Netgear XS516TM User Manual
Netgear XS516TM Manual
 |
View all Netgear XS516TM manuals
Add to My Manuals
Save this manual to your list of manuals |
Netgear XS516TM manual content summary:
- Netgear XS516TM | User Manual - Page 1
User Manual S3600 Series 8-Port or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Models: XS508TM XS516TM December 2023 202-12646-01 NETGEAR, Inc. 350 E. Plumeria Drive San Jose, CA 95134, USA - Netgear XS516TM | User Manual - Page 2
ce document en français canadien à https://www.netgear.com/support/download/. (If this product is sold in Canada, you can access this document in Canadian French at https://www.netgear.com/support/download/.) For regulatory compliance information including the EU Declaration of - Netgear XS516TM | User Manual - Page 3
Contents Chapter 1 Get Started Available publications and online help 18 Switch management options and default management mode....18 Manage the switch by using the device UI 20 Device UI buttons and user-defined fields 20 Interface naming conventions 21 Save your changes in the device UI 21 - Netgear XS516TM | User Manual - Page 4
back to Directly Connect to Web-browser Interface 41 Configure ports using the Device View 44 Access the NETGEAR support website 45 Access the user manual online 46 Chapter 2 Configure Switch System Settings Dashboard 49 Display port utilization and port connections 49 Display VLAN membership - Netgear XS516TM | User Manual - Page 5
trap configuration for a host 106 Delete an SNMPv1 or SNMPv2 trap configuration for a host 107 Configure SNMPv1 and SNMPv2 trap flags 108 Display the supported MIBs 109 Manage SNMPv3 users 110 Add an SNMPv3 user account 110 Change an SNMPv3 user account 111 Delete an SNMPv3 user account 112 - Netgear XS516TM | User Manual - Page 6
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Remove a DHCP pool or DHCP binding 130 Display or clear the DHCP server bindings 131 Display DHCP server statistics 132 DHCP relay 134 Configure the global DHCP relay server settings 134 Add the DHCP relay - Netgear XS516TM | User Manual - Page 7
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Change the port VLAN ID (PVID) settings 176 Configure a voice VLAN 178 Auto-VLANs 180 Configure the OUI-based properties 181 Configure the OUI-based interface settings 182 Manage the OUI table 184 Add an OUI - Netgear XS516TM | User Manual - Page 8
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Configure LLDP-MED interface settings 219 Green Ethernet settings 221 Configure the global green Ethernet settings 221 Configure green Ethernet interface settings 222 Configure the port settings 224 Link - Netgear XS516TM | User Manual - Page 9
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Display entries in the IGMP snooping table 276 Display IGMP snooping statics and VLANs 277 Configure the IGMP snooping settings for an interface.........279 Configure IGMP snooping for a VLAN 281 Configure an - Netgear XS516TM | User Manual - Page 10
363 Configure the global ARP table settings 364 Remove entries from the ARP table 366 Chapter 7 Configure Quality of Service Quality of Service concepts 369 Class of Service 369 CoS configuration concepts 369 Configure the CoS trust mode settings globally 370 Configure the CoS trust mode and - Netgear XS516TM | User Manual - Page 11
Remove a DiffServ policy 395 Attach a DiffServ policy to an interface 396 Remove a DiffServ policy from an interface 397 Display DiffServ service statistics 398 Chapter 8 Manage Switch Security Change the device admin password 402 RADIUS servers 403 Configure the global RADIUS server settings - Netgear XS516TM | User Manual - Page 12
457 Configure the loop protection settings for interfaces and display the loop protection state 459 Denial of service 461 Configure Auto-DoS 461 Configure individual denial of service attack options 462 Chapter 9 Configure Access Control Lists About access control lists 466 ACL Wizard 466 Use - Netgear XS516TM | User Manual - Page 13
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Change the match criteria for a MAC ACL rule 481 Remove a rule from a MAC ACL 482 MAC ACL bindings 483 Configure a MAC ACL interface binding 483 Display or delete MAC ACL bindings 485 IPv4 ACLs 486 Add an IPv4 - Netgear XS516TM | User Manual - Page 14
dual image configuration and add image descriptions 580 Copy a software image from one flash sector to another......581 Delete a software image 583 Diagnostics and troubleshooting 584 Ping an IPv4 address 584 Ping an IPv6 address 586 Send an IPv4 traceroute 588 Send an IPv6 traceroute 590 14 - Netgear XS516TM | User Manual - Page 15
configuration 596 Access control lists (ACLs 599 MAC ACL example configuration 600 Standard IP ACL sample configuration 603 Differentiated Services (DiffServ 607 DiffServ classes 608 DiffServ traffic classes 608 DiffServ policies 609 DiffServ traffic conditioning policy 609 DiffServ example - Netgear XS516TM | User Manual - Page 16
10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports The manual describes the software configuration procedures and explains the options that are available Device View • Access the NETGEAR support website • Access the user manual online Note: For more information about the topics covered in this - Netgear XS516TM | User Manual - Page 17
features and bug fixes are made available from time to time at netgear.com/support/download/. Some products can regularly check the site and download new firmware, or you can check for and download new firmware manually. If the features or behavior of your product does not match what is described - Netgear XS516TM | User Manual - Page 18
download the following publications and more for your switch by visiting netgear.com/support/download and entering your model number in the search box. • Installation Guide • User Manual (this manual) • Lite CLI Reference Manual When you are logged in to the device UI, you can access documentation - Netgear XS516TM | User Manual - Page 19
push notifications from the switch; and, if necessary, troubleshoot the switch and the network. - Insight app: With Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and see the CLI manual. To find the CLI manual, visit netgear.com/support/download and enter your model - Netgear XS516TM | User Manual - Page 20
Manage the switch by using the device UI This manual describes how to use the device UI to manage and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight that you can access by visiting netgear.com/support/product/insight. Device UI buttons and user- - Netgear XS516TM | User Manual - Page 21
which is a sequential number starting from 1. xg1, xg2, xg3, and so on Fiber interfaces (SFP+), which support 10 Model XS508TM: xg9 and xg10 Gbps or 1 Gbps. Model XS516TM: xg17 and xg18 Link aggregation group (LAG) and the startup configuration of the switch. Get Started 21 User Manual - Netgear XS516TM | User Manual - Page 22
device UI, see Use a Windows-based computer to access the switch on-network and connected to the Internet on page 23. Get Started 22 User Manual - Netgear XS516TM | User Manual - Page 23
the same network as the switch. You can use a WiFi or wired network connection. 4. Open File Explorer. 5. Click the Network link. Get Started 23 User Manual - Netgear XS516TM | User Manual - Page 24
Insight network password to access the device UI. (In such a situation, the Insight network password replaces the switch device admin password.) Get Started 24 User Manual - Netgear XS516TM | User Manual - Page 25
NETGEAR Insight app. 4. If you did not set up a NETGEAR account, tap Create NETGEAR Account and follow the onscreen instructions. 5. Enter the email address and password for your account and tap LOG IN. After you log in to your know the switch IP address on page 28. Get Started 25 User Manual - Netgear XS516TM | User Manual - Page 26
: 1. Download the Switch Discovery Tool by visiting netgear.com/support/product/netgear-switch-discovery-tool. Depending on the computer that icon appear on your Mac dock or Windows desktop. 4. Reenable the security services on your computer. 5. Power on the switch. The DHCP server assigns the Manual - Netgear XS516TM | User Manual - Page 27
the Submit button, and log in again with your new password. The Dashboard page displays. You can now configure the switch. Get Started 27 User Manual - Netgear XS516TM | User Manual - Page 28
. For more information, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34. Get Started 28 User Manual - Netgear XS516TM | User Manual - Page 29
use to access the switch off-network must be in the same subnet as the default IP address of the switch. Get Started 29 User Manual - Netgear XS516TM | User Manual - Page 30
default device admin password, the Change Default Password page displays, requiring you to customize the device admin password for greater security. Get Started 30 User Manual - Netgear XS516TM | User Manual - Page 31
the device UI, enter the default device admin password (password), after which you are required to customize the password for greater Get Started 31 User Manual - Netgear XS516TM | User Manual - Page 32
Insight network password functions and for knowledge base articles about NETGEAR Insight, visit netgear.com/support/product/insight. The following table lists the essential credential options for access to the device Portal back to Direct Connect Web Browser Interface. Get Started 32 User Manual - Netgear XS516TM | User Manual - Page 33
the > button and follow the directions onscreen to register the switch with your email address and password and activate the warranty. Get Started 33 User Manual - Netgear XS516TM | User Manual - Page 34
embedded help and are documented in multiple knowledge base articles that you can access by visiting netgear.com/support/product/insight. To register the switch with your NETGEAR account and get a registration key: 1. From long. It is printed on the switch label. Get Started 34 User Manual - Netgear XS516TM | User Manual - Page 35
use to access the switch off-network must be in the same subnet as the default IP address of the switch. Get Started 35 User Manual - Netgear XS516TM | User Manual - Page 36
getting a registration key, see Register the switch with your NETGEAR account and get a registration key for offline access on page 34. Get Started 36 User Manual - Netgear XS516TM | User Manual - Page 37
log in. After successful registration, the Maintenance > Registration Key menu option and Registration Key page are hidden in the device UI. Get Started 37 User Manual - Netgear XS516TM | User Manual - Page 38
language of the device UI is set to the language that you selected. To continue configuring the switch, log in again. Get Started 38 User Manual - Netgear XS516TM | User Manual - Page 39
changes that you make using the Directly Connect to Web Browser Interface management mode are not saved to the cloud server. Get Started 39 User Manual - Netgear XS516TM | User Manual - Page 40
radio button. A confirmation pop-up window displays. 7. Click the OK button. The System Information page display again. 8. Click the Apply button. Get Started 40 User Manual - Netgear XS516TM | User Manual - Page 41
the Insight Cloud Portal and Insight app, visit netgear.com/business/services/insight. The Insight Cloud Portal and Insight app have embedded help and base articles that you can access by visiting netgear.com/support/product/insight. Change the management mode back to Directly Connect User Manual - Netgear XS516TM | User Manual - Page 42
, select Text Configuration. c. Click the Apply button. A pop-up window displays. d. Navigate to a location on your computer and save the file. Get Started 42 User Manual - Netgear XS516TM | User Manual - Page 43
. The file transfer begins. The page displays information about the progress of the file transfer. The switch applies the configuration automatically. Get Started 43 User Manual - Netgear XS516TM | User Manual - Page 44
Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Get Started 44 User Manual - Netgear XS516TM | User Manual - Page 45
or monitor the port. Access the NETGEAR support website From the device UI, you can access the NETGEAR support website at netgear.com/support. To access the NETGEAR support website from the device UI: 1. Connect Login button. The Dashboard page displays. 5. Select Help. Get Started 45 User Manual - Netgear XS516TM | User Manual - Page 46
Gigabit Ethernet Smart Switch with 2 SFP+ Ports The Online Help page displays. 6. In the Support section, click the link. The NETGEAR support website opens. Access the user manual online The user manual (the manual that you are now reading) is available from the NETGEAR download center at netgear - Netgear XS516TM | User Manual - Page 47
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports The page displays the documentation that is available for your model, including the user manual. Get Started 47 User Manual - Netgear XS516TM | User Manual - Page 48
2 Configure Switch System Settings This chapter covers the following topics: • Dashboard • Display information about switch hardware components and firmware • IP network settings for management access • Time and NTP settings • Domain Name System • Manage switch discovery protocols • LLDP and LLDP- - Netgear XS516TM | User Manual - Page 49
on page 31. 4. Click the Login button. The Dashboard page displays. The following table describes information about port utilization. Configure Switch System 49 Settings User Manual - Netgear XS516TM | User Manual - Page 50
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switch System 50 Settings User Manual - Netgear XS516TM | User Manual - Page 51
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switch System 51 Settings User Manual - Netgear XS516TM | User Manual - Page 52
as power supplies, temperature sensors, and fans, and information about the boot version and software version on the switch. Configure Switch System 52 Settings User Manual - Netgear XS516TM | User Manual - Page 53
. • System Location: Type the location for this switch. • System Contact: Type the name of a contact person for this switch. Configure Switch System 53 Settings User Manual - Netgear XS516TM | User Manual - Page 54
minutes since the switch was restarted Universally assigned network address The current date and time, including the time zone Configure Switch System 54 Settings User Manual - Netgear XS516TM | User Manual - Page 55
System > Management > System Information. The System Information page displays. The following table describes the view-only power supply information. Configure Switch System 55 Settings User Manual - Netgear XS516TM | User Manual - Page 56
31. 4. Click the Login button. The Dashboard page displays. 5. Select System > Management > System Information. The System Information page displays. Configure Switch System 56 Settings User Manual - Netgear XS516TM | User Manual - Page 57
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 57 Settings User Manual - Netgear XS516TM | User Manual - Page 58
information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Switch System 58 Settings User Manual - Netgear XS516TM | User Manual - Page 59
restrict IPv4 management to one specific interface. You can use any of the interfaces as an IPv4 management interface. Configure Switch System 59 Settings User Manual - Netgear XS516TM | User Manual - Page 60
The IP Network Configuration page displays. 6. Select a radio button for the configuration of the switch management interface: • Static IP Address: You must manually configure the IP address, subnet mask, and default gateway. Enter this information in the fields below the radio buttons. • Dynamic IP - Netgear XS516TM | User Manual - Page 61
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Switch System 61 Settings User Manual - Netgear XS516TM | User Manual - Page 62
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switch System 62 Settings User Manual - Netgear XS516TM | User Manual - Page 63
allows the switch to receive an IPv6 address from a DHCPv6 server in your network, select the DHCPv6 radio button. Configure Switch System 63 Settings User Manual - Netgear XS516TM | User Manual - Page 64
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switch System 64 Settings User Manual - Netgear XS516TM | User Manual - Page 65
check box for the IPv6 address. b. Click the Delete button. Your settings saved and the IPv6 address is removed. Configure Switch System 65 Settings User Manual - Netgear XS516TM | User Manual - Page 66
refresh the page, click the Refresh button. The IPv6 Network Interface Neighbor table displays the following view-only fields. Configure Switch System 66 Settings User Manual - Netgear XS516TM | User Manual - Page 67
for the neighboring device was updated Time and NTP settings The switch supports the Network Time Protocol (NTP), which is a protocol for clock source of the switch as local, which lets you set the time manually. Configure the time settings with NTP and configure the global NTP settings To - Netgear XS516TM | User Manual - Page 68
of minutes that the time zone is different from UTC. The range is from 0 to 59. The default is 0. Configure Switch System 68 Settings User Manual - Netgear XS516TM | User Manual - Page 69
this interface to broadcast NTP queries. By default, no source interface is configured. 13. Click the Apply button. Your settings are saved. Set the time manually If you remove all NTP servers and disable NTP, you can set the time - Netgear XS516TM | User Manual - Page 70
the Delete button. If you want to be able to restore the default NTP servers, write down their settings so that you can add them manually. Otherwise, to restore the default NTP servers, you must reset the switch to factory default settings. 7. Click the Delete button. Your settings are saved. The - Netgear XS516TM | User Manual - Page 71
Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Configure Switch System 71 Settings User Manual - Netgear XS516TM | User Manual - Page 72
NTP Server Version NTP System Type Description The NTP version that the client supports The NTP modes that the client supports. Multiple modes can be supported by a client. The IP address of the time server for the last of the NTP system Configure Switch System 72 Settings User Manual - Netgear XS516TM | User Manual - Page 73
a network NTP server. The switch operates as an NTP client only and does not provide time services to other devices. Time sources are established by stratums. Stratums define the accuracy of the reference clock are used to determine the server time. Configure Switch System 73 Settings User Manual - Netgear XS516TM | User Manual - Page 74
window displays. 7. From the Server Type menu, select the type of NTP address to enter in the address field. Configure Switch System 74 Settings User Manual - Netgear XS516TM | User Manual - Page 75
