. To clear all the statistics of the OSPF interface, click the Clear button.
  • Page 407 M6100, M5300, and M7100 Series Managed Switches Table 150. OSPF Interface Statistics (continued) Field Description Area Mismatch The number of OSPF packets discarded because the area ID in the OSPF header is not the area ID configured on the ingress interface.

  • Page 408: View The Ospf Neighbor Table

    M6100, M5300, and M7100 Series Managed Switches View the OSPF Neighbor Table You can view the OSPF neighbor table list. When a particular neighbor ID is specified, detailed information about a neighbor is given. The information is displayed only if OSPF is enabled.
  • Page 409 M6100, M5300, and M7100 Series Managed Switches Table 151. OSPF Neighbor Table (continued) Field Description Neighbor IP Address The IP address of the neighboring router's interface to the attached network. It is used as the destination IP address when protocol packets are sent as unicasts along this adjacency.

  • Page 410: View The Ospf Link State Database

    M6100, M5300, and M7100 Series Managed Switches Table 151. OSPF Neighbor Table (continued) Field Description State (continued) Loading. Link state request packets are sent to the neighbor asking for the • more recent LSAs that were discovered (but not yet received) in the exchange state.
  • Page 411 M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 152. OSPF Link State Database Field Description...
  • Page 412 M6100, M5300, and M7100 Series Managed Switches Table 152. OSPF Link State Database (continued) Field Description LSA Type The format and function of the link state advertisement. LSA Type is one of the following: Illegal • Router Links • Network Links •...
  • Page 413 M6100, M5300, and M7100 Series Managed Switches External Link State Database Table The following table describes the nonconfigurable data that is displayed in the External Link State Database (LSDB) table. Table 153. OSPF External Link State Database Table Field Description...

  • Page 414: Configure The Ospf Virtual Link

    M6100, M5300, and M7100 Series Managed Switches Table 154. OSPF AS Opaque Link State Database Table (continued) Field Description LSA Type The format and function of the link state advertisement. LSA Type is one of the following: Area Opaque •...
  • Page 415 M6100, M5300, and M7100 Series Managed Switches In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Virtual links can be configured between any pair of area border routers having interfaces to a common (non-backbone) area.
  • Page 416 M6100, M5300, and M7100 Series Managed Switches From the Authentication Type menu, select one of the following authentication types: None. This is the initial interface state. • Simple. If you select Simple, you are prompted to enter an authentication key. This •...
  • Page 417 M6100, M5300, and M7100 Series Managed Switches Table 155. OSPF Virtual Link Configuration (continued) Field Description Neighbor State (continued) Point-to-Point. The interface is operational, and is connected • either to the virtual link. On entering this state the router attempts to form an adjacency with the neighboring router.

  • Page 418: Configure The Ospf Route Redistribution

    M6100, M5300, and M7100 Series Managed Switches Table 155. OSPF Virtual Link Configuration (continued) Field Description State (continued) Other Designated Router. The interface is connected to a • broadcast or NBMA network on which other routers were selected to be the designated router and backup designated router either.
  • Page 419 M6100, M5300, and M7100 Series Managed Switches From the Source menu, select from the list of available source routes that were not previously configured for redistribution by OSPF. The valid values are as follows: • Connected • OSPF • •...

  • Page 420: View The Nsf Ospf Summary

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. View the NSF OSPF Summary You can view the NSF OSPF summary. The allowable values for each field are displayed next to the field.
  • Page 421 M6100, M5300, and M7100 Series Managed Switches Always. Indicates that OSPF performs a graceful restart for all planned and • unplanned warm restart events. Disabled. Disables OSPF performing graceful restarts. • Planned. Indicates that OSPF performs a graceful restart only when a restart is •...

  • Page 422: Ospfv3

    M6100, M5300, and M7100 Series Managed Switches Table 156. NSF OSPF Summary (continued) Field Description Restart Age (seconds) The amount of time since the last restart occurred. Restart Exit Reason Displays how the master unit on the chassis last started up. The possible values are as follows: Not Attempted.

  • Page 423: Configure Ospfv3 Default Route Advertise Settings

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing > OSPFv3 > Basic > OSPFv3 Configuration.

  • Page 424: Configure The Advanced Ospfv3 Settings

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing > OSPFv3 > Advanced > OSPFv3 Configuration.
  • Page 425 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing > OSPFv3 > Advanced > OSPFv3 Configuration.
  • Page 426 M6100, M5300, and M7100 Series Managed Switches When the number of nondefault external LSAs exceeds a configured limit, the router enters an overflow state as defined in RFC 1765. Enter the External LSDB Limit. This is the maximum number of AS-external-LSAs that can be stored in the database.

  • Page 427: Configure The Ospfv3 Common Area

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 157. Advanced OSPFv3 Configuration Field Description ASBR Mode Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. Router automatically becomes an ASBR when it is configured to redistribute routes learned from other protocol.

  • Page 428: Configure An Ospfv3 Stub Area

    M6100, M5300, and M7100 Series Managed Switches Select Routing > OSPFv3 > Advanced > Common Area Configuration. In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects.
  • Page 429 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 430: Configure The Ospfv3 Nssa Area

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 159. Advanced OSPFv3 Stub Area Configuration Field Description SPF Runs The number of times that the intra-area route table was calculated using this area's link state database.
  • Page 431 M6100, M5300, and M7100 Series Managed Switches In the Area ID field, enter the OSPF area ID. An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Configure the Import Summary LSAs by selecting Enable or Disable from the list.
  • Page 432 M6100, M5300, and M7100 Series Managed Switches The value is the period of time that an elected translator continues to perform its duties after it determines that its translator status was deposed by another router. The valid range is 0 to 3600.

  • Page 433: Configure The Ospfv3 Area Range

    M6100, M5300, and M7100 Series Managed Switches Configure the OSPFv3 Area Range  To configure the OSPFv3 area range: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 434: Configure The Ospfv3 Interface

    M6100, M5300, and M7100 Series Managed Switches Configure the OSPFv3 Interface  To configure the OSPFv3 interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 435 M6100, M5300, and M7100 Series Managed Switches If you assign an area ID that does not exist, the area is created with default values. Configure the Admin Mode by selecting the Enable or Disable option from the list. The default value is Disable. You can configure OSPFv3 parameters without enabling OSPFv3 admin mode, but the settings do not take effect until you enable admin mode.
  • Page 436 M6100, M5300, and M7100 Series Managed Switches This specifies the estimated number of seconds it takes to transmit a link state update packet over the selected interface. The valid values range from 1 to 3600 seconds (1 hour). The default value is 1 second.

  • Page 437: View Ospfv3 Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 161. Advanced OSPFv3 Interface Configuration (continued) Field Description State (continued.) Loopback. The router's interface to the network is looped back in either • the hardware or software. The interface is unavailable for regular data traffic.
  • Page 438 M6100, M5300, and M7100 Series Managed Switches  To view the OSPFv3 interface statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 439 M6100, M5300, and M7100 Series Managed Switches In the OSPFv3 Interface Selection area of the screen, in the Interface list, select the interface. To clear all the statistics of the OSPFv3 interface, click the Clear button. To refresh the screen with the latest information on the switch, click the Update button.

  • Page 440: View The Ospfv3 Neighbor Table

    M6100, M5300, and M7100 Series Managed Switches Table 162. Advanced OSPFv3 Interface Statistics (continued) Field Description Invalid Destination Address The number of OSPFv3 packets discarded because the packet's destination IP address is not the address of the ingress interface and is not the AllDrRouters or AllSpfRouters multicast address.
  • Page 441 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 442: View The Ospfv3 Link State Database

    M6100, M5300, and M7100 Series Managed Switches Table 163. Advanced OSPFv3 Neighbor Table (continued) Field Description Events The number of times this neighbor relationship changed state, or an error occurred. Retransmission Queue Length An integer representing the current length of the selected neighbor's retransmit queue.
  • Page 443 M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 164. Advanced OSPFv3 Link State Database Field Description Router ID The 32-bit integer in dotted-decimal format that uniquely identifies the router within the autonomous system (AS). The router ID is set on the OSPFv3 Configuration screen.
  • Page 444 M6100, M5300, and M7100 Series Managed Switches Table 164. Advanced OSPFv3 Link State Database (continued) Field Description Options The Options field in the link state advertisement header indicates which optional capabilities are associated with the advertisement. The options are as follows: Q.

  • Page 445: Configure The Ospfv3 Virtual Link

    M6100, M5300, and M7100 Series Managed Switches Table 165. Advanced OSPFv3 External Link State Database Table (continued) Field Description LS ID The link state ID identifies the piece of the routing domain that is being described by the advertisement. The value of the LS ID depends on the advertisement's LS type.
  • Page 446 M6100, M5300, and M7100 Series Managed Switches An area ID is a 32-bit integer in dotted-decimal format that uniquely identifies the area to which a router interface connects. Virtual links can be configured between any pair of area border routers with interfaces to a common (non-backbone) area.
  • Page 447 M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 166. Advanced OSPFv3 Virtual Link Configuration Field Description Neighbor State The state of the virtual neighbor relationship. The OSPFv3 interface state can be any of these values: Down.

  • Page 448: Configure Ospfv3 Route Redistribution

    M6100, M5300, and M7100 Series Managed Switches Table 166. Advanced OSPFv3 Virtual Link Configuration (continued) Field Description State (continued) Designated Router. This router is the designated router on the • attached network. Adjacencies are established to all other routers attached to the network. The router must also originate a network-LSA for the network node.

  • Page 449: View The Nsf Ospfv3 Summary

    M6100, M5300, and M7100 Series Managed Switches From the Source menu, select from the list of available source routes that were not previously configured for redistribution by OSPFv3. The valid values are as follows: Connected • Static • In the Redistribute Option list, select to Enable or Disable the redistribution for the selected source protocol.
  • Page 450 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.
  • Page 451 M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 167. Advanced NSF OSPFv3 Summary Field Description Restart Status The restart status of OSPF helper feature. The possible values are as follows: Not Restarting •...

  • Page 452: Multicast Routing

    Multicast Routing This chapter covers the following topics: • Multicast Overview • Configure Multicast IGMP Settings • Configure PIM Settings • Configure Multicast Static Routes • Configure the Multicast Admin Boundary • Configure IPv6 Multicast Settings...

  • Page 453: Chapter 7 Multicast Routing

    • M5300-52G-POE+ • The NETGEAR ProSafe Managed Multicast component is best suited for video and audio traffic requiring multicast packet control for optimal operation. The Multicast component includes support for IGMPv2 and IGMPv3. Communication from point to multipoint is called multicasting.

