Netgear CSM4532 Product Data Sheet - Page 10

Management Features

Page 10 highlights

100GE-Enabled Managed Switches Data Sheet M4500 series ACL Rule Priority Differentiated Service (DIffServ) Class of Service (CoS) Management Features Management Options Management of Basic Network Information File Management Malicious Code Detection Automatic Installation of Firmware and Configuration Warm Reboot SNMP Alarms and Trap Logs Remote Monitoring (RMON) Statistics Application • This feature allows user to add sequence numbers to ACL rule entries and re-sequence them. When a new ACL rule entry is added, the sequence number can be specified so that the new ACL rule entry is placed in the desired position in the access list. • The QoS Differentiated Services (DiffServ) feature allows traffic to be classified into streams and given certain QoS treatment in accordance with defined per-hop behaviors. The switch supports both IPv4 and IPv6 packet classification. • The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queuing. This provides the desired QoS behavior for different types of network traffic when the complexities of DiffServ are not required. CoS queue characteristics, such as minimum guaranteed bandwidth and transmission rate shaping, are configurable at the queue (or port) level. You can use the following methods to manage the switch: • Use a telnet client, SSH client, or a direct console connection to access the CLI. The CLI syntax and semantics conform as much as possible to common industry practice. • Use a network management system (NMS) to manage and monitor the system through SNMP. M4500 supports SNMP v1/v2c/v3 over the UDP/IP transport protocol. • The DHCP client on the switch allows the switch to acquire information such as the IP address and default gateway from a network DHCP server. You can also disable the DHCP client and configure static network information. Other configurable network information includes a Domain Name Server (DNS), host name to IP address mapping, and a default domain name. M4500 also includes a DHCPv6 client for acquiring IPv6 addresses, prefixes, and other IPv6 network configuration information. • You can upload and download files such as configuration files and system images by using TFTP, Secure FTP (SFTP), or Secure Copy (SCP). Configuration file uploads from the switch to a server are a good way to back up the switch configuration. You can also download a configuration file from a server to the switch to restore the switch to the configuration in the downloaded file. • This feature provides a mechanism to detect the integrity of the image, if the software binary is corrupted or tampered with while end user attempts to download the software image to the switch. This release addresses this problem by using digital signatures to verify the integrity of the binary image. It also provides flexibility to download a digitally signed configuration script and verify the digital signature to ensure the integrity of the downloaded configuration file. • The Auto Install feature allows the switch to upgrade the configuration file automatically during device initialization with limited administrative configuration on the device. The switch can obtain the necessary information from a DHCP server on the network. • The Warm Reboot feature reduces the time it takes to reboot the switch thereby reducing the traffic disruption in the network during a switch reboot. For a typical switch, the traffic disruption is reduced from about two minutes for a cold reboot to about 20 seconds for a warm reboot. • The system logs events with severity codes and timestamps. The events are sent as SNMP traps to a trap recipient list. • RMON is a standard Management Information Base (MIB) that defines current and historical MAC-layer statistics and control objects, allowing real-time information to be captured across the entire network. The data collected is defined in the RMON MIB, RFC 2819 (32-bit counters), RFC 3273 (64-bit counters), and RFC 3434 (High Capacity Alarm Table). The statistics application collects the statistics at a configurable time interval. The user can specify the port number(s) or a range of ports for statistics to be displayed. The configured time interval applies to all ports. Detailed statistics are collected between the specified time range in date and time format. The time range can be defined as having an absolute time entry and/or a periodic time. For example, a user can specify the statistics to be collected and displayed between 9:00 15 OCT 2019 (START) and 21:00 15 OCT 2019 (END) or schedule it on every MON, WED and FRI 9:00 (START) to 21:00 (END). The user receives these statistics in a number of ways as listed below: • User requests through CLI for a set of counters. • User can configure the device to display statistics using syslog or email alert. The syslog or email alert messages are sent by statistics application at END time. The statistics are presented on the console at END time. Page 10 of 29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29