each time an NTP request is sent to it. 9. In the Version field, specify the NTP version that is supported by the switch. The range is from 1 to 4. The default is 4. 10. In the Minimum Poll Interval Status table displays the following information. Configure Switch System 75 Settings User Manual - Netgear XS516TM | User Manual - Page 76
information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Switch System 76 Settings User Manual - Netgear XS516TM | User Manual - Page 77
through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Configure Switch System 77 Settings User Manual - Netgear XS516TM | User Manual - Page 78
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 78 Settings User Manual - Netgear XS516TM | User Manual - Page 79
Disable: Disables daylight saving time. This is the default setting. • Recurring: Daylight saving time occurs at the same time every year. You must manually configure the start and end times and dates for the time shift. Configure the settings that are described in Step 7. • Recurring EU: The system - Netgear XS516TM | User Manual - Page 80
time zone. 9. If you select the Nonrecurring radio button, configure the fields that are shown in the following table. Configure Switch System 80 Settings User Manual - Netgear XS516TM | User Manual - Page 81
Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Configure Switch System 81 Settings User Manual - Netgear XS516TM | User Manual - Page 82
information about Domain Name System (DNS) servers that the network uses and how the switch operates as a DNS client. Configure Switch System 82 Settings User Manual - Netgear XS516TM | User Manual - Page 83
is changed to test.netgear.com to resolve the name). The maximum length of the name is 255 characters. Configure Switch System 83 Settings User Manual - Netgear XS516TM | User Manual - Page 84
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Switch System 84 Settings User Manual - Netgear XS516TM | User Manual - Page 85
server is removed. Map host names to DNS server IP addresses and display dynamic host mappings You can manually map host names to DNS server IP addresses and view dynamic host mappings. Add an entry to the see Register the switch on page 33. Configure Switch System 85 Settings User Manual - Netgear XS516TM | User Manual - Page 86
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switch System 86 Settings User Manual - Netgear XS516TM | User Manual - Page 87
information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Switch System 87 Settings User Manual - Netgear XS516TM | User Manual - Page 88
. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. Configure Switch System 88 Settings User - Netgear XS516TM | User Manual - Page 89
discovery protocols The switch supports the following discovery and Play (UPnP) and Simple Service Discovery Protocol (SSDP) are enabled • Bonjour: A Mac that supports Bonjour can discover the switch in A NETGEAR device or application that supports NETGEAR Switch Discovery Protocol (NSDP) - Netgear XS516TM | User Manual - Page 90
is disabled. • The toggle is purple and positioned to the right: Bonjour is enabled. This is the default setting. Configure Switch System 90 Settings User Manual - Netgear XS516TM | User Manual - Page 91
LLDP-MED settings You can configure the LLDP and LDDP-MED settings that are globally applied to the switch. Configure Switch System 91 Settings User Manual - Netgear XS516TM | User Manual - Page 92
Delay field, enter the delay before reinitialization starts. The range is from 1 to 10 secs. The default is 2 seconds. Configure Switch System 92 Settings User Manual - Netgear XS516TM | User Manual - Page 93
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 93 Settings User Manual - Netgear XS516TM | User Manual - Page 94
about configuring LLDP and LLDP-MED for interfaces, see LLDP and LLDP-MED settings for interfaces on page 217. Configure Switch System 94 Settings User Manual - Netgear XS516TM | User Manual - Page 95
switch (see the following field) The MAC address of the switch The system name, if any, of the switch Configure Switch System 95 Settings User Manual - Netgear XS516TM | User Manual - Page 96
SubType Interface Number MAC/PHY Details Autonegotiation Supported Autonegotiation Enabled Autonegotiation Advertised Capabilities Description the managed address) of the local device Displays if the local device supports autonegotiation (True or False) Displays if autonegotiation is enabled on the - Netgear XS516TM | User Manual - Page 97
of VLAN of the local device The user priority of the local device The system capabilities that are supported on the local device The system capabilities that are enabled on the local device The device class that also referred to as a remote device. Configure Switch System 97 Settings User Manual - Netgear XS516TM | User Manual - Page 98
the view-only fields on the page. Table 20. LLDP neighbor information Field MSAP Entry Local Port Chassis ID Subtype Description The detected Media Service Access Point (MSAP) entry of the neighbor The number of the physical interface on the switch that receives the information The chassis ID - Netgear XS516TM | User Manual - Page 99
description of the neighbor. This information can include the system hardware type and version, operating system, and network software. Configure Switch System 99 Settings User Manual - Netgear XS516TM | User Manual - Page 100
injection into the network. For example, 100BASE-TX full duplex mode. The system capabilities that are supported on the neighbor The system capabilities that are enabled on the neighbor The device class that is The serial number of the neighbor Configure Switch System 100 Settings User Manual - Netgear XS516TM | User Manual - Page 101
latitude, longitude, and altitude) The neighbor's Emergency Call Service (ECS) Emergency Location Identification Number (ELIN) The configure SNMP settings for SNMPv1, SNMPv2, and SNMPv3. The switch supports the configuration of SNMP groups and users that can manage traps 101 Settings User Manual - Netgear XS516TM | User Manual - Page 102
. 9. In the Community String field, type the name for the community. The name can be up to 16 characters. Configure Switch System 102 Settings User Manual - Netgear XS516TM | User Manual - Page 103
. 6. Select the check box for the community. 7. Click the Edit button. The Edit Community Configuration pop-up window displays. Configure Switch System 103 Settings User Manual - Netgear XS516TM | User Manual - Page 104
the check box for the community. 7. Click the Delete button. Your settings are saved and the community is deleted. Configure Switch System 104 Settings User Manual - Netgear XS516TM | User Manual - Page 105
used by the host: • SNMPv1: The switch uses SNMPv1 to send traps to the receiver. This the default setting. Configure Switch System 105 Settings User Manual - Netgear XS516TM | User Manual - Page 106
the check box for the trap configuration. 7. Click the Edit button. The Edit Trap Configuration pop-up window displays. Configure Switch System 106 Settings User Manual - Netgear XS516TM | User Manual - Page 107
box for the trap configuration. 7. Click the Delete button. Your settings are saved and the trap configuration is deleted. Configure Switch System 107 Settings User Manual - Netgear XS516TM | User Manual - Page 108
or logical interface link changes. • Spanning Tree: When enabled, SNMP traps are sent when various spanning tree events occur. Configure Switch System 108 Settings User Manual - Netgear XS516TM | User Manual - Page 109
Apply button. Your settings are saved. Display the supported MIBs To display the MIBs that are supported by the switch: 1. Connect your computer to the page displays. 5. Select System > Protocols > SNMP > Supported MIBs. The Supported MIBs page displays. The Name field displays the RFC number, - Netgear XS516TM | User Manual - Page 110
Access Mode menu, select Read Only or Read/Write to specify the SNMPv3 access privileges for the user account. Configure Switch System 110 Settings User Manual - Netgear XS516TM | User Manual - Page 111
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 111 Settings User Manual - Netgear XS516TM | User Manual - Page 112
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 112 Settings User Manual - Netgear XS516TM | User Manual - Page 113
. The Dashboard page displays. 5. Select System > Protocols > SNMP > SNMP V3 Trap Configuration. The Trap Configuration page for SNMPv3 displays. Configure Switch System 113 Settings User Manual - Netgear XS516TM | User Manual - Page 114
the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Configure Switch System 114 Settings User Manual - Netgear XS516TM | User Manual - Page 115
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 115 Settings User Manual - Netgear XS516TM | User Manual - Page 116
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 116 Settings User Manual - Netgear XS516TM | User Manual - Page 117
allowed simultaneously. The range is from 1 to 4. The default is 4. 13. Click the Apply button. Your settings are saved. Configure Switch System 117 Settings User Manual - Netgear XS516TM | User Manual - Page 118
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switch System 118 Settings User Manual - Netgear XS516TM | User Manual - Page 119
allowed simultaneously. The range is from 1 to 4. The default is 4. 10. Click the Apply button. Your settings are saved. Configure Switch System 119 Settings User Manual - Netgear XS516TM | User Manual - Page 120
Digital Signature Algorithm (ECDSA), which is a newer and very secure algorithm that is not yet widely supported. Note: To generate an SSH key file, SSH must be disabled (see Configure the SSH access settings . 5. Select System > Protocols > SSH. Configure Switch System 120 Settings User Manual - Netgear XS516TM | User Manual - Page 121
Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Configure Switch System 121 Settings User Manual - Netgear XS516TM | User Manual - Page 122
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Switch System 122 Settings User Manual - Netgear XS516TM | User Manual - Page 123
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switch System 123 Settings User Manual - Netgear XS516TM | User Manual - Page 124
IPv4 DHCP server, DHCP pools, and DHCP bindings. You can also view DHCP statistics. Enable the DHCP server and configure the Bootp mode The switch supports a single IPv4 DHCP server for which you can configure multiple address pools. Configure Switch System 124 Settings User - Netgear XS516TM | User Manual - Page 125
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Server Configuration. The DHCP Server Configuration page displays. 6. Click the DHCP Server as part of a ping operation. Configure Switch System 125 Settings User Manual - Netgear XS516TM | User Manual - Page 126
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Server Configuration. The DHCP Server Configuration page displays. 6. Click the Add New button. The Add Excluded Address pop-up - Netgear XS516TM | User Manual - Page 127
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 127 Settings User Manual - Netgear XS516TM | User Manual - Page 128
with 2 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Pools. The DHCP Pools page displays. 6. Click - Network Mask: The network mask for the dynamic DHCP pool. • Manual Type: Configure the following settings: - Hardware Address: The hardware MAC address - Netgear XS516TM | User Manual - Page 129
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switch System 129 Settings User Manual - Netgear XS516TM | User Manual - Page 130
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Pools. The DHCP Pools page displays. 6. Select the check box for the pool name address field of your web browser. Configure Switch System 130 Settings User Manual - Netgear XS516TM | User Manual - Page 131
the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Pools. The DHCP Pools page displays. 6. Select the check box for the pool name. Register the switch on page 33. Configure Switch System 131 Settings User Manual - Netgear XS516TM | User Manual - Page 132
the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP Binding. The DHCP Binding page displays. The table belongs The type of binding for the client (Unallocated, Dynamic, or Manual) The client's hardware MAC address The remaining lease time in days, - Netgear XS516TM | User Manual - Page 133
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Server > DHCP IPV4 Server Statistics. The DHCP IPv4 Server Statistics page displays. 6. To clear the sent by the DHCP server. Configure Switch System 133 Settings User Manual - Netgear XS516TM | User Manual - Page 134
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switch System 134 Settings User Manual - Netgear XS516TM | User Manual - Page 135
10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports The Dashboard page displays. 5. Select System > DHCP Services > DHCP Relay > DHCP Relay. The DHCP Relay page displays. 6. Click the DHCP Relay toggle to enable or the switch on page 33. Configure Switch System 135 Settings User Manual - Netgear XS516TM | User Manual - Page 136
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Relay > DHCP Relay. The DHCP Relay page displays. 6. In the DHCP Relay VLAN Interfaces section routing VLAN itself is not removed. Configure Switch System 136 Settings User Manual - Netgear XS516TM | User Manual - Page 137
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Relay > DHCP Relay. The DHCP Relay page displays. 6. In the DHCP Relay VLAN Interfaces section, display the DHCP relay statistics. Configure Switch System 137 Settings User Manual - Netgear XS516TM | User Manual - Page 138
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Relay > DHCP Relay Statistics. The DHCP Relay Statistics page displays. 6. To clear the statistics, click view-only fields on the page. Configure Switch System 138 Settings User Manual - Netgear XS516TM | User Manual - Page 139
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switch System 139 Settings User Manual - Netgear XS516TM | User Manual - Page 140
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP L2 Relay > DHCP L2 Relay Global Configuration. The DHCP L2 Relay Global Configuration page displays. 6. Admin Password page displays. Configure Switch System 140 Settings User Manual - Netgear XS516TM | User Manual - Page 141
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP L2 Relay > DHCP L2 Relay Global Configuration. The DHCP L2 Relay Global Configuration page displays. a DHCP L2 relay on an interface. Configure Switch System 141 Settings User Manual - Netgear XS516TM | User Manual - Page 142
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP L2 Relay > DHCP L2 Relay Interface Configuration. The DHCP L2 Relay Interface Configuration page displays. row. 8. Click the Edit button. Configure Switch System 142 Settings User Manual - Netgear XS516TM | User Manual - Page 143
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 143 Settings User Manual - Netgear XS516TM | User Manual - Page 144
8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports 5. Select System > DHCP Services > DHCP L2 Relay > DHCP L2 Relay Interface Statistics. The DHCP L2 Relay Interface Statistics page displays. the DHCP server or another switch. Configure Switch System 144 Settings User Manual - Netgear XS516TM | User Manual - Page 145
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Global Configuration. The Global Configuration page displays. 6. Click the DHCP Snooping Mode MAC address validation is disabled. Configure Switch System 145 Settings User Manual - Netgear XS516TM | User Manual - Page 146
, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Global Configuration. The Global Configuration page displays. The following steps refer to the VLAN Configuration section. 6. Select the check - Netgear XS516TM | User Manual - Page 147
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 147 Settings User Manual - Netgear XS516TM | User Manual - Page 148
or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports 5. Select System > DHCP Services > DHCP Snooping > Interface Configuration. The Interface Configuration page displays. 6. From the Filter By menu for DHCP snooping purposes. Configure Switch System 148 Settings User Manual - Netgear XS516TM | User Manual - Page 149
information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. The Binding Configuration page displays. Configure Switch System 149 Settings User - Netgear XS516TM | User Manual - Page 150
. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. Configure Switch System 150 Settings User - Netgear XS516TM | User Manual - Page 151
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switch System 151 Settings User Manual - Netgear XS516TM | User Manual - Page 152
31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Binding Configuration. The Binding Configuration page displays. The Dynamic Binding Configuration the page, click the Refresh button. Configure Switch System 152 Settings User Manual - Netgear XS516TM | User Manual - Page 153
through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Configure Switch System 153 Settings User Manual - Netgear XS516TM | User Manual - Page 154
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Persistent Configuration. The Persistent Configuration page displays. 6. Select where the DHCP snooping the Internet on page 29. Configure Switch System 154 Settings User Manual - Netgear XS516TM | User Manual - Page 155
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP Snooping > Statistics. The DHCP Snooping Statistics page displays. 6. From the Filter By menu, . You can also view DHCPv6 statistics. Configure Switch System 155 Settings User Manual - Netgear XS516TM | User Manual - Page 156
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Server Configuration. The DHCP IPv6 Server Configuration page displays. 6. Click button. Your settings are saved. Configure Switch System 156 Settings User Manual - Netgear XS516TM | User Manual - Page 157
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Pools. The DHCP IPv6 Pools page displays. 6. Click the Add New button the IPv6 address and prefix length. Configure Switch System 157 Settings User Manual - Netgear XS516TM | User Manual - Page 158
. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Pools. Configure Switch System 158 Settings User - Netgear XS516TM | User Manual - Page 159
about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Pools. The DHCP IPv6 Pools page displays. 6. Select the check box for the pool name. Configure Switch System - Netgear XS516TM | User Manual - Page 160