  • Page 454: Configure Global Multicast Settings

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Routing > Multicast > Mroute Table. To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed.
  • Page 455 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 456: Configure The Multicast Interface

    M6100, M5300, and M7100 Series Managed Switches Configure the Multicast Interface  To configure the multicast interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 457: Configure Global Multicast Dvmrp Settings

    M6100, M5300, and M7100 Series Managed Switches Configure Global Multicast DVMRP Settings  To configure global multicast DVMRP settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 458: Configure The Dvmrp Interface

    M6100, M5300, and M7100 Series Managed Switches Configure the DVMRP Interface  To configure the multicast DVMRP interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 459: View The Dvmrp Neighbor

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed.
  • Page 460 M6100, M5300, and M7100 Series Managed Switches Select Routing> Multicast > DVMRP > DVMRP Neighbor. Use the Search menu to search for neighbor entries by MAC Interface or Neighbor IP. Select Search > Interface from the list, enter the interface in unit/slot/port format, for •...

  • Page 461: View The Dvmrp Next Hop Settings

    M6100, M5300, and M7100 Series Managed Switches Table 172. DVMRP Neighbor (continued) Field Description Received Bad Packets The number of invalid packets received for the specified neighbor on the selected interface. Received Bad Routes The number of invalid routes received for the specified neighbor on the selected interface.

  • Page 462: View The Multicast Dvmrp Prune

    M6100, M5300, and M7100 Series Managed Switches Table 173. DVMRP Next Hop (continued) Field Description Next Hop Interface The outgoing interface for this next hop. Type The next hop type. Leaf means that no downstream dependent neighbors exist on the outgoing interface. Otherwise, the type is branch.

  • Page 463: View The Dvmrp Route

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 174. DVMRP Prune Field Description Group IP The group address that was pruned. Source IP The IP address used with the source mask to identify the source network for this table entry.

  • Page 464: Configure Multicast Igmp Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 175. DVMRP Route Field Description Source Address The network address that is combined with the source mask to identify the sources for this entry.

  • Page 465: Configure The Igmp Routing Interface

    M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Routing> Multicast > IGMP > Global Configuration. In the Admin Mode field, select the Enable or Disable option. This sets the administrative status of IGMP in the router to active or inactive. The default is Disable.
  • Page 466 M6100, M5300, and M7100 Series Managed Switches In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected. Select the check box beside the interface for which data is to be displayed or configured.

  • Page 467: View Igmp Routing Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches This is the maximum response time to be inserted into group-specific queries sent in response to leave group messages, and is also the amount of time between group-specific query messages. Valid values are from 0 to 255. The default value is 10.

  • Page 468: View The Igmp Groups

    M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 176. Multicast IGMP Routing Interface Statistics Field...
  • Page 469 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 470: View The Igmp Membership

    M6100, M5300, and M7100 Series Managed Switches Table 177. Multicast IGMP Groups (continued) Field Description Version 1 Host Timer The time remaining until the local router assumes that no IGMP version 1 members are on the IP subnet attached to this interface. When an IGMPv1 membership report is received, this timer is reset to the group membership timer.

  • Page 471: Configure The Igmp Proxy Interface

    M6100, M5300, and M7100 Series Managed Switches Use the Search By list to search for multicast entries by Interface or Group IP. Select Interface from the Search list, enter the interface in unit/slot/port format, for • example, 1/0/13, then click the Go button. If the entry exists, the entry is displayed as the first entry, followed by the remaining entries.
  • Page 472 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 473: View The Igmp Proxy Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 179. Multicast IGMP Proxy Interface Configuration Field Description IP Address The IP address of the IGMP proxy interface. Subnet Mask The subnet mask for the IP address of the IGMP proxy interface.

  • Page 474: View The Igmp Proxy Membership

    M6100, M5300, and M7100 Series Managed Switches Select Routing> Multicast > IGMP > Proxy Interface Statistics. To refresh the screen with the latest information on the switch, click the Update button. The following describes the nonconfigurable data that is displayed.

  • Page 475: Configure Pim Settings

    M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 181. Multicast IGMP Proxy Membership Field Description Proxy Interface The interface on which IGMP proxy is enabled.

  • Page 476: Configure The Multicast Pim Global Settings

    M6100, M5300, and M7100 Series Managed Switches Configure the Multicast PIM Global Settings Protocol-Independent Multicast (PIM) is a standard multicast routing protocol that provides scalable interdomain multicast routing across the Internet, independent of the mechanisms provided by any particular unicast routing protocol.

  • Page 477: Configure Pim Interface

    M6100, M5300, and M7100 Series Managed Switches implemented with a strict subset of the PIM protocol mechanisms. Both regular IP multicast and SSM semantics can coexist on a single router, and both can be implemented using the PIM protocol. A range of multicast addresses, currently 232.0.0.0/8 in IPv4 and FF3x::/32 in IPv6, is reserved for SSM.
  • Page 478 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 479: View The Pim Neighbor

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 182. Multicast PIM Interface Configuration Field Description Protocol State The state of PIM in the router.

  • Page 480: View The Pim Candidate Rendezvous Point

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 183. Multicast PIM Neighbor Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry.

  • Page 481: View The Pim Neighbor

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 184. Multicast PIM Neighbor Field Description Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry.

  • Page 482: Configure The Pim Candidate Rendezvous Point

    M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. Table 185. Multicast PIM Neighbor Field Description Interface The interface on which the neighbor is displayed. Neighbor IP The IP address of the PIM neighbor for this entry.

  • Page 483: Configure The Pim Bootstrap Router Candidate

    M6100, M5300, and M7100 Series Managed Switches From the list of interfaces, select the Interface. Enter the Group Address transmitted in candidate-RP-advertisements. If you enter an IPv6 address, the format is prefix/prefix length. In the Group Mask field, enter the group address mask transmitted in...
  • Page 484 M6100, M5300, and M7100 Series Managed Switches From the list of interfaces, select the Interface. Enter the C-BSR Hash Mask Length to be advertised in bootstrap messages. This hash mask length is used in the hash algorithm for selecting the RP for a particular group.

  • Page 485: Configure The Pim Static Rendezvous Point

    M6100, M5300, and M7100 Series Managed Switches Configure the PIM Static Rendezvous Point You can statically configure the rendezvous point (RP) address for one or more multicast groups.  To configure the PIM static RP: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 486: Configure Multicast Static Routes

    M6100, M5300, and M7100 Series Managed Switches Configure Multicast Static Routes  To configure multicast static routes: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 487: Configure The Multicast Admin Boundary

    M6100, M5300, and M7100 Series Managed Switches Configure the Multicast Admin Boundary The definition of an administratively scoped boundary is a mechanism to stop the ingress and egress of multicast traffic for a given range of multicast addresses on a given routing interface.

  • Page 488: Configure Ipv6 Multicast Settings

    M6100, M5300, and M7100 Series Managed Switches To delete the selected administratively scoped boundary, click the Delete button. Configure IPv6 Multicast Settings Only the following switches support IPv6 multicast: M6100 • M5300-28G3 • M5300-52G3 • M5300-28GF3 • The following switches support IPv6 with an L3 license: M5300-28G •...

  • Page 489: Configure The Ipv6 Pim Global Settings

    M6100, M5300, and M7100 Series Managed Switches To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed. Table 187. Multicast Mroute Table Field Description Group IP The destination group IP address.

  • Page 490: Configure Ipv6 Pim Ssm

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 491: Configure The Ipv6 Pim Interface

    M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 492 M6100, M5300, and M7100 Series Managed Switches Select Routing> IPv6 Multicast > IPv6 PIM > Interface Configuration. In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected.

  • Page 493: View The Ipv6 Pim Neighbor

    M6100, M5300, and M7100 Series Managed Switches View the IPv6 PIM Neighbor  To view the IPv6 PIM neighbor: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 494: Configure The Ipv6 Pim Candidate Rendezvous Point

    M6100, M5300, and M7100 Series Managed Switches Configure the IPv6 PIM Candidate Rendezvous Point  To configure the IPv6 PIM candidate rendezvous point: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 495: Configure The Ipv6 Pim Bootstrap Router Candidate Settings

    M6100, M5300, and M7100 Series Managed Switches Configure the IPv6 PIM Bootstrap Router Candidate Settings  To configure the IPv6 PIM BSR Candidate settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 496: Configure The Ipv6 Pim Static Rendezvous Point

    M6100, M5300, and M7100 Series Managed Switches Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable data that is displayed.

  • Page 497: Configure Ipv6 Mld Global Settings

    M6100, M5300, and M7100 Series Managed Switches In the RP Address field, enter the IP address of the RP. In the Group Address field, enter the address of the RP. In the Prefix Length field, enter the group address prefix length.

  • Page 498: Configure The Ipv6 Mld Routing Interface

    M6100, M5300, and M7100 Series Managed Switches Select the Admin Mode Disable or Enable radio button. This sets the administrative status of MLD in the router to active or inactive. The default is Disable. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.
  • Page 499 M6100, M5300, and M7100 Series Managed Switches In the Go To Interface field, enter the interface in unit/slot/port format and click the Go button. The entry corresponding to the specified interface is selected. Select the check box beside the Interface.

  • Page 500: View Ipv6 Mld Routing Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable data that is displayed. Table 191. IPv6 MLD Routing Interface Configuration Field Description Operational Mode The operational status of MLD on the Interface.

  • Page 501: View The Ipv6 Mld Groups

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 192. IPv6 MLD Routing Interface Statistics Field Description Interface The interface for which data is to be displayed. Querier Status Indicates whether the selected interface is an MLD querier or non-querier on the subnet it is associated with.
  • Page 502 M6100, M5300, and M7100 Series Managed Switches Use the Search By list to search for multicast entries by Interface or Group: Select Interface from the Search list, enter the interface in unit/slot/port format, for • example 1/0/13, then click the Go button.

  • Page 503: View Ipv6 Mld Traffic

    M6100, M5300, and M7100 Series Managed Switches View IPv6 MLD Traffic  To view the IPv6 MLD traffic: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 504: Configure The Ipv6 Mld Proxy Interface

    M6100, M5300, and M7100 Series Managed Switches Table 194. IPv6 Multicast MLD Traffic (continued) Field Description Queries Received The number of valid MLD queries received by the router. Queries Sent The number of valid MLD queries sent by the router.
  • Page 505 M6100, M5300, and M7100 Series Managed Switches In the Interface list, select the interface. In the Admin Mode list, select Enable or Disable. This sets the administrative status of MLD proxy on the selected interface. The default is Disable. Routing, MLD, and Multicast global admin modes must be enabled to enable MLD proxy interface mode.

