Netgear GSM7328Sv1 7000 Series Managed Switch Administration Guide for Softwar
Netgear GSM7328Sv1 - ProSafe 24+4 Gigabit Ethernet L3 Managed Stackable Switch Manual
View all Netgear GSM7328Sv1 manuals
Add to My Manuals
Save this manual to your list of manuals |
Netgear GSM7328Sv1 manual content summary:
- Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 1
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 NETGEAR, Inc. 4500 Great America Parkway Santa Clara, CA 95054 USA 202-10453-02 November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 2
areas. When used near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling. FCC Information to User Declaration Of Conformity We NETGEAR, Inc., 4500 Great America Parkway, Santa Clara, CA 95054, declare under our sole responsibility that the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 3
for Operation in the United States Radio Frequency Interference Warnings & Instructions This equipment has been tested and found to comply with the limits OFFICE USE Modifications made to the product, unless expressly approved by NETGEAR, Inc., could void the user's right to operate the equipment. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 4
Product and Publication Details Model Number: Publication Date: Product Family: Product Name: Home or Business Product: Language: Publication Part Number: Publication Version Number: 7xxx November 2008 Managed Switch 7000 Series Managed Switch Business English 202-10453-02 1.0 iv v1.0, November - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 5
Installation ...1-5 Quick Starting the Networking Device 1-5 System Information and System Setup 1-6 Chapter 2 Using Ezconfig for Switch Setup Changing the Password 2-1 Setting Up the Switch IP Address 2-2 Assigning Switch Name and Location Information 2-3 Saving the Configuration 2-3 Chapter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 6
Web Interface Layout 3-2 Configuring an SNMP V3 User Profile 3-4 Chapter 4 Virtual LANs Create Two VLANs ...4-2 CLI: Creating Two VLANS 4-2 Web Interface: Creating Two VLANS 4-2 Assign Ports to VLAN2 4-4 CLI: Assigning Ports to VLAN2 4-4 Web Interface: Assigning Ports to VLAN2 4-4 Assign - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 7
Chapter 6 Port Routing Port Routing Configuration 6-1 Enable Routing for the Switch 6-2 CLI: Enabling Routing for the Switch 6-3 Web Interface: Enabling Routing for the Switch 6-3 Enable Routing for Ports on the Switch 6-3 CLI: Enabling Routing for Ports on the Switch 6-4 Web Interface: - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 8
CLI: VLAN Routing OSPF Configuration 9-38 Web Interface: VLAN Routing OSPF Configuration 9-39 Chapter 10 Proxy Address Resolution Protocol (ARP) Proxy ARP Examples 10-1 CLI: show ip interface 10-1 CLI: ip proxy-arp ...10-2 Web Interface: Configuring Proxy ARP on a Port 10-2 Chapter 11 Virtual - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 9
Router 11-5 Web Interface: Configuring VRRP on a Backup Router 11-6 Chapter 12 Access Control Lists (ACLs) MAC ACLs ...12-1 Configuring IP ACLs ...12-2 Process ...12-2 Set up an IP ACL with Two Rules 12-3 CLI: Setting up an IP 12-39 Chapter 13 Class of Service (CoS) Queuing CoS Queue Mapping - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 10
ip- 13-10 Chapter 14 Differentiated Services Differentiated Services 14-2 CLI: DiffServ ...14 address-table igmpsnooping 15-4 CLI: Showing mac-address-table igmpsnooping 15-4 Web Interface: Showing mac-address-table igmpsnooping 15-4 Configure the Switch with an External Multicast Router - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 11
with a Multicast Router Using VLAN ......... Address Learned from 1/0/1 to the Static Address ..16-4 Web Interface: Converting the Dynamic Address Learned from 1/0/1 to the Static Address 16-4 Create a Static Address 16-5 CLI: Creating a Static Address 16-5 Web Interface: Creating a Static Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 12
script delete 18-4 script apply running-config.scr 18-4 Create a Configuration Script 18-5 Upload a Configuration Script 18-5 Pre-Login Banner ...18-5 Creating a Pre-Login Banner (CLI Only 18-5 Port Mirroring ...18-6 CLI: Specifying the Source (Mirrored) Ports and Destination (Probe 18-7 Web - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 13
Show Logging Buffered 19-5 CLI: Showing Logging Buffered 19-6 Web Interface: Showing Logging Buffered 19-6 Show Logging Traplogs 19-7 CLI: Showing Logging Traplogs 19-7 Web Interface: Showing Logging Trap Logs 19-7 Show Logging Hosts ...19-8 CLI: Showing Logging Hosts 19-8 Web Interface: - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 14
Two DNS Servers 22-1 Web Interface: Specifying Two DNS Servers 22-2 Manually Add a Host Name and an IP Address 22-2 CLI Example: Manually Adding a Host Name and an IP Address 22-3 Web Interface: Manually Adding a Host Name and an IP Address 22-3 Chapter 23 DHCP Server Configure a DHCP Server in - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 15
Web Interface: Configuring a DHCP Server in Dynamic Mode 23-1 Configure a DHCP Reservation 23-3 CLI: Configuring a DHCP Reservation 23-4 Web Interface: Configuring a DHCP Reservation 23-4 Chapter 24 Double VLANs Enable a Double VLAN 24-2 CLI: Enabling a Double VLAN on a VLAN 24-2 Web Interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 16
xvi v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 17
Manual The NETGEAR® 7000 Series Managed Switch Administration Guide Version 7.3 describes how to install, configure and troubleshoot the 7000 Series Managed Switch. The information in this manual , IP addresses, GUI screen text Command prompt, CLI text, code URL links • Formats. This manual uses - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 18
switch software can operate as a Layer 2 switch, a Layer 3 router, or a combination switch/router. The switch also includes support for network management and Quality of Service functions such as Access Control Lists and Differentiated Services. Which functions you choose to activate will depend on - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 19
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 How to Use This Manual The HTML version of this manual includes the following: • Buttons, and , for browsing forward or backward through the manual one page at a time. •A button that displays the table of contents and a - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 20
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Revision History Part Number 202-10453-02 Version Number Description 1.0 Product update: New firmware and new user Interface xx v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 21
available to assign an IP address to the switch via DHCP, the default IP address for the switch is 169.254.100.100. Subnet Subnet mask for the LAN gateway IP address of the default router, if the switch is a node outside the IP range of the LAN MAC Address MAC address of the switch 1-1 v1 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 22
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 When you connect the switch to the the IP address, subnet mask, and gateway address by issue the following command: config network parms ipaddress netmask gateway IP Address Unique IP address for the switch. Each IP parameter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 23
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Subnet Subnet mask for the LAN. The default value is 255.255.255.0. gateway IP address of the default router, if the switch is a node outside the IP for more information on Windows 2000 service packs. 3. Connect the female - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 24
NETGEAR 7000 Series Managed Switch Administration Guide completely booting. If POST detects a critical problem, the startup procedure stops. If POST passes IP address to be assigned to the management interface through which the switch is managed. • The IP subnet mask for the network. • The IP address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 25
with a valid password. The wizard configures one privileged user account during the set up. • Enables CLI login and HTTP access to use the local authentication setting only. • Sets up the IP address for the management interface. • Sets up the SNMP community string to be used by the SNMP manager at - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 26
to view system information and to setup the network device. Table 1-1 contains the Quick Start commands that allow you to view or configure the following information: • Software versions • Physical port data • User account management • IP address configuration • Uploading from Networking Device to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 27
java mode is enabled. network parms Privileged [gateway] EXEC Sets the IP address, subnet mask and gateway of the router. The IP address and the gateway must be on the same subnet. IP address range is from 0.0.0.0 to 255.255.255.255. Getting Started 1-7 v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 28
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Table 1-1. Quick Start Commands (continued) Command Mode copy >// Before starting a TFTP server download, you must configure the IP address. Sets the destination (download) datatype to be an image. The URL - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 29
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Table 1-1. Quick Start Commands (continued) Command Mode copy system:runningconfig nvram:startupconfig Privileged EXEC reload (or cold boot Privileged the networking device) EXEC Description - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 30
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1-10 v1.0, November 2008 Getting Started - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 31
>ezconfig NETGEAR EZ Configuration Utility Hello and Welcome! This utility will walk you through assigning the IP address for IP address to access the Web GUI using any public domain Web browser. Admin password not defined. Do you want to change the password? (Y/N/Q) Note: At any point in the setup - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 32
be prompted to setup the IP address of the switch. Assigning an IP address to your switch management Current IP Address Configuration IP address: 0.0.0.0 Subnet mask: 0.0.0.0 Would you like to assign an IP address now (Y/N/Q)? y IP Address: Ezconfig will display the current IP address and subnet - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 33
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Assigning Switch Name and Location Information Ezconfig will proceed to the next step in the setup accept only alphanumeric characters, characters like "#$..." are not supported. The maximum length of the value cannot be longer than - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 34
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2-4 Using Ezconfig for Switch Setup v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 35
switch, the Web browser must support: • HTML version 4.0, or addresses. To terminate the Web login session, close the web browser. Configuring for Web Access To enable Web access to the switch: 1. Configure the switch for in-band connectivity. The switch Getting Started Guide provides instructions - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 36
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Starting the Web Interface Follow these steps to start the switch Web interface: 1. Enter the IP address of the switch in the Web browser address field. 2. When the Login panel is displayed click Login. 3. Enter the appropriate user - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 37
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Figure 3-2 The PCC Web interface has the following four information for system features and services such as the timer, DNS server, IP address, and system resource usage. Features that relate to Layer 2 services such as VLANs, link - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 38
Series Managed Switch Administration Guide Version 7.3 Tabs Main tabs Maintenance Help Index Sub tabs Tab Contents Services to perform a firmware upgrade, to save the configuration, and to perform a backup of the configuration. Access to the NETGEAR product support website and documentation. Tthe - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 39
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. Enter a new password in the Password field and then retype it in the Confirm Password field. Note: If SNMPv3 Authentication is to be used - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 40
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3-6 Using the Web Interface v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 41
based on the Layer 2 header, which is fast, and like a router, it partitions the network into logical segments, which provides better administration, port may handle traffic for more than one VLAN, but it can only support one default VLAN ID. The Private Edge VLAN feature lets you set protection - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 42