ACL Rule Priority
This feature allows user to add sequence numbers to ACL rule entries and re-sequence them. When a new
ACL rule entry is added, the sequence number can be specified so that the new ACL rule entry is placed in
the desired position in the access list.
Differentiated Service (DIffServ)
The QoS Differentiated Services (DiffServ) feature allows traffic to be classified into streams and given
certain QoS treatment in accordance with defined per-hop behaviors. The switch supports both IPv4 and
IPv6 packet classification.
Class of Service (CoS)
The Class of Service (CoS) queueing feature lets you directly configure certain aspects of switch queuing.
This provides the desired QoS behavior for different types of network traffic when the complexities
of DiffServ are not required. CoS queue characteristics, such as minimum guaranteed bandwidth and
transmission rate shaping, are configurable at the queue (or port) level.
Management Features
Management Options
You can use the following methods to manage the switch:
Use a telnet client, SSH client, or a direct console connection to access the CLI. The CLI syntax and
semantics conform as much as possible to common industry practice.
Use a network management system (NMS) to manage and monitor the system through SNMP.
M4500 supports SNMP v1/v2c/v3
over the UDP/IP transport protocol.
Management of Basic Network Information
The DHCP client on the switch allows the switch to acquire information such as the IP address and default
gateway from a network DHCP server. You can also disable the DHCP client and configure static network
information. Other configurable network information includes a Domain Name Server (DNS), host name to
IP address mapping, and a default domain name. M4500 also includes a DHCPv6 client for acquiring IPv6
addresses, prefixes, and other IPv6 network configuration information.
File Management
You can upload and download files such as configuration files and system images by using TFTP, Secure FTP
(SFTP), or Secure Copy (SCP). Configuration file uploads from the switch to a server are a good way to
back up the switch configuration. You can also download a configuration file from a server to the switch to
restore the switch to the configuration in the downloaded file.
Malicious Code Detection
This feature provides a mechanism to detect the integrity of the image, if the soſtware binary is corrupted
or tampered with while end user attempts to download the soſtware image to the switch. This release
addresses this problem by using digital signatures to verify the integrity of the binary image. It also
provides flexibility to download a digitally signed configuration script and verify the digital signature to
ensure the integrity of the downloaded configuration file.
Automatic Installation of Firmware and Configuration
The Auto Install feature allows the switch to upgrade the configuration file automatically during device
initialization with limited administrative configuration on the device. The switch can obtain the necessary
information from a DHCP server on the network.
Warm Reboot
The Warm Reboot feature reduces the time it takes to reboot the switch thereby reducing the traffic
disruption in the network during a switch reboot. For a typical switch, the traffic disruption is reduced from
about two minutes for a cold reboot to about 20 seconds for a warm reboot.
SNMP Alarms and Trap Logs
The system logs events with severity codes and timestamps. The events are sent as SNMP traps to a trap
recipient list.
Remote Monitoring (RMON)
RMON is a standard Management Information Base (MIB) that defines current and historical MAC-layer
statistics and control objects, allowing real-time information to be captured across the entire network. The
data collected is defined in the RMON MIB, RFC 2819 (32-bit counters), RFC 3273 (64-bit counters),
and RFC 3434 (High Capacity Alarm Table).
Statistics Application
The statistics application collects the statistics at a configurable time interval. The user can specify the port
number(s) or a range of ports for statistics to be displayed. The configured time interval applies to all ports.
Detailed statistics are collected between the specified time range in date and time format. The time range
can be defined as having an absolute time entry and/or a periodic time. For example, a user can specify the
statistics to be collected and displayed between 9:00 15 OCT 2019 (START) and 21:00 15 OCT 2019
(END) or schedule it on every MON, WED and FRI 9:00 (START) to 21:00 (END).
The user receives these statistics in a number of ways as listed below:
User requests through CLI for a set of counters.
User can configure
the device to display statistics
using syslog or email alert. The syslog or email alert
messages
are sent by statistics application
at END time.
The statistics are presented on the console at END time.
100GE-Enabled Managed Switches
Data Sheet
M4500 series
Page 10 of 29