  • Page 506: View Ipv6 Mld Proxy Interface Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 195. IPv6 Multicast MLD Proxy Interface Configuration (continued) Field Description Version 1 Querier Timeout The older MLD version 1 querier time-out value in seconds. The older version querier Interval is the time-out for transitioning a host back to MLDv2 mode once an older version query is heard.

  • Page 507: View The Ipv6 Mld Proxy Membership

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 196. IPv6 Multicast MLD Proxy Interface Statistics Field Description Proxy Interface The interface on which MLD proxy packets received. Version The version of MLD proxy packets received.

  • Page 508: Configure Ipv6 Multicast Static Routes

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 197. IPv6 Multicast MLD Proxy Membership Field Description Proxy Interface The interface on which the MLD proxy is enabled. Group IP The IPv6 multicast group address.
  • Page 509 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Routing> IPv6 Multicast > Static Routes Configuration.
  • Page 510 Configure Quality of Service This chapter covers the following topics: • QoS Overview • Class of Service • Differentiated Services Overview...

  • Page 511: Chapter 8 Configure Quality Of Service

    M6100, M5300, and M7100 Series Managed Switches QoS Overview In a typical switch, each physical port consists of one or more queues for transmitting packets on the attached network. Multiple queues per port are often provided to give preference to certain packets over others based on user-defined criteria.

  • Page 512: Configure Global Cos Settings

    M6100, M5300, and M7100 Series Managed Switches Configure Global CoS Settings  To configure global CoS settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 513: Map 802.1P Priorities To Queues

    M6100, M5300, and M7100 Series Managed Switches Use Interface Trust Mode to specify whether to trust a particular packet marking at ingress. Interface Trust mode can be one of the following: untrusted • trust dot1p • trust ip-dscp • The default value is untrusted.

  • Page 514: Map Dscp Values To Queues

    M6100, M5300, and M7100 Series Managed Switches Use Interface to select interfaces. You can specify CoS configuration settings per-interface or for all CoS configurable interfaces. Specify which internal traffic class to map the corresponding 802.1p value. The queue number depends on the specific hardware. The 802.1p Priority row contains traffic class selectors for each of the eight 802.1p priorities to be mapped.

  • Page 515: Configure Cos Interface Settings For An Interface

    M6100, M5300, and M7100 Series Managed Switches The IP DSCP field displays an IP DSCP value from 0 to 63. For each DSCP value, specify which internal traffic class to map the corresponding IP DSCP value. The queue number depends on specific hardware.
  • Page 516 M6100, M5300, and M7100 Series Managed Switches Select QoS > CoS> Advanced > CoS Interface Configuration. Select LAG to show the list of all LAG interfaces. Select All to show the list of all physical as well as LAG interfaces.

  • Page 517: Configure Cos Queue Settings For An Interface

    M6100, M5300, and M7100 Series Managed Switches Configure CoS Queue Settings for an Interface You can define what a particular queue does by configuring switch egress queues. User-configurable parameters control the amount of bandwidth used by the queue, the queue depth during times of congestion, and the scheduling of packet transmission from the set of all queues on a port.

  • Page 518: Configure Cos Drop Precedence Settings

    M6100, M5300, and M7100 Series Managed Switches You can select multiple ports and LAGs to apply the same setting to the selected interfaces. Select the check box in the heading row to apply a trust mode or rate to all interfaces.
  • Page 519 M6100, M5300, and M7100 Series Managed Switches Use Interface to specify all CoS configurable interfaces. Use Queue ID to specify all the available queues. Valid values are 0 to 6. The default is 0. Use Drop Precedence Level to specify all the available drop precedence levels.

  • Page 520: Differentiated Services Overview

    M6100, M5300, and M7100 Series Managed Switches Table 198. CoS Interface Queue Drop Precedence Status (continued) Field Description Drop Precedence Level The drop precedence level. WRED Minimum Threshold The weighted RED minimum queue threshold value. WRED Maximum Threshold The weighted RED maximum queue threshold value.

  • Page 521: Use The Diffserv Wizard

    M6100, M5300, and M7100 Series Managed Switches VOIP. Sets the match criteria to UDP protocol. • HTTP. Sets the match criteria to HTTP destination port. • FTP. Sets match criteria to FTP destination port. • Telnet. Sets the match criteria to Telnet destination port.

  • Page 522: Configure Basic Diffserv Settings

    M6100, M5300, and M7100 Series Managed Switches Use Traffic Type to define the DiffServ Class. Traffic type options are: VOIP, HTTP, FTP, Telnet, and Every. Ports displays the ports which can be configured to support a DiffServ policy. The DiffServ policy is added to selected ports.
  • Page 523 M6100, M5300, and M7100 Series Managed Switches Packet processing begins by testing the match criteria for a packet. The all class type option specifies that each match criteria within a class must evaluate to true for a packet to match that class.

  • Page 524: Configure The Global Diffserv Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 199. DiffServ Configuration Field Description DiffServ Admin Mode The options mode for DiffServ. The default value is Enable. While disabled, the DiffServ configuration is retained when saved and can be changed, but it is not activated.
  • Page 525 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 526: Configure A Diffserv Class

    M6100, M5300, and M7100 Series Managed Switches Table 200. DiffServ Status (continued) Field Description The number of configured policy class instances out of the total allowed Policy Instance table on the switch. The number of configured policy attributes (attached to the policy class Policy Attributes table instances) out of the total allowed on the switch.
  • Page 527 M6100, M5300, and M7100 Series Managed Switches To create a new class, enter a class name, select the class type, and click the Add button. This field also lists all the existing DiffServ class names, from which one can be selected.
  • Page 528 M6100, M5300, and M7100 Series Managed Switches To configure the class details, complete the fields: Class Name - The name for the configured DiffServ class. • Class Type - The DiffServ class type. • You can select the class type only when you are creating a new class. After you create the class, this field displays the class type, but you cannot change it.
  • Page 529 M6100, M5300, and M7100 Series Managed Switches Ethernet Type. This lists the keywords for the Ethertype from which one can be • selected. Source MAC Address. This is the source MAC address specified as six, 2-digit • hexadecimal numbers separated by colons.

  • Page 530: Configure Diffserv Ipv6 Class Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed in the Class Summary at the bottom of the DiffServ Advanced Class Configuration screen. Table 201. DiffServ Class Configuration - Class Summary Field Description Match Criteria The configured match criteria for the specified class.
  • Page 531 M6100, M5300, and M7100 Series Managed Switches This field also lists all the existing DiffServ class names, from which one can be selected. The switch supports only the Class Type value All, which means all the various match criteria defined for the class is satisfied for a packet match. All signifies the logical AND of all the match criteria.
  • Page 532 M6100, M5300, and M7100 Series Managed Switches To configure the IPv6 class, complete the fields: Class Name - The name for the configured DiffServ class. • Class Type - The DiffServ class type. • Options: All You can specify the class type only when you are creating a new class. After the class is created, this field displays the class type, but you cannot change it.

  • Page 533: Configure Diffserv Policy

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed in the Class Summary at the bottom of the DiffServ Advanced IPv6 Class Configuration screen. Table 202. DiffServ IPv6 Class Configuration - Class Summary Field...
  • Page 534 M6100, M5300, and M7100 Series Managed Switches This lists all existing DiffServ classes currently defined as members of the specified policy. This list is automatically updated as a new class is added to or removed from the policy. This field is a selector field only when an existing policy class instance is to be removed.
  • Page 535 M6100, M5300, and M7100 Series Managed Switches Drop - Select the drop radio button. This flag indicates that the policy attribute is • defined to drop every inbound packet. Mark VLAN CoS - This is an integer value in the range from 0 to 7 for setting the •...

  • Page 536: Configure The Diffserv Service Interface

    M6100, M5300, and M7100 Series Managed Switches Mark CoS - These packets are marked by DiffServ with the specified CoS value • before being presented to the system forwarding element. This selection requires that the Mark CoS field be set.

  • Page 537: View Diffserv Service Statistics

    M6100, M5300, and M7100 Series Managed Switches Select QoS > DiffServ > Advanced > Service Interface Configuration. Use Interface to select the interface for the DiffServ service. Policy Name - Lists all the policy names from which one can be selected.
  • Page 538 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.
  • Page 539 M6100, M5300, and M7100 Series Managed Switches The following table describes the information available on the Service Statistics screen. Table 205. DiffServ Service Statistics Field Description Interface List of all valid slot number and port number combinations in the system with a DiffServ policy currently attached in In direction.

  • Page 540: Chapter 9 Manage Device Security

    Manage Device Security This chapter covers the following topics: • Management Security Settings • TACACS Overview • Configure Management Access • Port Authentication • Traffic Control • Port Security • DHCP Snooping • Configure Access Control Lists...

  • Page 541: Management Security Settings

    M6100, M5300, and M7100 Series Managed Switches Management Security Settings You can configure the login password, Remote Authorization Dial-In User Service (RADIUS) settings, Terminal Access Controller Access Control System (TACACS) settings, and authentication lists. Configure Users By default, two user accounts exist: admin, with read/write privileges •...

  • Page 542: Configure A User Password

    M6100, M5300, and M7100 Series Managed Switches Select Security> Management Security > Local User > User Management. In the User Name field, enter the name for the new account. You can enter a new user name only when you are creating an account. User names are up to 64 characters in length and are not case-sensitive.
  • Page 543 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 544: Enable Password Configuration

    M6100, M5300, and M7100 Series Managed Switches Enable Password Configuration You can change the privileged EXEC password. Passwords are a maximum of 64 alphanumeric characters. The password is case-sensitive.  To enable password configuration: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 545: Radius Overview

    M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 546: Configure Global Radius Server Settings

    M6100, M5300, and M7100 Series Managed Switches password before authorizing use of the network. RADIUS servers provide a centralized authentication method for the following: Web access • Access control port (802.1X) • Configure Global RADIUS Server Settings You can add information about one or more RADIUS servers on the network.
  • Page 547 M6100, M5300, and M7100 Series Managed Switches The Current Server IP Address field is blank if no servers are configured (see Configure on page 548). The switch supports up to three configured RADIUS a RADIUS Server servers. If more than one RADIUS servers is configured, the current server is the primary server.

  • Page 548: Configure A Radius Server

    M6100, M5300, and M7100 Series Managed Switches This enables or disables RADIUS attribute 4. The default value is Disable. The Radius Attribute 4 Value is an optional field and can be seen only when RADIUS attribute 4 mode is enabled. It takes an IP address value in the format xx.xx.xx.xx.
  • Page 549 M6100, M5300, and M7100 Series Managed Switches To add a RADIUS server, specify the following settings: In the Radius Server IP Address field, specify the IP address of the RADIUS server. • In the Radius Server Name field, specify the name of the server.