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 use to configure the switch as shown in the diagram. Layer 3 Switch Port 1/0/2 VLAN Router Port 1/3/1 192.150.3.1 Port 1/0/3 VLAN Router Port 1/3/2 192.150.4.1 Port 1/0/1 Layer 2 Switch Layer 2 Switch VLAN 10 VLAN 20 Figure - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 43
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1. Create VLAN 2. a. From the main menu, select Switching > VLAN >Basic > VLAN configuration. A screen similar to the following displays. Figure 4-2 b. Enter the following information in - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 44
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the VLAN Name field, enter VLAN3 • Select Static from the VLAN Type pull-down menu. c. Click Add. Assign Ports to VLAN2 This sequence - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 45
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 c. Click the Unit 1. The Ports display. d. Click the gray box under port 1 and 2 until T displays. The T specifies that the egress packet is tagged for - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 46
Series Managed Switch Administration Guide Version 7.3 CLI: Assigning Ports to VLAN3 (Netgear Switch) (Config)#interface range 1/0/2-1/0/4 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#vlan participation include 3 (Netgear Switch) (conf-if-range-1/0/2-1/0/4)#exit (Netgear Switch) (Config)#interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 47
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > VLAN> Advanced > Port PVID Configuration. A screen similar to the following displays. Figure 4-7 b. Under PVID Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 48
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > VLAN >Advanced > Port PVID Configuration. A screen similar to the following displays. Figure 4-8 b. Under PVID Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 49
Managed Switch Administration Guide Version 7.3 Creating a MAC-based VLAN Layer 2 Switch MAC: 00:00:0A:00:00:02 Port 1/0/23 PC 1 Figure 4-9 PC 2 MAC based VLAN feature allows incoming untagged packets to be assigned to a VLAN and thus classify traffic based on the source MAC address of the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 50
7000 Series Managed Switch Administration Guide Version 7.3 CLI: Creating a MAC-Based VLAN Create a VLAN 3 (Netgear Switch)#vlan database (Netgear Switch)(Vlan)#vlan 3 (Netgear Switch)(Vlan)#exit Add the port 1/0/23 to the VLAN 3. (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/23 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 51
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface Procedure: Assigning a MAC-Based VLAN To use the Web interface to configure the managed switch, proceed as follows: 1. Create VLAN 3. a. From the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 52
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Select 3 from the VLAN ID pull-down menu. c. Click the Unit 1. The Ports display. d. Click the gray box before the Unit 1until U displays. e. Click - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 53
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the MAC Based VLAN Configuration. • Enter 00:00:0A:00:00:02 in the MAC Address field. • Enter 3 in the PVID(1 to 4093) field. c. Click Add. Create a Protocol-based VLAN Create two protocol vlan - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 54
7000 Series Managed Switch Administration Guide Version 7.3 Enable protocol vlan group 1 and 2 on the interface. (Netgear Switch)(Vlan)#exit (Netgear Switch)#config (Netgear Switch)(Config)#interface 1/0/11 (Netgear Switch)(Interface 1/0/11)#protocol vlan group 1 (Netgear Switch)(Interface 1/0/11 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 55
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > VLAN >Advanced > Protocol Based VLAN Group Configuration. A screen similar to the following displays. Figure 4-15 b. Enter the following - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 56
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > VLAN >Advanced > Protocol Based VLAN Group Membership. A screen similar to the following displays Figure 4-17 b. Select the 1 from - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 57
Chapter 5 Link Aggregation This chapter includes instructions for configuring Link Aggregation (LAG). The following examples are provided: • "Create Two LAGs" on page 5-2 • "Add the Ports to the LAGs" on page 5-3 • "Enable Both - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 58
Guide Version 7.3 Create Two LAGs The following figure shows the example network. Port 1/0/3 LAG_10 Subnet 3 Server Port 1/0/2 LAG_10 Layer 3 Switch Port 1/0/8 LAG 20 Port 1/0/9 LAG_20 Layer 2 Switch Subnet 2 Subnet 3 Figure 5-1 CLI: Creating Two LAGs (Netgear Switch) #config (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 59
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Creating Two LAGs To use the Web interface to configure the managed switch, proceed as follows: 1. Create LAG lag_10. a. From the main - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 60
Managed Switch Administration Guide Version 7.3 CLI: Adding the Ports to the LAGs (Netgear Switch) #config (Netgear Switch) (Config)#interface 0/2 (Netgear Switch) (Interface 0/2)#addport 1/1 (Netgear Switch) (Interface 0/2)#exit (Netgear Switch) (Config)#interface 0/3 (Netgear Switch) (Interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 61
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 e. Click Apply to save the settings. 2. Add ports to the lag_20. a. From the main menu, select Switching > LAG >LAG Membership. A screen similar to the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 62
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Enabling Both LAGs To use the Web interface to configure the switch, proceed as follows: a. From the main menu, select Switching > LAG > - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 63
a technology that worked well for unicast traffic, but had problems coping with large quantities of multicast packets. The next major router's IP address is often statically configured in the end station, although the 7000 Series Managed Switch supports protocols such as DHCP that allow the address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 64
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • IP Forwarding, responsible for forwarding received IP packets. • ARP Mapping, responsible for maintaining the ARP Table used to correlate IP and MAC addresses support shown in the diagram. Layer 3 Switch acting as a router - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 65
Guide Version 7.3 CLI: Enabling Routing for the Switch Use the following command to enable routing for the switch. Execution of the command enables IP forwarding by default. (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Ethernet. Configure the IP addresses and subnet masks - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 66
Guide Version 7.3 CLI: Enabling Routing for Ports on the Switch (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#routing (Netgear Switch) (Interface 1/0/2)#ip address 192.150.2.1 255.255.255.0 (Netgear Switch) (Interface 1/0/2)#exit (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 67
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the IP Address field, enter 192.150.2.1. • In the Subnet Mask field, enter 255.255.255.0. • Select Enable from Routing Mode pull-down menu. d. Click Apply to save the settings. 2. Assign IP address 192.150.3.1/24 to the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 68
to forward the packet based on the destination IP address. The route entry in the route table can either be created dynamically via routing protocols like RIP and OSPF, or can be manually created by the network administrator. The routes created manually is called either static or default route - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 69
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 CLI: Add a Default Route (FSM7338S) (Config) #ip route default ? Enter the IP Address of the next router. (FSM7328S) (Config)#ip route default 10.10.10.2 Note that IP subnet "10.10.10.0" should be configured via either - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 70
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Adding a Static Route If your the path of routing port. (FSM7328S) #show ip route Total Number of Routes 1 Network Subnet Next Hop Next Hop Address Mask Protocol Intf IP Address 10.10.10.0 255.255.255.0 Local - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 71
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2. Select Static from the Route Type drop down menu. 3. Enter Network Address field. Noted this field is expecting a network IP address, not a host IP address. Do not put down something like "10,100.100.1". The last number should - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 72
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 6-10 v1.0, November 2008 Port Routing - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 73
associated with a VLAN. Its MAC Destination Address (DA) and VLAN ID are used to search the MAC address table. If routing is enabled for the of how to configure the 7000 Series Managed Switch to support VLAN routing. The configuration of the VLAN router port is similar to that of a physical port. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 74
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 The diagram in this section shows a Managed Switch to provide the VLAN routing support shown in the diagram. Layer 3 Switch Port 1/0/2 VLAN Router Port 1/3/1 192.150.3.1 Port 1/0/3 VLAN Router Port 1/3/2 192.150.4.1 Port 1/0/1 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 75
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Creating Two VLANs To use the Web interface to configure the managed switch, proceed as follows: 1. Create VLAN 10, VLAN20. a. From the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 76
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 h. In the VLAN Name field, enter VLAN20. i. Select Static from the VLAN Type pull-down menu. j. Click Add. 2. Add ports to the VLAN10 and - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 77
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 g. Select 20 from the VLAN ID pull-down menu. h. Click the Unit 1. The Ports display. i. Click the gray box under port 3 until T displays. The T - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 78
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 f. From the main menu, select Switching > VLAN> Advanced > Port PVID Configuraton. A screen similar to the following displays. Figure 7-7 g. Under PVID Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 79
Switch Administration Guide Version 7.3 Enable routing for the switch: (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#exit The next sequence shows an example of configuring the IP addresses and subnet masks for the virtual router ports. (Netgear Switch - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 80
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. From the main menu, select Routing > VLAN> VLAN Routing information. • Select 10 from the VLAN ID(1 to 4093) pull-down menu. • In the IP Address field, enter 192.150.4.1. • In the Subnet Mask filed, enter 255.255.255.0. 6. Click - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 81
routers after 180 seconds, and removed from their tables after an additional 120 seconds. There are two versions of RIP: • RIPv1 defined in RFC 1058 - Routes are specified by IP address, reducing network traffic - An authentication method is used for security The 7000 Series Managed Switch supports - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 82
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 The configuration commands used in the following example enable RIP on ports 1/0/2 and 1/0/3 as shown in the network illustrated in Figure 8-1 Layer 3 Switch acting as a router Port 1/0/2 192.150.2.2 Port 1/0/5 192.64.4.1 Port - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 83
and assigns IP addresses for ports 1/0/2 and 1/0/3. (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#routing (Netgear Switch) (Interface 1/0/2)#ip address 192.150.2.1 255.255.255.0 (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 84
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > Advanced >IP Interface Configuration. A screen similar to the following displays. Figure 8-3 b. Under IP the IP Interface Configuration, enter the following information. • In the IP Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 85
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > Advanced >IP Interface Configuration. A screen similar to the following displays. Figure 8-4 b. Under IP the IP Interface Configuration, enter the following information. • In the IP Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 86
Administration Guide Version 7.3 CLI: Enabling RIP for the Switch The next sequence enables RIP for the switch. the route preference defaults to 15. (Netgear Switch) #config (Netgear Switch) (Config)#router rip (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router)#exit (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 87