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Binding. The DHCP IPv6 Binding page displays. The table displays information the view-only fields on the page. Configure Switch System 160 Settings User Manual - Netgear XS516TM | User Manual - Page 161
the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Server > DHCP IPv6 Server Statistics. The DHCP IPv6 Server Statistics page displays. 6. To clear the statistics, click the Clear button - Netgear XS516TM | User Manual - Page 162
in a different IPv6 subnet. This VLAN can function as a DHCPv6 relay. You can add multiple DHCPv6 relay VLAN interfaces. Configure Switch System 162 Settings User Manual - Netgear XS516TM | User Manual - Page 163
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Relay > DHCP IPv6 Relay. The DHCP IPv6 Relay page displays. 6. Click the Add New button a link-local or multicast address. Configure Switch System 163 Settings User Manual - Netgear XS516TM | User Manual - Page 164
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Relay > DHCP IPv6 Relay. The DHCP IPv6 Relay page displays. 6. Select the check box for display the DHCPv6 relay statistics. Configure Switch System 164 Settings User Manual - Netgear XS516TM | User Manual - Page 165
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select System > DHCP Services > DHCP IPv6 Relay > DHCP IPv6 Relay Statistics. The DHCP IPv6 Relay Statistics page displays. 6. To clear messages that the relay received Configure Switch System 165 Settings User Manual - Netgear XS516TM | User Manual - Page 166
Description The number of Forward messages that the relay sent The number of Reply messages that the relay sent Configure Switch System 166 Settings User Manual - Netgear XS516TM | User Manual - Page 167
3 Manage VLANs This chapter covers the following topics: • Manage the VLAN configuration on the switch • Auto-VLANs • Configure a MAC-based VLAN • Configure a protocol-based VLAN group • Configure Generic Attribute Registration Protocol • Private VLANs • Protect ports Note: For more information - Netgear XS516TM | User Manual - Page 168
VLANs, or reset the entire VLAN configuration on the switch to defaults. About VLANs Adding virtual LAN (VLAN) support to a Layer 2 switch offers some of the benefits of both bridging and routing. Like a bridge, a becomes a member of the Auto-Video VLAN. Manage VLANs 168 User Manual - Netgear XS516TM | User Manual - Page 169
button. The Add VLAN Configuration pop-up window displays. 7. In the VLAN ID field, type the identifier for the new VLAN. Manage VLANs 169 User Manual - Netgear XS516TM | User Manual - Page 170
be up to 32 characters, including blanks. 9. Click the Save button. Your setting are saved and the VLAN is added. Note: When you add a VLAN manually (as in this procedure), the VLAN Type field always shows Static. A VLAN that is created by GVRP registration initially uses a type of dynamic but you - Netgear XS516TM | User Manual - Page 171
the Tag Port button to add all ports or LAGs as tagged members of the VLAN. All ports or LAGs display a "T." Manage VLANs 171 User Manual - Netgear XS516TM | User Manual - Page 172
Type Definition The name for the VLAN The type of the VLAN you selected: • Default (VLAN ID = 1): Always present • Static: A VLAN that you added manually or the Auto-WiFi, Auto-Camera, Auto-VoIP, or Auto-Video VLAN • Dynamic: A VLAN that was created through GVRP registration and that you did not - Netgear XS516TM | User Manual - Page 173
Ethernet cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Manage VLANs 173 User Manual - Netgear XS516TM | User Manual - Page 174
. • All ports are configured to transmit only untagged frames. • GVRP is disabled on all ports and all dynamic entries are cleared. Manage VLANs 174 User Manual - Netgear XS516TM | User Manual - Page 175
. 8. Click the Apply button. Your settings are saved. All VLANs, except for the default VLAN and the Auto VLANs, are deleted. Manage VLANs 175 User Manual - Netgear XS516TM | User Manual - Page 176
associated with the interface, or type the interface number (for example, xg5) in the Search field and click the Go button. Manage VLANs 176 User Manual - Netgear XS516TM | User Manual - Page 177
in the tag. In an untagged frame, the VLAN is the port VLAN ID of the interface that receives this frame. Manage VLANs 177 User Manual - Netgear XS516TM | User Manual - Page 178
mechanism for voice packets so that they can be prioritized above data packets in order to provide better Quality of Service (QoS). For example, you can enable a voice VLAN on an interface that is connected to IP phones. and not connected to the Internet on page 29. Manage VLANs 178 User Manual - Netgear XS516TM | User Manual - Page 179
the interface must be configured to send tagged voice traffic. • Dot1p: Configure voice VLAN 802.1p priority tagging for voice traffic. Manage VLANs 179 User Manual - Netgear XS516TM | User Manual - Page 180
for the device. For most Auto-VLANs, you can set the prioritization for the level of Quality of Service (QoS) that is suitable for the type of device that the VLAN supports. The switch comes preconfigured with the following Auto-VLANs: • Auto-VoIP: The switch places detected Voice over Internet - Netgear XS516TM | User Manual - Page 181
Login button. The Dashboard page displays. 5. Select Switching > Auto-VLAN > OUI-based Auto-VLAN. The OUI-based Auto-VLAN page displays. Manage VLANs 181 User Manual - Netgear XS516TM | User Manual - Page 182
or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Manage VLANs 182 User Manual - Netgear XS516TM | User Manual - Page 183
the interface: • Disable: The Auto WiFi mode is disabled. This is the default setting. • Enable: The Auto WiFi mode is enabled. Manage VLANs 183 User Manual - Netgear XS516TM | User Manual - Page 184
. For example, a device that is identified by an OUI for a VoIP phone can be automatically placed in the Auto-VoIP VLAN. Manage VLANs 184 User Manual - Netgear XS516TM | User Manual - Page 185
can add a new OUI and description to identify a WiFi device, camera, or VoIP phone on the network. The switch supports up to 32 OUIs. To add an OUI: 1. Connect your computer to the same network as the switch. You can use and the OUI is added to the OUI Table section. Manage VLANs 185 User Manual - Netgear XS516TM | User Manual - Page 186
one check box. 8. Click the Delete button. Your settings are saved and the OUI is removed from the OUI Table section. Manage VLANs 186 User Manual - Netgear XS516TM | User Manual - Page 187
packets so that they can be prioritized above data packets in order to provide better Quality of Service (QoS). With the Auto-VoIP feature, voice prioritization can be provided based on call-control protocols steps refer to the Protocol-Based Global Settings section. Manage VLANs 187 User Manual - Netgear XS516TM | User Manual - Page 188
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage VLANs 188 User Manual - Netgear XS516TM | User Manual - Page 189
. 10. Click the Save button. Your settings are saved. The Operational Status field shows if the interface is up or down. Manage VLANs 189 User Manual - Netgear XS516TM | User Manual - Page 190
page displays. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage VLANs 190 User Manual - Netgear XS516TM | User Manual - Page 191
(By default, 4088) The maximum number of voice channels supported The number of VoIP channels prioritized successfully Configure a MAC-based processing on the packet continues; otherwise the packet is dropped. You must manually configure a MAC-address-to-VLAN-ID mapping. Add a MAC-based VLAN - Netgear XS516TM | User Manual - Page 192
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage VLANs 192 User Manual - Netgear XS516TM | User Manual - Page 193
a group, you specify a name. A group ID is assigned automatically. Add a protocol-based VLAN group You can add a protocol-based VLAN group. Manage VLANs 193 User Manual - Netgear XS516TM | User Manual - Page 194
one or more of the following protocols to be associated with the group: • IP: IP is a network layer protocol that provides a connectionless service for the delivery of data. • ARP: Address Resolution Protocol (ARP) is a low-level protocol that dynamically maps network layer addresses to physical - Netgear XS516TM | User Manual - Page 195
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Manage VLANs 195 User Manual - Netgear XS516TM | User Manual - Page 196
to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Manage VLANs 196 User Manual - Netgear XS516TM | User Manual - Page 197
or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Manage VLANs 197 User Manual - Netgear XS516TM | User Manual - Page 198
registration protocol (GVRP) on the switch. If GVRP is enabled, the switch can share VLAN IDs with devices in the network. Manage VLANs 198 User Manual - Netgear XS516TM | User Manual - Page 199
can configure GARP settings for individual interfaces. These settings take effect only if the GVRP mode is enabled on the switch. Manage VLANs 199 User Manual - Netgear XS516TM | User Manual - Page 200
interface. • To configure all interfaces with the same settings, select the check box in the heading row. 8. Click the Edit button. Manage VLANs 200 User Manual - Netgear XS516TM | User Manual - Page 201
entry. This allows time for another station to assert registration for the same attribute to maintain uninterrupted service. Enter a number between 20 and 600 (0.2 to 6.0 seconds). The default is 60 centiseconds same for all subdomains that belong to a private VLAN. Manage VLANs 201 User Manual - Netgear XS516TM | User Manual - Page 202
the promiscuous ports. In a private VLAN, you can configure multiple community VLANs. Within a private VLAN, the switch supports two types of special port designations: • Host port: The port is a host port that is a member the private VLAN port mode on page 207. Manage VLANs 202 User Manual - Netgear XS516TM | User Manual - Page 203
Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Manage VLANs 203 User Manual - Netgear XS516TM | User Manual - Page 204
to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Manage VLANs 204 User Manual - Netgear XS516TM | User Manual - Page 205
about configuring an isolated or community VLAN for the private VLAN, see Assign a private VLAN type to a VLAN on page 203. Manage VLANs 205 User Manual - Netgear XS516TM | User Manual - Page 206
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > VLAN > Private VLAN > VLAN Association Configuration. Manage VLANs 206 User Manual - Netgear XS516TM | User Manual - Page 207
button. The Dashboard page displays. 5. Select Switching > VLAN > Private VLAN > VLAN Port Mode Configuration. The VLAN Port Mode Configuration page displays. Manage VLANs 207 User Manual - Netgear XS516TM | User Manual - Page 208
interface: Assign the interface to primary and secondary VLANs on page 211. 10. Click the Save button. Your settings are saved. Manage VLANs 208 User Manual - Netgear XS516TM | User Manual - Page 209
associated with the interface, or type the interface number (for example, xg5) in the Search field and click the Go button. Manage VLANs 209 User Manual - Netgear XS516TM | User Manual - Page 210
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage VLANs 210 User Manual - Netgear XS516TM | User Manual - Page 211
port mode on page 207), you can assign the interface to a single primary VLAN and to one or more secondary VLANs. Manage VLANs 211 User Manual - Netgear XS516TM | User Manual - Page 212
select must be configured in Promiscuous mode (see Configure the private VLAN port mode on page 207). 8. Click the Edit button. Manage VLANs 212 User Manual - Netgear XS516TM | User Manual - Page 213
to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Manage VLANs 213 User Manual - Netgear XS516TM | User Manual - Page 214
traffic to unprotected ports. You can configure ports as protected. A port that is not configured as protected is an unprotected port. Manage VLANs 214 User Manual - Netgear XS516TM | User Manual - Page 215
, no ports are selected. • Click the Select All button to select all ports. 7. Click the Apply button. Your settings are saved. Manage VLANs 215 User Manual - Netgear XS516TM | User Manual - Page 216
4 Configure Switching This chapter covers the following topics: • LLDP and LLDP-MED settings for interfaces • Green Ethernet settings • Configure the port settings • Link aggregation groups • Spanning Tree Protocol • MAC address table • Dynamic ARP inspection 216 - Netgear XS516TM | User Manual - Page 217
both transmit and receive functions are disabled on all interfaces. LLDP-MED is an enhancement to LLDP with support for the following features: • Auto-discovery of LAN policies (such as VLAN, Layer 2 priority, and 29. The Device Admin Password page displays. Configure Switching 217 User Manual - Netgear XS516TM | User Manual - Page 218
if the interface initiates traps for remote data changes: • Disable: The interface does not initiate traps. This is the default setting. Configure Switching 218 User Manual - Netgear XS516TM | User Manual - Page 219
are saved. Configure LLDP-MED interface settings You can specify LLDP-MED settings that are applied to one or more interfaces. Configure Switching 219 User Manual - Netgear XS516TM | User Manual - Page 220
the check box in the heading row. 7. Click the Edit button. The Edit LLDP-MED Port Configuration pop-up window displays. Configure Switching 220 User Manual - Netgear XS516TM | User Manual - Page 221
Ethernet cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switching 221 User Manual - Netgear XS516TM | User Manual - Page 222
EEE Mode is enabled. EEE combines the MAC address of a port with a family of physical layers that support operation in a low power mode. (EEE is defined by the IEEE 802.3az standard.) Lower power mode lets green Ethernet settings for individual interfaces. Configure Switching 222 User Manual - Netgear XS516TM | User Manual - Page 223
the check box in the heading row. 7. Click the Edit button. The Edit Green Ethernet Interface Configuration pop-up window displays. Configure Switching 223 User Manual - Netgear XS516TM | User Manual - Page 224
is enabled for the interface. EEE combines the MAC address of the interface with a family of physical layers that support operation in a low power mode. (EEE is defined by the IEEE 802.3az standard.) Lower power mode lets for the device UI on page 31. Configure Switching 224 User Manual - Netgear XS516TM | User Manual - Page 225
the default setting. For the port or LAG to participate in the network, you must select Enable. 11. To manually set the speed for the port, in the Speed field, type one of the following options: • Auto: The speed is automatically set and you cannot change it. Configure Switching 225 User Manual - Netgear XS516TM | User Manual - Page 226
default is Disable. 13. In the Frame Size field, specify the maximum Ethernet frame size that the port can support. The frame size includes Ethernet header, CRC, and payload. The range is from 1500 to 9198 bytes. The describes the view-only fields on the page. Configure Switching 226 User Manual - Netgear XS516TM | User Manual - Page 227
interface does not require a partner system to be able to aggregate its member ports. The switch supports static LAGs. When a port is added as a static member to a LAG, the port neither transmits nor receives switch treats the LAG as if it were a single link. Configure Switching 227 User Manual - Netgear XS516TM | User Manual - Page 228
LAG. By default, the names are ch1, ch2, ch3, and so on. You can enter a name of up to 15 characters. Configure Switching 228 User Manual - Netgear XS516TM | User Manual - Page 229
when the LAG link status changes. This is the default setting. • Enable: A trap is sent when the LAG link status changes. Configure Switching 229 User Manual - Netgear XS516TM | User Manual - Page 230
Static: Disables Link Aggregation Control Protocol (LACP) on the LAG. You must configure the LAG manually on each device. This is the default setting. • LACP: Enables LACP on the LAG. If both devices support LACP, the LAG can be configured automatically between the devices. 15. Click the Save button - Netgear XS516TM | User Manual - Page 231
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switching 231 User Manual - Netgear XS516TM | User Manual - Page 232
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Switching 232 User Manual - Netgear XS516TM | User Manual - Page 233
unit (PDU) before the time-out period expires, the LAG is terminated. 10. Click the Save button. Your settings are saved. Configure Switching 233 User Manual - Netgear XS516TM | User Manual - Page 234
switch, see Configure the global STP settings and display the STP status on page 235. The switch support the following spanning tree versions: • CST: Common STP. For information about configuring CST, see Configure topology, refer to the IEEE 802.1Q standard. Configure Switching 234 User Manual - Netgear XS516TM | User Manual - Page 235
the right. 7. Select one of the following radio buttons to set the STP operation mode: • STP: "Classic" Spanning Tree Protocol (STP). Configure Switching 235 User Manual - Netgear XS516TM | User Manual - Page 236
to the designated root for the CST Root Port The port through which the designated root for the CST is accessed Configure Switching 236 User Manual - Netgear XS516TM | User Manual - Page 237
information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switching 237 User Manual - Netgear XS516TM | User Manual - Page 238
hops. 10. Click the Apply button. Your settings are saved. The following table describes the view-only fields on the page. Configure Switching 238 User Manual - Netgear XS516TM | User Manual - Page 239
Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Switching 239 User Manual - Netgear XS516TM | User Manual - Page 240
can become an edge port: • Disabled: The interface cannot become an edge port if it does not receive BPDUs for a period. Configure Switching 240 User Manual - Netgear XS516TM | User Manual - Page 241
is 0. 16. Click the Save button. Your settings are saved. The following table describes the view-only fields on the page. Configure Switching 241 User Manual - Netgear XS516TM | User Manual - Page 242
: The interface is currently in the forwarding mode. The interface can forward traffic and learn new MAC addresses • Manual forwarding: The interface is currently in the manual forwarding mode. The interface can forward traffic and learn new MAC addresses Port ID Hello Timer The port identifier - Netgear XS516TM | User Manual - Page 243
of the CST regional root. This identifier is created from the bridge priority and the base MAC address of the bridge. Configure Switching 243 User Manual - Netgear XS516TM | User Manual - Page 244