  • Page 550: Configure Radius Accounting Servers

    M6100, M5300, and M7100 Series Managed Switches Table 207. RADIUS statistics Field Description Radius Server The address of the RADIUS server or the name of the RADIUS server for which the statistics are displayed. Round Trip Time The time interval, in hundredths of a second, between the most recent access-reply/access-challenge and the access-request that matched it from this RADIUS authentication server.
  • Page 551 M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 552: Tacacs Overview

    M6100, M5300, and M7100 Series Managed Switches Table 208. RADIUS Accounting Server Statistics Field Description Accounting Server Address The accounting server associated with the statistics. Round Trip Time(secs) The time interval, in hundredths of a second, between the most recent accounting-response and the accounting-request that matched it from this RADIUS accounting server.

  • Page 553: Configure Global Tacacs Settings

    M6100, M5300, and M7100 Series Managed Switches Configure Global TACACS Settings You can configure the TACACS settings for communication between the switch and the TACACS server you configure through the inband management port.  To configure global TACACS settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 554: Configure Tacacs Server Settings

    M6100, M5300, and M7100 Series Managed Switches None • Routing interface • Routing VLAN • Routing loopback interface • Service port • By default VLAN 1 is used as source interface. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.

  • Page 555: Configure A Login Authentication List

    M6100, M5300, and M7100 Series Managed Switches Use Port to specify the authentication port. It must be within the range 0–65535. Use Key String to specify the authentication and encryption key for TACACS communications between the device and the TACACS server.

  • Page 556: Configure An Enable Authentication List

    M6100, M5300, and M7100 Series Managed Switches To create a new login list, enter the name in the List Name field. The name can be up to 15 alphanumeric characters long and is not case-sensitive. In the numbered lists (1, 2, 3, 4, 5, 6) select the method to appear first in the selected authentication enable list.
  • Page 557 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 558: Configure The Dot1X Authentication List

    M6100, M5300, and M7100 Series Managed Switches You can use this button only if you have read/write access. The change is not retained across a power cycle unless you perform a save. Configure the Dot1x Authentication List You can configure a dot1x list. A dot1x list specifies the authentication methods to validate port access for the users associated with the list.

  • Page 559: Configure An Http Authentication List

    M6100, M5300, and M7100 Series Managed Switches Select the method to appear first in the selected authentication login list. The options are as follows: IAS. The user’s ID and password in internal authentication server database is used • for authentication.

  • Page 560: Configure An Https Authentication List

    M6100, M5300, and M7100 Series Managed Switches Use List Name to select the HTTP list name. In the numbered lists (1, 2, 3, 4) select the method to appear first in the selected authentication enable list. The options are as follows: Enable.

  • Page 561: View Login Sessions

    M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 562: Configure Management Access

    M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.
  • Page 563 M6100, M5300, and M7100 Series Managed Switches BOOTP • DHCP • Terminal interface through the EIA-232 port • Once you establish in-band connectivity, you can change the IP information using a web-based management.  To configure the HTTP server settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for...

  • Page 564: Https Configuration

    M6100, M5300, and M7100 Series Managed Switches Select the Java Mode Disable or Enable radio button. This enables or disables the Java applet, which displays a picture of the switch in the Device view tab of the System tab. If you run the applet, you can click the picture of the switch to select configuration screens instead of using the navigation tree on the left side of the screen.
  • Page 565 M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Security > Access > HTTPS > HTTPS Configuration. Select the HTTPS Admin Mode Disable or Enable radio button. This enables or disables the administrative mode of Secure HTTPS. The currently configured value is displayed.

  • Page 566: Manage Certificates

    M6100, M5300, and M7100 Series Managed Switches In the Maximum Number of HTTPS Sessions field, enter the maximum allowable number of HTTPS sessions. The value must be in the range of 0 to 16. The default value is 16. The currently configured value is displayed.

  • Page 567: Download Certificates

    M6100, M5300, and M7100 Series Managed Switches None. There is nothing to be done with respect to certificate management. This is the • default selection. Generate Certificates. Begin generating the certificate files. • Delete Certificates. Delete the corresponding certificate files, if present.

  • Page 568: Configure Ssh Settings

    M6100, M5300, and M7100 Series Managed Switches In the File Type list, specify the type of file to transfer: SSL Trusted Root Certificate PEM File. SSL Trusted Root Certificate file (PEM • Encoded) SSL Server Certificate PEM File. SSL Server Certificate File (PEM Encoded) •...
  • Page 569 M6100, M5300, and M7100 Series Managed Switches because it encrypts communication between the administrative system and the device. You can download or generate SSH host keys for secure CLI-based management.  To configure SSH settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.
  • Page 570 M6100, M5300, and M7100 Series Managed Switches for SSH (SSH-1). When Disable is selected, the device does not allow connections from clients using the SSH-1 protocol. The currently configured value is displayed. The default value is Enable. Select the SSH Version 2 Disable or Enable radio button.

  • Page 571: Manage Host Keys

    M6100, M5300, and M7100 Series Managed Switches Manage Host Keys You can generate or delete RSA and DSA keys.  To manage host keys: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 572: Download Host Keys

    M6100, M5300, and M7100 Series Managed Switches Select a DSA Keys Management radio button: None. This is the default selection. • Generate DSA Keys. Begin generating the DSA host keys. • To generate SSH key files SSH must be administratively disabled and there can be no active SSH sessions.
  • Page 573 M6100, M5300, and M7100 Series Managed Switches Select Security > Access > SSH > Host Keys Download. In the File Type list, select the type of file to transfer: SSH-1 RSA Key File. SSH-1 Rivest-Shamir-Adelman (RSA) key file • SSH-2 RSA Key PEM File. SSH-2 Rivest-Shamir-Adelman (RSA) key file (PEM •...

  • Page 574: Configure Telnet Settings

    M6100, M5300, and M7100 Series Managed Switches Configure Telnet Settings  To configure Telnet settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 575 M6100, M5300, and M7100 Series Managed Switches the list. The enable list specifies the authentication methods to use to validate privileged EXEC access for the users associated with the list. These lists can be created through the Authentication List link under Management Security.
  • Page 576 M6100, M5300, and M7100 Series Managed Switches Use Enable Authentication List to specify which authentication list you are using when going into the privileged EXEC mode. The default value is enableNetList. To configure inbound Telnet settings, specify the following: Select the Telnet Server Admin Mode Disable or Enable radio button.

  • Page 577: Configure The Console Port

    M6100, M5300, and M7100 Series Managed Switches Configure the Console Port  To configure the console port: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 578: Configure Denial Of Service Settings

    M6100, M5300, and M7100 Series Managed Switches The default value is defaultList. In the Enable Authentication List list, select which authentication list to use when going into the privileged EXEC mode. The default value is enableList The following table describes the nonconfigurable data that is displayed.
  • Page 579 M6100, M5300, and M7100 Series Managed Switches In the Denial of Service Min TCP Header Size field, specify the minimum TCP header size allowed. If DoS TCP Fragment is enabled, the switch drops these packets: First TCP fragments with a TCP payload: IP_Payload_Length - IP_Header_Size <...
  • Page 580 M6100, M5300, and M7100 Series Managed Switches Select the Denial of Service First Fragment Disable or Enable radio button. This enables First Fragment DoS prevention, which causes the switch to check DoS options on first fragment IP packets when switch are receiving fragmented IP packets.

  • Page 581: Configure An Access Control Profile

    M6100, M5300, and M7100 Series Managed Switches Enabling TCP SYN & FIN DoS prevention causes the switch to drop packets with TCP flags SYN and FIN set. The factory default is Disable. Select the Denial of Service UDP Port Disable or Enable radio button.

  • Page 582: Configure Access Rule Settings

    To deactivate an access profile, select the Deactivate Profile check box. To remove an access profile, select the Remove Profile check box. NETGEAR recommends that you deactivate the access profile before removing it. The Packets Filtered field displays the number of packets filtered.
  • Page 583 M6100, M5300, and M7100 Series Managed Switches Select Security > Access > Access Control > Access Rule Configuration. You can apply changes to the access rule only when the access profile is in a deactived state. Make sure that the access profile is created before adding the rules.

  • Page 584: Port Authentication

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. Port Authentication In port-based authentication, when 802.1X is enabled globally and on the port, successful authentication of any one supplicant attached to the port results in all users being able to use the port without restrictions.
  • Page 585 M6100, M5300, and M7100 Series Managed Switches Select the Administrative Mode Disable or Enable radio button. This enables or disables 802.1X administrative mode on the switch. Enable. Port-based authentication is permitted on the switch. • If 802.1X is enabled, authentication is performed by a RADIUS server. This means the primary authentication method must be RADIUS.

  • Page 586: Configure 802.1X Settings

    M6100, M5300, and M7100 Series Managed Switches Configure 802.1X Settings You can enable or disable 802.1X access control on the system.  To configure 802.1X settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 587: Configure Port Authentication

    M6100, M5300, and M7100 Series Managed Switches Use Dynamic VLAN Creation Mode to select Disable or Enable. The default value is Disable. Use Monitor Mode to select Disable or Enable. The default value is Disable. The feature monitors the dot1x authentication process and helps in diagnosis of the authentication failure cases.
  • Page 588 M6100, M5300, and M7100 Series Managed Switches Select the check box next to the port to configure. You can also select multiple check boxes to apply the same settings to the selected ports, or select the check box in the heading row to apply the same settings to all ports.
  • Page 589 M6100, M5300, and M7100 Series Managed Switches The default value is 90. Changing the value does not change the configuration until the Apply button is clicked. Unauthenticated VLAN ID. Enter the unauthenticated VLAN ID for the selected port. • The valid range is 0–4093.The default value is 0. Changing the value does not change the configuration until the Apply button is clicked.

  • Page 590: View The Port Summary

    M6100, M5300, and M7100 Series Managed Switches Click the Reauthentication button. The reauthentication sequence begins on the selected port. You can click this button only if the control mode is auto. If the button is not available, it is grayed out. Once you click this button, the action is immediate. You do not need to click the Apply button for the action to occur.
  • Page 591 M6100, M5300, and M7100 Series Managed Switches The following table describes the fields on the Port Summary screen. Table 214. Port Summary Field Description Port The port whose settings are displayed in the current table row. Control Mode This field indicates the configured control mode for the port. Possible values are as follows: Force Unauthorized.
  • Page 592 M6100, M5300, and M7100 Series Managed Switches Table 214. Port Summary (continued) Field Description Authenticator PAE State The current state of the authenticator PAE state machine. Possible values are as follows: Initialize • Disconnected • Connecting • Authenticating • Authenticated •...