Switch Administration Guide Version 7.3 but send only RIPv2 formatted frames. (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#ip rip (Netgear Switch) (Interface 1/0/2)#ip rip receive version both (Netgear Switch) (Interface 1/0/2)#ip rip send - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 88
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. From the main menu, select Routing > RIP > Advanced routers after 180 seconds, and removed from their tables after an additional 120 seconds. There are two versions of RIP: • RIPv1 defined in RFC 1058 - Routes are specified by IP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 89
send RIPv2 packets to the RIPv1 broadcast address. • Prevent any RIP packets from being received • Prevent any RIP packets from being transmitted. This example adds support for RIPv2 to the configuration created in the base VLAN routing example. A second router, using port routing rather than VLAN - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 90
to 15. (Netgear Switch) (Config)#router rip (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router)#exit Configure the IP address and subnet mask for a non-virtual router port. (Netgear Switch) (Config)#interface 1/0/5 (Netgear Switch) (Interface 1/0/5)#ip address 192.150.5.1 255 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 91
Guide Version 7.3 Enable RIP for the VLAN router ports. Authentication will default to none, and no default route entry will be created. (Netgear Switch) (Config)#interface vlan 10 (Netgear Switch) (Interface vlan 10)#ip rip (Netgear field, enter 10. • In the IP Address field, enter 192.150.3.1. • In - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 92
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 8-10 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 20. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 93
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > RIP > Advanced>RIP Configuration. A screen similar to the following displays. Figure 8-12 b. Under the Interface Configuration, enter the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 94
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 8-14 v1.0, November 2008 Routing Information Protocol - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 95
divided into areas: intra-area routing is used when a source and destination address are in the same area, and inter-area routing across an OSPF backbone is used when they are not. An inter-area router communicates with border routers in each of the areas to which it provides connectivity. The 7000 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 96
Router Border Router Figure 9-1 Area 2 Area 3 CLI: Configuring an Inter-Area Router Step 1: Enable Routing for the switch. (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#exit Step 2: Assign IP addresses for ports. (Netgear Switch) #config (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 97
Administration Guide Version 7.3 Step 3: Specify the router ID and enable OSPF for the switch. Set disable1583 compatibility to prevent the routing loop. (Netgear Switch) #config (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router)#router-id - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 98
Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > IP > IP Configuration. A screen similar to the following displays. Figure 9-2 b. Next to the Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.150.2.1 to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 99
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. Assign IP address 192.150.3.1 to the port 1/0/3: a. From the main menu, select Routing > IP > Advanced> IP Interface Configuration. A screen similar to the following displays. Figure 9-4 b. Under IP Interface Configuration, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 100
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> OSPF Configuration. A screen similar to the following displays. Figure 9-5 b. Under the OSPF Configuration, enter the following information: • In the Router ID, enter 192.150 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 101
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-6 b. Under Interface Configuration, scroll down to interface 1/0/2 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 102
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Cost field, enter 64. c. Click Apply to save the settings. Configure OSPF on a Border Router The example is shown as CLI commands and as a Web interface procedure. For an OSPF example - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 103
.130.3.1 255.255.255.0 (Netgear Switch) (Interface 1/0/3)#exit (Netgear Switch) (Config)#interface 1/0/4 (Netgear Switch) (Interface 1/0/4)#routing (Netgear Switch) (Interface 1/0/4)#ip address 192.64.4.1 255.255.255.0 (Netgear Switch) (Interface 1/0/4)#exit Specify the router ID and enable OSPF for - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 104
Managed Switch Administration Guide Version 7.3 (Netgear Switch) (Config)#interface 1/0/4 (Netgear Switch) (Interface 1/0/4)#ip ospf (Netgear Switch) (Interface 1/0/4)#ip ospf areaid 0.0.0.2 (Netgear Switch) (Interface 1/0/4)#ip ospf priority 255 (Netgear Switch) (Interface 1/0/4)#ip ospf cost 64 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 105
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > IP > Advanced> IP Interface Configuration. A screen similar to the following displays. Figure 9-9 b. Under IP information in the IP Interface Configuration: • In the IP Address field, enter 192 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 106
Switch Administration Guide Version 7.3 b. Under IP Interface Configuration, scroll down to interface 1/0/3 and select the checkbox for that interface. 1/0/3 now appears in the Interface field at the top. c. Enter the following information in the IP Interface Configuration: • In the IP Address field - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 107
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> OSPF Configuration. A screen similar to the following displays. Figure 9-12 b. Under the OSPF Configuration, enter the following information: • In the Router ID, enter 192.130 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 108
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 6. Enable OSPF on the port 1/0/2. a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-13 b. Under - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 109
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-14 b. Under Interface Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 110
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-15 b. Under Interface Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 111
the area 0.0.0.1. (Netgear Switch) (Config-router)#no area 0.0.0.1 stub summarylsa (Netgear Switch) (Config-router)#exit Enable OSPF area 0 on the 2/0/11. (Netgear Switch) (Config)#interface 2/0/11 (Netgear Switch) (Interface 2/0/11)#routing (Netgear Switch) (Interface 2/0/11)#ip address 192.168.10 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 112
Managed Switch Administration Guide Version 7.3 (Netgear Switch) (Config)#ex (Netgear Switch) #show ip ospf neighbor interface all Router ID IP Address Neighbor Interface State 4.4.4.4 192.168.10.2 2/0/11 Full 2.2.2.2 192.168.20.2 2/0/19 Full (Netgear Switch) #show ip route Total - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 113
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2. Assign IP address 192.168.10.1 to the port 2/0/11: a. From the main menu, select Routing > IP > Advanced> IP Interface Configuration. A screen similar to the following displays. Figure 9-18 b. Under IP Interface Configuration, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 114
c. Enter the following information in the IP Interface Configuration: • In the IP Address field, enter 192.168.20.1. • In the Network Mask field, enter 255.255.255.0. • Select Enable from the pull-down menu. d. Click Apply to save the settings. 4. Specify the Router ID and Enable OSPF for the switch - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 115
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 5. Enable OSPF on the port 2/0/11. a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-21 b. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 116
on the switch. (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#router ospf Set the router id to 2.2.2.2. (Netgear Switch) (Config-router)#router-id 2.2.2.2 Configure the area 0.0.0.1 as a stub area. (Netgear Switch) (Config-router)#area 0.0.0.1 stub 9-22 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 117
Switch Administration Guide Version 7.3 Enable OSPF area 0.0.0.1 on the 1/0/15. (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config)#interface 1/0/15 (Netgear Switch) (Interface 1/0/15)#routing (Netgear Switch) (Interface 1/0/15)#ip address 192.168 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 118
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2. Assign IP address 192.168.10.1 to the port 1/0/15. a. From the main menu, select Routing > IP > Advanced> IP Interface Configuration. A screen similar to the following displays. Figure 9-25 b. Under IP Interface Configuration, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 119
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. Enable OSPF on the port 1/0/15. a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-27 b. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 120
on the switch. (Netgear Switch) #config (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config)#ip routing Configure area 0.0.0.1 as a nssa area. (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config-router)#router-id 1.1.1.1 (Netgear Switch) (Config-router)#area 0.0.0.1 nssa - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 121
Guide Version 7.3 Enable area 0.0.0.1 on the 2/0/19. (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config)#interface 2/0/11 (Netgear Switch) (Interface 2/0/11)#routing (Netgear Switch) (Interface 2/0/11)#ip address 192.168.10.1 255.255.255.0 (Netgear Switch) (Interface 2/0/11)#ip - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 122
Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > IP > IP Configuration. A screen similar to the following displays. Figure 9-30 b. Next to the Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.168.10 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 123
Configuration: • In the IP Address field, enter 192.168.20.1. • In the Network Mask field, enter 255.255.255.0. • Select Enable from the pull-down menu. d. Click Apply to save the settings. 4. Specify the Router ID and Enable OSPF for the switch. a. From the main menu, select Routing > OSPF - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 124
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > OSPF > Advanced> Interface Configuration. A screen similar to the following displays. Figure 9-34 b. Under Interface Configuration, scroll down to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 125
on the switch. (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#router ospf Set the router id to 2.2.2.2. (Netgear Switch) (Config-router)#router-id 2.2.2.2 Configure the area 0.0.0.1 as a nssa area. (Netgear Switch) (Config-router)# area 0.0.0.1 nssa OSPF - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 126
0.0.0.1 on the 1/0/15. (Netgear Switch) (Config-router)#exit (Netgear Switch) (Config)#interface 1/0/11 (Netgear Switch) (Interface 1/0/11)#routing (Netgear Switch) (Interface 1/0/11)#ip address 192.168.30.1 255.255.255.0 (Netgear Switch) (Interface 1/0/11)#ip rip (Netgear Switch) (Interface 1/0/11 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 127
Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > IP > IP Configuration. A screen similar to the following displays. Figure 9-37 b. Next to the Routing Mode, select the Enable radio button. c. Click Apply to save the settings. 2. Assign IP address 192.168.30 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 128
Interface Configuration: • In the IP Address field, enter 192.168.20.2. • In the Network Mask field, enter 255.255.255.0. • Select Enable from the Routing Mode pull-down menu. d. Click Apply to save the settings. 4. Specify the Router ID and Enable OSPF for the switch. a. From the main menu, select - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 129
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Routing > RIP Interface Configuration. A screen similar to the following displays. Figure 9-42 b. Under IP Interface Configuration, scroll down to interface 1/0/15 and select the checkbox for that - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 130
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 c. Click Apply to save the settings. 7. Configure area 0.0.0.1 as a nssa area. a. From the main menu, select Routing > OSPF > Advanced> NSSA Area Configuration. A screen similar - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 131
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 VLAN Routing OSPF Configuration For source and destination address are in the same area, and inter-area routing across an OSPF backbone is used when they are not. An inter-area router communicates with border routers in each of - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 132