: The interface is currently in the forwarding mode. The interface can forward traffic and learn new MAC addresses. • Manual forwarding: The interface is currently in the manual forwarding mode. The interface can forward traffic and learn new MAC addresses Display the Rapid STP interface status You - Netgear XS516TM | User Manual - Page 245
is one of the following: Root, Designated, Alternate, Backup, Master, or Disabled. The spanning tree operation mode: STP, RSTP, or MSTP Configure Switching 245 User Manual - Netgear XS516TM | User Manual - Page 246
: The interface is currently in the forwarding mode. The interface can forward traffic and learn new MAC addresses. • Manual forwarding: The interface is currently in the manual forwarding mode. The interface can forward traffic and learn new MAC addresses Manage MST instances You can add, change - Netgear XS516TM | User Manual - Page 247
button. Your settings are saved and the MST is added. The following table describes the view-only fields on the page. Configure Switching 247 User Manual - Netgear XS516TM | User Manual - Page 248
password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Configure Switching 248 User Manual - Netgear XS516TM | User Manual - Page 249
information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Switching 249 User Manual - Netgear XS516TM | User Manual - Page 250
MST instance. For information about adding MST instances, see Add an MST instance and display the MST status on page 246. Configure Switching 250 User Manual - Netgear XS516TM | User Manual - Page 251
port identifier for the port in the MST instance, which is created by using the port priority and the interface number Configure Switching 251 User Manual - Netgear XS516TM | User Manual - Page 252
: The interface is currently in the forwarding mode. The interface can forward traffic and learn new MAC addresses. • Manual forwarding: The interface is currently in the manual forwarding mode. The interface can forward traffic and learn new MAC addresses. Port Role Designated Root Designated Cost - Netgear XS516TM | User Manual - Page 253
Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > STP > STP Statistics. Configure Switching 253 User Manual - Netgear XS516TM | User Manual - Page 254
Ethernet cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Switching 254 User Manual - Netgear XS516TM | User Manual - Page 255
to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Configure Switching 255 User Manual - Netgear XS516TM | User Manual - Page 256
Clear button. 8. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Configure Switching 256 User Manual - Netgear XS516TM | User Manual - Page 257
used • Management: The management MAC address Add a static MAC address to the MAC address table Static MAC address entries are the ones that you manually add to the MAC address table for a specific interface and VLAN. To add a static MAC address to the MAC address table: 1. Connect your computer - Netgear XS516TM | User Manual - Page 258
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Switching 258 User Manual - Netgear XS516TM | User Manual - Page 259
IP address to a MAC address on a VLAN. You can configure DAI VLANs, interfaces, and access control lists (ACLs) with associated rules. Configure Switching 259 User Manual - Netgear XS516TM | User Manual - Page 260
is the default setting. • The toggle is purple and positioned to the right: Source MAC addresses are validated for ARP packets. Configure Switching 260 User Manual - Netgear XS516TM | User Manual - Page 261
password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Configure Switching 261 User Manual - Netgear XS516TM | User Manual - Page 262
the Save button. Your settings are saved. Configure a DAI interface You can configure one or more dynamic ARP inspection (DAI) interfaces. Configure Switching 262 User Manual - Netgear XS516TM | User Manual - Page 263
, select the check box in the heading row. 8. Click the Edit button. The Edit DAI Interface Configuration pop-up window displays. Configure Switching 263 User Manual - Netgear XS516TM | User Manual - Page 264
access control list You can add a dynamic ARP inspection (DAI) access control list (ACL) to which you then can add rules. Configure Switching 264 User Manual - Netgear XS516TM | User Manual - Page 265
page 264), you can configure a rule for it. A DAI ACL rule consists of a binding between an IP address and a MAC address. Configure Switching 265 User Manual - Netgear XS516TM | User Manual - Page 266
. 10. In the Source MAC Address field, type the source MAC address that must be used as a match for the rule. Configure Switching 266 User Manual - Netgear XS516TM | User Manual - Page 267
Configuration. The DAI ACL/Rule Configuration page displays. 6. Click the name of the DAI ACL with which the rule is associated. Configure Switching 267 User Manual - Netgear XS516TM | User Manual - Page 268
the check box for the ACL name. 7. Click the Delete button. Your settings are saved and the DAI ACL is removed. Configure Switching 268 User Manual - Netgear XS516TM | User Manual - Page 269
The VLAN ID The number of ARP packets that were dropped by DAI because no matching DHCP snooping binding entry exists Configure Switching 269 User Manual - Netgear XS516TM | User Manual - Page 270
(127.0.0.0/8). Forwarded The number of valid ARP packets forwarded by DAI Dropped The number of invalid ARP packets dropped by DAI Configure Switching 270 User Manual - Netgear XS516TM | User Manual - Page 271
5 Configure Multicast This chapter covers the following topics: • Display the entries in the multicast forwarding database • Display the multicast forwarding database statistics • Internet Group Management Protocol snooping • IGMP snooping querier overview • Multicast Listener Discovery snooping • - Netgear XS516TM | User Manual - Page 272
. If the address exists, that entry is displayed. An exact match is required. 7. To refresh the page, click the Refresh button. Configure Multicast 272 User Manual - Netgear XS516TM | User Manual - Page 273
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Multicast 273 User Manual - Netgear XS516TM | User Manual - Page 274
segments. When a packet with a broadcast or multicast destination address is received, the switch forwards a copy into each of the remaining network Configure Multicast 274 User Manual - Netgear XS516TM | User Manual - Page 275
example in full-duplex links. Allowing switches to snoop IGMP packets is a creative solution to this problem. The switch uses the information in the IGMP packets as they are being forwarded throughout the network UI on page 31. 4. Click the Login button. Configure Multicast 275 User Manual - Netgear XS516TM | User Manual - Page 276
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Multicast 276 User Manual - Netgear XS516TM | User Manual - Page 277
statics and VLANs You can display the IGMP statistics and VLANs that are enabled for IGMP snooping and IGMP snooping querier. Configure Multicast 277 User Manual - Netgear XS516TM | User Manual - Page 278
control frames that are processed by the switch Interfaces Enabled for IGMP The interfaces on which IGMP snooping is enabled Snooping Configure Multicast 278 User Manual - Netgear XS516TM | User Manual - Page 279
button. The Dashboard page displays. 5. Select Switching > Multicast > IGMP Snooping > IGMP Snooping Interface Configuration. The IGMP Snooping Interface Configuration page displays. Configure Multicast 279 User Manual - Netgear XS516TM | User Manual - Page 280
snooping Fast Leave mode for the interface: • Disabled: Fast Leave mode is disabled for the interface. This is the default setting. Configure Multicast 280 User Manual - Netgear XS516TM | User Manual - Page 281
> IGMP Snooping > IGMP Snooping VLAN Configuration. The IGMP Snooping VLAN Configuration page displays. 6. Select the check box for the VLAN ID. Configure Multicast 281 User Manual - Netgear XS516TM | User Manual - Page 282
setting. • Enable: Fast Leave mode is enabled for the VLAN, allowing for automatic generation of fast-leave messages for the VLAN. Configure Multicast 282 User Manual - Netgear XS516TM | User Manual - Page 283
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Multicast 283 User Manual - Netgear XS516TM | User Manual - Page 284
configure a specific VLAN for a specific interface to forward snooped IGMP packets to the multicast router that is connected to the interface. Configure Multicast 284 User Manual - Netgear XS516TM | User Manual - Page 285
router option for the VLAN: • Disabled: The IGMP multicast router option is disabled for the VLAN. This is the default setting. Configure Multicast 285 User Manual - Netgear XS516TM | User Manual - Page 286
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Multicast 286 User Manual - Netgear XS516TM | User Manual - Page 287
saved. Add an IGMP snooping querier for a VLAN You can add an IGMP querier for use with a VLAN on the network. Configure Multicast 287 User Manual - Netgear XS516TM | User Manual - Page 288
which the lowest numbered IP address operates as the querier in that VLAN. The other querier moves to non-querier state. Configure Multicast 288 User Manual - Netgear XS516TM | User Manual - Page 289
displays. 6. Select the check box for the VLAN. 7. Click the Edit button. The Edit Querier VLAN Configuration pop-up window displays. Configure Multicast 289 User Manual - Netgear XS516TM | User Manual - Page 290
Querier > Querier VLAN Configuration. The Querier VLAN Configuration page displays. 6. Select the check box for the VLAN. 7. Click the Delete button. Configure Multicast 290 User Manual - Netgear XS516TM | User Manual - Page 291
page displays. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Configure Multicast 291 User Manual - Netgear XS516TM | User Manual - Page 292
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Multicast 292 User Manual - Netgear XS516TM | User Manual - Page 293
version 6 (ICMPv6), and MLD messages are a subset of ICMPv6 messages, identified in IPv6 packets by a preceding Next Header value of 58. Configure Multicast 293 User Manual - Netgear XS516TM | User Manual - Page 294
right: MLD snooping is enabled. 7. Click the Apply button. Your settings are saved. 8. To refresh the page, click the Refresh button. Configure Multicast 294 User Manual - Netgear XS516TM | User Manual - Page 295
password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Configure Multicast 295 User Manual - Netgear XS516TM | User Manual - Page 296
switch must wait after it sent a query on the interface because it did not receive a report from a group on that interface. Configure Multicast 296 User Manual - Netgear XS516TM | User Manual - Page 297
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > Multicast > MLD Snooping > MLD VLAN Configuration. Configure Multicast 297 User Manual - Netgear XS516TM | User Manual - Page 298
Ethernet cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Multicast 298 User Manual - Netgear XS516TM | User Manual - Page 299
Ethernet cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Multicast 299 User Manual - Netgear XS516TM | User Manual - Page 300
required in a complex network if you want to make sure that the multicast router always receives MLD packets from the switch. Configure Multicast 300 User Manual - Netgear XS516TM | User Manual - Page 301
, select the check box in the heading row. 8. Click the Edit button. The Edit Multicast Router Configuration pop-up window displays. Configure Multicast 301 User Manual - Netgear XS516TM | User Manual - Page 302
Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Multicast 302 User Manual - Netgear XS516TM | User Manual - Page 303
querier and configure the global settings You can enable the MLD snooping querier on the switch and configure the global settings. Configure Multicast 303 User Manual - Netgear XS516TM | User Manual - Page 304
source address in periodic MLD queries. This address is used when no address is configured on the VLAN on which queries are sent. The supported IPv6 formats are x:x:x:x:x:x:x:x and x::x. Note: The MLDP Version field always states MLD protocol version 1. This is the version that is used in periodic - Netgear XS516TM | User Manual - Page 305
information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Configure Multicast 305 User Manual - Netgear XS516TM | User Manual - Page 306
MLD protocol version of the querier The IPv6 address of the last querier from which a query was snooped on the VLAN Configure Multicast 306 User Manual - Netgear XS516TM | User Manual - Page 307
Snooping > Querier VLAN Configuration. The Querier VLAN Configuration page displays. 6. Select the check box for the VLAN. 7. Click the Edit button. Configure Multicast 307 User Manual - Netgear XS516TM | User Manual - Page 308
Snooping > Querier VLAN Configuration. The Querier VLAN Configuration page displays. 6. Select the check box for the VLAN. 7. Click the Delete button. Configure Multicast 308 User Manual - Netgear XS516TM | User Manual - Page 309
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Multicast 309 User Manual - Netgear XS516TM | User Manual - Page 310
are saved. The MVR Current Multicast Groups field is a view-only field that displays the number of the MVR groups allocated. Configure Multicast 310 User Manual - Netgear XS516TM | User Manual - Page 311
only one new MVR group. If you, for example, type 3, three MVR groups are created when you click the Save button. Configure Multicast 311 User Manual - Netgear XS516TM | User Manual - Page 312
for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > MVR > MVR Group Configuration. Configure Multicast 312 User Manual - Netgear XS516TM | User Manual - Page 313
31. 4. Click the Login button. The Dashboard page displays. 5. Select Switching > MVR > MVR Interface Configuration. The MVR Interface Configuration page displays. Configure Multicast 313 User Manual - Netgear XS516TM | User Manual - Page 314
receives a leave message. 11. Click the Save button. Your settings are saved. The Status field displays the status of the interface. Configure Multicast 314 User Manual - Netgear XS516TM | User Manual - Page 315
a member of the MVR group. A selected port displays blue in the Ports table. 8. Click the Apply button. Your settings are saved. Configure Multicast 315 User Manual - Netgear XS516TM | User Manual - Page 316
Definition The number of received IGMP queries The number of received IGMP V1 reports The number of received IGMP V2 reports Configure Multicast 316 User Manual - Netgear XS516TM | User Manual - Page 317
reports The number of transmitted IGMP leaves The number of IGMP packet receive failures The number of IGMP packet transmit failures Configure Multicast 317 User Manual - Netgear XS516TM | User Manual - Page 318
6 Manage Routing This chapter covers the following topics: • Routing concepts • IPv4 routing • IPv6 routing • Routing VLANs • Routing table, routes, and route preferences • Address Resolution Protocol 318 - Netgear XS516TM | User Manual - Page 319
Ethernet Smart Switch with 2 SFP+ Ports Routing concepts The switch supports IP routing. When a packet enters the switch, the switch table can include static entries that you added manually. The host table can include static entries that were manually added and entries that were dynamically added - Netgear XS516TM | User Manual - Page 320
. 7. Click the Apply button. Your settings are saved. The following table describes the view-only fields in the IP Configuration section. Manage Routing 320 User Manual - Netgear XS516TM | User Manual - Page 321
switch, if a TTL value is not supplied by the transport layer protocol The maximum number of hops supported by the switch Display the IPv4 routing statistics You can display the IPv4 routing statics for the switch. the view-only fields in the IP Statistics section. Manage Routing 321 User Manual - Netgear XS516TM | User Manual - Page 322
not include any datagrams counted in ipForwDatagrams. The number of output IP datagrams for which no problem was encountered to prevent their transmission to their destination, but that were discarded for reasons such while they are awaiting reassembly at this entity Manage Routing 322 User Manual - Netgear XS516TM | User Manual - Page 323
messages received The number of ICMP time exceeded messages received The number of ICMP parameter problem messages received The number of ICMP source quench messages received The number of ICMP redirect messages counter includes all those counted by icmpOutErrors. Manage Routing 323 User Manual - Netgear XS516TM | User Manual - Page 324
destination unreachable messages sent The number of ICMP time exceeded messages sent The number of ICMP parameter problem messages sent The number of ICMP source quench messages sent The number of ICMP redirect messages sent in the address field of your web browser. Manage Routing 324 User Manual - Netgear XS516TM | User Manual - Page 325
can configure IPv6 routing for an existing routing VLAN. For information about adding a routing VLAN, see Routing VLANs on page 346. Manage Routing 325 User Manual - Netgear XS516TM | User Manual - Page 326
disable DHCPv6 client mode for the VLAN: • Disable: DHCPv6 Client Mode is disabled for the VLAN. This is the default setting. Manage Routing 326 User Manual - Netgear XS516TM | User Manual - Page 327
IPv6 device is considered reachable after receipt of a neighbor discovery confirmation message. The range is from 0 to 3600000. The default is 0. Manage Routing 327 User Manual - Netgear XS516TM | User Manual - Page 328
setting. 22. Click the Save button. Your settings are saved. The following table describes the view-only fields on the page. Manage Routing 328 User Manual - Netgear XS516TM | User Manual - Page 329
Prefix Configuration page displays. 6. From the Interface menu, select the routing VLAN. The IPv6 prefix configurations for the routing VLAN display. Manage Routing 329 User Manual - Netgear XS516TM | User Manual - Page 330
the IPv6 address: • Active: The state is Active if routing is enabled and the duplicate address detection (DAD) process is successful. Manage Routing 330 User Manual - Netgear XS516TM | User Manual - Page 331
IPv6 prefix configuration. 8. Click the Edit button. The Edit IPv6 Prefix Configuration pop-up window displays. 9. Change the settings as needed. Manage Routing 331 User Manual - Netgear XS516TM | User Manual - Page 332
. The IPv6 prefix configurations for the VLAN display. 7. Select the check box for the IPv6 prefix configuration. 8. Click the Delete button. Manage Routing 332 User Manual - Netgear XS516TM | User Manual - Page 333
page displays. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage Routing 333 User Manual - Netgear XS516TM | User Manual - Page 334