  • Page 593: View The Client Summary

    M6100, M5300, and M7100 Series Managed Switches Table 214. Port Summary (continued) Field Description Session Termination Action The termination action set by the RADIUS server for the selected port. This field is displayed only when the port control mode of the selected port is not MAC-based.

  • Page 594: Traffic Control

    M6100, M5300, and M7100 Series Managed Switches Table 215. Client Summary Field Description Port The port to be displayed. User Name The user name representing the identity of the supplicant device. Supplicant Mac Address The supplicant's device MAC address. Session Time The time since the supplicant as logged in seconds.
  • Page 595 M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Security > Traffic Control > MAC Filter. This is the list of MAC address and VLAN ID pairings for all configured filters.

  • Page 596: Mac Filter Summary

    M6100, M5300, and M7100 Series Managed Switches Packets with the MAC address and VLAN ID you selected are transmitted only from ports that are in the list. Destination ports can be included only in the multicast filter. To delete a configured MAC filter, select it, and then click the Delete button.

  • Page 597: Port Security

    M6100, M5300, and M7100 Series Managed Switches Table 216. MAC Filter Summary (continued) Field Description Source Port Members A list of ports to be used for filtering inbound packets. Destination Port Members A list of ports to be used for filtering outbound packets.

  • Page 598: Configure A Port Security Interface

    M6100, M5300, and M7100 Series Managed Switches Select the Port Security Mode Disable or Enable radio button. The Port Security Violations table shows information about violations that occurred on ports that are enabled for port security. The following table describes the fields in the Port Security Violations table.
  • Page 599 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 600: Convert Learned Mac Addresses To Static Addresses

    M6100, M5300, and M7100 Series Managed Switches Convert Learned MAC Addresses to Static Addresses You can convert a dynamically learned MAC address to a statically locked address.  To convert learned MAC addresses: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 601: Configure A Static Mac Address

    M6100, M5300, and M7100 Series Managed Switches The following table shows the MAC addresses and their associated VLANs learned on the selected port. Use the Port List menu to select the interface. Table 218. Dynamic MAC Address Field Description Number of Dynamic MAC The number of dynamically learned MAC addresses on a specific port.

  • Page 602: Configure A Private Group

    M6100, M5300, and M7100 Series Managed Switches Static MAC Address. Accepts user input for the MAC address to be added. Use VLAN ID to select the VLAN ID corresponding to the MAC address being added. Click the Add button. The static MAC address is added to the switch.

  • Page 603: Configure Private Group Membership

    M6100, M5300, and M7100 Series Managed Switches The group mode can be either isolated or community. When in isolated mode, the member port in the group cannot forward its egress traffic to any other members in the same group. By default, the mode is community mode that each member port can forward traffic to other members in the same group, but not to members in other groups.

  • Page 604: Configure Protected Ports

    M6100, M5300, and M7100 Series Managed Switches The port list displays when at least one group is configured. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. The following table describes the nonconfigurable information displayed on the screen.

  • Page 605: Configure A Private Vlan

    M6100, M5300, and M7100 Series Managed Switches In the Group ID list, select a group of protected ports that can be combined into a logical group. Traffic can flow between protected ports belonging to different groups, but not within the same group.

  • Page 606: Configure Private Vlan Association Settings

    M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 607: Configure The Private Vlan Port Mode

    M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 608: Configure A Private Vlan Host Interface

    M6100, M5300, and M7100 Series Managed Switches Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.
  • Page 609 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 610: Configure A Private Vlan Promiscuous Interface

    M6100, M5300, and M7100 Series Managed Switches Configure a Private VLAN Promiscuous Interface  To configure a private VLAN promiscuous interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 611: Storm Control

    M6100, M5300, and M7100 Series Managed Switches The VLAN ID List given in this control replaces the configured Note: secondary VLAN list in the association. Click the Delete button to delete the IP subnet-based VLAN from the switch. Click the Apply button.

  • Page 612: Configure A Storm Control Interface

    M6100, M5300, and M7100 Series Managed Switches Select Security > Traffic Control > Storm Control > Storm Control Global Configuration. The following three controls provide an easy way to enable or disable each type of packets to be rate-limited on every port in a global fashion. The effective storm control state of each port can be viewed by going to the port configuration screen.
  • Page 613 M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Security > Traffic Control > Storm Control > Storm Control Interface Configuration. The following table describes the nonconfigurable information displayed on the screen.

  • Page 614: Dhcp Snooping

    M6100, M5300, and M7100 Series Managed Switches Table 223. Storm Control Interface Configuration (continued) Field Description Unicast Storm Recovery Level Specify the unicast storm recovery level as a percentage of link speed Type or as packets per second. Unicast Storm Recovery Level Specify the threshold at which storm control activates.

  • Page 615: Configure A Dhcp Snooping Interface

    M6100, M5300, and M7100 Series Managed Switches Select the DHCP Snooping Mode Disable or Enable radio button. The factory default is Disable. Select the MAC Address Validation Disable or Enable radio button. This enables or disables the validation of sender MAC address for DHCP snooping. The factory default is Enable.

  • Page 616: Configure Dhcp Snooping Binding

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Security > Control > DHCP Snooping > Interface Configuration.
  • Page 617 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 618: Configure Snooping Persistent Settings

    M6100, M5300, and M7100 Series Managed Switches d. IP Address. Displays IP address for the binding entry in the binding database. e. Lease Time. The remaining lease time for the dynamic entries. f. To delete all DHCP snooping binding entries, click the Clear button.

  • Page 619: View Dhcp Snooping Statistics

    M6100, M5300, and M7100 Series Managed Switches In the Write Delay field, enter the maximum write time to write the database into local or remote. The range is 15 to 86400. View DHCP Snooping Statistics  To view DHCP snooping statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for...

  • Page 620: Configure An Ip Source Guard Interface

    M6100, M5300, and M7100 Series Managed Switches The following table describes the DHCP snooping statistics. Table 224. DHCP Snooping Statistics Field Description Interface The untrusted and snooping-enabled interface for which statistics are to be displayed. MAC Verify Failures Number of packets that were dropped by DHCP snooping because there is no matching DHCP snooping binding entry found.

  • Page 621: Configure Ip Source Guard Binding Settings

    M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Security > Control > IP Source Guard > Interface Configuration. Use the Interface check boxes to select the interface. In the IPSG Mode list, select Disable or Enable.
  • Page 622 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 623: Configure Ipv6 Source Guard Interface Settings

    M6100, M5300, and M7100 Series Managed Switches Table 225. IP Source Guard Dynamic Binding Configuration (continued) Field Description IP Address Displays valid IP address for the binding entry. Filter Type Filter type used on the interface. One is source IP address filter type, and the other is source IP address and MAC address filter type.

  • Page 624: Configure Ipv6 Source Guard Binding

    M6100, M5300, and M7100 Series Managed Switches If IPv6SG port security is enabled, then the packets are not forwarded if the sender MAC address is not in FDB table and it is not in the DHCP snooping binding database. To enforce filtering based on MAC address other required configurations are as follows: Enable port-security globally.

  • Page 625: Configure Dynamic Arp Inspection

    M6100, M5300, and M7100 Series Managed Switches From the Interface list, select the interface to add a binding into the IPv6SG database. Use MAC Address to specify the MAC address for the binding. Use VLAN ID to select the VLAN from the list for the binding rule.

  • Page 626: Configure A Dai Vlan

    M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.
  • Page 627 M6100, M5300, and M7100 Series Managed Switches The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password.

  • Page 628: Configure The Dai Interface

    M6100, M5300, and M7100 Series Managed Switches Configure the DAI Interface  To configure the DAI interface: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 629: Configure A Dai Acl

    M6100, M5300, and M7100 Series Managed Switches value can be set to –1, which means N/A. The range is 0– 300. The factory default is 15 pps (packets per second). Use Burst Interval (secs) to specify the burst interval value for rate limiting purposes on this interface.

  • Page 630: Configure A Dai Acl Rule

    M6100, M5300, and M7100 Series Managed Switches Configure a DAI ACL Rule  To configure a DAI ACL rule: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 631: View Dai Statistics

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 227. DAI ACL Rule Configuration Field Description Source IP Address This indicates sender IP address match value for the DAI ARP ACL.

  • Page 632: Captive Portal

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 228. DAI Statistics Field Description VLAN The enabled VLAN ID for which statistics are to be displayed. DHCP Drops Number of ARP packets that were dropped by DAI because there is no matching DHCP snooping binding entry found.
  • Page 633 M6100, M5300, and M7100 Series Managed Switches  To configure captive portal global settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 634 M6100, M5300, and M7100 Series Managed Switches HTTP traffic uses standard port 80, but you can use the Additional HTTP Port field to configure an additional port for HTTP traffic. Enter 0 to unconfigure the additional HTTP port. The default is 0.

  • Page 635: Add A Captive Portal Instance

    M6100, M5300, and M7100 Series Managed Switches Table 229. Captive Portal Global Configuration Field Description Configured Local Users The number of local users configured. Authenticated Users Shows the number of users currently authenticated to all captive portal instances on this switch.
  • Page 636 M6100, M5300, and M7100 Series Managed Switches This sets the administrative mode of the captive portal feature. By default captive portal is disabled. In the Protocol field, select either HTTP or HTTPS as the captive portal instances used for communication with clients during the verification process: HTTP does not use encryption during verification.
  • Page 637 M6100, M5300, and M7100 Series Managed Switches In the Background Color field, specify the value of the background color. For example, #BFBFBF. In the Foreground Color field, specify the value of the foreground color. For example, #999999. In the Separator Color field, specify the value of the separator color.

  • Page 638: Configure Cp Binding

    M6100, M5300, and M7100 Series Managed Switches b. Click the Delete button. The currently selected CP instance is removed. Configure CP Binding You can associate a configured captive portal with a specific network (SSID). The CP feature runs only on the interfaces you specify. Multiple interfaces can be associated with a CP, but an interface can be associated to only one CP at a time.

  • Page 639: View The Captive Portal Binding Table

    M6100, M5300, and M7100 Series Managed Switches The name can contain from 1 to 31 alphanumeric characters. b. Select the interface or interfaces from the Port List. c. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately.

  • Page 640: Configure A Captive Portal Group

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable data that is displayed. Table 230. Captive Portal Binding Table Field Description Interface The interface. CP ID The ID of the captive portal instance. Operational Status Indicates whether the portal is active on the specified interface.