)#ip address 192.150.4.1 255.255.255.0 (Netgear Switch) (Interface vlan 20)#exit Specify the router ID and enable OSPF for the switch. (Netgear Switch) (Config)#router ospf (Netgear Switch) (Config router)#router-id 192.150.9.9 (Netgear Switch) (Config router)#enable (Netgear Switch) (Config router - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 133
7000 Series Managed Switch Administration Guide Version 7.3 Enable OSPF for the VLAN and physical router ports. (Netgear Switch) (Config)#interface vlan 10 (Netgear Switch) (Interface vlan 10)#ip ospf areaid 0.0.0.2 (Netgear Switch) (Interface vlan 10)#ip ospf (Netgear Switch) (Interface vlan 10 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 134
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the VLAN Routing Wizard. • In the Vlan ID field, enter 10. • In the IP Address field, enter 192.150.3.1. • In the Network Mask field, enter 255.255.255.0. c. Click Unit 1. The ports display: - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 135
Guide Version 7.3 3. Enable OSPF on the switch. a. From the main menu, select Routing > OSPF > Basic>OSPF Configuration. A screen similar to the following displays. Figure 9-47 b. Next to the OSPF Admin Mode, select Enable Radio button. c. Enter 192.150.9.9 in the Router Under IP Interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 136
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the Priority field, enter 128. • In the Interface Configuration, click the VLANS to show all the VLAN interfaces. c. Under IP Interface Configuration, scroll down to interface 0/2/2 and select the checkbox for that interface. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 137
ARP, a router will only respond to an ARP request if the target IP address is an address configured on the interface where the ARP request arrived Proxy ARP Examples The following are examples of the commands used in the proxy ARP feature. CLI: show ip interface (Netgear Switch) #show ip interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 138
7000 Series Managed Switch Administration Guide Version 7.3 CLI: ip proxy-arp (Netgear Switch) (Interface 0/24)#ip proxy-arp ? Press Enter to execute the command. (Netgear Switch) (Interface 0/24)#ip proxy-arp Web Interface: Configuring Proxy ARP on a Port To use the Web interface to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 139
stations using the route. The end stations will use a "virtual" IP address that will be recognized by the backup router if the master router fails. Participating routers use an election protocol to determine which router is the master router at any given time. A given port may appear as more than - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 140
IDs to the port that will participate in the protocol. (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#ip vrrp 20 Specify the IP address that the virtual router function will recognize. Note that the virtual IP address on port 1/0/2 is the same as the port's actual - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 141
7000 Series Managed Switch Administration Guide Version 7.3 Enable VRRP on the port. (Netgear Switch) (Interface 1/0/2)#ip vrrp 20 mode (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config)#exit Web Interface: Configuring VRRP on a Master Router To use the Web interface to configure - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 142
enter 20. • Select 1/0/2 from the Interface pull-down menu. • In the Primary IP Address, enter 192.150.2.1. • Select Active from the Mode pull-down menu. d. Click Apply to save the settings. Configure VRRP on a Backup Router The example is shown as CLI commands and as a Web interface procedure. 11 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 143
20 Specify the IP address that the virtual router function will recognize. Since the virtual IP address on port 1/0/ 4 is the same as Router 1's port 1/0/2 actual IP address, this router will always be the VRRP backup when Router 1 is active. (Netgear Switch) (Interface 1/0/4)#ip vrrp 20 ip 192.150 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 144
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Configuring VRRP on a Backup Router To use the Web interface to configure VRRP on a backup router on the switch, proceed as follows: 1. Enable IP routing on the switch. a. From the main menu, select Routing > IP > IP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 145
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the Network Mask field, enter 255.255.0.0. Router Configuration: • In the VRID(1 to 255) field, enter 20. • Select 1/0/4 from the Interface pull-down menu. • In the Priority(1 to 255), enter 254. • In the Primary IP Address, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 146
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 11-8 Virtual Router Redundancy Protocol v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 147
system supports ACLs set up for inbound traffic only. MAC ACLs MAC ACLs are Layer 2 ACLs. You can configure the rules to inspect the following fields of a packet (limited by platform): • Source MAC address with mask • Destination MAC address with mask • VLAN ID (or range of IDs) • Class of Service - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 148
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • L2 ACLs can apply to one or more interfaces • Multiple access lists can be applied to a single interface - sequence number determines the order of execution • You cannot configure a MAC ACL and an IP ACL on the same interface • - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 149
support on a 7000 Series Managed Switch. Create ACL 101. Define the first rule: the ACL will permit packets with a match on the specified source IP address that are sent to the specified destination IP address. CLI Commands (Netgear Switch) #config (Netgear Switch) (Config)#access-list 101 permit - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 150
Only traffic matching the criteria will be accepted. (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface 1/0/2)#ip access-group 101 in (Netgear Switch) (Interface 1/0/2)#exit (Netgear Switch) (Config)#exit Web Interface: Setting up an IP ACL with Two Rules To use the Web interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 151
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 following displays. Figure 12-3 b. Next to the ACL ID, select 101 from the pull-down menu. c. Click Add to create a new rule. 3. Create a new - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 152
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Select the TCP from the Protocol Type pull-down menu. • In the Source IP Address, enter 192.168.77.0. • In the Source IP Mask, enter 0.0.0.255. • In the Destination IP Address, enter 192.178.77.0. • In the Destination IP Mask, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 153
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 similar to the following displays. Figure 12-6 b. Enter the following information in the IP Binding Configuration. • Select the 101 from the ACL ID pull-down menu. • In the Sequence Number field, enter 1. c. Click the Unit 1. The - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 154
NETGEAR 7000 Series Managed Switch Administration Guide Version IP address 192.168.30.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 30 (Netgear Switch) (Vlan)#vlan routing 30 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 0/35 (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 155
Series Managed Switch Administration Guide Version 7.3 (Netgear Switch) (Config)#interface vlan 30 (Netgear Switch) (Interface-vlan 30)#routing (Netgear Switch) (Interface-vlan 30)#ip address 192.168.30.1 255.255.255.0 (Netgear Switch) (Interface-vlan 30)#exit (Netgear Switch) (Config)#exit Create - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 156
: Create VLAN 40 with port 1/0/24 and assign IP address 192.168.40.1/24. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 40 (Netgear Switch) (Vlan)#vlan routing 40 (Netgear Switch) #configure (Netgear Switch) (Config)#interface 1/0/24 (Netgear Switch) (Interface 1/0/24)#vlan pvid 40 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 157
Guide Version 7.3 Create VLAN 50 with port 1/0/25 and assign IP address 192.168.50.1/24. (Netgear Switch)(Config)#exit (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 50 (Netgear Switch) (Vlan)#vlan routing 50 (Netgear Switch) (Vlan)#exit (Netgear Switch) #configure (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 158
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 12-8 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 30. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 159
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2. Create VLAN 100 with IP address 192.168.100.1/24: a. From the main in the VLAN Routing Wizard: • In the Vlan ID field, enter 100. • In the IP Address field, enter 192.168.100.1. • In the Network Mask field, enter 255.255.255.0. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 160
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. Create VLAN 200 with IP address 192.168.200.1/24: a. From the in the VLAN Routing Wizard: • In the Vlan ID field, enter 200. • In the IP Address field, enter 192.168.200.1. • In the Network Mask field, enter 255.255.255.0. c. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 161
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. Enable IP Routing: a. From the main menu, select Routing > IP > Basic > IP Configuration. A screen similar to the following displays. Figure 12-11 b. Under IP Configuration, make the following selections: • Next to Routing Mode, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 162
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the Next Hop IP Address field, enter 192.168.200.2. c. Click Add. 6. Create a static route with IP address 192.168.50.0/24: a. From the main menu, select Routing > Routing Table > Basic > Route Configuration. A screen similar - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 163
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 following displays. Figure 12-14 b. In the IP ACL ID field of the IP ACL Table, enter 101. c. Click Add. 8. Create an ACL with ID 102: a. From the main menu, select Security > ACL > Advanced > IP ACL. A screen similar to the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 164
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Security > ACL > Advanced > IP Extended Rules. A screen similar to the following displays. Figure 12-16 b. Under IP Extended Rules, select 101 from the ACL ID pull-down menu. c. Click Add. The Extended - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 165
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Next to TCP Flag, select Set from the SYN pull-down menu, and select Clear from the ACK pull-down menu. e. Click Apply to save the settings. 10. Add and configure an IP extended rule that is associated with ACL 102: a. From the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 166
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Under Extended ACL Rule Configuration (100-199), 101 to port 44. a. From the main menu, select Security > ACL > Advanced > IP Binding Configuration. A screen similar to the following displays. Figure 12-20 b. Under Binding - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 167
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 similar to the following displays. To use the Web interface to configure the GSM7352S, proceed as follows: 1. Create VLAN 40 with IP address 192.168.40.1/24. a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 168
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 40. • In the IP Address field, enter 192.168.40.1. • In the Network Mask field, enter 255.255.255.0. c. Click Unit 1. The ports display. d. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 169
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 12-24 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 200. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 170
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 similar to the following displays. Figure 12-25 b. Under Configure Routes, make the following selection and enter the following information: • Select Static from the Route Type pull-down menu. • In the Network Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 171
Guide Version 7.3 b. Under Configure Routes, make the following selection and enter the following information: • Select Static from the Route Type pull-down menu. • In the Network Address field, enter 192.168.30.0. • In the Subnet Mask field, enter 255.255.255.0. • In the Next Hop IP Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 172
1/0/48 to it, and assign IP address 192.168.48.1 to it. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 48 (Netgear Switch) (Vlan)#vlan routing 48 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/48 (Netgear Switch) (Interface 1/0/48)#vlan - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 173
Switch Administration Guide Version 7.3 Create VLAN 38, add port 1/0/38 to it, and assign IP address 10.100.5.34 to it. (Netgear Switch) #vlan database (Netgear Switch) (Vlan)#vlan 38 (Netgear Switch) (Vlan)#vlan routing (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 174