datagram frame did not carry enough data The number of input IPv6 datagrams for which no problems were encountered to prevent their continued processing, but that were discarded for reasons such as lack that are also included in ipv6IfStatsOutForwDatagrams. Manage Routing 334 User Manual - Netgear XS516TM | User Manual - Page 335
Ip6InBcastOctets Ip6OutBcastOctets Description The number of output IPv6 datagrams for which no problems were encountered to prevent their continued processing, but that were discarded for number of broadcast bytes received The number of broadcast bytes transmitted Manage Routing 335 User Manual - Netgear XS516TM | User Manual - Page 336
This counter includes all those counted by icmpOutErrors. The number of ICMP messages not sent because of problems discovered within ICMP, such as a lack of buffers. This number does not include errors discovered outside ICMP Neighbor Advertisement messages received Manage Routing 336 User Manual - Netgear XS516TM | User Manual - Page 337
Packet Too Big messages sent The number of ICMP Time Exceeded messages sent The number of ICMP Parameter Problem messages sent The number of ICMP Echo (request) messages sent The number of ICMP Echo Reply messages sent The number of ICMPv6 Type 135 messages sent Manage Routing 337 User Manual - Netgear XS516TM | User Manual - Page 338
displays. 6. To search the table, from the Filter By menu, select one of the following methods to search for IPv6 neighbors: Manage Routing 338 User Manual - Netgear XS516TM | User Manual - Page 339
is a router. If the neighbor is a router, the field displays True. If the neighbor is not a router, the field displays False. Manage Routing 339 User Manual - Netgear XS516TM | User Manual - Page 340
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage Routing 340 User Manual - Netgear XS516TM | User Manual - Page 341
. The preference also controls if a static route is more preferred or less preferred than other static routes to the same destination. Manage Routing 341 User Manual - Netgear XS516TM | User Manual - Page 342
page displays. 6. Select the check box for the route. 7. Click the Edit button. The Edit Configure Routes pop-up window displays. Manage Routing 342 User Manual - Netgear XS516TM | User Manual - Page 343
page displays. 6. Select the check box for the route. 7. Click the Delete button. Your settings are saved. The route is removed. Manage Routing 343 User Manual - Netgear XS516TM | User Manual - Page 344
be displayed in the table: • All Routes: All active IPv6 routes. • Best Routes Only: The best active routes only, • Configured Routes Only: The manually configured routes only. 7. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage - Netgear XS516TM | User Manual - Page 345
. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Manage Routing 345 User Manual - Netgear XS516TM | User Manual - Page 346
the Apply button. Your settings are saved. Routing VLANs You can configure some interfaces to support VLANs and other interfaces to support routing. You can also configure the switch to allow traffic on a VLAN to be interface example configuration on page 626. Manage Routing 346 User Manual - Netgear XS516TM | User Manual - Page 347
. The Routing Wizard page displays. 6. In the VLAN ID field, type the VLAN ID that must be associated with the VLAN. Manage Routing 347 User Manual - Netgear XS516TM | User Manual - Page 348
button to assign the VLAN as the port VLAN ID (PVID) for all ports or LAGs. All ports or LAGs display a "P." Manage Routing 348 User Manual - Netgear XS516TM | User Manual - Page 349
and display routing VLAN information For an existing regular VLAN, that is, a VLAN that does not yet support routing, you can add an IPv4 routing address and associated subnet mask. In this way, the regular VLAN Add VLAN Routing Configuration pop-up window displays. Manage Routing 349 User Manual - Netgear XS516TM | User Manual - Page 350
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage Routing 350 User Manual - Netgear XS516TM | User Manual - Page 351
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage Routing 351 User Manual - Netgear XS516TM | User Manual - Page 352
from multiple sources and list all routes: static routes, local routes, dynamically added routes, and so on. Static routes are routes that you manually add. The routing table can learn multiple routes to the same destination from multiple sources, for example dynamically added routes through routing - Netgear XS516TM | User Manual - Page 353
are sent from the VLAN. The period must be in the range from 4 to 1800 seconds. The default is 600 seconds. Manage Routing 353 User Manual - Netgear XS516TM | User Manual - Page 354
Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Manage Routing 354 User Manual - Netgear XS516TM | User Manual - Page 355
be up to 31 characters in length. 12. Click the Save button. Your settings are saved and the route is added. Manage Routing 355 User Manual - Netgear XS516TM | User Manual - Page 356
Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Display the routes You can display the routing table with the manually added static and default routes and the locally learned routes. To display the routes: 1. Connect your computer to the same network as the switch - Netgear XS516TM | User Manual - Page 357
password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Manage Routing 357 User Manual - Netgear XS516TM | User Manual - Page 358
password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Manage Routing 358 User Manual - Netgear XS516TM | User Manual - Page 359
is used to translate an IP address to a media (MAC) address, defined by a LAN such as an Ethernet LAN. The switch support both a dynamic and manual ARP configuration. With manual ARP configuration, you can statically add entries into the ARP table. A device that sends IP packets must learn the MAC - Netgear XS516TM | User Manual - Page 360
following table describes the view-only fields in the Management VLAN ARP Change section and the Routing VLANs ARP Cache section. Manage Routing 360 User Manual - Netgear XS516TM | User Manual - Page 361
A dynamic ARP entry for which the IP address is that of a router • Static: An ARP entry that was manually added • Dynamic: An ARP entry that was learned by the switch Age The time in seconds since the entry was the switch in the address field of your web browser. Manage Routing 361 User Manual - Netgear XS516TM | User Manual - Page 362
on page 360. Change a static entry in the ARP table You can change an existing static entry in the ARP table. Manage Routing 362 User Manual - Netgear XS516TM | User Manual - Page 363
Save button. Your settings are saved. Delete a static ARP entry You can delete a static ARP entry that you no longer need. Manage Routing 363 User Manual - Netgear XS516TM | User Manual - Page 364
removed from the ARP table. Configure the global ARP table settings You can change the global settings for the ARP table. Manage Routing 364 User Manual - Netgear XS516TM | User Manual - Page 365
0 to 10. The default is 4. 9. In the Cache Size field, type the maximum number of entries allowed in the ARP table. Manage Routing 365 User Manual - Netgear XS516TM | User Manual - Page 366
information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Manage Routing 366 User Manual - Netgear XS516TM | User Manual - Page 367
IP address of the specific static entry in the Remove IP Address field. 7. Click the Apply button. Your settings are saved. Manage Routing 367 User Manual - Netgear XS516TM | User Manual - Page 368
7 Configure Quality of Service This chapter covers the following topics: • Quality of Service concepts • Class of Service • Differentiated Services 368 - Netgear XS516TM | User Manual - Page 369
minimum guaranteed bandwidth or transmission rate shaping. The switch supports eight queues per port. CoS configuration concepts You can set the Class of Service trust mode for an interface. Each port on the class by the current 802.1p mapping table. Configure Quality of Service 369 User Manual - Netgear XS516TM | User Manual - Page 370
page displays. 6. From the Global Trust Mode menu, select the trust mode: • Untrusted: Do not trust any CoS packet marking at ingress. Configure Quality of Service 370 User Manual - Netgear XS516TM | User Manual - Page 371
1p. • DSCP: The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 7. Click the Apply button. Your settings are saved. Configure > QoS Configuration. The QoS Queue Configuration page displays. Configure Quality of Service 371 User Manual - Netgear XS516TM | User Manual - Page 372
802.1p. • DSCP: The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. 10. In the Interface Shaping Rate field, specify the maximum outbound used by the queue, the queue depth during times Configure Quality of Service 372 User Manual - Netgear XS516TM | User Manual - Page 373
page 374. 7. From the Filter By menu, select to display ports only (Ports), LAGs only (LAG), or both ports and LAGs (All). Configure Quality of Service 373 User Manual - Netgear XS516TM | User Manual - Page 374
that is used for the queue on the interface: • Strict: For the selected queue, the interface services traffic with the highest priority on a queue first. • Weighted: For the selected queue, the interface time-sensitive traffic, such as voice or video. Configure Quality of Service 374 User Manual - Netgear XS516TM | User Manual - Page 375
box for a queue. The 802.1p Priority row contains check boxes for each of the eight 802.1p priorities to be mapped. Configure Quality of Service 375 User Manual - Netgear XS516TM | User Manual - Page 376
steps. Map DSCP values to queues The six most significant bits of the DiffServ field are called the Differentiated Services Code Point (DSCP) bits. The DSCP values go from 1 to 63. You can map each DSCP information, see Register the switch on page 33. Configure Quality of Service 376 User Manual - Netgear XS516TM | User Manual - Page 377
. 10. To select and save a queue value for another DSCP value, repeat the previous four steps. Differentiated Services The QoS feature contains Differentiated Services (DiffServ) support that allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per - Netgear XS516TM | User Manual - Page 378
Smart Switch with 2 SFP+ Ports Standard IP-based networks provide best-effort data delivery service. Best-effort service implies that the network delivers the data in a timely fashion, although there is no of the main DiffServ private MIB tables. Configure Quality of Service 378 User Manual - Netgear XS516TM | User Manual - Page 379
DiffServ: • The toggle is gray and positioned to the left: Differentiated services are disabled. This is the default setting. An existing DiffServ configuration • The toggle is purple and positioned to the right: Differentiated services are enabled. 7. Click the Apply button. Your settings are saved - Netgear XS516TM | User Manual - Page 380
the policy class instances) out of the total allowed on the switch Service Table The number of configured services (attached to the policies on specific interfaces) out of the total allowed the following passwords: • Enter your device admin password. Configure Quality of Service 380 User Manual - Netgear XS516TM | User Manual - Page 381
defined in the reference class function as match criteria in addition to the match criteria that you define for the selected class. Configure Quality of Service 381 User Manual - Netgear XS516TM | User Manual - Page 382
. A class can reference only one other class of the same type. • Class of Service: Requires the Class of Service (CoS) value in an Ethernet frame header to match the specified CoS value. From the below the Class Configuration menu. To define an Configure Quality of Service 382 User Manual - Netgear XS516TM | User Manual - Page 383
service type Service (ToS) bits in the IP header to match the value that you type in the Bit Value and Bit Type fields: - Bit Value: Type a two-digit hexadecimal number octet value in the range from 00 to ff to match the bits in a packet's ToS field. Configure Quality of Service 383 User Manual - Netgear XS516TM | User Manual - Page 384
ToS field in a packet. The IP ToS field in a packet is defined as all 8 bits of the service type octet in the IP header. 11. To add more criteria to the DiffServ class, repeat the previous step. network password for the last Insight network location. Configure Quality of Service 384 User Manual - Netgear XS516TM | User Manual - Page 385
last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Quality of Service 385 User Manual - Netgear XS516TM | User Manual - Page 386
and the class is removed. Configure an IPv6 DiffServ class The switch supports DiffServ functionality for IPv6 by providing support for IPv6 packet classification. An IPv6 DiffServ class serves the same purpose , see Register the switch on page 33. Configure Quality of Service 386 User Manual - Netgear XS516TM | User Manual - Page 387
packets to belong to the class. In the field below the Class Configuration menu, the automatic selection for this option is Any. Configure Quality of Service 387 User Manual - Netgear XS516TM | User Manual - Page 388
the field to the right, type an IP DSCP value from 0 to 63. The DSCP value is defined as the high-order 6 bits of the service type octet in the IP header. 11. To add more criteria to the IPv6 DiffServ class, repeat the previous step. You can add multiple criteria - Netgear XS516TM | User Manual - Page 389
Class Configuration page displays. 6. Click the class name, which is a hyperlink. The page on which you can change the class configuration displays. Configure Quality of Service 389 User Manual - Netgear XS516TM | User Manual - Page 390
displays. 6. Select the check box for the class name. 7. Click the Delete button. Your settings are saved and the class is removed. Configure Quality of Service 390 User Manual - Netgear XS516TM | User Manual - Page 391
name. The class name can be 1 to 31 alphanumeric characters in length. The name can be a number, a text, or a combination of both. Configure Quality of Service 391 User Manual - Netgear XS516TM | User Manual - Page 392
the menu below the Policy Attribute menu, select an IP DSCP keyword code. The DSCP value is defined as the high-order 6 bits of the Service Type octet in the IP header. Configure Quality of Service 392 User Manual - Netgear XS516TM | User Manual - Page 393
, and an action for packets that violate the policy. The switch does not support a color-aware policy. - A simple policy supports a single data rate and results in an action for packets that conform to the the Apply button. Your settings are saved. Configure Quality of Service 393 User Manual - Netgear XS516TM | User Manual - Page 394
Policy Configuration page displays. 6. Click the policy name, which is a hyperlink. The page on which you can change the policy attributes displays. Configure Quality of Service 394 User Manual - Netgear XS516TM | User Manual - Page 395
. The Dashboard page displays. 5. Select QoS > DiffServ > Policy Configuration. The Policy Configuration page displays. 6. Select the check box for the policy name. Configure Quality of Service 395 User Manual - Netgear XS516TM | User Manual - Page 396
, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select QoS > DiffServ > Service Configuration. The Service Configuration page displays. 6. From the Filter By menu, select to display ports only (Ports), LAGs only (LAG), or both ports and LAGs - Netgear XS516TM | User Manual - Page 397
the same settings, select the check box in the heading row. 8. Click the Edit button. The Edit Service Interface Configuration pop-up window displays. 9. From the Policy In Name menu, select the name of a policy in the address field of your web browser. Configure Quality of Service 397 User Manual - Netgear XS516TM | User Manual - Page 398
displays. 5. Select QoS > DiffServ > Service Configuration. The Service Configuration page displays. 6. From the Filter Go button. 8. Click the Edit button. The Edit Service Interface Configuration pop-up window displays. 9. From the service statistics You can display service information about the interfaces - Netgear XS516TM | User Manual - Page 399
. 4. Click the Login button. The Dashboard page displays. 5. Select QoS > DiffServ > Service Statistics. The Service Statistics page displays. 6. To refresh the page, click the Refresh button. The following table with the same policy name) is displayed. Configure Quality of Service 399 User Manual - Netgear XS516TM | User Manual - Page 400
16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Table 72. DiffServ Service Statistics information (Continued) Field Operational Status Description The operational status of the DiffServ policy by the policy and that were discarded Configure Quality of Service 400 User Manual - Netgear XS516TM | User Manual - Page 401
servers • TACACS+ servers • Authentication lists • Management access profiles and rules • Port authentication • MAC filters for traffic control • Storm control • Port security • Loop protection • Denial of service 401 - Netgear XS516TM | User Manual - Page 402
. Your settings are saved. The next time that you log in to the switch, you must use the new password. Manage Switch Security 402 User Manual - Netgear XS516TM | User Manual - Page 403
cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Manage Switch Security 403 User Manual - Netgear XS516TM | User Manual - Page 404
) server. 9. Click the Apply button. Your settings are saved. The following table describes the view-only fields on the page. Manage Switch Security 404 User Manual - Netgear XS516TM | User Manual - Page 405
about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Manage Switch Security 405 User Manual - Netgear XS516TM | User Manual - Page 406
, it is discarded. 14. Click the Save button. Your settings are saved and the server is added to the switch. Manage Switch Security 406 User Manual - Netgear XS516TM | User Manual - Page 407
change a secondary server to a primary server, the previous primary server is automatically changed to a secondary server. 9. Click the Save button. Manage Switch Security 407 User Manual - Netgear XS516TM | User Manual - Page 408
authentication server statistics You can display the traffic statistics for the RADIUS authentication servers that you configure on the switch. Manage Switch Security 408 User Manual - Netgear XS516TM | User Manual - Page 409
to the server. This number does not include retransmissions. The number of RADIUS access-request packets retransmitted to the server Manage Switch Security 409 User Manual - Netgear XS516TM | User Manual - Page 410
Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Manage Switch Security 410 User Manual - Netgear XS516TM | User Manual - Page 411
RADIUS server. This is the default setting. • Enable: Accounting is enabled for the RADIUS server. 12. Click the Apply button. Manage Switch Security 411 User Manual - Netgear XS516TM | User Manual - Page 412