  • Page 641: Configure Captive Portal User Settings

    M6100, M5300, and M7100 Series Managed Switches Select the Group ID from the list. In the Group Name field, specify the name of the user group. The name can contain from 1 to 31 alphanumeric characters. Click the Add button.
  • Page 642 M6100, M5300, and M7100 Series Managed Switches The name can contain 1 to 31 alphanumeric characters. Once created, user names cannot be changed or modified. In the Edit Password list, select Enable only when you are changing the password. The default value is Disable.

  • Page 643: Configure The Captive Portal Trap Flag Settings

    M6100, M5300, and M7100 Series Managed Switches The updated configuration is sent to the switch. Configuration changes take effect immediately. Configure the Captive Portal Trap Flag Settings You can specify whether or not SNMP traps are sent from the captive portal and to specify captive portal events that generate a trap.

  • Page 644: View The Captive Portal Client

    M6100, M5300, and M7100 Series Managed Switches If you enable this, the SNMP agent sends a trap when a client authenticates with, and connects to, a captive portal. Select the Client Database Full Disable or Enable radio button.. If you enable this, the SNMP agent sends a trap each time an entry cannot be added to the client database because it is full.

  • Page 645: Configure Access Control Lists

    M6100, M5300, and M7100 Series Managed Switches To clear the information in the client table, click the Clear button. To refresh the screen with the latest information on the switch, click the Update button. The following table describes the nonconfigurable information displayed on the screen.t Table 231.
  • Page 646 M6100, M5300, and M7100 Series Managed Switches  To use the ACL Wizard to create a simple ACL: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 647: Configure An Acl Based On Destination Mac Address

    M6100, M5300, and M7100 Series Managed Switches ACL Based on Destination MAC. To create an ACL based on the destination MAC • address, destination MAC mask, and VLAN. ACL Based on Source MAC. To create an ACL based on the source MAC address, •...
  • Page 648 M6100, M5300, and M7100 Series Managed Switches Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays.

  • Page 649: Use The Acl Wizard To Complete The Destination Mac Acl

    M6100, M5300, and M7100 Series Managed Switches Specify the VLAN ID to compare against an Ethernet frame. Valid range of values is 1 to 4093. Either a VLAN range or VLAN can be configured. Click the Add button. The rule is added to the ACL based on the Destination MAC.
  • Page 650 M6100, M5300, and M7100 Series Managed Switches  To configure a MAC ACL: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 651: Configure Mac Acl Rules

    M6100, M5300, and M7100 Series Managed Switches Click the Add button. The MAC ACL is added to the switch configuration. To change the name of the MAC ACL, in the Name field, update the name, then click the Apply button.
  • Page 652 M6100, M5300, and M7100 Series Managed Switches Valid range of queue IDs is 0 to 7. Mirror Interface to specify the specific egress interface where the matching traffic stream is copied in addition to being forwarded normally by the device.
  • Page 653 M6100, M5300, and M7100 Series Managed Switches Reverse ARP • User Value • Use EtherType User Value to specify the user defined customized EtherType value to be used when you selected User Value as EtherType key, to compare against an Ethernet frame.

  • Page 654: Configure Mac Binding

    M6100, M5300, and M7100 Series Managed Switches Configure MAC Binding When an ACL is bound to an interface, all the rules that are defined are applied to the selected interface. Use the MAC Binding Configuration screen to assign MAC ACL lists to ACL priorities and interfaces.

  • Page 655: View Or Delete Mac Acl Bindings In The Mac Binding Table

    M6100, M5300, and M7100 Series Managed Switches A low number indicates high precedence order. If a sequence number is already in use for this interface and direction, the specified access list replaces the currently attached access list using that sequence number. If you do not specify the sequence number, a sequence number that is one greater than the highest sequence number currently in use for this interface and direction is used.

  • Page 656: Configure An Ip Acl

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Security > ACL > Basic > MAC Binding Table.
  • Page 657 M6100, M5300, and M7100 Series Managed Switches Launch a web browser. Enter the IP address of the switch in the web browser address field. The default IP address of the switch is 169.254.100.100. The Login screen displays. Enter the user name and password.

  • Page 658: Configure Rules For An Ip Acl

    M6100, M5300, and M7100 Series Managed Switches Rules. The number of rules currently configured for the IP ACL. • Type. Identifies the ACL as a basic IP ACL (with ID from 1 to 99), extended IP ACL • (with ID from 100 to 199), or for named IP ACL.
  • Page 659 M6100, M5300, and M7100 Series Managed Switches To add an IP ACL rule, select the ACL ID, complete the fields described in the following list, and click the Add button. (Displays only ACL IDs from 1 to 99.) Rule ID. Enter a whole number in the range of 1 to 1023 that is used to identify the •...

  • Page 660: Configure Rules For An Extended Ip Acl

    M6100, M5300, and M7100 Series Managed Switches Rate Limit Conform Data Rate. Value of Rate Limit Conform Data Rate specifies the • conforming data rate of IP ACL Rule. Valid values are 1 to 4294967295 in Kbps. Rate Limit Burst Size. Value of Rate Limit Burst Size specifies burst size of the IP •...
  • Page 661 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Security > ACL > Advanced > IP Extended Rules.
  • Page 662 M6100, M5300, and M7100 Series Managed Switches configuring other match criteria is not offered. To configure specific match criteria for the rule, remove the rule and recreate it, or reconfigure Match Every to False for the other match criteria to be visible.
  • Page 663 M6100, M5300, and M7100 Series Managed Switches The source IP UDP port names are domain, echo, ntp, rip, snmp, tftp, time, who. • Each of these values translates into its equivalent port number, which is used as both the start and end of the port range.
  • Page 664 M6100, M5300, and M7100 Series Managed Switches Equal. IP ACL rule matches only if the Layer 4 source port number is equal to the • specified port number or port key. Less Than. IP ACL rule matches if the Layer 4 source port number is less than the •...

  • Page 665: Configure Ipv6 Acl

    M6100, M5300, and M7100 Series Managed Switches DSCP keywords from the list. If a value is to be selected by specifying its numeric value, then select Other and a field displays where you can enter numeric value of the DSCP.
  • Page 666 M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 667: Configure Ipv6 Rules

    M6100, M5300, and M7100 Series Managed Switches Table 234. IPv6 ACL (continued) Field Description Rules The number of the rules associated with the IP ACL. Type The type is IPv6 ACL. Configure IPv6 Rules Use these screens to display the rules for the IPv6 access control lists, which are created using the IPv6 Access Control List Configuration screen.
  • Page 668 M6100, M5300, and M7100 Series Managed Switches If the access list trap flag is also enabled, this causes periodic traps to be generated indicating the number of times this rule was hit during the current report interval. A fixed 5 minute report interval is used for the entire system.
  • Page 669 M6100, M5300, and M7100 Series Managed Switches Specify an integer ranging from 1 to 255 after selecting protocol keyword other. This number represents the IP protocol. Select name of a protocol from the existing list of Internet Protocol (IPv6), Transmission Control Protocol (TCP), User Datagram Protocol (UDP) and Internet Control Message Protocol (ICMPv6).
  • Page 670 M6100, M5300, and M7100 Series Managed Switches Equal. IPv6 ACL rule matches only if the Layer 4 source port number is equal to the • specified port number or port key. Less Than. IPv6 ACL rule matches if the Layer 4 source port number is less than the •...

  • Page 671: Configure Ip Acl Interface Bindings

    M6100, M5300, and M7100 Series Managed Switches Valid values are 1 to 4294967295 in Kbps. Rate Limit Burst Size. Specify the burst size of IPv6 ACL rule. Valid values are 1 to 128 in Kbytes. Time Range. Name of time range associated with the IPv6 ACL rule.
  • Page 672 M6100, M5300, and M7100 Series Managed Switches In the ACL ID menu, select an IP ACL. Binding ACLs to interface fails when the system has no resources to Note: bind a new ACL. IPv4 ACLs and IPv6 ACLs cannot be bound at the same time to an interface.

  • Page 673: View Or Delete Ip Acl Bindings In The Ip Acl Binding Table

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 235. IP Binding Configuration Field Description Interface Displays the selected interface. Direction Displays the selected packet filtering direction for the ACL.

  • Page 674: View Or Delete Vlan Acl Bindings In The Vlan Binding Table

    M6100, M5300, and M7100 Series Managed Switches The following table describes the information displayed in the IP ACL Binding Table. Table 236. IP ACL Binding Table Field Description Interface Displays the selected interface. Direction Displays the selected packet filtering direction for the ACL.
  • Page 675 M6100, M5300, and M7100 Series Managed Switches Valid ACL Types include IP ACL, MAC ACL, and IPv6 ACL. Use ACL ID to display all the ACLs configured, depending on the ACL type selected. Click the Add button to add a VLAN ID to the selected ACL ID.

  • Page 676: Chapter 10 Monitor The System

    Monitor the System This chapter covers the following topics: • View Port Statistics • Manage Logs • Configure Multiple Port Mirroring • Configure RSPAN VLAN • Configure sFlow...

  • Page 677: View Port Statistics

    M6100, M5300, and M7100 Series Managed Switches View Port Statistics You can view a summary of per-port traffic statistics on the switch.  To view port statistics: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201.

  • Page 678: View Detailed Port Statistics

    M6100, M5300, and M7100 Series Managed Switches The following table describes the per-port statistics displayed on the screen.. Table 238. Port Statistics Field Description Interface This object indicates the interface of the interface table entry associated with this port on an adapter.
  • Page 679 M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Monitoring > Ports > Port Detailed Statistics. The following figure shows some, but not all, of the fields on the Port Detailed Statistics screen.
  • Page 680 M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description Port Type For normal ports this field is normal. Otherwise the possible values are as follows: Mirrored. This port is a participating in port mirroring as a mirrored port.
  • Page 681 M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description Packets RX and TX 64 Octets The total number of packets (including bad packets) received or transmitted that were 64 octets in length (excluding framing bits but including FCS octets).
  • Page 682 M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description Packets Received 256-511 The total number of packets (including bad packets) received that were Octets between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).
  • Page 683 M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description Rx FCS Errors The total number of packets received with a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had...
  • Page 684 M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description Total Packets Transmitted The number of frames that were transmitted by this port to its segment. Successfully Unicast Packets Transmitted The total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those that were discarded or not sent.