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Configuring a One-Way Access Using a TCP Flag in an ACL To use the Web interface to isolate VLANs on a Layer 3 switch by using ACLs, proceed as follows: 1. Create VLAN 24 with IP address 192.168.24.1: a. From the main - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 175
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 12-29 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 48. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 176
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 12-30 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 38. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 177
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Under IP Configuration, make the following selections: • Next to Routing Mode, select the Enable radio button. • Next to IP Forwarding Mode, select the Enable radio button. c. Click Apply to enable IP Routing. 5. Create an ACL - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 178
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. In the IP ACL ID field of the IP ACL Table, enter 102. c. Click Add. 7. Create an ACL with ID 103: a. From the main menu, select Security > ACL > Advanced > IP ACL. A screen similar to the following displays. Figure 12-34 b. In - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 179
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 c. Click Add. The Extended ACL Rule False from the Match Every pull-down menu. • In the Destination IP Address field, enter 192.168.24.0. • In the Destination IP Mask field, enter 0.0.0.255. e. Click Apply to save the settings. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 180
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 9. Add and configure an IP extended rule that is associated with ACL 102: a. From the main menu, select Security > ACL > Advanced > IP Extended Rules. A screen similar to the following displays. Figure 12-37 b. Under IP Extended - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 181
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the Destination IP Address field, enter 192.168.48.0. • In the Destination IP Mask field, enter 0.0.0.255. e. Click Apply to save the settings. 10. Add and configure an IP extended rule that is associated with ACL 103: a. From - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 182
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Select False from the Match Every pull-down menu. • Select IP from the Protocol Type pull-down menu. e. Click Apply to save the settings. 11. Apply ACL 102 to port 24: a. From the main menu, select Security > ACL > Advanced > IP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 183
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 12. Apply ACL 101 to port 48: a. From the main menu, select Security > ACL > Advanced > IP Binding Configuration. A screen similar to the following displays. Figure 12-42 b. Under Binding Configuration, make the following selection - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 184
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 13. Apply ACL 103 to port 24 and port 48: a. From the main menu, select Security > ACL > Advanced > IP Binding Configuration. A screen similar to the following displays. Figure 12-43 b. Under Binding Configuration, make the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 185
7000 Series Managed Switch Administration Guide Version 7.3 CLI: Setting up a MAC ACL with Two Rules Create a new MAC ACL acl_bpdu. (Netgear Switch) # (Netgear Switch) #config (Netgear Switch) (Config)#mac access-list extended acl_bpdu Deny all the traffic which has destination MAC 01:80:c2:xx - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 186
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Security > ACL >MAC ACL> MAC Rules. A screen similar to the following displays. Figure 12-45 a. Select acl_bpdu from the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 187
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. Select acl_bpdu from the ACL Name pull-down menu. b. Enter the following information in the Rule Table. • In the ID field, enter 2. • Select the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 188
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 12-42 v1.0, November 2008 Access Control Lists (ACLs) - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 189
This section describes the Class of Service (CoS) Queue Mapping and Traffic Shaping features. In this chapter, the following examples are provided: • "Show classofservice Trust" on page 13-3 • "Set classofservice trust Mode" on page 13-3 • "Show classofservice ip-precedence Mapping" on page 13 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 190
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 - 802.1p User Priority (default trust mode - Managed through Switching configuration) - IP Precedence - IP DiffServ Code Point (DSCP) The system can assign service level based upon the 802.1p priority field of the L2 header. You - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 191
Guide Version 7.3 • Queue management type, Tail Drop vs. WRED Only if per queue config is not supported • WRED Decay Exponent • Traffic Shaping for an entire interface Show classofservice Trust CLI: Showing classofservice trust To use the CLI to show CoS trust mode, use these commands. (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 192
Managed Switch Administration Guide Version 7.3 CLI: Setting classofservice Trust Mode (Netgear Switch) (Config)#classofservice? dot1p-mapping ip-dscp-mapping trust Configure dot1p priority mapping. Maps an IP DSCP value to an internal traffic class. Sets the Class of Service Trust Mode of - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 193
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Show classofservice ip-precedence Mapping The example is shown as CLI commands and as a Web interface procedure. CLI: Showing classofservice ip-precedence Mapping (Netgear Switch) #show classofservice ip-precedence-mapping IP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 194
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 5. The IP precedence to queue mapping of the interface is displayed. Configure Cos-queue Min-bandwidth and 1. Set min bandwidth 15 to the queue 0 of the interface 1/0/2. 13-6 v1.0, November 2008 Class of Service (CoS) Queuing - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 195
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > Advanced >Interface Queue Configuration. A screen similar to the the queue 1 of the interface 1/0/2 and set the scheduler type to strict. Class of Service (CoS) Queuing v1.0, November 2008 13-7 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 196
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > Advanced >Interface Queue Configuration. A screen similar to the following Scheduler Type. e. Click the Apply to save the settings. 13-8 v1.0, November 2008 Class of Service (CoS) Queuing - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 197
7000 Series Managed Switch Administration Guide Version 7.3 Set CoS Trust Mode of an Interface CLI: Setting CoS Trust Mode of an Interface (Netgear Switch) (Interface 1/0/3)#classofservice trust? dot1p ip-dscp Sets the Class of Service Trust Mode of an Interface to 802.1p. Sets the Class of - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 198
the command. (Netgear Switch) (Config)#traffic-shape 70 (Netgear Switch) (Config)# Web Interface: Configuring Traffic-shape To use the Web interface to configure traffic-shape, proceed as follows: 1. Set the shaping bandwidth percentage to 70%. 13-10 v1.0, November 2008 Class of Service (CoS - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 199
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > Advanced >CoS Interface Configuration. A screen similar to the (0 to 100) field, enter 70. d. Click the Apply to save the settings. Class of Service (CoS) Queuing v1.0, November 2008 13-11 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 200
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 13-12 v1.0, November 2008 Class of Service (CoS) Queuing - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 201
Layer 4 headers, and is recorded in the Differentiated Services Code Point (DSCP) added to a packet's IP header. • Interior node. A switch in the The switch software does not support DiffServ in the outbound direction. Rules are defined in terms of classes, policies and services: • Class. A class - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 202
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 - Policing packets by dropping or re-marking those that exceed the class's assigned data rate - Counting the traffic within the class • Service. Assigns a policy to an interface for inbound traffic Differentiated Services This - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 203
Managed Switch Administration Guide Version 7.3 - Source IP address -- for the new classes. (Netgear Switch) (Config)#class-map match-all finance_dept (Netgear Switch) (Config class-map)#match srcip 172.16.10.0 255.255.255.0 (Netgear Switch) (Config class-map)#exit (Netgear Switch) (Config)#class - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 204
Switch Administration Guide Version 7.3 Attach the defined policy to interfaces 1/0/1 through 1/0/4 in the inbound direction (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#service-policy in internet_access (Netgear Switch) (Interface 1/0/1)#exit (Netgear Switch) (Config - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 205
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Next to the Diffserv Admin Mode, select the Enable radio button. c. Click Apply to save All from the Class Type pull-down menu. c. Click Add to create a new class finance_dept. Differentiated Services v1.0, November 2008 14-5 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 206
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click the finance_dept to configure this class. Figure 14-4 e. Under the Diffserv Class Configuration page, enter the following information: • In the Source IP Address 14-5 14-6 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 207
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the Class Under the Diffserv Class Configuration page, enter the following information: • In the Source IP Address field, enter 172.16.20.0. • In the Source Mask field, enter 255.255 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 208
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > DiffServ > Advanced >Class Configuration. A screen similar to the class test_dept. d. Click the test_dept to configure this class. Figure 14-8 14-8 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 209
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 e. Under the Diffserv Class Configuration page, enter the following information: • In the Source IP Address field, enter 172.16. the Add to create a new class development_dept. Differentiated Services v1.0, November 2008 14-9 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 210
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click the development_dept to configure this class. Figure 14-10 e. Under the Diffserv Class Configuration page, enter the following information: • In the Source IP Address field, enter 172.16.40.0. • In the Source Mask field, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 211
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > DiffServ >Advanced >Policy Configuration. A screen similar menu. d. Click Apply to add the class marketing_dept to the policy internet_access. Differentiated Services v1.0, November 2008 14-11 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 212
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 8. Add the class test_dept into the policy internet_access. a. From the main menu, select QoS > DiffServ >Advanced Select the development_dept from the Member Class pull-down menu. 14-12 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 213
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Apply to add the class development_dept to the policy internet_access. 10. Assign queue 1 to the . Figure 14-16 c. Select the 1 from the Assign Queue pull-down menu. Differentiated Services v1.0, November 2008 14-13 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 214
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Apply. 11. Assign queue 2 to the marketing_dept. a. From the main menu, select QoS > DiffServ >Advanced >Policy 14-18 c. Select the 2 from the Assign Queue pull-down menu. 14-14 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 215
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Apply. 12. Assign queue 3 to the test_dept. a. From the main menu, select QoS > DiffServ > displays. Figure 14-20 c. Select the 3 from the Assign Queue pull-down menu. Differentiated Services v1.0, November 2008 14-15 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 216
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Apply. 13. Assign queue 4 to the development_dept. a. From the main menu, select QoS > DiffServ >Advanced >Policy -22 c. Select the 4 from the Assign Queue pull-down menu. 14-16 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 217