button. 7. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage Switch Security 412 User Manual - Netgear XS516TM | User Manual - Page 413
retaining consistency with RADIUS and other authentication processes. TACACS+ provides the following services: • Authentication: Provides authentication during login and through user names and user- protocol exchanges between the device and TACACS+ server. Manage Switch Security 413 User Manual - Netgear XS516TM | User Manual - Page 414
. The key can be from 1 to 30 seconds. The default is 5 seconds. 8. Click the Apply button. Your settings are saved. Manage Switch Security 414 User Manual - Netgear XS516TM | User Manual - Page 415
+ servers are contacted when attempting to authenticate a user. A value of 0 is the highest priority. The range is from 0 to 65535. Manage Switch Security 415 User Manual - Netgear XS516TM | User Manual - Page 416
for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Manage Switch Security 416 User Manual - Netgear XS516TM | User Manual - Page 417
for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Manage Switch Security 417 User Manual - Netgear XS516TM | User Manual - Page 418
more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Manage Switch Security 418 User Manual - Netgear XS516TM | User Manual - Page 419
time out, or you select None, the next method is not tried. 9. Click the Save button. Your settings are saved. Manage Switch Security 419 User Manual - Netgear XS516TM | User Manual - Page 420
Dot1x list, select the dotxList check box. The menu options become available. 8. Select the authentication method that must be used: Manage Switch Security 420 User Manual - Netgear XS516TM | User Manual - Page 421
more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Manage Switch Security 421 User Manual - Netgear XS516TM | User Manual - Page 422
profile. If you access the switch from a computer, make sure that you add a permit rule for the type of service that you use (for example, HTTPS), your computer's IP address, and your computer's subnet mask. CAUTION: You Device Admin Password page displays. Manage Switch Security 422 User Manual - Netgear XS516TM | User Manual - Page 423
that matches the rule criteria. • Deny: Denies access to a device that matches the rule criteria. 8. From the Service Type menu, select the access method or protocol to which the rule applies: TFTP, HTTP, Secure HTTP (SSL), or and the second rule is ignored. Manage Switch Security 423 User Manual - Netgear XS516TM | User Manual - Page 424
, you must reset the switch to factory default settings (see Reset the switch to factory default settings on page 563). Manage Switch Security 424 User Manual - Netgear XS516TM | User Manual - Page 425
packets. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage Switch Security 425 User Manual - Netgear XS516TM | User Manual - Page 426
Mask Priority Description The action performed when the rules match The service type selected. The policy is restricted by the selected service type. The source IP address of the client originating the displays. 5. Select Security > Protocol Access Control. Manage Switch Security 426 User Manual - Netgear XS516TM | User Manual - Page 427
for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Security > Protocol Access Control. Manage Switch Security 427 User Manual - Netgear XS516TM | User Manual - Page 428
Control page displays. 6. In the Access Rule Configuration section, select the check box for the rule. 7. Click the Delete button. Manage Switch Security 428 User Manual - Netgear XS516TM | User Manual - Page 429
. 6. Click the Remove Profile button. A confirmation pop-up window displays. 7. Click the Yes, Remove button. The access profile is removed. Manage Switch Security 429 User Manual - Netgear XS516TM | User Manual - Page 430
the authentication on behalf of the authenticator, and indicates if the supplicant is authorized to access system services. Note: For more information about 802.1X and a configuration example, see 802.1X port list (see Authentication lists on page 418). Manage Switch Security 430 User Manual - Netgear XS516TM | User Manual - Page 431
toggle is gray and positioned to the left: A port is not assigned to a particular VLAN. This is the default setting. Manage Switch Security 431 User Manual - Netgear XS516TM | User Manual - Page 432
.1X authentication settings for a port You can configure 802.1X authentication settings for a port. These control access to the port. Manage Switch Security 432 User Manual - Netgear XS516TM | User Manual - Page 433
, select the check box in the heading row. 8. Click the Edit button. The Edit Port Authentication pop-up window displays. Manage Switch Security 433 User Manual - Netgear XS516TM | User Manual - Page 434
the default setting. • Enable: MAB is enabled. If a client device does not support 802.1x, it can still be authenticated. 11. From the MAB Auth Type in the guest VLAN, which allows the port to provide a distinguished service to unauthenticated client devices. Enter an ID in the range from 2 Manual - Netgear XS516TM | User Manual - Page 435
the range from 0 to 65535 seconds. The default is 30 seconds. 22. Click the Save button. Your settings are saved. Manage Switch Security 435 User Manual - Netgear XS516TM | User Manual - Page 436
your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage Switch Security 436 User Manual - Netgear XS516TM | User Manual - Page 437
which port access is determined by the outcome of the authentication exchanges between the supplicant, authenticator, and the authentication server. Manage Switch Security 437 User Manual - Netgear XS516TM | User Manual - Page 438
. • To configure all interfaces with the same settings, select the check box in the heading row. 8. Click the Reauthenticate button. Manage Switch Security 438 User Manual - Netgear XS516TM | User Manual - Page 439
displays. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage Switch Security 439 User Manual - Netgear XS516TM | User Manual - Page 440
devices (supplicants) that are connected to switch authenticator ports. Information is displayed only if active 802.1X sessions are present. Manage Switch Security 440 User Manual - Netgear XS516TM | User Manual - Page 441
ID assigned by the authenticator to the supplicant VLAN ID The VLAN ID assigned by the authenticator to the supplicant Manage Switch Security 441 User Manual - Netgear XS516TM | User Manual - Page 442
cable. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Manage Switch Security 442 User Manual - Netgear XS516TM | User Manual - Page 443
section, in the Port and LAG tables, select the ports and LAGs that must be included in the outbound filter. Manage Switch Security 443 User Manual - Netgear XS516TM | User Manual - Page 444
Security > Traffic Control > MAC Filter. The MAC Filter page displays. The following steps refer to the MAC Filter Configuration section. Manage Switch Security 444 User Manual - Netgear XS516TM | User Manual - Page 445
section. 6. To refresh the page, click the Refresh button. The following table describes the view-only fields on the page. Manage Switch Security 445 User Manual - Netgear XS516TM | User Manual - Page 446
your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Manage Switch Security 446 User Manual - Netgear XS516TM | User Manual - Page 447
also disabled. 8. In the Threshold field, type the percentage of the available bandwidth above which a storm control event is triggered. Manage Switch Security 447 User Manual - Netgear XS516TM | User Manual - Page 448
for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Manage Switch Security 448 User Manual - Netgear XS516TM | User Manual - Page 449
port, if any, if a storm control event is triggered: • None: No further action is taken. This is the default setting. Manage Switch Security 449 User Manual - Netgear XS516TM | User Manual - Page 450
more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Manage Switch Security 450 User Manual - Netgear XS516TM | User Manual - Page 451
addresses that are allowed on a port (see Display learned MAC addresses and convert them to static addresses on page 453). Manage Switch Security 451 User Manual - Netgear XS516TM | User Manual - Page 452
associated with each interface. • To configure all interfaces with the same settings, select the check box in the heading row. Manage Switch Security 452 User Manual - Netgear XS516TM | User Manual - Page 453
interfaces (see Configure a port security interface on page 451), you can convert a dynamically learned MAC address to a statically locked address. Manage Switch Security 453 User Manual - Netgear XS516TM | User Manual - Page 454
to the MAC address The MAC addresses learned on port or LAG 7. To refresh the page, click the Refresh button. Manage Switch Security 454 User Manual - Netgear XS516TM | User Manual - Page 455
about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Manage Switch Security 455 User Manual - Netgear XS516TM | User Manual - Page 456
violation Loop protection Loops inside a network are costly because they consume resources and reduce the performance of the network. Detecting loops manually can be cumbersome. The switch can automatically identify loops in the network. You can enable loop protection per port or globally. If - Netgear XS516TM | User Manual - Page 457
Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Manage Switch Security 457 User Manual - Netgear XS516TM | User Manual - Page 458
, which means that a port is not disabled if a loop is detected. 10. Click the Apply button. Your settings are saved. Manage Switch Security 458 User Manual - Netgear XS516TM | User Manual - Page 459
with the interface, or type the interface number (for example, xg5) in the Search field and click the Go button. Manage Switch Security 459 User Manual - Netgear XS516TM | User Manual - Page 460
is detected on the port The number of packets that were received on the port after the loop was detected Manage Switch Security 460 User Manual - Netgear XS516TM | User Manual - Page 461
types of DoS attacks Configure Auto-DoS You can automatically enable all denial of service (DoS) features that are supported on the switch, except for the TCP port and UDP port DoS features, which you must enable manually. If the switch detects an attack, it shuts down the affected port and logs - Netgear XS516TM | User Manual - Page 462
options You can select which types of denial of service (DoS) attacks the switch monitors and blocks. If the switch detects an attack, it shuts down the affected port and logs a warning message. After you have assessed the risk, you can then manually re-enable the port. To configure individual DoS - Netgear XS516TM | User Manual - Page 463
Service. The Denial of Service page displays. The following steps refer to the Denial of Service Configuration section. 6. In the Denial of Service Service Max ICMPv6 Packet Size field, type the maximum ICMPv6 packet size allowed. If you click the Denial of Service of Service Configuration Service - Netgear XS516TM | User Manual - Page 464
Service of Service First Service ICMP Fragment: Enabling Service SMAC • Denial of Service TCP FIN&URG of Service TCP Flag Denial of Service TCP Fragment Service TCP Offset: Enabling Service TCP SYN: Enabling TCP SYN DoS prevention causes the switch to drop packets with the TCP flag SYN set. • Denial of Service Service - Netgear XS516TM | User Manual - Page 465
9 Configure Access Control Lists This chapter covers the following topics: • About access control lists • ACL Wizard • MAC ACLs • MAC ACL rules • MAC ACL bindings • IPv4 ACLs • Standard IPv4 ACL rules • Extended IPv4 ACL rules • IPv6 ACLs • IPv6 ACL rules • IP ACL bindings • Display the existing - Netgear XS516TM | User Manual - Page 466
traffic are forwarded or blocked, and provide security for the network. The switch supports a total of 100 ACLs, which can be a combination of MAC ACLs, Layer 4 port. If you need ACLs with more complex rules, create them manually. Use the ACL Wizard to create a simple ACL The ACL Wizard can help - Netgear XS516TM | User Manual - Page 467
length. • ACL Based on Source IPv6: Creates an ACL based on the source IPv6 prefix and IPv6 prefix length. Configure Access Control Lists 467 User Manual - Netgear XS516TM | User Manual - Page 468
window depend on the selected ACL type. For information about the possible match criteria fields, see the following table. Configure Access Control Lists 468 User Manual - Netgear XS516TM | User Manual - Page 469
IPv6 prefix length. Destination IPv4 L4 Port • Destination L4 port (Protocol): Select the destination IPv4 L4 port protocol, or select Other and manually set the destination IPv4 L4 port value. • Destination L4 port (Value): If you select Other, type the destination IPv4 L4 port value. Source - Netgear XS516TM | User Manual - Page 470
port (Protocol): Select the source IPv4 L4 port protocol, or select Other and manually set the source IPv4 L4 port value. • Source L4 port (Value): If (Protocol): Select the source IPv6 L4 port protocol, or select Other and manually set the source IPv6 L4 port value. • Source L4 port (Value): If - Netgear XS516TM | User Manual - Page 471
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Access Control Lists 471 User Manual - Netgear XS516TM | User Manual - Page 472
Direction menu is always Inbound. You cannot change this selection. An ACL is always applied to incoming traffic only. Configure Access Control Lists 472 User Manual - Netgear XS516TM | User Manual - Page 473
31. 4. Click the Login button. The Dashboard page displays. 5. Select Security > ACL > ACL Wizard. The ACL Wizard page displays. Configure Access Control Lists 473 User Manual - Netgear XS516TM | User Manual - Page 474
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Access Control Lists 474 User Manual - Netgear XS516TM | User Manual - Page 475
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Access Control Lists 475 User Manual - Netgear XS516TM | User Manual - Page 476
Save button. Your settings are saved. Remove a MAC ACL You can remove a MAC ACL that you no longer need. Configure Access Control Lists 476 User Manual - Netgear XS516TM | User Manual - Page 477
ACLs. The access list definition includes rules that specify whether traffic matching the criteria is forwarded normally or discarded. Configure Access Control Lists 477 User Manual - Netgear XS516TM | User Manual - Page 478
ACLs that can be configured. 6. Click the Add New button. The Add MAC ACL/Rule pop-up window displays. Configure Access Control Lists 478 User Manual - Netgear XS516TM | User Manual - Page 479
:xx:xx. The BPDU keyword can be specified using a destination MAC address of 01:80:C2:xx:xx:xx. Configure Access Control Lists 479 User Manual - Netgear XS516TM | User Manual - Page 480
against the information in an Ethernet frame: • Appletalk Protocol • Address Resolution Protocol • IBM SNA Service over Ethernet • Internet Protocol version 4 • Internet Protocol version 6 • Novell IPX • MPLS multicast is disabled for this ACL rule. Configure Access Control Lists 480 User Manual - Netgear XS516TM | User Manual - Page 481
button. The Dashboard page displays. 5. Select Security > ACL > MAC ACL > MAC ACL/Rules. The MAC ACL/Rules page displays. Configure Access Control Lists 481 User Manual - Netgear XS516TM | User Manual - Page 482
information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Configure Access Control Lists 482 User Manual - Netgear XS516TM | User Manual - Page 483
. 2. Launch a web browser and enter the IP address of the switch in the address field of your web browser. Configure Access Control Lists 483 User Manual - Netgear XS516TM | User Manual - Page 484
or LAG displays blue. An excluded port or LAG displays blank. 9. Click the Apply button. Your settings are saved. Configure Access Control Lists 484 User Manual - Netgear XS516TM | User Manual - Page 485
. The binding is removed. The following table describes the information that is displayed in the MAC ACL Binding Table. Configure Access Control Lists 485 User Manual - Netgear XS516TM | User Manual - Page 486
rules are not checked for a match. You must associate the IPv4 ACL with one or more interfaces. The switch supports standard and extended IPv4 ACLs: • Standard IPv4 ACL: Lets the switch permit or deny traffic from a source ACL bindings on page 519). Configure Access Control Lists 486 User Manual - Netgear XS516TM | User Manual - Page 487
ACLs that can be configured. 6. Click the Add New button. The Add IP ACL/Rule pop-up window displays. Configure Access Control Lists 487 User Manual - Netgear XS516TM | User Manual - Page 488
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. Configure Access Control Lists 488 User Manual - Netgear XS516TM | User Manual - Page 489
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Access Control Lists 489 User Manual - Netgear XS516TM | User Manual - Page 490
. You can also add a standard IPv4 ACL and a rule together, as one task. The following procedure describes both options. Configure Access Control Lists 490 User Manual - Netgear XS516TM | User Manual - Page 491
selected by default. 9. Click the Add button. The window closes, and the Standard ACL Rule Configuration (1-99) section displays. Configure Access Control Lists 491 User Manual - Netgear XS516TM | User Manual - Page 492
ACL rule: • True: Each packet must match the ACL rule. You cannot configure the source IP address and mask. Configure Access Control Lists 492 User Manual - Netgear XS516TM | User Manual - Page 493
criteria for a standard IPv4 ACL rule You can change the match criteria for an existing standard IPv4 ACL rule. Configure Access Control Lists 493 User Manual - Netgear XS516TM | User Manual - Page 494
Edit button. The page adjusts and displays the Standard ACL Rule Configuration (1-99) section. 9. Change the settings as needed. Configure Access Control Lists 494 User Manual - Netgear XS516TM | User Manual - Page 495
, and MAC ACLs that are configured on the switch and the maximum number of ACLs that can be configured. Configure Access Control Lists 495 User Manual - Netgear XS516TM | User Manual - Page 496
warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configure Access Control Lists 496 User Manual - Netgear XS516TM | User Manual - Page 497
in the range from 1 to 2147483647 to identify the rule. An IP ACL can contain up to 50 rules. Configure Access Control Lists 497 User Manual - Netgear XS516TM | User Manual - Page 498
ACL rule. You cannot configure other match criteria on the page. If you select True, go to Step 26. Configure Access Control Lists 498 User Manual - Netgear XS516TM | User Manual - Page 499