  • Page 685: View Eap Statistics

    M6100, M5300, and M7100 Series Managed Switches Table 239. Port Detailed Statistics (continued) Field Description EAPOL Frames Received The number of valid EAPOL frames of any type that were received by this authenticator. EAPOL Frames Transmitted The number of EAPOL frames of any type that were transmitted by this authenticator.
  • Page 686 M6100, M5300, and M7100 Series Managed Switches To clear the counters for a specific port, select the check box associated with the port • and click the Clear button. To refresh the screen with the latest information on the switch.

  • Page 687: Perform A Cable Test

    M6100, M5300, and M7100 Series Managed Switches Perform a Cable Test  To perform a cable test: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 688: Manage Logs

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 241. Cable Test Field Description Cable Status This displays the cable status as Normal, Open or Short. Normal: the cable is working correctly.

  • Page 689: Configure Buffered Logs

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Monitoring > Logs > Buffered Logs.

  • Page 690: Message Log Format

    M6100, M5300, and M7100 Series Managed Switches Click the Clear button to clear the buffered log in the memory. Click the Apply button. The updated configuration is sent to the switch. Configuration changes take effect immediately. Message Log Format This topic applies to the format of all logged messages that are displayed for the message log, persistent log, or console log.

  • Page 691: Enable Or Disable Console Logging

    M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Monitoring > Logs > Command Log Configuration. Use Admin Mode to enable/disable the operation of the CLI command logging by selecting the corresponding radio button.

  • Page 692: Configure Syslog Host Settings

    M6100, M5300, and M7100 Series Managed Switches Severity Filter. A log records messages equal to or above a configured severity threshold. Select the severity option by selecting the corresponding line on the drop-down entry field. These severity levels are available: Emergency (0).
  • Page 693 M6100, M5300, and M7100 Series Managed Switches The Status field displays whether the host was configure to be actively logging or not. Select the Admin Status Disable or Enable radio button. This enables or disables logging to configured syslog hosts. Setting this to disable stops logging to all syslog hosts so that no messages are sent to any collectors or relays.

  • Page 694: View The Trap Logs

    M6100, M5300, and M7100 Series Managed Switches The default port is 514. Select the severity option in the Severity Filter list. A log records messages equal to or above a configured severity threshold. These severity levels are available: Emergency (0). The system is unusable •...

  • Page 695: View The Event Log

    M6100, M5300, and M7100 Series Managed Switches Click the Login button. The web management interface menu displays. Select Monitoring > Logs > Trap Logs. The screen also displays information about the traps that were sent. Click the Clear button to clear all the counters. This resets all statistics for the trap logs to the default values.
  • Page 696 M6100, M5300, and M7100 Series Managed Switches  To view the event log: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 697: Configure Persistent Logs (M5300 And M7100 Only)

    M6100, M5300, and M7100 Series Managed Switches Table 244. Event Logs Field Description Code The event code. Time The time this event occurred. Configure Persistent Logs (M5300 and M7100 only) A persistent log is a log that is stored in persistent storage. Persistent storage survives across platform reboots.

  • Page 698: Format Of The Messages

    M6100, M5300, and M7100 Series Managed Switches A log that is disabled does not log messages. Select the Admin Mode Disable or Enable radio button. ln the Behavior list, select the severity level. A log records messages equal to or above a configured severity threshold. These severity levels are available: Emergency (0).

  • Page 699: Configure Multiple Port Mirroring

    M6100, M5300, and M7100 Series Managed Switches Configure Multiple Port Mirroring Port mirroring selects the network traffic for analysis by a network analyzer. This is done for specific ports of the switch. As such, many switch ports are configured as source ports and one switch port is configured as a destination port.
  • Page 700 M6100, M5300, and M7100 Series Managed Switches Select the Admin Mode True (enabled) or False (disabled) radio button. Select the True option to enable Admin mode for the selected session. When a particular session is enabled, any traffic entering or leaving the source ports of the session is copied (mirrored) onto the corresponding destination port or a remote switched port analyzer (RSPAN) VLAN.

  • Page 701: Configure Rspan Vlan

    M6100, M5300, and M7100 Series Managed Switches For VLANs only, the Tx and Rx and None options are applicable. Note: Tx and Rx. Specify VLAN as the source VLAN. • None. Remove the specified source VLAN. • If the VLAN is configured as the source VLAN, its direction is displayed as a blank field.

  • Page 702: Configure An Rspan Source Switch

    M6100, M5300, and M7100 Series Managed Switches The VLAN ID column lists all VLANs on the device. Select the VLAN to use as the RSPAN VLAN. In the Admin Mode list, select to Enable or Disable RSPAN support on the corresponding VLAN.
  • Page 703 M6100, M5300, and M7100 Series Managed Switches Select the Session ID number from the list. Select the Admin Mode True (enabled) or False (disabled) radio button for the selected session. When a particular session is enabled, any traffic entering or leaving the source ports of the session is copied (mirrored) onto the corresponding destination port or a remote switched port analyzer (RSPAN) VLAN.

  • Page 704: Configure The Rspan Destination Switch

    M6100, M5300, and M7100 Series Managed Switches Select an interface by entering the interface number in the Go To Interface field. In the Interface list, select an interface to specify the configured ports as mirrored ports. Traffic of the configured ports is sent to the probe port.

  • Page 705: Configure Sflow

    M6100, M5300, and M7100 Series Managed Switches From the Session ID list, select the session ID. Select the Admin Mode True (enabled) or False (disabled) radio button for the selected session. When a particular session is enabled, any traffic entering or leaving the source ports of the session is copied (mirrored) onto the corresponding destination port or a remote switched port analyzer (RSPAN) VLAN.
  • Page 706 M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 707: Configure Sflow Agent Advanced Settings

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information. Table 245. sFlow Basic Agent Information Field Description Uniquely identifies the version and implementation of this MIB. The version Agent Version string must use the following structure: MIB Version;Organization;Software Revision where: MIB Version: For example, 1.3, the version of this MIB...

  • Page 708: Configure An Sflow Receiver

    M6100, M5300, and M7100 Series Managed Switches In the Source Interface list, select the management interface to be used for sFlow Agent. Possible values are as follows: None • Routing interface • Routing VLAN • Routing loopback interface • Tunnel interface •...
  • Page 709 M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Monitoring> sFlow > Advanced > sFlow Receiver Configuration.

  • Page 710: Configure The Sflow Interface

    M6100, M5300, and M7100 Series Managed Switches Configure the sFlow Interface sFlow agent collects statistical packet-based sampling of switched flows and sends them to the configured receivers. A data source configured to collect flow samples is called a sampler. sFlow agent also collects time-based sampling of network interface statistics and sends them to the configured sFlow receivers.
  • Page 711 M6100, M5300, and M7100 Series Managed Switches Use Poller Interval to specify the maximum number of seconds between successive samples of the counters associated with this data source. A sampling interval of 0 disables counter sampling. The Allowed range is 0 to 86400 seconds.

  • Page 712: Chapter 11 Maintenance

    Maintenance This chapter covers the following topics: • Save the Configuration • Configure Auto Save Mode • Reboot the Switch • Power Cycle the Switch • Reset the Switch to Its Factory Default Settings • Reset All User Passwords to Their Default Settings •...

  • Page 713: Save The Configuration

    M6100, M5300, and M7100 Series Managed Switches Save the Configuration When you save the configuration, changes that you made are retained by the switch when it is rebooted. You can manually save the configuration or you can set up autosave.

  • Page 714: Reboot The Switch

    M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 715: Power Cycle The Switch

    M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 716: Reset The Switch To Its Factory Default Settings

    M6100, M5300, and M7100 Series Managed Switches Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch. Launch a web browser. Enter the IP address of the switch in the web browser address field.

  • Page 717: Reset All User Passwords To Their Default Settings

    M6100, M5300, and M7100 Series Managed Switches The Login screen displays. Enter the user name and password. The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button.

  • Page 718: Upload A File From The Switch

    M6100, M5300, and M7100 Series Managed Switches Select the check box. Click the Apply button. All user passwords are reset to their factory default values. Upload a File from the Switch You can upload configuration (ASCII), log (ASCII), and image (binary) files from the switch to the TFTP server.
  • Page 719 M6100, M5300, and M7100 Series Managed Switches Use File Type to specify what type of file to upload: Archive. Specify Archive (STK) code to retrieve from the operational flash. • CLI Banner. Specify CLI Banner to retrieve the CLI banner file.

  • Page 720: Http File Upload

    M6100, M5300, and M7100 Series Managed Switches Use Server Address to enter the IP address of the server in accordance with the format indicated by the seer address type. The factory default is the IPv4 address 0.0.0.0. Use Remote File Path to enter the path to upload the file.

  • Page 721: Upload A File From The Switch To A Usb Device

    M6100, M5300, and M7100 Series Managed Switches Use File Type to specify what type of file to upload: Archive. Specify Archive (STK) code to retrieve from the operational flash: • Image Name. Select one of the images from the list: •...

  • Page 722: Download A File To The Switch

    M6100, M5300, and M7100 Series Managed Switches The default admin user name is admin and the default admin password is blank, that is, do not enter a password. Click the Login button. The web management interface menu displays. Select Maintenance > Upload > USB File Upload.

  • Page 723: Download A File

    M6100, M5300, and M7100 Series Managed Switches Download a File  To download a file: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 724 M6100, M5300, and M7100 Series Managed Switches Use SSL Trusted Root Certificate PEM File to specify SSL Trusted Root Certificate • File (PEM Encoded). Use SSL Server Certificate PEM File to specify SSL Server Certificate File (PEM • Encoded). Use SSL DH Weak Encryption Parameter PEM File to specify SSL Diffie-Hellman •...

  • Page 725: Download A File To The Switch Using Http

    M6100, M5300, and M7100 Series Managed Switches The file path cannot include the following symbols: ' \:*?”<>| '. Up to 160 characters can be entered. The factory default is blank. Use Remote File Name to enter the name of the file to download from the server.
  • Page 726 M6100, M5300, and M7100 Series Managed Switches Use File Type to specify what type of file to transfer: Archive. Archive (STK) code to upgrade the operational flash. • The Image Name field is visible only when File Type Archive is selected. Use Image •...

  • Page 727: Download A File From A Usb Device

    M6100, M5300, and M7100 Series Managed Switches For you to download SSL PEM files, SSL must be administratively Note: disabled and there can be no active SSH sessions. Use Select File to browse and enter a name along with path for the file to download.

  • Page 728: File Management

    M6100, M5300, and M7100 Series Managed Switches Use File Type to specify what type of file to download: Archive. Archive (STK) code to download to the operational flash. • Text Configuration. Configuration s in text mode to update the switch’s configuration •...