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Apply. 14. Attach the defined policy to the interface 1/0/1 through 1/0/4 in the inbound direction a. From the main menu, select QoS > Advanced >Service Configuration. A screen similar to the following displays. Figure 14- - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 218
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > CoS >Advanced >Interface Queue Configuration. A screen similar to the Configuration. A screen similar to the following displays. Figure 14-25 14-18 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 219
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Under Interface Queue Configuration, scroll down to interface 1/0/5 and select the checkbox for 1/ Click Apply. 18. Set the CoS queue 4 configuration for the interface 1/0/5. Differentiated Services v1.0, November 2008 14-19 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 220
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > CoS >Advanced valuable uses of DiffServ is to support Voice over IP (VoIP). VoIP traffic is inherently timesensitive: for a network to provide acceptable service, a guaranteed transmission rate is - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 221
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 script is for Router 1 in the accompanying diagram: a similar script should be applied to Router 2. Port 1/0/2 Port 1/0/3 Layer 3 Switch operating as Router 1 Internet Layer 3 Switch operating as Router 2 Figure 14-28 CLI: - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 222
-map)#mark ip-dscp ef (Netgear Switch) (Config policy-class-map)#assign-queue 5 (Netgear Switch) (Config policy-class-map)#exit (Netgear Switch) (Config policy-map)#exit Attach the defined policy to an inbound service interface. (Netgear Switch) (Config)#interface 1/0/2 (Netgear Switch) (Interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 223
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > CoS > Advanced > CoS Interface Configuration. A screen radio button. c. Click the Apply to save the settings. 3. Create a class class_voip Differentiated Services v1.0, November 2008 14-23 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 224
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > DiffServ > Advanced >DiffServ Configuration. A screen similar to the following the Apply to create a new class. 4. Create a class class_ef: 14-24 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 225
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select QoS > DiffServ > Advanced >DiffServ Configuration. similar to the following displays: Figure 14-34 f. Select the ef from the IP DSCP pull-down menu. Differentiated Services v1.0, November 2008 14-25 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 226
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 g. Click the Apply to create a new class. 5. Create a policy pol_voip and add class_voip into this policy a. From the 14-36 f. Select the 5 from the Assign Queue pull-down menu. 14-26 v1.0, November 2008 Differentiated Services - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 227
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 g. Next to the Policy Attribute, click the Mark IP DSCP radio button, select ef from the Mark IP DSCP pull-down menu. h. Click Apply to the class class_ef to the policy pol_voip. Differentiated Services v1.0, November 2008 14-27 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 228
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 e. Click the pol_voip whose class member is select QoS > DiffServ > Advanced > Service Configuration. A screen similar to the following displays. Figure 14-39 b. Under DiffServ Service Configuration, scroll down to interface 1/0/2 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 229
mac-address-table igmpsnooping" on page 15-4 • "Configure the Switch with an External Multicast Router" on page 15-5 • "Configure the Switch with a Multicast Router Using Netgear Switch) #config (Netgear Switch) (Config)#ip igmpsnooping (Netgear Switch) (Config)#ip igmpsnooping interfacemode (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 230
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > Multicast > IGMP Snooping Configuration. A screen similar to the following displays. Figure 15-1 b. Enter the following information in the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 231
7000 Series Managed Switch Administration Guide Version 7.3 CLI: Showing igmpsnooping (Netgear Switch) #show igmpsnooping? mrouter Press Enter to execute the command. Enter interface in slot/port format. Display IGMP Snooping Multicast Router information. Display IGMP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 232
7000 Series Managed Switch Administration Guide Version 7.3 Show mac-address-table igmpsnooping The example is shown as CLI commands and as a Web interface procedure. CLI: Showing mac-address-table igmpsnooping (Netgear Switch) #show mac-address-table igmpsnooping ? Press Enter to execute - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 233
snooped by the switch will be forwarded to the multicast router reachable from this interface. (Netgear Switch)(Interface 1/0/3)# ip igmp mrouter interface Web Interface: Configuring the Switch with an External Multicast Router To use the Web interface to configure the managed switch, proceed - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 234
snooped IGMP packets that come from VLAN ID () to the multicast router attached to this interface. (Netgear Switch)(Interface 1/0/3)# ip igmp mrouter 2 Web Interface: Configuring the Switch with a Multicast Router Using VLAN To use the Web interface to configure the managed switch, proceed - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 235
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1. From the main menu, select Switching > Multicast > Multicast Router VLAN Configuration. A screen similar to the following displays. Figure 15-5 2. Under Multicast Router VLAN Configuration, scroll down to interface 1/0/3 and - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 236
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 However, the IGMP snooping operation usually requires an extra network device-normally a router The following figure shows a network application for video streaming service using the IGMP querier feature. Enable IGMP Querier The - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 237
Guide Version 7.3 the querier for VLAN 1. See the CLI Manual for more details about other IGMP querier command options. (Netgear switch) #vlan database (Netgear switch) (vlan)#ip igmp 1 (Netgear switch) (vlan)#ip igmpsnooping querier 1 (Netgear switch) (vlan)#exit (Netgear switch) #config (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 238
procedure. CLI: Showing IGMP Querier Status To see the IGMP querier status, use the following command. (Netgear switch) #show ip igmpsnooping querier 1 Vlan ID 1 Admin Mode Active Query IP Address 10.10.10.1 Querier Interval 60 Query Packets Sent Count 242 The command shows that the IGMP admin - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 239
locked, only packets with allowable MAC address will be forwarded • Supports both dynamic and static • Implement address are forwarded. - Static Locking - User manually specifies a list of static MAC addresses for a port. Dynamically locked addresses can be converted to statically locked addresses - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 240
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Dynamically locked MAC addresses are eligible to be learned by another port • Static MAC addresses are not eligible for aging • Dynamically locked addresses can be converted to statically locked addresses Set the Dynamic and - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 241
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Security > Traffic Control >Port Security->Port Administrator. A screen similar to the following displays. Figure 16-1 b. Under Port Security Configuration, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 242
Administration Guide Version 7.3 d. Click Apply to save the settings. Convert the Dynamic Address Learned from 1/0/1 to the Static Address The example is shown as CLI commands and as a Web interface procedure. CLI: Converting the Dynamic Address Learned from 1/0/1 to the Static Address (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 243
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 2. Under Port Security Configuration, select 1/0/1 from the Port List pull-down menu. 3. Select the Convert Dynamic Address to Static checkbox. 4. Click Apply to save the settings. Create a Static Address The example is shown as CLI - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 244
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Protected Ports This section describes how to set up protected ports on the switch. Some situations might require that traffic is prevented from being - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 245
a DHCP pool to allocated IP addresses to PCs. (Netgear Switch) (config)#service dhcp (Netgear Switch) (config)#ip dhcp pool pool-a (Netgear Switch) (Config-dhcp-pool)#dns-server 12.7.210.170 (Netgear Switch) (Config-dhcp-pool)#default-router 192.168.1.254 (Netgear Switch) (Config-dhcp-pool)#network - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 246
Series Managed Switch Administration Guide Version 7.3 Step 4: Enable IProuting and configure a default route. (Netgear Switch)(config)#ip routing (Netgear Switch)(config)#ip route 0.0.0.0 0.0.0.0 10.100.5.252 Step 5: Enable a protected port on 1/0/23 and 1/0/24. (Netgear Switch) (Config)#interface - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 247
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select System > Services > DHCP Server > field, enter 1. • Click on Default Router Addresses. The DNS server address fields display. In the first router address field, enter 192.168.1.254. Security Management - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 248
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Click on DNS Server Addresses. The router address fields display. In the first DNS server address Wizard: • In the Vlan ID field, enter 192. • In the IP Address field, enter 192.168.1.254. • In the Network Mask field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 249
Switch Administration Guide Version 7.3 a. From the main menu, select Routing > VLAN > VLAN Routing Wizard. A screen similar to the following displays. Figure 16-8 b. Enter the following information in the VLAN Routing Wizard: • In the Vlan ID field, enter 202. • In the IP Address field, enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 250
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. Enable IP Routing: a. From the main menu, select Routing > IP > Basic > IP Configuration. A screen similar to the following displays. Figure 16-9 b. Under IP Hop IP Address field, enter 10.100.5.252. 16-12 v1 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 251
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Add to add the route that is associated to VLAN 202 to the Learned Routes table. 6. Configure port 23 and port 24 as - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 252
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Can be configured on a per-port basis RADIUS Server Layer 2 Switch Layer 2 Switch PC 1 PC 2 Figure 16-12 The following example shows how to authenticate the dot1x users by a RADIUS server. The management IP address is 10.100 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 253
Guide Version 7.3 CLI: Authenticating dot1x Users by a RADIUS Server (Netgear Switch) #config (Netgear Switch) (Config)#ip routing (Netgear Switch) (Config)#interface 1/0/1 (Netgear Switch) (Interface 1/0/1)#routing (Netgear Switch) (Interface 1/0/1)#ip address 192.168.1.1 255.255.255.0 (Netgear - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 254
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Authenticating dot1x Users by a RADIUS Server 1. Enable routing for the switch. a. From the main menu, select Routing > Basic >IP Configuration. A screen similar to the following displays. Figure 16-13 b. Next to the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 255
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. Assign IP address 10.100.5.33/24 to the interface 1/0/19 a. From the main menu, select Routing > Advanced >IP Interface Configuration. A screen similar to the following displays. Figure 16-15 b. Under IP Interface Configuration, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 256
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click Add button. 5. Set the port 1/0/19 to the Force Authorized mode the Administrative Mode, select the Enable radio button. c. Select the dot1xList from the Login pull-down menu. 16-18 v1.0, November 2008 Security Management - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 257