. The matching condition is always Equal (see the middle field). The source port is compared to a packet's source port. Configure Access Control Lists 499 User Manual - Netgear XS516TM | User Manual - Page 500
. The matching condition is always Equal (see the middle field). The destination port is compared to a packet's destination port. Configure Access Control Lists 500 User Manual - Netgear XS516TM | User Manual - Page 501
allowed. This is the default setting. • The toggle is purple and positioned to the right: Initial fragments are allowed. Configure Access Control Lists 501 User Manual - Netgear XS516TM | User Manual - Page 502
IP DSCP: The IP DiffServ Code Point (DSCP) field in a packet is defined as the high-order 6 bits of the service type octet in the IP header. Select a keyword from the IP DSCP menu. If you select Other, type a number from extended IPv4 ACL rule. Configure Access Control Lists 502 User Manual - Netgear XS516TM | User Manual - Page 503
button. The page adjusts and displays the Extended ACL Rule Configuration (100-199) section. 9. Change the settings as needed. Configure Access Control Lists 503 User Manual - Netgear XS516TM | User Manual - Page 504
, and MAC ACLs that are configured on the switch and the maximum number of ACLs that can be configured. Configure Access Control Lists 504 User Manual - Netgear XS516TM | User Manual - Page 505
an IPv6 ACL and a rule together, as one task (see Add a rule for an IPv6 ACL on page 509). Configure Access Control Lists 505 User Manual - Netgear XS516TM | User Manual - Page 506
. You can now add a rule for the IPv6 ACL (see Add a rule for an IPv6 ACL on page 509). Configure Access Control Lists 506 User Manual - Netgear XS516TM | User Manual - Page 507
-up window displays. 8. In the ACL Name field, type a new name. 9. Click the Save button. Your settings are saved. Configure Access Control Lists 507 User Manual - Netgear XS516TM | User Manual - Page 508
box for the IPv6 ACL. 7. Click the Delete button. Your settings are saved and the IPv6 ACL is removed. Configure Access Control Lists 508 User Manual - Netgear XS516TM | User Manual - Page 509
button. The Dashboard page displays. 5. Select Security > ACL > IP ACL > IPv6 ACL/Rules. The IPv6 ACL/Rules page displays. Configure Access Control Lists 509 User Manual - Netgear XS516TM | User Manual - Page 510
. (Optionally) If you select the Permit Action radio button, select a hardware egress queue ID from the Egress Queue menu. Configure Access Control Lists 510 User Manual - Netgear XS516TM | User Manual - Page 511
the Prefix Length field, type a prefix length, type a relevant wildcard mask, or leave the field empty, which means any. Configure Access Control Lists 511 User Manual - Netgear XS516TM | User Manual - Page 512
the Prefix Length field, type a prefix length, type a relevant wildcard mask, or leave the field empty, which means any. Configure Access Control Lists 512 User Manual - Netgear XS516TM | User Manual - Page 513
a range of codes, type a code in the left field and another code in the Code field (the right field). Configure Access Control Lists 513 User Manual - Netgear XS516TM | User Manual - Page 514
IPv6 DSCP Service menu to service type octet in the IPv6 header. The IPv6 DSCP is compared to packet's IPv6 DSCP field. 25. Click one of the following buttons: • Save: To save your settings, click the Save button. The rule is added to the IPv6 ACL. Configure Access Control Lists 514 User Manual - Netgear XS516TM | User Manual - Page 515
, and MAC ACLs that are configured on the switch and the maximum number of ACLs that can be configured. Configure Access Control Lists 515 User Manual - Netgear XS516TM | User Manual - Page 516
through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Configure Access Control Lists 516 User Manual - Netgear XS516TM | User Manual - Page 517
an IPv4 ACL and an IPv6 ACL to an interface. Either bind an IPv4 ACL or an IPv6 ACL. Configure Access Control Lists 517 User Manual - Netgear XS516TM | User Manual - Page 518
Ports table, LAG table, or both, click the ports and LAGs to which the IP ACL must be bound. Configure Access Control Lists 518 User Manual - Netgear XS516TM | User Manual - Page 519
binding, do the following: a. Select the check box for the interface. b. Click the Delete button. The binding is removed. Configure Access Control Lists 519 User Manual - Netgear XS516TM | User Manual - Page 520
through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Configure Access Control Lists 520 User Manual - Netgear XS516TM | User Manual - Page 521
a MAC ACL on page 482 IPv4 ACLs Change the number or name of an IPv4 ACL on page 488 Configure Access Control Lists 521 User Manual - Netgear XS516TM | User Manual - Page 522
the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Configure Access Control Lists 522 User Manual - Netgear XS516TM | User Manual - Page 523
delete VLAN ACL bindings You can display or delete the VLAN ACL bindings in the VLAN Binding Configuration table. Configure Access Control Lists 523 User Manual - Netgear XS516TM | User Manual - Page 524
. The binding is removed. The following table describes the information that is displayed in the VLAN Binding Configuration table. Configure Access Control Lists 524 User Manual - Netgear XS516TM | User Manual - Page 525
other ACLs bound to the VLAN ACL Type The type of ACL ACL ID The ACL number or name Configure Access Control Lists 525 User Manual - Netgear XS516TM | User Manual - Page 526
10 Monitor the Switch and Network This chapter covers the following topics: • Switch, port, and EAP packet statistics • Perform a cable test • Logs • Port mirroring • Display the system CPU memory status and CPU utilization 526 - Netgear XS516TM | User Manual - Page 527
. 6. To refresh the page, click the Refresh button. The following table describes the switch statistics on the page. Monitor the Switch and Network 527 User Manual - Netgear XS516TM | User Manual - Page 528
being delivered to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space. Monitor the Switch and Network 528 User Manual - Netgear XS516TM | User Manual - Page 529
, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Monitor the Switch and Network 529 User Manual - Netgear XS516TM | User Manual - Page 530
packets. Packets Transmitted Without Errors The number of frames that were transmitted by this port to its segment Monitor the Switch and Network 530 User Manual - Netgear XS516TM | User Manual - Page 531
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Monitoring > Ports > Port Detailed Statistics. Monitor the Switch and Network 531 User Manual - Netgear XS516TM | User Manual - Page 532
into the broken state. The states are defined in IEEE 802.1D: • Disabled • Blocking • Listening • Learning • Forwarding • Broken Monitor the Switch and Network 532 User Manual - Netgear XS516TM | User Manual - Page 533
) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets) Monitor the Switch and Network 533 User Manual - Netgear XS516TM | User Manual - Page 534
that were less than 64 octets in length with GOOD CRC (excluding framing bits but including FCS octets) Monitor the Switch and Network 534 User Manual - Netgear XS516TM | User Manual - Page 535
. This counter has a max increment rate of 815 counts per sec at 10 Mb/s. Maximum Frame Size The maximum Ethernet frame size that the interface supports or is configured to use, including the Ethernet header, CRC, and payload. The possible range is from 1500 to 9198. The default maximum frame size - Netgear XS516TM | User Manual - Page 536
from the GARP Layer GVRP Failed Registrations The number of times attempted GVRP registrations could not be completed Monitor the Switch and Network 536 User Manual - Netgear XS516TM | User Manual - Page 537
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Monitoring > Ports > EAP Statistics. Monitor the Switch and Network 537 User Manual - Netgear XS516TM | User Manual - Page 538
The number of valid EAP response frames (other than resp/ID frames) that were received by the authenticator Monitor the Switch and Network 538 User Manual - Netgear XS516TM | User Manual - Page 539
. 4. Click the Login button. The Dashboard page displays. 5. Select Monitoring > Ports > Cable Test. The Cable Test page displays. Monitor the Switch and Network 539 User Manual - Netgear XS516TM | User Manual - Page 540
an active link, the cable status is always Normal. The command returns a cable length estimate if this feature is supported by the PHY for the current link speed. Note that if the link is down and a cable is attached to server host settings on page Monitor the Switch and Network 540 User Manual - Netgear XS516TM | User Manual - Page 541
a web browser and enter the IP address of the switch in the address field of your web browser. Monitor the Switch and Network 541 User Manual - Netgear XS516TM | User Manual - Page 542
select Warning, the logged messages include Warning, Error, Critical, Alert, and Emergency. The default severity level is Informational (6). Monitor the Switch and Network 542 User Manual - Netgear XS516TM | User Manual - Page 543
for the message log, persistent log, or console log. Messages logged to a collector or relay through syslog support the same format as well. The following example shows the standard format for a log message: Jan is added: (23 * 8) + 5 = 189 Monitor the Switch and Network 543 User Manual - Netgear XS516TM | User Manual - Page 544
> Logs > Flash Log. The Flash Log page displays. The following steps refer to the FLASH Log Configuration section. Monitor the Switch and Network 544 User Manual - Netgear XS516TM | User Manual - Page 545
12 2024 00:00:18: AAA-5-CONNECT: New http connection for user admin, source 192.168.1.111 ACCEPTED Monitor the Switch and Network 545 User Manual - Netgear XS516TM | User Manual - Page 546
credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. Monitor the Switch and Network 546 User Manual - Netgear XS516TM | User Manual - Page 547
. 4. Click the Login button. The Dashboard page displays. 5. Select Monitoring > Logs > Server Log. The Server Log page displays. Monitor the Switch and Network 547 User Manual - Netgear XS516TM | User Manual - Page 548
currently active. Change the settings for a syslog server You can change the settings to an existing syslog server. Monitor the Switch and Network 548 User Manual - Netgear XS516TM | User Manual - Page 549
the settings for a syslog server You can delete the settings for a syslog server that you no longer need. Monitor the Switch and Network 549 User Manual - Netgear XS516TM | User Manual - Page 550
traps that the switch sent. You can display and clear the counters and entries in the trap log. Monitor the Switch and Network 550 User Manual - Netgear XS516TM | User Manual - Page 551
in the log. If the number of traps exceeds the capacity, the new entries overwrite the oldest entries. Monitor the Switch and Network 551 User Manual - Netgear XS516TM | User Manual - Page 552
the copied packet is VLAN-tagged or untagged as it is being transmitted on the source port. The switch supports up to four port missoring sessions. Set up and enable a port mirroring session You can mirror (copy) Device Admin Password page displays. Monitor the Switch and Network 552 User Manual - Netgear XS516TM | User Manual - Page 553
is the default. • Tx and Rx: Transmitted (Tx) and received (Rx) packets are copied to the destination port. Monitor the Switch and Network 553 User Manual - Netgear XS516TM | User Manual - Page 554
switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Monitor the Switch and Network 554 User Manual - Netgear XS516TM | User Manual - Page 555
sections again. 11. Click the Apply button. Your settings are saved. The Port Mirroring Sessions section displays again. Monitor the Switch and Network 555 User Manual - Netgear XS516TM | User Manual - Page 556
another destination port. You can select one destination port only. 9. Click the Save button. Your settings are saved. Monitor the Switch and Network 556 User Manual - Netgear XS516TM | User Manual - Page 557
window displays. 8. From the Status menu, select Enable or Disable. 9. Click the Save button. Your settings are saved. Monitor the Switch and Network 557 User Manual - Netgear XS516TM | User Manual - Page 558
boxes for all source ports. 8. Click the Edit button. The Edit Source Interface Configuration pop-up window displays. Monitor the Switch and Network 558 User Manual - Netgear XS516TM | User Manual - Page 559
the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Monitor the Switch and Network 559 User Manual - Netgear XS516TM | User Manual - Page 560
switch in KBytes The CPU Utilization section displays the CPU utilization by the various processes on the switch. Monitor the Switch and Network 560 User Manual - Netgear XS516TM | User Manual - Page 561
11 Maintenance and Troubleshooting This chapter covers the following topics: • Reboot the switch from the device UI • Reset the switch to factory default files from the switch • Update the switch software • Download a file to the switch • Manage software images • Diagnostics and troubleshooting 561 - Netgear XS516TM | User Manual - Page 562
. 6. Click the Reboot Now button. An Alert pop-up window displays. The switch reboots. 7. Click the OK button to close the window. Maintenance and 562 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 563
for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > Reset. The Reset page displays. Maintenance and 563 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 564
in-memory log), error log, and files designed specifically for use when requesting assistance from NETGEAR customer support. The configuration and log files export in ASCII format and can be sent to a file server address field of your web browser. Maintenance and 564 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 565
. • Tech Support: The tech support file is a text-based file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting. 7. From the IP address or host name of the server. Maintenance and 565 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 566
22 or Access the switch off-network and not connected to the Internet on page 29. The Device Admin Password page displays. Maintenance and 566 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 567
records. • Tech Support: The tech support file is a text-based file that contains a variety of hardware, software, and configuration information that can assist in device and network troubleshooting. 7. Click the your computer, and save the file. Maintenance and 567 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 568
TFTP session, from a computer over an HTTP session, or from a USB storage device. You can manually check for the latest firmware version, download the firmware to a server or computer, and then download passwords: • Enter your device admin password. Maintenance and 568 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 569
name for the file to be downloaded. You can type up to 32 characters. The file name cannot include the following characters Maintenance and 569 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 570
switch, using an HTTP session on your web browser. The software can also be on a USB storage device attached to your computer. Maintenance and 570 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 571
flash sector image1. • Image2: Uploads the software to flash sector image2. Note: We recommended that you do not overwrite the active image. Maintenance and 571 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 572
a USB storage device. For information about downloading software (firmware) and updating the switch firmware, see Update the switch software on page 568. Maintenance and 572 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 573
network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Maintenance and 573 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 574
name for the file to be downloaded. You can type up to 32 characters. The file name cannot include the following characters Maintenance and 574 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 575
displays. For more information, see Register the switch on page 33. 3. Enter one of the following passwords: • Enter your device admin password. Maintenance and 575 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 576
displays information about the progress of the file transfer. Note: After you download a text configuration file, the switch applies the configuration automatically. Maintenance and 576 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 577
network password for the last Insight network location. For information about the credentials, see Credentials for the device UI on page 31. Maintenance and 577 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 578
switch. After the file transfer starts, wait until the page refreshes. The page displays information about the progress of the file transfer. Maintenance and 578 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 579
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > File Management. The File Management page displays. Maintenance and 579 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 580
connected to the Internet on page 22 or Access the switch off-network and not connected to the Internet on page 29. Maintenance and 580 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 581
a software image from one flash sector to another You can copy a software image from one flash sector (primary or backup) to another. Maintenance and 581 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 582
. 7. From the Destination image menu, select Image1 or Image2 to specify the destination location. 8. Click the Copy button. The image is copied. Maintenance and 582 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 583
the Delete Image button for the image that is not the active image. Your settings are saved and the image is removed. Maintenance and 583 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 584
S3600 Series 8- or 16-Port 10G/Multi-Gigabit Ethernet Smart Switch with 2 SFP+ Ports Diagnostics and troubleshooting You can send a ping, trace a route, and perform a memory dump. Ping an IPv4 more information, see Register the switch on page 33. Maintenance and 584 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 585
UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > Troubleshooting > Ping IPv4. The Ping IPv4 page displays. 6. In the IP Address/Hostname field, type the the configurable data in the Results field. Maintenance and 585 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 586
managed the switch through the Insight Cloud Portal or Insight app, enter the Insight network password for the last Insight network location. Maintenance and 586 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 587