  • Page 729: Copy An Image

    M6100, M5300, and M7100 Series Managed Switches Copy an Image  To copy an image: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.
  • Page 730 M6100, M5300, and M7100 Series Managed Switches  To configure Dual Image settings: Prepare your computer with a static IP address in the 169.254.100.0 subnet, for example, 169.254.100.201. Connect an Ethernet cable from an Ethernet port on your computer to an Ethernet port on the switch.

  • Page 731: Troubleshooting

    M6100, M5300, and M7100 Series Managed Switches The following table describes the nonconfigurable information displayed on the screen. Table 247. Dual Image Configuration Field Description Image Name This displays the image name for the selected unit. Active Image The current active image of the selected unit.
  • Page 732 M6100, M5300, and M7100 Series Managed Switches The web management interface menu displays. Select Maintenance > Troubleshooting > Ping IPv4. Use IP Address/Host Name to enter the IP address or host name of the station for the switch to ping.

  • Page 733: Ping Ipv6

    M6100, M5300, and M7100 Series Managed Switches The pings are sent to the specified address. The switch sends the number of pings specified in the Count field, and the results are displayed below the configurable data in the Results area.

  • Page 734: Traceroute Ipv4

    M6100, M5300, and M7100 Series Managed Switches Select the Ping type from the list. Possible values are as follows: Global. Ping a global IPv6 address. • Link Local. Ping a link-local IPv6 address over the specified interface. This field is •...
  • Page 735 M6100, M5300, and M7100 Series Managed Switches If a reply to the traceroute is received, the following message displays: 1 e.f.g.h 9869 usec 9775 usec 10584 usec 2 0.0.0.0 0 usec * 0 usec * 0 usec * 3 0.0.0.0 0 usec * 0 usec * 0 usec * Hop Count = j Last TTL = k Test attempt = m Test Success = n.
  • Page 736 M6100, M5300, and M7100 Series Managed Switches Use IP Address/Hostname to enter the IP address or host name of the station to which you want to discover a path. The default value is blank. Enter the number of Probes Per Hop.

  • Page 737: Traceroute Ipv6

    M6100, M5300, and M7100 Series Managed Switches Traceroute IPv6 Use this screen to tell the switch to send a traceroute request to a specified IPv6 address or host name. You can use this to discover the paths packets take to a remote destination. Once you click the Apply button, the switch sends a traceroute and the results are displayed below the configurable data.
  • Page 738 M6100, M5300, and M7100 Series Managed Switches In the IPv6 Address/Hostname field, enter the IPv6 address or host name of the station to which you want the switch to discover a path. The initial value is blank. The IPv6 address or host name you enter is not retained across a power cycle.

  • Page 739: Perform A Full Memory Dump

    M6100, M5300, and M7100 Series Managed Switches The default value is 0. The range is 0 to 39936. The size you enter is not retained across a power cycle. Enter the Source IP address or interface to use when sending the echo request packets.
  • Page 740 M6100, M5300, and M7100 Series Managed Switches From the Protocol menu, select the protocol used to store the core dump file. Possible values are as follows: None. Disable core dump. • TFTP. Set TFTP protocol. • NFS. Set NFS protocol.

  • Page 741: Appendix A Default Settings

    Default Settings This appendix describes the default settings for many of the NETGEAR managed switch software features. Table 248. Default Settings Feature Default IP address 169.254.100.100 Subnet mask 255.255.0.0 Default gateway 0.0.0.0 Protocol DHCP Management VLAN ID Minimum password length...
  • Page 742 M6100, M5300, and M7100 Series Managed Switches Table 248. Default Settings (continued) Feature Default sFlow Enabled ISDP Enabled (Versions 1 and 2) RMON Enabled TACACS Not configured RADIUS Not configured SSH/SSL Disabled Telnet Enabled Denial of Service Protection Disabled Captive Portal...
  • Page 743 M6100, M5300, and M7100 Series Managed Switches Table 248. Default Settings (continued) Feature Default DHCP Layer 2 relay Disabled Default VLAN ID Default VLAN name Default GVRP Disabled GARP timers Leave: 60 centiseconds Leave All: 1000 centiseconds Join: 20 centiseconds...

  • Page 744: Appendix B Configuration Examples

    Configuration Examples This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) • Access Control Lists (ACLs) • Differentiated Services (DiffServ) • 802.1X • MSTP...

  • Page 745: Virtual Local Area Networks (Vlans)

    M6100, M5300, and M7100 Series Managed Switches Virtual Local Area Networks (VLANs) A local area network (LAN) can generally be defined as a broadcast domain. Hubs, bridges, or switches in the same physical segment or segments connect all end node devices. End nodes can communicate with each other without the need for a router.

  • Page 746: Vlan Configuration Examples

    M6100, M5300, and M7100 Series Managed Switches Packets leaving the switch are either tagged or untagged, depending on the setting for • that port’s VLAN membership properties. A U for a given port means that packets leaving the switch from that port are untagged. Inversely, a T for a given port means that packets leaving the switch from that port are tagged with the VLAN ID that is associated with the port.

  • Page 747: Access Control Lists (Acls)

    M6100, M5300, and M7100 Series Managed Switches an untagged packet as it leaves port 6. For port 5, the outgoing packet leaves as a tagged packet with VLAN ID 20. Access Control Lists (ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources.

  • Page 748: Standard Ip Acl Sample Configuration

    M6100, M5300, and M7100 Series Managed Switches Match Every: False • CoS: 0 • Destination MAC: 01:02:1A:BC:DE:EF • Destination MAC Mask: 00:00:00:00:FF:FF • EtherType User Value: • Source MAC: 02:02:1A:BC:DE:EF • Source MAC Mask: 00:00:00:00:FF:FF • VLAN ID: 2 •...

  • Page 749: Differentiated Services (Diffserv)

    M6100, M5300, and M7100 Series Managed Switches For additional information about IP ACL rules, see Configure Rules for an IP ACL page 658. Click the Add button. From the IP Rules screen, create a second rule for IP ACL 1 with the following settings: Rule ID: 2 •...

  • Page 750: Class

    M6100, M5300, and M7100 Series Managed Switches Differentiated Services: network resources are apportioned based on traffic classification • and priority, giving preferential treatment to data with strict timing requirements. managed switch switches support DiffServ. The DiffServ feature contains a number of conceptual QoS building blocks you can use to construct a differentiated service network.

  • Page 751: Creating Policies

    M6100, M5300, and M7100 Series Managed Switches class, multiple match criteria are grouped together as an AND expression or a sequential OR expression, depending on the defined class type. Only classes of the same type can be nested; class nesting does not allow for the negation (exclude option) of the referenced class.

  • Page 752: Diffserv Example Configuration

    M6100, M5300, and M7100 Series Managed Switches mark prec. The packet IP Precedence is (re)marked and forwarded • send: the packet is forwarded without DiffServ modification • Color Mode Awareness. Policing in the DiffServ feature uses either color blind or color aware mode.

  • Page 753: 753

    M6100, M5300, and M7100 Series Managed Switches Policy Selector: Policy1 • Member Class: Class1 • For more information about this screen, see on page 533. Configure DiffServ Policy Click the Add button. The policy is added. Click the Policy1 hyperlink to view the Policy Class Configuration screen for this policy.
  • Page 754 M6100, M5300, and M7100 Series Managed Switches port in cases in which the authentication and authorization process fails. In this context, a port is a single point of attachment to the LAN, such as ports of MAC bridges and associations between stations or access points in IEEE 802.11 Wireless LANs.

  • Page 755: 802.1X Example Configuration

    M6100, M5300, and M7100 Series Managed Switches for the credentials to be checked, which will determine the authorization state of the Port. The Authenticator PAE controls the authorized/unauthorized state of the controlled Port depending on the outcome of the RADIUS-based authentication process.

  • Page 756: Mstp

    M6100, M5300, and M7100 Series Managed Switches field allows you to enable the forwarding of EAPoL frames when 802.1X is disabled on the device. From the RADIUS Server Configuration screen, configure a RADIUS server with the following settings: Server Address: 192.168.10.23 •...
  • Page 757 M6100, M5300, and M7100 Series Managed Switches MSTP connects all Bridges and LANs with a single Common and Internal Spanning Tree (CIST). The CIST supports the automatic determination of each MST region, choosing its maximum possible extent. The connectivity calculated for the CIST provides the CST for interconnecting these Regions, and an Internal Spanning Tree (IST) within each Region.

  • Page 758: Mstp Example Configuration

    M6100, M5300, and M7100 Series Managed Switches The portion of the active topology of the network that connects any two bridges in the same MST Region traverses only MST bridges and LANs in that region, and never Bridges of any kind outside the Region, in other words connectivity within the region is independent of external connectivity.
  • Page 759 M6100, M5300, and M7100 Series Managed Switches From the CST Configuration screen, set the Bridge Priority value for each of the three switches to force Switch 1 to be the root bridge: Switch 1: 4096 • Switch 2: 12288 •...
  • Page 760 M6100, M5300, and M7100 Series Managed Switches The hosts use different instances of MSTP to effectively use the links across the switch. The same concept can be extended to other switches and more instances of MSTP. Configuration Examples...

  • Page 761: Appendix C Acronyms And Abbreviations

    Acronyms and Abbreviations In most cases, acronyms and abbreviations are defined on first use in this document. Acronyms and abbreviations are also defined in the following table. Table 249. Acronyms and Abbreviations Acronym Definition IEEE 802.1x Authentication Protocol Standard 802.1x Access Control Entry Access Control List Application Programming Interface...
  • Page 762 M6100, M5300, and M7100 Series Managed Switches Table 249. Acronyms and Abbreviations (continued) Acronym Definition Extensible Authentication Protocol EAPOL Extensible Authentication Protocol over LAN ECMP Equal Cost Multiple Paths Energy Efficient Ethernet (from the IEEE 802.3az Energy Efficient Ethernet Task Force and IEEE 802.3az Energy Efficient Ethernet Study Group).
  • Page 763 M6100, M5300, and M7100 Series Managed Switches Table 249. Acronyms and Abbreviations (continued) Acronym Definition Media Access Control Management An external IP interface used to send and receive IP packets to configure and monitor Interface the device. Management VLAN A VLAN configured to be used for management rather than control or data traffic.
  • Page 764 UDLD Uni-Directional Link Detection User Interface UPoE Universal Power over Ethernet. No IEEE standard exists yet for UPoE. NETGEAR UPoE supports power delivery of up to 60W per port. Universal Serial Bus Virtual Router An abstract object managed by VRRP that acts as a default router for hosts on a shared LAN.

This manual is also suitable for:

M6100 seriesM5300 series

Table of Contents