Managed Switch Administration Guide Version 7.3 d. Click Apply to save settings. 7. Configure RADIUS authentication server. a. From the main menu, select Security > Management Security > Server Configuration. A screen similar to the following displays. Figure 16-19 b. In the Server Address, enter 10 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 258
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. In the Server Address, enter 10.100.5.17. c. Select the Enable screen similar to the following displays. Figure 16-21 b. In the Accounting Server Address, enter 10.100.5.17. c. Select the Enable from the Accounting Mode pull-down - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 259
Time Protocol (SNTP) feature: • Used for synchronizing network resources • Adaptation of NTP • Provides synchronized network timestamp • Can be used in broadcast examples of the commands used in the SNTP feature. show sntp (Netgear Switch Routing) #show sntp ? client server Press Enter to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 260
Routing) #show sntp client Client Supported Modes: SNTP Version: Port: Client Mode: Unicast Poll Interval: Poll Timeout (seconds): Poll Retry: unicast broadcast 4 123 unicast 6 5 1 show sntp server (Netgear Switch Routing) #show sntp server Server IP Address: Server Type: Server Stratum: Server - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 261
7000 Series Managed Switch Administration Guide Version 7.3 NETGEAR switches do not have a built-in has been received. The time will be used in all logging messages. (Netgear Switch) #show sntp server Server IP Address: 208.14.208.19 Server Type: ipv4 Server Stratum: 4 Server Reference Id - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 262
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Configuring SNTP To use the in the SNTP Server Configuration. • Select the IPV4 from the Server Type pull-down menu. • In the Address field, enter 208.14.208.19 • In the Port field, enter 123 • In the Priority field, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 263
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select System > the time zone to Pacific Standard Time (PST) which is 8 hours behind GMT/UTC. (Netgear switch)(config)#clock timezone PST -8 Set Named SNTP Server The example is shown as CLI commands and - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 264
7000 Series Managed Switch Administration Guide Version 7.3 Because Netgear may change IP addresses assigned to its time servers, it is best to access a SNTP server by DNS name instead of using a hard-coded IP address. The public time servers available are time-a, time-b, and time-c. To use this - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 265
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • In the Version field, enter 4 c. Click Add. 2. Configure the DNS server. a. From the main menu, select System > Management>DNS>DNS Configuration. A screen similar to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 266
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 17-8 Simple Network Time Protocol (SNTP) v1.0, November 2008 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 267
: • "Traceroute" • "Configuration Scripting" on page 18-3 • "Pre-Login Banner" on page 18-5 • "Port Mirroring" on page 18-6 • takes 16 hops to reach its destination. CLI:Traceroute (Netgear Switch) #traceroute? Enter IP address. (Netgear Switch) #traceroute 216.109.118.74 ? - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 268
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Tracing route over a maximum of 20 hops 1 10.254.24 follows: 1. Configure the Traceroute. a. From the main menu, select Maintenance > Troubleshooting > Traceroute. A screen similar to the following displays. Figure 18-1 Use this - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 269
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 APPLY button, the switch will send three traceroute packets each hop, and the results will be displayed in the result table. b. Enter the following information in the Traceroute. In the IP Address field, enter 216.109.118.74. c. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 270
7000 Series Managed Switch Administration Guide Version 7.3 script (Netgear Switch) #script ? apply delete list show validate script(s)? (y/n) y 1 configuration script(s) deleted. script apply running-config.scr (Netgear Switch) #script apply running-config.scr Are you sure you want to apply - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 271
Guide Version 7.3 Create a Configuration Script (Netgear Switch) #show running-config running-config.scr Config script created successfully. (Netgear scr Mode Set TFTP Server IP........... TFTP Path TFTP Filename Pre-Login Banner This section describes the Pre-Login Banner feature. Pre-Login - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 272
that contains the banner to be displayed. Login Banner - Unauthorized access is punishable by law. 2. Transfer the file from the PC to the switch using TFTP (Netgear Switch Routing) #copy tftp://192.168.77.52/banner.txt nvram:clibanner Mode TFTP Set TFTP Server IP 192.168.77.52 TFTP Path TFTP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 273
Switch Administration Guide Version 7.3 The example is shown as CLI commands and as a Web interface procedure. CLI: Specifying the Source (Mirrored) Ports and Destination (Probe) (Netgear Switch)#config (Netgear Switch)(Config)#monitor session 1 mode Enable mirror (Netgear Switch)(Config - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 274
NETGEAR 7000 Series Managed Switch Administration Guide Version IP address CLI: show network (Netgear Switch Routing) >telnet 192.168.77.151 Trying 192.168.77.151... (Netgear Switch Routing) User:admin Password: (Netgear Switch Routing) >en Password: (Netgear Switch Routing) #show network IP Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 275
Managed Switch Administration Guide Version 7.3 CLI: show telnet (Netgear Switch Routing)#show telnet Outbound Telnet Login Timeout (minutes)........ 5 Maximum Number of Outbound Telnet Sessions..... 5 Allow New Outbound Telnet Sessions Yes CLI: transport output telnet (Netgear Switch Routing - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 276
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1. From the main menu, select Security > Access > Telnet. A screen similar to the following displays. Figure 18-3 2. Enter the following information in the Outbound Telnet. 3. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 277
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1. From the main menu, select Security > Access > Telnet. A screen similar to the following displays. Figure 18-4 2. Enter the following information in the Outbound Telnet . • - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 278
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 18-12 v1.0, November 2008 Tools - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 279
Chapter 19 Syslog In this chapter, the following examples are provided: • "Show Logging" on page 19-2 • "Show Logging Buffered" on page 19-5 • "Show Logging Traplogs" on page 19-7 • "Show Logging Hosts" on page 19-8 • "Log Port Configuration" on page 19-9 The Syslog feature: • Allows you to store - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 280
7000 Series Managed Switch Administration Guide Version 7.3 Show Logging The example is shown as CLI commands and as a Web interface procedure. CLI: Show Logging (Netgear Switch Routing) #show logging Logging Client Local Port : CLI Command Logging : Console Logging : Console Logging - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 281
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the Syslog Configuration. Next to the Admin Status, select the Enable radio button. c. Click Apply. 2. Configure the Command Log a. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 282
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Monitoring > Logs >Console Log. Figure 19-4 b. Enter the following information in the Console Log Configuration. Next to the Admin - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 283
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Monitoring > Logs >Buffer Logs. A screen similar to the following displays. Figure 19-5 b. Enter the following information in the Buffer - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 284
7000 Series Managed Switch Administration Guide Version 7.3 CLI: Showing Logging Buffered (Netgear Switch Routing) #show logging buffered ? Press Enter to execute the command. (Netgear Switch Routing) #show logging buffered Buffered (In-Memory) Logging : enabled Buffered Logging Wrapping - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 285
Guide Version 7.3 Show Logging Traplogs The example is shown as CLI commands and as a Web interface procedure. CLI: Showing Logging Traplogs (Netgear Switch Routing) #show logging traplogs ? Press Enter to execute the command. (Netgear User Login: Unit: 1 User ID: admin Failed User Login: - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 286
Guide Version 7.3 Show Logging Hosts The example is shown as CLI commands and as a Web interface procedure. CLI: Showing Logging Hosts (Netgear Switch Routing) #show logging hosts ? Press Enter to execute the command. (Netgear Switch Routing) #show logging hosts Index ----1 IP Address - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 287
host 192.168.21.253 4 1 ? Press Enter to execute the command. (Netgear Switch Routing) (Config)#logging host 192.168.21.253 4 1 (Netgear Switch Routing) #show logging hosts Index ----1 IP Address 192.168.21.253 Severity ---------alert Port ---4 Status Active Web Interface: Logging - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 288
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 To use the Web interface to configure the managed 19-9 2. Enter the following information in the Host Configuration. • In the Host Address field, enter your host address 192.168.21.253. • In the Port field, enter 4. • Select Alert - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 289
Switch Stacks This chapter describes the concepts and recommended operating procedures to manage NETGEAR stackable managed switches running Release 4.x.x.x or newer. NETGEAR stackable managed switches include the following models: • FSM7226RS • FSM7250RS • FSM7328S • FSM7328PS • FSM7352S • FSM7352PS - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 290
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Understanding Switch Stacks A switch stack is switch stack is identified in the network by its network IP address. The network IP address is assigned according to the MAC address of the stack master. Every stack member is uniquely - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 291
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 A standalone switch is a switch stack the switch stack divides, and you want the switch stacks to remain separate, change the IP address or addresses of the newly created switch stacks. • If you did not intend to partition the switch - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 292
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 use the regular Category 5 Ethernet 8 wire cable. Figure 20-1 Interconnect ports 51 and 52 as shown port 51 port 52 Figure 20-2 Stack Master - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 293
NETGEAR recommends assigning the highest priority value to the switch that you prefer to be the stack master. This ensures that the switch is re-elected as stack master if a re-election occurs. 3. The switch with the higher MAC address stack or has not been manually assigned a stack member number) - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 294
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Switch Stack Offline Configuration You can use the offline configuration feature to preconfigure (supply a configuration to) a new switch before it joins the switch stack. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 295
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Effects of Removing a Preconfigured Switch from a software image by using the archive download-sw xmodem | ymodem | zmodem | tftp://ip/filepath/filename command (this is in the stacking configuration mode). It copies the software - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 296
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • You can connect to the stack master through the console port of the stack master only. • You can connect to the stack master by using a Telnet connection to the IP address of the stack. Switch Stack Configuration Scenarios Table - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 297
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Stacking Recommendations The purpose of this section is to collect notes on recommended procedures and expected behavior of stacked managed switches. Procedures addressed unit to come up to the login prompt. If unit has the default - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 298
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 6. Power on a second unit, making sure it is adjacent (next physical unit in the stack) to the unit already powered up. This will insure - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 299