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > Troubleshooting > Ping IPv6. The Ping IPv6 page displays. 6. From the Ping menu, select the type of ping configurable data in the Results field. Maintenance and 587 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 588
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > Troubleshooting > Traceroute IPv4. Maintenance and 588 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 589
is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Maintenance and 589 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 590
location. For information about the credentials, see Credentials for the device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Maintenance > Troubleshooting > Traceroute IPv6. The Traceroute IPv6 page displays. Maintenance and 590 - Netgear XS516TM | User Manual - Page 591
is sent to the specified IP address or host name. The results are displayed below the configurable data in the Results field. Maintenance and 591 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 592
diagnostic mode Secure diagnostics mode connects the switch to NETGEAR's diagnostic server, allowing support personnel to remotely diagnose your system. In this mode, changes to the default Click the Apply button. Your settings are saved. Maintenance and 592 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 593
6 times: 10 minutes • After 9 times: 20 minutes • After 12 times: 40 minutes • After 15 times: 60 minutes • After 18 times: 60 minutes Maintenance and 593 Troubleshooting User Manual - Netgear XS516TM | User Manual - Page 594
This appendix contains information about how to configure the following features: • Virtual Local Area Networks (VLANs) • Access control lists (ACLs) • Differentiated Services (DiffServ) • 802.1X port access control • Multiple Spanning Tree Protocol • VLAN routing interface example configuration 594 - Netgear XS516TM | User Manual - Page 595
the following way: • When an untagged packet enters a port, it is automatically tagged with the port's default VLAN ID tag number. Each port supports a default VLAN ID setting that is configurable (the default setting is 1). For information about changing the default VLAN ID setting for a port, see - Netgear XS516TM | User Manual - Page 596
activate your warranty, the Register to activate your warranty page displays. For more information, see Register the switch on page 33. Configuration Examples 596 User Manual - Netgear XS516TM | User Manual - Page 597
. Your setting are saved and the VLAN is added. 7. Select Switching > VLAN > VLAN Configuration (Basic). The VLAN Configuration (Basic) page displays. Configuration Examples 597 User Manual - Netgear XS516TM | User Manual - Page 598
button. e. Click the Apply button. Your settings are saved. 9. Select Switching > VLAN > VLAN Configuration (Advanced). The VLAN Configuration (Advanced) page displays. Configuration Examples 598 User Manual - Netgear XS516TM | User Manual - Page 599
(ACLs) ACLs ensure that only authorized users can access specific resources while blocking off any unwarranted attempts to reach network resources. Configuration Examples 599 User Manual - Netgear XS516TM | User Manual - Page 600
the inbound direction. The switch allow ACLs to be bound to physical ports and LAGs. The switch supports MAC ACLs, IPv4 ACLs, and IPv6 ACLs. MAC ACL example configuration The following example shows how EtherType: IPv4 • Source MAC address: 02:02:1A:BC:DE:EF Configuration Examples 600 User Manual - Netgear XS516TM | User Manual - Page 601
default, an ACL is applied to the inbound direction, which means that the switch examines traffic as it enters the port. Configuration Examples 601 User Manual - Netgear XS516TM | User Manual - Page 602
to ports 6, 7, and 8, and assign a sequence number of 1: a. From the ACL ID menu, select Sales_ACL. b. In the Sequence Number field, type 1 Configuration Examples 602 User Manual - Netgear XS516TM | User Manual - Page 603
rule for the ACL with the number 1 with the following criteria: • Sequence Number: 1 • Action: Deny • Assign Queue ID: 4 • Match Every: No Configuration Examples 603 User Manual - Netgear XS516TM | User Manual - Page 604
device UI on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select Security > ACL > IP ACL > IP ACL/Rules. Configuration Examples 604 User Manual - Netgear XS516TM | User Manual - Page 605
, type 255.255.0.0 as the IP mask that must be compared against the packet's source IP mask. g. Click the Save button. Configuration Examples 605 User Manual - Netgear XS516TM | User Manual - Page 606
interface. c. In the Ports table, click ports 2, 3 and 4. The selected ports display blue. d. Click the Apply button. Your settings are saved. Configuration Examples 606 User Manual - Netgear XS516TM | User Manual - Page 607
Services (DiffServ) Standard IP-based networks are designed to provide best effort data delivery service. Best effort service service is acceptable and in many cases unnoticeable. However, any degradation of service of Service (QoS QoS: • Integrated Services: Network resources are Services: - Netgear XS516TM | User Manual - Page 608
802.1p priority value (second/inner VLAN tag) • Secondary VLAN ID range (second/inner VLAN tag) • IP Service Type octet (also known as: ToS bits, Precedence value, DSCP value) • Layer 4 protocol (TCP, UDP and • Layer 2; Layers 3, 4 (IP only) • Protocol-based Configuration Examples 608 User Manual - Netgear XS516TM | User Manual - Page 609
perspective, there are two types of policies: • Traffic conditioning policy: A policy applied to a DiffServ traffic class • Service provisioning policy: A policy applied to a DiffServ service level You must manually configure the various statements and rules used in the traffic conditioning and - Netgear XS516TM | User Manual - Page 610
to the specified QoS queue. This allows a traffic classifier to specify which one of the supported hardware queues is used for handling packets belonging to the class. • Redirecting. Forces a classified queue 0, which is designated as a best-effort queue.) Configuration Examples 610 User Manual - Netgear XS516TM | User Manual - Page 611
on page 31. 4. Click the Login button. The Dashboard page displays. 5. Select QoS > DiffServ > Class Configuration. The Class Configuration page displays. Configuration Examples 611 User Manual - Netgear XS516TM | User Manual - Page 612
.0. e. Click the Apply button. Your settings are saved and the second set of criteria is added to the Class Summary section. Configuration Examples 612 User Manual - Netgear XS516TM | User Manual - Page 613
Add and configure an IPv6 DiffServ class on page 386. 12. Select QoS > DiffServ > Policy Configuration. The Policy Configuration page displays. Configuration Examples 613 User Manual - Netgear XS516TM | User Manual - Page 614
and 8: a. Select the check boxes for interfaces 7 and 8. b. Click the Edit button. The Edit Service Interface Configuration pop-up window displays. c. From the Policy In Name menu, select Policy1, which is the port of 4568 are assigned to queue 6. Configuration Examples 614 User Manual - Netgear XS516TM | User Manual - Page 615
services offered by the LAN to those users and devices that are permitted to use those services support EAPoL packet forwarding support. You can it can offer services to other systems its services is permitted to the services offered by services on that controlled port. Configuration Examples - Netgear XS516TM | User Manual - Page 616
allowing access to services available through that port. 2. Supplicant: A port that attempts to access services offered by the authenticator supplicant, and authentication server are required. The switch supports the authenticator role only, in which the PAE is Examples 616 User Manual - Netgear XS516TM | User Manual - Page 617
the Save button. Your settings are saved. 11. Select Security > Port Authentication > 802.1x Configuration. The 802.1x Configuration page displays. Configuration Examples 617 User Manual - Netgear XS516TM | User Manual - Page 618
List. The Dot1x Authentication List page displays. 20. Click the Edit button. The Edit Dot1x Authentication List pop-up window displays. Configuration Examples 618 User Manual - Netgear XS516TM | User Manual - Page 619
behave entirely as an RSTP bridge or an STP bridge. So, an IEEE 802.1s bridge inherently also supports IEEE 802.1w and IEEE 802.1D. The MSTP algorithm and protocol provide simple and full connectivity for frames Spanning Tree (CST). (IEEE DRAFT P802.1s/D13) Configuration Examples 619 User Manual - Netgear XS516TM | User Manual - Page 620
all bridges and LANs with a single Common and Internal Spanning Tree (CIST). The CIST supports the automatic determination of each MST region, choosing its maximum possible extent. The connectivity calculated changed since the IEEE 802.1D specification. Configuration Examples 620 User Manual - Netgear XS516TM | User Manual - Page 621
configuration, ensure the following: • The allocation of VIDs to FIDs is unambiguous. • Each FID that is supported by the bridge is allocated to exactly one spanning tree instance. The combination of VID to FID and then forced to function as the root bridge. Configuration Examples 621 User Manual - Netgear XS516TM | User Manual - Page 622
300. c. In the VLAN Name field, type a name for the new VLAN or leave the field blank. d. Click the Save button. Configuration Examples 622 User Manual - Netgear XS516TM | User Manual - Page 623
click the Tag Port button. c. Click the Apply button. Your settings are saved. 9. Select Switching > STP > STP. The STP page displays. Configuration Examples 623 User Manual - Netgear XS516TM | User Manual - Page 624
the other settings in the pop-up window, see Configure the CST interface settings on page 239. d. Click the Save button. Configuration Examples 624 User Manual - Netgear XS516TM | User Manual - Page 625
that must be associated with the MST instance. j. Click the Save button. Your settings are saved and the MST is added. Configuration Examples 625 User Manual - Netgear XS516TM | User Manual - Page 626
2 (with bridge priority 12288) became the root bridge for MST instance 2 (with priority 49152). Each switch supports devices in their sales department (ports xg1, xg2, and xg3) and in their HR department (ports xg4 and as untagged members of the routing VLAN. Configuration Examples 626 User Manual - Netgear XS516TM | User Manual - Page 627
routing VLAN. 10. In the IP Address field, type 192.168.200.20 as the address for the VLAN routing interface. Configuration Examples 627 User Manual - Netgear XS516TM | User Manual - Page 628
the ports display blue. 13. Below the Ports table, click the Untag Port button. 14. Click the Apply button. Your settings are saved. The switch supports routing on ports xg7 and xg8, both of which are untagged members of the routing VLAN with ID 50. Configuration Examples 628 User - Netgear XS516TM | User Manual - Page 629
about the switch specifications and capabilities, including the maximum settings for many features, see the data sheet, which you can download by visiting netgear.com/support/download/. 629 - Netgear XS516TM | User Manual - Page 630
be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 96. Default settings for access to the switch device UI Feature Management mode download by visiting netgear.com/support/download/. Software Default Settings and 630 Hardware Specifications User - Netgear XS516TM | User Manual - Page 631
Default NTP servers configured 4 6 10 No Yes Yes Disabled Enabled No custom servers configured Enabled Enabled Enabled Software Default Settings and 631 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 632
Enabled SHA-512 Same as admin user password None None configured Enabled Disabled 443 80 15 24 4 Software Default Settings and 632 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 633
Disabled Disabled Disabled 2 None configured Unallocated b-node Disabled Disabled None configured None configured Disabled Disabled Disabled None Software Default Settings and 633 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 634
the device UI are not included in the table but might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Software Default Settings and 634 Hardware Specifications User - Netgear XS516TM | User Manual - Page 635
by default) 4089 (No members by default) 1 1 None Admit All Disabled 0 Disabled 0 Disabled Enabled 0 4088 7 4086 7 4087 7 Software Default Settings and 635 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 636
None configured None configured Disabled Disabled 20 60 1000 Unconfigured None configured General None configured None configured Software Default Settings and 636 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 637
mode Default Tx and Rx Disabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Disabled Disabled Software Default Settings and 637 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 638
Fields Enabled Enabled Static None configured 32768 128 Long Enabled RSTP MAC address 0 Disabled 32768 20 2 (nonconfigurable) Software Default Settings and 638 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 639
included 128 The default cost depends on the interface 300 None configured Disabled Disabled Disabled Disabled Enabled Software Default Settings and 639 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 640
might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Multicast features default settings The following table describes the default settings for the multicast 260 10 0 Software Default Settings and 640 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 641
status Disabled MLD Snooping Configuration MLD snooping admin mode Disabled MLD Snooping Interface Configuration Admin mode Disabled Software Default Settings and 641 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 642
multicast VLAN 1 MVR global query response time 5 MVR mode Dynamic MVR Group Configuration MVR group None configured Software Default Settings and 642 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 643
might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 101. Routing features default settings Feature Name/Setting IP Configuration Routing mode Disabled Enabled 1 1800 Software Default Settings and 643 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 644
configured Automatically configured but disabled for any existing routing VLAN Disabled 224.0.0.1 600 450 1800 0 None configured Software Default Settings and 644 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 645
might be included in the data sheet, which you can download by visiting netgear.com/support/download/. Table 102. QoS features default settings Feature Name/Setting CoS Configuration Global trust TailDrop (nonconfigurable) Software Default Settings and 645 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 646
-> 0 AF 22 -> 2 AF 23 -> 0 AF 31 -> 1 AF 32 -> 1 AF 33 -> 1 AF 41 -> 2 AF 42 -> 2 AF 43 -> 2 EF 0 -> 2 Software Default Settings and 646 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 647
-> 2 49 -> 3 50 -> 3 51 -> 3 52 -> 3 53 -> 3 54 -> 3 55 -> 3 57 -> 3 58 -> 3 59 -> 3 60 -> 3 61 -> 3 62 -> 3 63 -> 3 Enabled None configured Software Default Settings and 647 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 648
Setting IPv6 class Policy Configuration Policy Service Configuration Service Default None configured None configured None data sheet, which you can download by visiting netgear.com/support/download/. Table 103. Security features default settings Feature Name Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 649
2 through 4 are not configured Disabled Blank Disabled None configured Disabled Disabled Disabled Disabled Auto Disabled 0 90 0 Disabled Software Default Settings and 649 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 650
30 2 30 30 None configured Disabled Disabled 5 None Disabled 5 None Disabled Disabled 4096 48 No No Disabled Software Default Settings and 650 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 651
URG & PSH Disabled Denial of Service TCP Flag & Sequence Disabled Denial of Service TCP fragment Disabled Denial of Service TCP offset Disabled Denial of Service TCP port Disabled Denial of Service TCP SYN Disabled Software Default Settings and 651 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 652
Name/Setting Denial of Service TCP SYN & FIN Denial of Service UDP port Default Disabled netgear.com/support/download/. Table 104. ACL features default settings Feature Name/Setting Total number of supported ACLs support/download/. Software Default Settings and 652 Hardware Specifications User - Netgear XS516TM | User Manual - Page 653
: Sixteen 10G/5G/2.5G/1G/100BASE-T RJ-45 copper ports Two dedicated 10G/1GBASE-X fiber SFP+ ports Software Default Settings and 653 Hardware Specifications User Manual - Netgear XS516TM | User Manual - Page 654
BSMI, Safety certifications CE, UKCA, cCSAus, RCM, KC, BSMI For more hardware information, see the data sheet, which you can download by visiting netgear.com/support/download/. Software Default Settings and 654 Hardware Specifications User
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
-
421
-
422
-
423
-
424
-
425
-
426
-
427
-
428
-
429
-
430
-
431
-
432
-
433
-
434
-
435
-
436
-
437
-
438
-
439
-
440
-
441
-
442
-
443
-
444
-
445
-
446
-
447
-
448
-
449
-
450
-
451
-
452
-
453
-
454
-
455
-
456
-
457
-
458
-
459
-
460
-
461
-
462
-
463
-
464
-
465
-
466
-
467
-
468
-
469
-
470
-
471
-
472
-
473
-
474
-
475
-
476
-
477
-
478
-
479
-
480
-
481
-
482
-
483
-
484
-
485
-
486
-
487
-
488
-
489
-
490
-
491
-
492
-
493
-
494
-
495
-
496
-
497
-
498
-
499
-
500
-
501
-
502
-
503
-
504
-
505
-
506
-
507
-
508
-
509
-
510
-
511
-
512
-
513
-
514
-
515
-
516
-
517
-
518
-
519
-
520
-
521
-
522
-
523
-
524
-
525
-
526
-
527
-
528
-
529
-
530
-
531
-
532
-
533
-
534
-
535
-
536
-
537
-
538
-
539
-
540
-
541
-
542
-
543
-
544
-
545
-
546
-
547
-
548
-
549
-
550
-
551
-
552
-
553
-
554
-
555
-
556
-
557
-
558
-
559
-
560
-
561
-
562
-
563
-
564
-
565
-
566
-
567
-
568
-
569
-
570
-
571
-
572
-
573
-
574
-
575
-
576
-
577
-
578
-
579
-
580
-
581
-
582
-
583
-
584
-
585
-
586
-
587
-
588
-
589
-
590
-
591
-
592
-
593
-
594
-
595
-
596
-
597
-
598
-
599
-
600
-
601
-
602
-
603
-
604
-
605
-
606
-
607
-
608
-
609
-
610
-
611
-
612
-
613
-
614
-
615
-
616
-
617
-
618
-
619
-
620
-
621
-
622
-
623
-
624
-
625
-
626
-
627
-
628
-
629
-
630
-
631
-
632
-
633
-
634
-
635
-
636
-
637
-
638
-
639
-
640
-
641
-
642
-
643
-
644
-
645
-
646
-
647
-
648
-
649
-
650
-
651
-
652
-
653
-
654
 |
 |
User Manual
S3600 Series 8-Port or 16-Port
10G/Multi-Gigabit Ethernet Smart Switch
with 2 SFP+ Ports
Models:
XS508TM
XS516TM
NETGEAR, Inc.
350 E. Plumeria Drive
December 2023
San Jose, CA 95134, USA
202-12646-01