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Replacing a Stack Member with a New Unit There are two possible situations here. First, if you replace a stack member of a certain model number with another - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 300
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Renumbering Stack Members To use the Web interface to renumber the stack number, proceed as follows: 1. Renumbering the stacking member's ID from 3 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 301
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Moving a Master to a Different Unit in the Stack This example is provided as CLI commands and a Web interface procedure. CLI: Moving a Master to a Different - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 302
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. Click the Apply. Note: If you move a master to a different unit, you may lose the connection to the switch because the IP address may be changed if the switch gets IP address Supported unit types are shown by the show supported - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 303
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. After a unit type is preconfigured for a specific unit number, attaching a unit with different unit type for this unit number causes the switch to report - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 304
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Ports on the added unit should remain in the "detached" state. • A message should appear on the CLI indicating a code mismatch with the newly added - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 305
page 21-3 Add a New Community The example is shown as CLI commands and as a Web interface procedure. CLI: Adding a New Community (Netgear switch) #config (Netgear switch) (Config)#snmp-server community rw public@4 Web Interface: Adding a New Community To use the Web interface to add a new community - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 306
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. In the Client Address field, enter 0.0.0.0. 4. In the Client IP Mask field, enter 0.0.0.0. 5. Select the Read/Write from the Access Mode pull-down menu. 6. Select the Enable from the Status pull-down menu. 7. Click the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 307
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 d. In the Address field, enter 10.100.5.17. e. Select Enable from This example shows how to configure SNMP v3 on the NETGEAR switches. (Netgear Switch) #config (Netgear Switch) (Config)#users passwd admin Enter old password: Enter - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 308
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Configuring SNMP V3 1. Change the user password. If you set the authentication mode to md5, you must make the length of password - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 309
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Select the admin from the User Name pull-down menu. c. Next to Authentication Protocol, click the MD5 radio button. d. Next to the Encryption Protocol, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 310
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 21-6 v1.0, November 2008 SNMP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 311
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Chapter 22 DNS In this chapter, the following examples are provided: • "Specify Two DNS Servers" • "Manually Add a Host Name and an IP Address" on page 22-2 This section describes the Domain Name System (DNS) feature. The DNS - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 312
and an IP Address To use the CLI to manually add a host name and an IP address, enter the following CLI commands: (Netgear Switch)#config (Netgear Switch) (Config)#ip host www.netgear.com 206.82.202.46 (Netgear Switch) (Config)#ip domain-lookup (Netgear Switch) (Config)#ping www.netgear.com Send - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 313
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Manually Adding a Host Name and an IP Address To use the Web interface to manually add a host name and an IP address, proceed as follows: 1. From the main menu, select System > Management > DNS > Host Configuration. A - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 314
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 22-4 v1.0, November 2008 DNS - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 315
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Chapter 23 DHCP Server This section describes the DHCP server configuration. When a client sends a request to a DHCP server, the DHCP server assigns the IP address from address pools that are specified on the switch. The network in - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 316
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 1. From the main menu, select System > Services > DHCP Server > DHCP Server Configuration. A screen similar to the following displays. Figure 23-1 2. Next to Admin Mode, select the Enable radio button. 3. Click Apply to - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 317
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. From the main menu, select System > Services > DHCP Server > DHCP Pool example shows how to create a DHCP server with an IP address pool that is making fixed IP to MAC address assignments. The example is shown as CLI commands and - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 318
a DHCP server with a with a manual pool, enter the following CLI commands: (Netgear Switch)#config (Netgear Switch) (Config)#service dhcp (Netgear Switch) (Config)#ip dhcp pool pool_manual (Netgear Switch) (Config)#client-name dhcpclient (Netgear Switch) (Config)#hardware-address 00:01:02:03:04:05 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 319
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 4. From the main menu, select System > Services > DHCP Server enter pool_manual. • Select Manual from the Type of Binding pull-down menu. • In the Client Name field, enter dhcpclient. • In the Hardware Address field, enter 00:01:02 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 320
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 23-6 v1.0, November 2008 DHCP Server - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 321
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Chapter 24 Double VLANs This section describes from one customer domain to another customer domain. Custom VLAN IDs are preserved and a provider service VLAN ID is added to the traffic so that the traffic can pass the metro core in - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 322
Switch Administration Guide Version 7.3 Enable a Double VLAN The following example shows how to configure the switch (the layer 2 switch) in the preceding figure to add a double VLAN tag for traffic going from the subnet domain connected to port 1/0/24. This example assumes there is a NETGEAR access - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 323
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > VLAN > Basic > VLAN Configuration. A screen similar to the following displays. Figure 24-2 b. Under VLAN Configuration, enter the following - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 324
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 similar to the following displays. Figure 24-3 b. Under VLAN Membership, select 200 from the VLAN ID pull-down menu. c. Click Unit 1. The ports display: • - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 325
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. Change the Port VLAN ID (PVID) of port 24 enter 200. d. Click Apply to save the settings. 4. Configure port 48 as the provider service port: a. From the main menu, select Switching > VLAN > Advanced > Port DVLAN Configuration. A - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 326
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 screen similar to the following displays. Figure 24-5 b. Under DVLAN Configuration, scroll down to interface 1/0/48 and select the chechbox for that interface. 1/0/48 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 327
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Chapter 25 Private VLAN Groups The private VLAN Group allows network administrator to create groups of users within a VLAN that cannot communicate with members - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 328
Managed Switch Administration Guide Version 7.3 CLI: Creating a Private VLAN Group (Netgear Switch) # (Netgear Switch) #vlan data (Netgear Switch) (Vlan)#vlan 200 (Netgear Switch) (Vlan)#exit (Netgear Switch) #config (Netgear Switch) (Config)#interface 1/0/6 (Netgear Switch) (Interface 1/0/6)#vlan - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 329
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Web Interface: Creating a Private VLAN Group To use the Web interface, proceed as follows: 1. Create a VLAN 200. a. From the main menu, select Switching > VLAN > - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 330
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Enter the following information in the VLAN Membership. Select 200 from the VLAN ID pull-down menu. c. Click the Unit 1. The Ports display. d. Click - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 331
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 VLAN > Private Group Configuration. A screen similar to the following displays. Figure 25-5 b. In the Group Name field, enter group1. c. In the Group ID field, - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 332
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Security > Traffic Control >Private Group VLAN > Private Group Configuration. A screen similar to the following displays. Figure 25-7 b. In the - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 333
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Chapter 26 Spanning Tree Protocol In this chapter, the traffic, enabling load balancing, and reducing the number of Spanning-Tree instances required to support a large number of VLANs. Configure Classic STP (802.1d) The example is - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 334
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 a. From the main menu, select Switching > STP > STP Configuration. A screen similar to the following displays. Figure 26-1 b. Enter the following information in the STP - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 335
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 b. Under CST Port Configuration, scroll down to interface 1/0/3 and select the checkbox for that interface. 1/0/3 now appears in the Interface field at the top. c. - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 336
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Next to the Spanning Tree Admin Mode, select the Enable radio button. • Next to the Force Protocol Version, select the IEEE 802.1w radio - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 337
Series Managed Switch Administration Guide Version 7.3 CLI: Configuring Multiple STP (802.1s) (Netgear switch) (Config)# spanning-tree (Netgear switch) (Config)# spanning-tree forceversion 802.1s (Netgear switch) (Config)# spanning-tree mst instance 1 Create a mst instance 1 (Netgear switch) (Config - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 338
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 • Next to the Spanning Tree Admin Mode, select the Enable radio button. • Next to the Force Protocol Version, select the IEEE 802.1s radio - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 339
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 3. Configure MST Port. a. From the main menu, select Switching > STP > MST Port Status. A screen similar to the following displays. Figure 26-7 4. Under MST Port - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 340
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 26-8 v1.0, November 2008 Spanning Tree Protocol - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 341
1-7, 1-9 cos-queue min-bandwidth 13-6 ezconfig 2-1 ip igmpsnooping 15-10 ip proxy-arp 10-2 logout 1-7 member 20-14 movemanagement address-table igmpsnooping 15-4 show network 1-1, 1-7, 18-8 show port 20-9 show port all 20-14 show sntp 17-1 show sntp client 17-2 show sntp server 17-2 show supported - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 342
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 untrusted ports 13-2 D delete 3-4 DHCP server dynamic mode 23-1 manual mode 23-3 DiffServ edge device 14-1 interior node 14-1 VoIP support 14-20 DNS 22-1 DSCP 13-2 DVLAN 24-1 E Easy Setup Wizard 1-5 Ezconfig utility 2-1 G gaming 15 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 343
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 S SNMP V3 user profile 3-4 SNTP 17-1 static host name 22-1 switch FSM family of switches 20-1 GSM family of switches 20-1 IP address 2-2 name 2-3 saving the configuration 2-3 switch stack cabling 20-3 configuration files 20-7 - Netgear GSM7328Sv1 | 7000 Series Managed Switch Administration Guide for Softwar - Page 344
NETGEAR 7000 Series Managed Switch Administration Guide Version 7.3 Index-4 v1.0, November 2008
202-10453-02
November 2008
NETGEAR
, Inc.
4500 Great America Parkway
Santa Clara, CA 95054 USA
NETGEAR 7000 Series
Managed Switch
Administration Guide
Version 7.3